The following Fedora 31 Security updates need testing:
Age URL
14
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c5ec22e14f libuv-1.39.0-1.fc31
nodejs-12.18.4-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7e1e9abf77
libproxy-0.4.15-15.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a1d139381a
samba-4.11.13-0.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d46fe34349 xen-4.12.3-5.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-93db553bb7 xawtv-3.107-2.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fe299b3fa3
ghc-cmark-gfm-0.2.2-1.fc31 ghc-hakyll-4.12.5.2-2.fc31 gitit-0.12.3.2-4.fc31
pandoc-2.5-2.fc31 pandoc-citeproc-0.15.0.1-2.fc31 patat-0.8.2.3-2.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bc0050aa3d
libuv-1.40.0-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-94763cb98b php-7.3.23-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3a4b8fca5e crun-0.15-5.fc31
podman-2.1.1-3.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d53469eceb
oniguruma-6.9.4-2.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1e1b527524
prosody-0.11.7-1.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
126
https://bodhi.fedoraproject.org/updates/FEDORA-2020-03e14f6120
dracut-050-61.git20200529.fc31
52
https://bodhi.fedoraproject.org/updates/FEDORA-2020-72bc7df001
libunwind-1.3.1-7.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a1d139381a
samba-4.11.13-0.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d794556021
linux-firmware-20200918-112.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-7e1e9abf77
libproxy-0.4.15-15.fc31
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-dc4f0fb907
systemd-243.9-1.fc31
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6d5fe4cba6 pcre2-10.35-7.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ea3b26083f nspr-4.29.0-1.fc31
nss-3.57.0-1.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d46fe34349 xen-4.12.3-5.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a8544190d2 pungi-4.2.5-1.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9c5a0da89b
python-productmd-1.28-1.fc31
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-87fbd4bb9b
glusterfs-7.8-1.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-aa7e76a7eb
vim-8.2.1770-1.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4f7538f8bf
selinux-policy-3.14.4-55.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-aef226a2fb
python-rpm-macros-3-59.fc31
The following builds have been pushed to Fedora 31 updates-testing
FAudio-20.10-1.fc31
R-cpp11-0.2.2-1.fc31~bootstrap
antimicrox-3.1.2-1.fc31
buildah-1.16.4-1.fc31
firefox-81.0.1-3.fc31
git-lab-porcelain-0-20203301git51c3dc37.fc31
golang-github-andybalholm-brotli-1.0.1-1.fc31
golang-github-nicksnyder-i18n-2-2.1.1-1.fc31
golang-tinygo-x-llvm-0-0.14.20200919git70c5585.fc31
hplip-3.20.9-1.fc31
kernel-5.8.13-100.fc31
pcs-0.10.7-1.fc31
perl-Gnome2-Canvas-1.004-1.fc31
perl-Gnome2-GConf-1.046-1.fc31
purple-telegram-1.4.4-1.fc31
python-uamqp-1.2.11-1.fc31
rust-coreos-installer-0.7.0-3.fc31
standard-test-roles-4.9-1.fc31
wwl-1.3-2.fc31
Details about builds:
================================================================================
FAudio-20.10-1.fc31 (FEDORA-2020-605fd436e2)
FNA is a reimplementation of the Microsoft XNA Game Studio 4.0 Refresh libraries
--------------------------------------------------------------------------------
Update Information:
New Features: XACT: Add support for WAVESTOP notifications
Add support for engines without settings files (or empty settings files) Fixes:
Add power-of-two quantum fallback paths for *BSD and Emscripten Return a
unique error code for audio engines with a bad platform ID Fix a deadlock in
Wolfenstein: The Old Blood related to callbacks Fix a crash for streaming
WaveBanks when calling Destroy stb_vorbis: Handle malloc(0) calls
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Michael Cronenworth <mike(a)cchtml.com> - 20.10-1
- Update to 20.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1884461 - FAudio-20.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1884461
--------------------------------------------------------------------------------
================================================================================
R-cpp11-0.2.2-1.fc31~bootstrap (FEDORA-2020-04a1abe929)
A C++11 Interface for R's C Interface
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#1884172)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.2.2-1
- Update to latest version (#1884172)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1884172 - R-cpp11-0.2.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1884172
--------------------------------------------------------------------------------
================================================================================
antimicrox-3.1.2-1.fc31 (FEDORA-2020-764989d840)
Graphical program used to map keyboard buttons and mouse controls to a gamepad
--------------------------------------------------------------------------------
Update Information:
3.1.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Gergely Gombos <gombosg(a)disroot.org> - 3.1.2-1
- 3.1.2
--------------------------------------------------------------------------------
================================================================================
buildah-1.16.4-1.fc31 (FEDORA-2020-33a9973d20)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Autobuilt v1.16.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 1.16.4-1
- autobuilt v1.16.4
--------------------------------------------------------------------------------
================================================================================
firefox-81.0.1-3.fc31 (FEDORA-2020-38b5ecdd73)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- Added fixes for mozbz#1661192, mozbz#1640567 (Wayland popup issues) - Enabled
build with PGO ---- - New upstream version (81.0.1) ---- - Disabled OpenH264
download from mozilla - Removed fdk-aac-free dependency ---- - Fixed usage of
OpenH264 - Don't download OpenH264 from Cisco but use Fedora packages
(rhbz#1648024) ---- - New upstream version (81.0) ---- - Fixed flash plugin
---- - New upstream release (80.0.1)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 1 2020 Martin Stransky <stransky(a)redhat.com> - 81.0.1-3
- Added fix for mozbz#1661192
* Thu Oct 1 2020 Martin Stransky <stransky(a)redhat.com> - 81.0.1-2
- Added fix for mozbz#1640567
- Enable PGO
* Wed Sep 30 2020 Martin Stransky <stransky(a)redhat.com> - 81.0.1-1
- Updated to 81.0.1
* Wed Sep 30 2020 Martin Stransky <stransky(a)redhat.com> - 81.0-9
- Disabled openh264 download
- Removed fdk-aac-free dependency (rhbz#1883672)
- Enabled LTO
* Sat Sep 26 2020 Dan Hor��k <dan[at]danny.cz> - 81.0-8
- Re-enable builds for ppc64le
* Fri Sep 25 2020 Martin Stransky <stransky(a)redhat.com> - 81.0-7
- Added openh264 fixes
* Wed Sep 23 2020 Martin Stransky <stransky(a)redhat.com> - 81.0-6
- Added fix for rhbz#1731371
* Tue Sep 22 2020 Kalev Lember <klember(a)redhat.com> - 81.0-5
- Re-enable builds for armv7hl and aarch64 architectures
* Tue Sep 22 2020 Kalev Lember <klember(a)redhat.com> - 81.0-4
- Disable LTO to work around firefox build failing in F33+
* Mon Sep 21 2020 Martin Stransky <stransky(a)redhat.com> - 81.0-3
- Updated to 81.0 Build 2
- Updated firefox-disable-ffvpx-with-vapi patch
- Deleted old changelog entries
* Thu Sep 17 2020 Martin Stransky <stransky(a)redhat.com> - 81.0-2
- Added upstream patches mzbz#1665324 mozbz#1665329
- Updated requested nss version to 3.56
* Tue Sep 15 2020 Martin Stransky <stransky(a)redhat.com> - 81.0-1
- Updated to 81.0
* Thu Sep 10 2020 Martin Stransky <stransky(a)redhat.com> - 80.0.1-3
- Test build for all arches.
* Fri Sep 4 2020 Martin Stransky <stransky(a)redhat.com> - 80.0.1-2
- Added patch for mozbz#1875469
* Tue Sep 1 2020 Martin Stransky <stransky(a)redhat.com> - 80.0.1-1
- Updated to 80.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1648024 - mozilla-openh264 not recognized
https://bugzilla.redhat.com/show_bug.cgi?id=1648024
[ 2 ] Bug #1874440 - Firefox 80.0.1 will be available today
https://bugzilla.redhat.com/show_bug.cgi?id=1874440
[ 3 ] Bug #1875469 - Firefox : Flash plugin not working ( undefined symbol :
gtk_window_set_titlebar )
https://bugzilla.redhat.com/show_bug.cgi?id=1875469
[ 4 ] Bug #1883006 - Mozilla openh264 module is installed along widevine plugin
https://bugzilla.redhat.com/show_bug.cgi?id=1883006
[ 5 ] Bug #1883672 - unnecessary explicit Requires: fdk-aac-free
https://bugzilla.redhat.com/show_bug.cgi?id=1883672
--------------------------------------------------------------------------------
================================================================================
git-lab-porcelain-0-20203301git51c3dc37.fc31 (FEDORA-2020-269b0b6ecb)
Git porcelain for working with git-lab
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 1 2020 Vladis Dronov <vdronoff+fedora(a)gmail.com> - 0-20203301git51c3dc37
- Update to latest upstream
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-2020325git75a12220.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-github-andybalholm-brotli-1.0.1-1.fc31 (FEDORA-2020-e21bd401ad)
Pure Go Brotli encoder and decoder
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-8927
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.1-1
- Update to 1.0.1
- Fix CVE-2020-8927 (#1879225, #1879228)
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1879225 - CVE-2020-8927 brotli: buffer overflow when input chunk is larger
than 2GiB
https://bugzilla.redhat.com/show_bug.cgi?id=1879225
--------------------------------------------------------------------------------
================================================================================
golang-github-nicksnyder-i18n-2-2.1.1-1.fc31 (FEDORA-2020-8f53fb5a13)
Translate your Go program into multiple languages
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#1883383)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.1.1-1
- Update to latest version (#1883383)
* Thu Jul 30 2020 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.3-4
- Add alternative import path
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1883383 - golang-github-nicksnyder-i18n-2-2.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1883383
--------------------------------------------------------------------------------
================================================================================
golang-tinygo-x-llvm-0-0.14.20200919git70c5585.fc31 (FEDORA-2020-e4b1d89d26)
Go bindings to a system-installed LLVM
--------------------------------------------------------------------------------
Update Information:
Update to version supporting LLVM 11
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 19 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> -
0-0.14.20200919git70c5585
- Switch to llvm11 branch
* Sun Aug 23 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> -
0-0.13.20200818git345b294
- Simplify LLVM dependency
--------------------------------------------------------------------------------
================================================================================
hplip-3.20.9-1.fc31 (FEDORA-2020-ac3d52d73c)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
3.20.9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.20.9-1
- 3.20.9
* Wed Sep 30 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.20.6-13
- fix bashisms in hplip-configure-python.patch
- thanks for Daniel Pielmeier from Gentoo for review
* Fri Sep 11 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.20.6-12
- move ifdef for removing hplip-gui a little in install phase
* Thu Aug 27 2020 Josef Ridky <jridky(a)redhat.com> - 3.20.6-11
- Rebuilt for new net-snmp release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1883465 - hplip-3.20.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1883465
--------------------------------------------------------------------------------
================================================================================
kernel-5.8.13-100.fc31 (FEDORA-2020-be79767376)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.8.13 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 1 2020 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.8.13-100
- Linux v5.8.13
--------------------------------------------------------------------------------
================================================================================
pcs-0.10.7-1.fc31 (FEDORA-2020-ff01dab6bf)
Pacemaker Configuration System
--------------------------------------------------------------------------------
Update Information:
Rebased to latest upstream sources (see CHANGELOG.md) - Added dependency on
python packages pyparsing and dateutil - Fixed virtual bundle provides for
ember, handelbars, jquery and jquery-ui
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 30 2020 Miroslav Lisik <mlisik(a)redhat.com> - 0.10.7-1
- Rebased to latest upstream sources (see CHANGELOG.md)
- Added dependency on python packages pyparsing and dateutil
- Fixed virtual bundle provides for ember, handelbars, jquery and jquery-ui
--------------------------------------------------------------------------------
================================================================================
perl-Gnome2-Canvas-1.004-1.fc31 (FEDORA-2020-e901c1d17c)
An engine for structured graphics in Gnome2
--------------------------------------------------------------------------------
Update Information:
This release corrects the dependency metadata. ---- This release corrects a
contact for Free Software Foundation.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Petr Pisar <ppisar(a)redhat.com> - 1.004-1
- 1.004 bump
* Thu Sep 24 2020 Petr Pisar <ppisar(a)redhat.com> - 1.003-1
- 1.003 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1882211 - perl-Gnome2-Canvas-1.003 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1882211
[ 2 ] Bug #1884124 - perl-Gnome2-Canvas-1.004 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1884124
--------------------------------------------------------------------------------
================================================================================
perl-Gnome2-GConf-1.046-1.fc31 (FEDORA-2020-ad3c4ad1a6)
Perl wrappers for the GConf configuration engine
--------------------------------------------------------------------------------
Update Information:
This release corrects dependency metadata. We deliver it mainly to provide an
up-to-date version string. ---- This release fixes a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Petr Pisar <ppisar(a)redhat.com> - 1.046-1
- 1.046 bump
* Thu Sep 24 2020 Petr Pisar <ppisar(a)redhat.com> - 1.045-1
- 1.045 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1882212 - perl-Gnome2-GConf-1.045 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1882212
[ 2 ] Bug #1884123 - perl-Gnome2-GConf-1.046 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1884123
--------------------------------------------------------------------------------
================================================================================
purple-telegram-1.4.4-1.fc31 (FEDORA-2020-b2546cd69a)
Libpurple protocol plugin for Telegram support
--------------------------------------------------------------------------------
Update Information:
* Always display the system account 'Telegram' as online. * Fix some typos and
build issues * AppStream: use new destination directory (which means we're not
compatible with old AppStream versions!)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Jiri Eischmann <eischmann(a)redhat.com> - 1.4.4-1
- Update to 1.4.4
- Changing the metainfo file location
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-uamqp-1.2.11-1.fc31 (FEDORA-2020-57afeae2c0)
AMQP 1.0 client library for Python
--------------------------------------------------------------------------------
Update Information:
* Updated tlsio_openssl module to send SNI when establishing tls connection
(Thanks to milope). * Fixed bug where `Message.footer` and
`Message.delivery_annotation` were not encoded into the outgoing payload. *
Fixed bug where message sending timeout error didn't get raised out.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.2.11-1
- Update to 1.2.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1884442 - python-uamqp-1.2.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1884442
--------------------------------------------------------------------------------
================================================================================
rust-coreos-installer-0.7.0-3.fc31 (FEDORA-2020-72afaf0f0f)
Installer for Fedora CoreOS and RHEL CoreOS
--------------------------------------------------------------------------------
Update Information:
New build to add f33 signing key. ---- New release; see [release
notes](https://github.com/coreos/coreos-installer/releases/tag/v0.7.0) for
details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 1 2020 Dusty Mabe <dusty(a)dustymabe.com> - 0.7.0-3
- Backport commit to add F33 and F34 keys. Drop F31 keys.
-
https://github.com/coreos/coreos-installer/pull/387
* Wed Sep 30 2020 Benjamin Gilbert <bgilbert(a)redhat.com> - 0.7.0-2
- Fix SIGSEGV in tests on s390x
* Mon Sep 21 2020 Benjamin Gilbert <bgilbert(a)redhat.com> - 0.7.0-1
- New release
--------------------------------------------------------------------------------
================================================================================
standard-test-roles-4.9-1.fc31 (FEDORA-2020-03482f576c)
Standard Test Interface Ansible roles
--------------------------------------------------------------------------------
Update Information:
Update to 4.9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 2 2020 Andrei Stepanov <astepano(a)redhat.com> - 4.9-1
- Build with the latest merged PRs.
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
wwl-1.3-2.fc31 (FEDORA-2020-d78f66a05a)
Calculates distance and azimuth between two Maidenhead locators
--------------------------------------------------------------------------------
Update Information:
This is new package wwl.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1881370 - Review Request: wwl - Calculates distance and azimuth between two
Maidenhead locators
https://bugzilla.redhat.com/show_bug.cgi?id=1881370
--------------------------------------------------------------------------------