The following Fedora 31 Security updates need testing:
Age URL
35
https://bodhi.fedoraproject.org/updates/FEDORA-2020-66d1268bd0
knot-resolver-5.1.1-1.fc31
31
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fcd5fd47bd
qutebrowser-1.11.1-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5f7f8fcbce
thunderbird-68.9.0-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ad1c74c2a1
fwupd-1.3.10-1.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e49a911382 xen-4.12.3-2.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-11ddbfbdf0
microcode_ctl-2.1-39.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cd84e46e68
suricata-4.1.8-1.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8922773bc4
libreoffice-6.3.6.2-4.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5f8da4b260
bind-9.11.20-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c69b4bcd64
chromium-83.0.4103.106-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-059e1591d6 lynis-3.0.0-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-12237dbae2 znc-1.8.1-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0bbe6304e3
php-PHPMailer-5.2.28-2.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4407a1983d
libEMF-1.0.13-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e59bcaf702 adns-1.6.0-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e538e3e526 gssdp-1.0.4-1.fc31
gupnp-1.0.5-1.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
70
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5603c3bae4
nfs-utils-2.4.3-1.rc2.fc31
25
https://bodhi.fedoraproject.org/updates/FEDORA-2020-03e14f6120
dracut-050-61.git20200529.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ad1c74c2a1
fwupd-1.3.10-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-be39e30c25
btrfs-progs-5.6.1-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5f7f8fcbce
thunderbird-68.9.0-1.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5b957d3a5f koji-1.21.1-1.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e11173a87a
cups-2.2.12-10.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b677736a37 nss-3.53.0-2.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e49a911382 xen-4.12.3-2.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5ccd452c8e
gnutls-3.6.14-2.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a9da2a2189
pulseaudio-13.99.1-4.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3cd069e7e1 pungi-4.2.3-2.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-dfa2b94854
ca-certificates-2020.2.41-1.1.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0603317481
mutter-3.34.6-2.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4411a39579
python-rpm-macros-3-57.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e4b955671e pcre2-10.35-3.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e3091b60f0
linux-firmware-20200619-109.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e538e3e526 gssdp-1.0.4-1.fc31
gupnp-1.0.5-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b5e0041373
glib2-2.62.6-2.fc31
The following builds have been pushed to Fedora 31 updates-testing
aide-0.16-14.fc31
alpine-2.23-2.fc31
azote-1.7.12-1.fc31
borgmatic-1.5.7-1.fc31
bst-external-0.20.0-2.fc31
cockpit-222-1.fc31
copr-backend-1.134-1.fc31
copr-frontend-1.166-1.fc31
copr-rpmbuild-0.39-1.fc31
curl-7.66.0-2.fc31
fapolicyd-1.0-3.fc31
ghostscript-9.27-7.fc31
gjots2-3.1.7-1.fc31
gnome-initial-setup-3.34.6-2.fc31
libdigidocpp-3.14.3-1.fc31
libretro-desmume2015-0-0.4.20200228git93d5789.fc31
libretro-gambatte-0-0.3.20200207git132f36e.fc31
libsoundio-2.0.0-2.fc31
libssh-0.9.4-3.fc31
mutt-1.14.5-1.fc31
neon-0.31.2-1.fc31
packit-0.12.0-1.fc31
pam-1.3.1-24.fc31
perl-libwww-perl-6.46-1.fc31
pyproject-rpm-macros-0-16.fc31
python-Traits-5.2.0-1.fc31
python-copr-common-0.8-1.fc31
python-pynetdicom-1.5.1-1.fc31
python-traitsui-6.1.3-1.fc31
redis-5.0.9-1.fc31
retroarch-1.8.9-1.fc31
rpminspect-0.13-2.fc31
usbguard-0.7.8-1.fc31
Details about builds:
================================================================================
aide-0.16-14.fc31 (FEDORA-2020-04be6c3084)
Intrusion detection environment
--------------------------------------------------------------------------------
Update Information:
AIDE breaks when setting report_ignore_e2fsattrs
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Radovan Sroka <rsroka(a)redhat.com> 0.16-14
- AIDE breaks when setting report_ignore_e2fsattrs
Resolves: rhbz#1850276
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850276 - AIDE breaks when setting report_ignore_e2fsattrs
https://bugzilla.redhat.com/show_bug.cgi?id=1850276
--------------------------------------------------------------------------------
================================================================================
alpine-2.23-2.fc31 (FEDORA-2020-f822ea9330)
powerful, easy to use console email client
--------------------------------------------------------------------------------
Update Information:
2.23 fixes CVE-2020-14929 (#1850048,#1850047) and new version (#1848786)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 23 2020 josef radinger <cheese(a)nosuchhost.net> - 2.23-2
- 2.23 fixes CVE-2020-14929 (#1850048) and new version (#1848786)
* Mon Jun 22 2020 josef radinger <cheese(a)nosuchhost.net> - 2.23-1
- bump version
- update patch2 alpine-2.23-gcc10.patch
* Tue Mar 24 2020 josef radinger <cheese(a)nosuchhost.net> - 2.22-1
- bump version
* Thu Feb 13 2020 Than Ngo <than(a)redhat.com> - 2.21-13
- fixed multiple definition of symbols
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.21-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850047 - CVE-2020-14929 alpine: silently proceeds to use an insecure
connection after a /tls is sent in certain circumstances involving PREAUTH
https://bugzilla.redhat.com/show_bug.cgi?id=1850047
--------------------------------------------------------------------------------
================================================================================
azote-1.7.12-1.fc31 (FEDORA-2020-d528952815)
Wallpaper and colour manager for Sway, i3 and some other WMs
--------------------------------------------------------------------------------
Update Information:
new release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Bob Hepple <bob.hepple(a)gmail.com> - 1.7.12-1
- new release
* Mon Jun 1 2020 Bob Hepple <bob.hepple(a)gmail.com> - 1.7.10-7
- rebuilt to fix runpath error in f32
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 1.7.10-6
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
borgmatic-1.5.7-1.fc31 (FEDORA-2020-85e286a949)
Simple Python wrapper script for borgbackup
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.7
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Felix Kaechele <heffer(a)fedoraproject.org> - 1.5.7-1
- update to 1.5.7
- add python3-setuptools BuildRequires
--------------------------------------------------------------------------------
================================================================================
bst-external-0.20.0-2.fc31 (FEDORA-2020-585b7bded3)
Additional BuildStream plugins
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1839773 - Review Request: bst-external - Additional BuildStream plugins
https://bugzilla.redhat.com/show_bug.cgi?id=1839773
--------------------------------------------------------------------------------
================================================================================
cockpit-222-1.fc31 (FEDORA-2020-f6114a1e30)
Web Console for Linux servers
--------------------------------------------------------------------------------
Update Information:
- Logs: More flexible text filters - Services, Dashboard: Hide some buttons when
access is limited - Webserver: Lock down cockpit.service privileges ---- - Put
back missing base1/patternfly.css - Services: Don't offer 'Start Service' in
Limited Access mode ---- - Support for Cross-Origin-Resource-Policy -
Accounts: Some buttons are hidden when access is limited - Developers: Importing
"base1/patternfly.css" is deprecated
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Martin Pitt <mpitt(a)redhat.com> - 222-1
- Logs: More flexible text filters
- Services, Dashboard: Hide some buttons when access is limited
- Webserver: Lock down cockpit.service privileges
* Mon Jun 15 2020 Martin Pitt <mpitt(a)redhat.com> - 221.1-1
- Put back missing base1/patternfly.css
- Services: Don't offer 'Start Service' in Limited Access mode
* Wed Jun 10 2020 Marius Vollmer <mvollmer(a)redhat.com> - 221-1
- Support for Cross-Origin-Resource-Policy
- Accounts: Some buttons are hidden when access is limited
- Developers: Importing "base1/patternfly.css" is deprecated
--------------------------------------------------------------------------------
================================================================================
copr-backend-1.134-1.fc31 (FEDORA-2020-da89df924e)
Backend for Copr
--------------------------------------------------------------------------------
Update Information:
copr-backend - better build task priority processing - dumping attempt to send
message to backend.log - drop the VMM concept, replaced with resalloc - delegate
more work to the builder code - external blob tarball for unittests - buggy
error handler in pkg_name_evr() - basic build task priority - the reschedule-all
builds idiom removed - fix the build cancelation - drop duplicate BuildRequire
on python-requests - require the newest version of copr-common - minimalize the
transfered amount of information about actions from FE - process actions in
regard to their priority - move backend's code to standard PYTHONPATH - move
ActionResult to copr_common.enums - actions/builds use the same WorkerManager
logic - more verbose rawhide to release action processing - fix copr-repo to
work with absolute paths - automatically batch the createrepo requests -
scheduler is now fair, and ordered - indefinitely retry workers' talk to
frontend - allow canceling also "starting" builds - more verbose delete action
in logs - cleanup the example configuration - use FileHandler for backend.log,
fixes traceback copr-frontend - more obvious links to the live logs - return a
user friendly error when modulemd is not ok - basic build task priority
implemented - droped the reschedule-all builds idiom - new build cancel
implementation - WorkerManager used for builds, too - enable deleting multiple
builds from cli - drop RequestCannotBeExecuted and BuildInProgressException -
re-assign BuildChroots to re-enabled CoprChroot - not finished build_chroots to
disallow copr_chroot removal - models: link BuildChroot(s) with corresponding
CoprChroot(s) - fix repo generation for modules with dash in their name - added
support for project runtime dependencies - return user friendly error when build
chroot was not found - large sync of model with migrations - require the newest
version of copr-common - fix for the new werkzeug in rawhide - use flask caching
instead of flask cache - prioritize initial createrepo action, set lower
priority for some actions - make ActionsLogic.send_* methods to return the
generated action - minimalize the transfered amount of action information to BE
- disable group build delete checkboxes if js is not enabled - provide status
information for build chroots in APIv3 - fix application context error for add-
user command - move some constants to copr.conf so we can tweak them - disallow
creating modules without any packages - don't show builds table when there are
none of them - fix pagure-events so it submits correct packages - show _all_
build-delete checkboxes when javascript is on - don't submit builds when there
are no CoprChroot(s) assigned - make pending-jobs faster again - allow canceling
also "starting" builds - don't traceback on invalid cancel requests -
build.source_status None accepted for old builds - don't raise 500 on
misconfigured build-time repos - print source build.log in starting state
python-copr-common - add ActionResult (moved from backend package) - add
DefaultActionPriorityEnum - add ActionPriorityEnum
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 19 2020 Pavel Raiskup <praiskup(a)redhat.com> 1.134-1
- fix copr-repo to work with absolute paths
- automatically batch the createrepo requests
- scheduler is now fair, and ordered
- indefinitely retry workers' talk to frontend
- allow canceling also "starting" builds
- more verbose delete action in logs
- cleanup the example configuration
- use FileHandler for backend.log, fixes traceback
* Tue Jun 9 2020 Pavel Raiskup <praiskup(a)redhat.com> 1.133-1
- better build task priority processing
- dump attempt to send message to backend.log
- drop the VMM concept, replaced with resalloc
- delegate more work to the builder code
- external blob tarball for unittests
- buggy error handler in pkg_name_evr()
- basic build task priority
- the reschedule-all builds idiom removed
- fix the build cancelation
- drop duplicate BuildRequire on python-requests
- require the newest version of copr-common
- minimalize the transfered amount of information about actions from FE
- process actions in regard to their priority
- move backend's code to standard PYTHONPATH
- move ActionResult to copr_common.enums
- actions/builds use the same WorkerManager logic
- more verbose rawhide to release action processing
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.166-1.fc31 (FEDORA-2020-da89df924e)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
copr-backend - better build task priority processing - dumping attempt to send
message to backend.log - drop the VMM concept, replaced with resalloc - delegate
more work to the builder code - external blob tarball for unittests - buggy
error handler in pkg_name_evr() - basic build task priority - the reschedule-all
builds idiom removed - fix the build cancelation - drop duplicate BuildRequire
on python-requests - require the newest version of copr-common - minimalize the
transfered amount of information about actions from FE - process actions in
regard to their priority - move backend's code to standard PYTHONPATH - move
ActionResult to copr_common.enums - actions/builds use the same WorkerManager
logic - more verbose rawhide to release action processing - fix copr-repo to
work with absolute paths - automatically batch the createrepo requests -
scheduler is now fair, and ordered - indefinitely retry workers' talk to
frontend - allow canceling also "starting" builds - more verbose delete action
in logs - cleanup the example configuration - use FileHandler for backend.log,
fixes traceback copr-frontend - more obvious links to the live logs - return a
user friendly error when modulemd is not ok - basic build task priority
implemented - droped the reschedule-all builds idiom - new build cancel
implementation - WorkerManager used for builds, too - enable deleting multiple
builds from cli - drop RequestCannotBeExecuted and BuildInProgressException -
re-assign BuildChroots to re-enabled CoprChroot - not finished build_chroots to
disallow copr_chroot removal - models: link BuildChroot(s) with corresponding
CoprChroot(s) - fix repo generation for modules with dash in their name - added
support for project runtime dependencies - return user friendly error when build
chroot was not found - large sync of model with migrations - require the newest
version of copr-common - fix for the new werkzeug in rawhide - use flask caching
instead of flask cache - prioritize initial createrepo action, set lower
priority for some actions - make ActionsLogic.send_* methods to return the
generated action - minimalize the transfered amount of action information to BE
- disable group build delete checkboxes if js is not enabled - provide status
information for build chroots in APIv3 - fix application context error for add-
user command - move some constants to copr.conf so we can tweak them - disallow
creating modules without any packages - don't show builds table when there are
none of them - fix pagure-events so it submits correct packages - show _all_
build-delete checkboxes when javascript is on - don't submit builds when there
are no CoprChroot(s) assigned - make pending-jobs faster again - allow canceling
also "starting" builds - don't traceback on invalid cancel requests -
build.source_status None accepted for old builds - don't raise 500 on
misconfigured build-time repos - print source build.log in starting state
python-copr-common - add ActionResult (moved from backend package) - add
DefaultActionPriorityEnum - add ActionPriorityEnum
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 18 2020 Pavel Raiskup <praiskup(a)redhat.com> 1.166-1
- show _all_ build-delete checkboxes when javascript is on
- don't submit builds when there are no CoprChroot(s) assigned
- make pending-jobs faster again
- allow canceling also "starting" builds
- don't traceback on invalid cancel requests
- build.source_status None accepted for old builds
- don't raise 500 on misconfigured build-time repos
- print source build.log in starting state
* Tue Jun 9 2020 Pavel Raiskup <praiskup(a)redhat.com> 1.165-1
- enable cov by default in testsute
- more obvious links to the live logs
- return a user friendly error when modulemd is not ok
- basic build task priority implemented
- droped the reschedule-all builds idiom
- new build cancel implementation
- WorkerManager used for builds, too
- enable deleting multiple builds from cli
- drop RequestCannotBeExecuted and BuildInProgressException
- re-assign BuildChroots to re-enabled CoprChroot
- not finished build_chroots to disallow copr_chroot removal
- models: link BuildChroot(s) with corresponding CoprChroot(s)
- fix repo generation for modules with dash in their name
- added support for project runtime dependencies
- return user friendly error when build chroot was not found
- large sync of model with migrations
- require the newest version of copr-common
- fix for the new werkzeug in rawhide
- use flask caching instead of flask cache
- prioritize initial createrepo action, set lower priority for some actions
- make ActionsLogic.send_* methods to return the generated action
- minimalize the transfered amount of action information to BE
- disable group build delete checkboxes if js is not enabled
- provide status information for build chroots in APIv3
- fix application context error for add-user command
- move some constants to copr.conf so we can tweak them
- disallow creating modules without any packages
- don't show builds table when there are none of them
- fix pagure-events so it submits correct packages
--------------------------------------------------------------------------------
================================================================================
copr-rpmbuild-0.39-1.fc31 (FEDORA-2020-da89df924e)
Run COPR build tasks
--------------------------------------------------------------------------------
Update Information:
copr-backend - better build task priority processing - dumping attempt to send
message to backend.log - drop the VMM concept, replaced with resalloc - delegate
more work to the builder code - external blob tarball for unittests - buggy
error handler in pkg_name_evr() - basic build task priority - the reschedule-all
builds idiom removed - fix the build cancelation - drop duplicate BuildRequire
on python-requests - require the newest version of copr-common - minimalize the
transfered amount of information about actions from FE - process actions in
regard to their priority - move backend's code to standard PYTHONPATH - move
ActionResult to copr_common.enums - actions/builds use the same WorkerManager
logic - more verbose rawhide to release action processing - fix copr-repo to
work with absolute paths - automatically batch the createrepo requests -
scheduler is now fair, and ordered - indefinitely retry workers' talk to
frontend - allow canceling also "starting" builds - more verbose delete action
in logs - cleanup the example configuration - use FileHandler for backend.log,
fixes traceback copr-frontend - more obvious links to the live logs - return a
user friendly error when modulemd is not ok - basic build task priority
implemented - droped the reschedule-all builds idiom - new build cancel
implementation - WorkerManager used for builds, too - enable deleting multiple
builds from cli - drop RequestCannotBeExecuted and BuildInProgressException -
re-assign BuildChroots to re-enabled CoprChroot - not finished build_chroots to
disallow copr_chroot removal - models: link BuildChroot(s) with corresponding
CoprChroot(s) - fix repo generation for modules with dash in their name - added
support for project runtime dependencies - return user friendly error when build
chroot was not found - large sync of model with migrations - require the newest
version of copr-common - fix for the new werkzeug in rawhide - use flask caching
instead of flask cache - prioritize initial createrepo action, set lower
priority for some actions - make ActionsLogic.send_* methods to return the
generated action - minimalize the transfered amount of action information to BE
- disable group build delete checkboxes if js is not enabled - provide status
information for build chroots in APIv3 - fix application context error for add-
user command - move some constants to copr.conf so we can tweak them - disallow
creating modules without any packages - don't show builds table when there are
none of them - fix pagure-events so it submits correct packages - show _all_
build-delete checkboxes when javascript is on - don't submit builds when there
are no CoprChroot(s) assigned - make pending-jobs faster again - allow canceling
also "starting" builds - don't traceback on invalid cancel requests -
build.source_status None accepted for old builds - don't raise 500 on
misconfigured build-time repos - print source build.log in starting state
python-copr-common - add ActionResult (moved from backend package) - add
DefaultActionPriorityEnum - add ActionPriorityEnum
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 9 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.39-1
- more work delegate to builder scripts from backend
- don't delete the "old" .rpmnew files
- fix macro in comment (rpmlint)
--------------------------------------------------------------------------------
================================================================================
curl-7.66.0-2.fc31 (FEDORA-2020-55f1f7cb13)
A utility for getting files from remote servers (FTP, HTTP, and others)
--------------------------------------------------------------------------------
Update Information:
- avoid overwriting a local file with -J (CVE-2020-8177) - fix partial password
leak over DNS on HTTP redirect (CVE-2020-8169)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Kamil Dudka <kdudka(a)redhat.com> - 7.66.0-2
- avoid overwriting a local file with -J (CVE-2020-8177)
- fix partial password leak over DNS on HTTP redirect (CVE-2020-8169)
--------------------------------------------------------------------------------
================================================================================
fapolicyd-1.0-3.fc31 (FEDORA-2020-50e464eff0)
Application Whitelisting Daemon
--------------------------------------------------------------------------------
Update Information:
New update of fapolicyd - backported few cosmetic small patches from
upstream master - rebase selinux tarbal to v0.3 - file context pattern for
/run/fapolicyd.pid is missing
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Radovan Sroka <rsroka(a)redhat.com> - 1.0-3
- backported few cosmetic small patches from upstream master
- rebase selinux tarbal to v0.3
- file context pattern for /run/fapolicyd.pid is missing
Resolves: rhbz#1834674
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1834674 - file context pattern for /run/fapolicyd.pid is missing
https://bugzilla.redhat.com/show_bug.cgi?id=1834674
--------------------------------------------------------------------------------
================================================================================
ghostscript-9.27-7.fc31 (FEDORA-2020-93e0f2c83f)
Interpreter for PostScript language & PDF
--------------------------------------------------------------------------------
Update Information:
Remove downstream patch that's no longer needed Require the exact jbig2dec
version in both build and runtime dependencies
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Anna Khaitovich <akhaitov(a)redhat.com> - 9.27-7
- Remove downstream patch that's no longer needed
- Require the exact jbig2dec version in both build and runtime dependencies
--------------------------------------------------------------------------------
================================================================================
gjots2-3.1.7-1.fc31 (FEDORA-2020-07ab4b57da)
A hierarchical note jotter - organize your ideas, notes, facts in a tree
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Bob Hepple <bob.hepple(a)gmail.com> - 3.1.7-1
- new version
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.1.6-3
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
gnome-initial-setup-3.34.6-2.fc31 (FEDORA-2020-da78f28e61)
Bootstrapping your OS
--------------------------------------------------------------------------------
Update Information:
This update backports a fix for an issue that could cause the timezone screen to
try and change the timezone, even though that screen is disabled in Fedora. If
it decided to do this, an "Authentication Required" dialog was displayed, which
is confusing.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 23 2020 Adam Williamson <awilliam(a)redhat.com> - 3.34.6-2
- Backport MR #89 to fix 'disabled' timezone page setting timezone
--------------------------------------------------------------------------------
================================================================================
libdigidocpp-3.14.3-1.fc31 (FEDORA-2020-d0826158fd)
Library offers creating, signing and verification of digitally signed documents
--------------------------------------------------------------------------------
Update Information:
- Upstream release 3.14.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Dmitri Smirnov <dmitri(a)smirnov.ee> - 3.14.3-1
- Upstream release 3.14.3
--------------------------------------------------------------------------------
================================================================================
libretro-desmume2015-0-0.4.20200228git93d5789.fc31 (FEDORA-2020-937ac3f2e1)
Port of Desmume to libretro
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0-0.4.20200228git93d5789
- Update to latest git snapshot
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.3.20190817gitc27bb71
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libretro-gambatte-0-0.3.20200207git132f36e.fc31 (FEDORA-2020-f07a90d973)
Libretro implementation of libgambatte
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0-0.3.20200207git132f36e
- Update to latest git snapshot
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.2.20191129git708424d
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libsoundio-2.0.0-2.fc31 (FEDORA-2020-4893c0fb69)
C library for cross-platform real-time audio input and output
--------------------------------------------------------------------------------
Update Information:
This is new package - libsoundio.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848758 - Review Request: libsoundio - C library for cross-platform real-time
audio input and output
https://bugzilla.redhat.com/show_bug.cgi?id=1848758
--------------------------------------------------------------------------------
================================================================================
libssh-0.9.4-3.fc31 (FEDORA-2020-cecb600a30)
A library implementing the SSH protocol
--------------------------------------------------------------------------------
Update Information:
Fix a bug where the client could return error even when the data were
successfully read from the server and the channel properly closed.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 22 2020 Anderson Sasaki <ansasaki(a)redhat.com> - 0.9.4-3
- Do not return error when server properly closed the channel (#1849069)
- Add a test for CVE-2019-14889
- Do not parse configuration file in torture_knownhosts test
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849069 - libssh ssh_channel_read() randomly returns error
https://bugzilla.redhat.com/show_bug.cgi?id=1849069
--------------------------------------------------------------------------------
================================================================================
mutt-1.14.5-1.fc31 (FEDORA-2020-31af2ac7fd)
A text mode mail user agent
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-14954 ---- Minor update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Fabio Alessandro Locati <me(a)fale.io> - 5:1.14.5-1
- Upgrade to 1.14.5
* Fri Jun 19 2020 Fabio Alessandro Locati <me(a)fale.io> - 5:1.14.4-1
- Upgrade to 1.14.4
- Resolves: #1848768
* Mon Jun 15 2020 Fabio Alessandro Locati <me(a)fale.io> - 5:1.14.3-1
- Upgrade to 1.14.3
- Resolves: #1836550
* Tue May 26 2020 Matej Mu��ila <mmuzila(a)redhat.com> - 5:1.14.2-1
- Upgrade to 1.14.2
- Resolves: #1836550
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850170 - CVE-2020-14954 mutt: response Injection via STARTTLS in SMTP, POP3
and IMAP
https://bugzilla.redhat.com/show_bug.cgi?id=1850170
--------------------------------------------------------------------------------
================================================================================
neon-0.31.2-1.fc31 (FEDORA-2020-c9b0f891f8)
An HTTP and WebDAV client library
--------------------------------------------------------------------------------
Update Information:
Changes in release 0.31.2: * Fix ne_md5_read_ctx() with OpenSSL on big-endian
architectures. * Fix GCC 10 warning in PKCS#11 build. * Fix OpenSSL build w/o
deprecated APIs (Rosen Penev). * Fix unnecessary MD5 test for non-Digest auth
(Sebastian Reschke). * Fix hang on SSL connection close with IIS (issue #11). *
Fix ar, ranlib detection when cross-compiling (Sergei Trofimovich).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Joe Orton <jorton(a)redhat.com> - 0.31.2-1
- update to 0.31.2
* Fri Apr 17 2020 Joe Orton <jorton(a)redhat.com> - 0.31.1-1
- update to 0.31.1
* Tue Mar 24 2020 Joe Orton <jorton(a)redhat.com> - 0.31.0-1
- update to 0.31.0
* Mon Feb 10 2020 Joe Orton <jorton(a)redhat.com> - 0.30.2-14
- fix FTBFS (#1799679)
* Mon Feb 3 2020 Kalev Lember <klember(a)redhat.com> - 0.30.2-13
- Avoid using bindir macro in buildrequires
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.30.2-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
packit-0.12.0-1.fc31 (FEDORA-2020-c746d52783)
A tool for integrating upstream projects with Fedora operating system
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 lbarcziova <lbarczio(a)redhat.com> - 0.12.0-1
- new upstream release: 0.12.0
--------------------------------------------------------------------------------
================================================================================
pam-1.3.1-24.fc31 (FEDORA-2020-5bd1682608)
An extensible library which provides authentication for applications
--------------------------------------------------------------------------------
Update Information:
pam_unix and pam_usertype: avoid determining if user exists (#1629598)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Iker Pedrosa <ipedrosa(a)redhat.com> - 1.3.1-24
- pam_unix and pam_usertype: avoid determining if user exists (#1629598)
* Fri Mar 13 2020 Iker Pedrosa <ipedrosa(a)redhat.com> - 1.3.1-23
- revert previous change
* Mon Mar 9 2020 Iker Pedrosa <ipedrosa(a)redhat.com> - 1.3.1-22
- pam_selinux: check unknown object classes or permissions in current policy
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1629598 - PAM: pam_unix allows to determine if user exists
https://bugzilla.redhat.com/show_bug.cgi?id=1629598
--------------------------------------------------------------------------------
================================================================================
perl-libwww-perl-6.46-1.fc31 (FEDORA-2020-b3f40b7ddd)
A Perl interface to the World-Wide Web
--------------------------------------------------------------------------------
Update Information:
This release fixes a loop on an HTTP redirection without a Location header.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Petr Pisar <ppisar(a)redhat.com> - 6.46-1
- 6.46 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850424 - perl-libwww-perl-6.46 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1850424
--------------------------------------------------------------------------------
================================================================================
pyproject-rpm-macros-0-16.fc31 (FEDORA-2020-a3532452af)
RPM macros for PEP 517 Python packages
--------------------------------------------------------------------------------
Update Information:
Switch from upstream deprecated pytoml to toml.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 19 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0-16
- Switch from upstream deprecated pytoml to toml
--------------------------------------------------------------------------------
================================================================================
python-Traits-5.2.0-1.fc31 (FEDORA-2020-7f588ead48)
Explicitly typed attributes for Python
--------------------------------------------------------------------------------
Update Information:
Update traits/traitsui to fix mayavi.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 18 2019 Orion Poplawski <orion(a)nwra.com> - 5.2.0-1
- Update to 5.2.0
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 5.1.2-2
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Tue Aug 27 2019 Orion Poplawski <orion(a)nwra.com> - 5.1.2-1
- Update to 5.1.2
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 5.1.1-3
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849549 - Mayavi throws errors on startup
https://bugzilla.redhat.com/show_bug.cgi?id=1849549
--------------------------------------------------------------------------------
================================================================================
python-copr-common-0.8-1.fc31 (FEDORA-2020-da89df924e)
Python code used by Copr
--------------------------------------------------------------------------------
Update Information:
copr-backend - better build task priority processing - dumping attempt to send
message to backend.log - drop the VMM concept, replaced with resalloc - delegate
more work to the builder code - external blob tarball for unittests - buggy
error handler in pkg_name_evr() - basic build task priority - the reschedule-all
builds idiom removed - fix the build cancelation - drop duplicate BuildRequire
on python-requests - require the newest version of copr-common - minimalize the
transfered amount of information about actions from FE - process actions in
regard to their priority - move backend's code to standard PYTHONPATH - move
ActionResult to copr_common.enums - actions/builds use the same WorkerManager
logic - more verbose rawhide to release action processing - fix copr-repo to
work with absolute paths - automatically batch the createrepo requests -
scheduler is now fair, and ordered - indefinitely retry workers' talk to
frontend - allow canceling also "starting" builds - more verbose delete action
in logs - cleanup the example configuration - use FileHandler for backend.log,
fixes traceback copr-frontend - more obvious links to the live logs - return a
user friendly error when modulemd is not ok - basic build task priority
implemented - droped the reschedule-all builds idiom - new build cancel
implementation - WorkerManager used for builds, too - enable deleting multiple
builds from cli - drop RequestCannotBeExecuted and BuildInProgressException -
re-assign BuildChroots to re-enabled CoprChroot - not finished build_chroots to
disallow copr_chroot removal - models: link BuildChroot(s) with corresponding
CoprChroot(s) - fix repo generation for modules with dash in their name - added
support for project runtime dependencies - return user friendly error when build
chroot was not found - large sync of model with migrations - require the newest
version of copr-common - fix for the new werkzeug in rawhide - use flask caching
instead of flask cache - prioritize initial createrepo action, set lower
priority for some actions - make ActionsLogic.send_* methods to return the
generated action - minimalize the transfered amount of action information to BE
- disable group build delete checkboxes if js is not enabled - provide status
information for build chroots in APIv3 - fix application context error for add-
user command - move some constants to copr.conf so we can tweak them - disallow
creating modules without any packages - don't show builds table when there are
none of them - fix pagure-events so it submits correct packages - show _all_
build-delete checkboxes when javascript is on - don't submit builds when there
are no CoprChroot(s) assigned - make pending-jobs faster again - allow canceling
also "starting" builds - don't traceback on invalid cancel requests -
build.source_status None accepted for old builds - don't raise 500 on
misconfigured build-time repos - print source build.log in starting state
python-copr-common - add ActionResult (moved from backend package) - add
DefaultActionPriorityEnum - add ActionPriorityEnum
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 9 2020 Pavel Raiskup <praiskup(a)redhat.com> 0.8-1
- non-devel version 0.8
* Tue May 5 2020 Jakub Kadlcik <frostyx(a)email.cz> 0.7-1
- add ActionResult (moved from backend package)
- add DefaultActionPriorityEnum
- add ActionPriorityEnum
- add run_tests.sh script and run pylint in it
--------------------------------------------------------------------------------
================================================================================
python-pynetdicom-1.5.1-1.fc31 (FEDORA-2020-3be1d6cbf0)
A Python implementation of the DICOM networking protocol
--------------------------------------------------------------------------------
Update Information:
1.5.1 release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Alessio <alciregi AT fedoraproject DOT org> - 1.5.1-1
- 1.5.1 release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1844677 - python-pynetdicom-1.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1844677
--------------------------------------------------------------------------------
================================================================================
python-traitsui-6.1.3-1.fc31 (FEDORA-2020-7f588ead48)
User interface tools designed to complement Traits
--------------------------------------------------------------------------------
Update Information:
Update traits/traitsui to fix mayavi.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 10 2019 Orion Poplawski <orion(a)nwra.com> - 6.1.3-1
- Update to 6.1.3
* Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 6.1.0-4
- Rebuilt for Python 3.8.0rc1 (#1748018)
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 6.1.0-3
- Rebuilt for Python 3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1849549 - Mayavi throws errors on startup
https://bugzilla.redhat.com/show_bug.cgi?id=1849549
--------------------------------------------------------------------------------
================================================================================
redis-5.0.9-1.fc31 (FEDORA-2020-7f7a608a97)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
Upstream 5.0.9 release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Nathan Scott <nathans(a)redhat.com> - 5.0.9-1
- Upstream 5.0.9 release.
- Resolves CVE-2020-14147 (RHBZ #1848540)
--------------------------------------------------------------------------------
================================================================================
retroarch-1.8.9-1.fc31 (FEDORA-2020-0c4f9b7856)
Cross-platform, sophisticated frontend for the libretro API.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 20 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.8.9-1
- Update to 1.8.9
--------------------------------------------------------------------------------
================================================================================
rpminspect-0.13-2.fc31 (FEDORA-2020-22d970a8d1)
Build deviation compliance tool
--------------------------------------------------------------------------------
Update Information:
Rebuild against latest mandoc package (#1850375)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 David Cantrell <dcantrell(a)redhat.com> - 0.13-2
- Rebuild against latest mandoc package (#1850375)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1850375 - Cannot update packages after installing rpminspect
https://bugzilla.redhat.com/show_bug.cgi?id=1850375
--------------------------------------------------------------------------------
================================================================================
usbguard-0.7.8-1.fc31 (FEDORA-2020-c30d6afc1c)
A tool for implementing USB device usage policy
--------------------------------------------------------------------------------
Update Information:
Rebase usbguard to 0.7.8 - rebase selinux tarball to v0.0.4 - enable
forking style in unit file - added rules.d/ directory - set DevicePolicy to
closed in unit file - usbguard prevented from writing conf via dontaudit rule
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 24 2020 Radovan Sroka <rsroka(a)redhat.com> - 0.7.8-1
- rebase usbguard to 0.7.8
- rebase selinux tarball to v0.0.4
- enable forking style in unit file
- added rules.d/ directory
- set DevicePolicy to closed in unit file
- usbguard prevented from writing conf via dontaudit rule
Resolves: rhbz#1804713
Resolves: rhbz#1789923
Resolves: rhbz#1808527
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1789923 - usbguard stops authorizing external USB devices after many
suspend/resume cycles "UEventDeviceManager thread: UEvent device manager: recvmsg: No
buffer space available"
https://bugzilla.redhat.com/show_bug.cgi?id=1789923
[ 2 ] Bug #1804713 - usbguard prevented from writing conf via dontaudit rule
https://bugzilla.redhat.com/show_bug.cgi?id=1804713
[ 3 ] Bug #1808527 - SELinux prevents usbguard from logging via Linux audit subsystem
https://bugzilla.redhat.com/show_bug.cgi?id=1808527
--------------------------------------------------------------------------------