The following Fedora 31 Security updates need testing:
Age URL
37
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c5ec22e14f libuv-1.39.0-1.fc31
nodejs-12.18.4-1.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e33acdea18
python2-2.7.18-6.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-74bf23e1f1
nodejs-12.19.0-1.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e45cf8ea43
tcpreplay-4.3.3-3.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-722a0a484a xen-4.12.3-6.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6b35849edd
freetype-2.10.0-4.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-88fb82d1cd lout-3.40-18.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-421f817e5f
java-11-openjdk-11.0.9.11-0.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-febe36c3ac
java-1.8.0-openjdk-1.8.0.272.b10-0.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
75
https://bodhi.fedoraproject.org/updates/FEDORA-2020-72bc7df001
libunwind-1.3.1-7.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1d5c8eefee
perl-5.30.3-456.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e33acdea18
python2-2.7.18-6.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5608fa4a78
perl-Pod-Usage-2.01-1.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9bb2c6d5af ethtool-5.9-1.fc31
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e2631f234e
kernel-5.8.16-100.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d979670533 pcre-8.44-2.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-595197a38d
ceph-14.2.12-1.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-722a0a484a xen-4.12.3-6.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-747b6fb156
linux-firmware-20201022-113.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6b35849edd
freetype-2.10.0-4.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-517bc29c3f
vim-8.2.1885-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-947b399b81
firefox-82.0-5.fc31
The following builds have been pushed to Fedora 31 updates-testing
fastd-21-1.fc31
gsequencer-3.6.1-0.fc31
lollypop-1.4.5-1.fc31
openms-2.6.0-2.fc31
python-markdown2-2.3.10-1.fc31
solaar-1.0.4-1.fc31
Details about builds:
================================================================================
fastd-21-1.fc31 (FEDORA-2020-01dc2bc62c)
Fast and secure tunneling daemon
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2020-27638
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 23 2020 Felix Kaechele <felix(a)kaechele.ca> - 21-1
- update to 21
- fixes CVE-2020-27638
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1887118 - fastd-21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1887118
[ 2 ] Bug #1890968 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1890968
[ 3 ] Bug #1890969 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1890969
[ 4 ] Bug #1890970 - CVE-2020-27638 fastd: DoS'able memory leak on invalid packets
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1890970
--------------------------------------------------------------------------------
================================================================================
gsequencer-3.6.1-0.fc31 (FEDORA-2020-0e5aa47357)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
updated Source to point to new minor version directory
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 25 2020 Jo��l Kr��hemann <jkraehemann(a)gmail.com> 3.6.1-0
- updated Source to point to new minor version directory
- added gstreamer dependencies
--------------------------------------------------------------------------------
================================================================================
lollypop-1.4.5-1.fc31 (FEDORA-2020-17c718311d)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.5-1 ---- Update to 1.4.4-1 ---- Update to lollypop-1.4.3-1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 25 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.4.5-1
- Update to 1.4.5
* Sat Oct 24 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.4.4-1
- Update to 1.4.4
* Thu Oct 22 2020 Martin Gansser <martinkg(a)fedoraproject.org> - 1.4.3-1
- Update to 1.4.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1890526 - lollypop-1.4.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1890526
[ 2 ] Bug #1891138 - lollypop-1.4.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1891138
[ 3 ] Bug #1891245 - lollypop-1.4.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1891245
--------------------------------------------------------------------------------
================================================================================
openms-2.6.0-2.fc31 (FEDORA-2020-ef40d045f2)
LC/MS data management and analyses
--------------------------------------------------------------------------------
Update Information:
- Avoid skipping rpaths
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 25 2020 Antonio Trande <sagitter(a)fedoraproject.org> - 2.6.0-2
- Avoid skipping rpaths
* Fri Oct 2 2020 Antonio Trande <sagitter(a)fedoraproject.org> - 2.6.0-1
- Release 2.6.0
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.0-7
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
- Enable cmake_in_source_build
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jun 25 2020 Orion Poplawski <orion(a)cora.nwra.com> - 2.5.0-5
- Rebuild for hdf5 1.10.6
* Tue Jun 2 2020 Antonio Trande <sagitter(a)fedoraproject.org> - 2.5.0-4
- Rebuild for boost-1.73
* Fri May 1 2020 Antonio Trande <sagitter(a)fedoraproject.org> - 2.5.0-3
- Rebuild for coin-or-* updates
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1891329 - libOpenMS.so is not in search path, but needed
https://bugzilla.redhat.com/show_bug.cgi?id=1891329
--------------------------------------------------------------------------------
================================================================================
python-markdown2-2.3.10-1.fc31 (FEDORA-2020-a56a2ad7c8)
A fast and complete Python implementation of Markdown
--------------------------------------------------------------------------------
Update Information:
#### python-markdown2 2.3.10 #### * [pull #356] Don't merge sequential quotes
into a single blockquote * [pull #357] use style=text-align for table alignment
* [pull #360] introduce underline extra * [pull #368] Support for structured and
nested values in metadata * [pull #371] add noopener to external links
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 25 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2.3.10-1
- Update to 2.3.10.
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.9-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jun 24 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2.3.9-3
- Add explicit BR on python3-setuptools.
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 2.3.9-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
solaar-1.0.4-1.fc31 (FEDORA-2020-07c229a0d9)
Device manager for a wide range of Logitech devices
--------------------------------------------------------------------------------
Update Information:
* Support USB and BT connected devices that are not in descriptors.py * Use
FRIENDLY NAME for codename if needed and available. * Extract manufacturer and
product ID from Udev HID information. * Add Bluetooth and USB product IDs to
device descriptors records. * Support Bluetooth-connected devices. * Add
model ID and unit ID to device identification. * Support changing DPI by
pressing DPI Switch button and sliding horizontally * Add device-specific
notification handlers. * Add MX Vertical USB information. * Udev rule adds
seat permissions for all Logitech devices. * Support USB-connected devices in
GUI. * Make probe and config work for USB-connected devices. * Improve
strings and display for settings. * Correctly handle non-unifying connection
notifications. * Update GUI strings for several settings. * Better support
for EX100 and devices that connect to it. * Partial support for feature
GESTURE_2. * Simplify interface for settings. * Use DJ connection
notifications to set device active status * Udev rule sets seat write
permissions for hidraw nodes for device as well as receivers. * Handle USB
devices that use HID++ protocol in CLI. * Use device hidraw nodes where
possible. * Handle receivers with serial numbers that don't provide number of
pairings. * Ignore exceptions when setting locale. * Correctly discover
settings that share a name. * Don't show pop-up notifications at startup. *
Keep battery voltage updated in GUI. * Add Portugese translation. * Update
several translations. * Add Lightspeed receivers c545 and c541. *
Reimplement REPROG_CONTROLS data structure.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 24 2020 Dominik Mierzejewski <rpm(a)greysector.net> - 1.0.4-1
- update to 1.0.4 release (#1890613)
- drop obsolete patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1890613 - solaar-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1890613
--------------------------------------------------------------------------------