The following Fedora 32 Security updates need testing:
Age URL
75
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1f643c272c libntlm-1.6-1.fc32
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ca0e53d310 php-7.4.14-1.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8537865fb5
python-cairosvg-2.4.2-4.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b670727349
golang-github-buger-jsonparser-1.1.1-1.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c90cb486f7
dovecot-2.3.13-2.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5752e07eb6
raptor2-2.0.15-27.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-32d0068851
coturn-4.5.2-1.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-082e638d02
kernel-5.10.7-100.fc32 kernel-headers-5.10.7-100.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
195
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ebbe0f7b25 cpio-2.13-6.fc32
35
https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa
iproute-5.9.0-1.fc32
19
https://bodhi.fedoraproject.org/updates/FEDORA-2020-66d135ac1f
python3-3.8.7-1.fc32 python3-docs-3.8.7-1.fc32
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-50c22ae8fd
lua-socket-3.0-0.27.rc1.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6aba9c3436
perl-libnet-3.13-1.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f36298d6e0
libtiff-4.1.0-3.fc32
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8907efd76e
switcheroo-control-2.4-1.fc32
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-616abd3e65
keyutils-1.6.1-1.fc32
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c737118abd
perl-Socket-2.031-1.fc32
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3a21976a89
libguestfs-1.44.0-1.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2f77ff1189
nfs-utils-2.5.2-1.rc4.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-28c15ce0f9 fwupd-1.5.5-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4421544240
libmodulemd-2.11.2-2.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3036e7bf00
selinux-policy-3.14.5-46.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-082e638d02
kernel-5.10.7-100.fc32 kernel-headers-5.10.7-100.fc32
The following builds have been pushed to Fedora 32 updates-testing
Cadence-1.0.0-0.13.20200604gitc167f35.fc32
buildah-1.19.1-1.fc32
castxml-0.4.1-1.fc32
chromium-87.0.4280.141-1.fc32
conmon-2.0.24-1.fc32
flatpak-1.8.5-1.fc32
gnome-shell-3.36.8-1.fc32
guayadeque-0.4.7-0.23.20201230git3632ef8.fc32
gutenprint-5.3.4-1.fc32
mutter-3.36.8-1.fc32
ovn-20.12.0-5.fc32
php-pecl-http-3.2.4-1.fc32
pyproject-rpm-macros-0-34.fc32
python-keyring-21.8.0-1.fc32
python-pysam-0.16.0.1-1.fc32
samba-4.12.11-0.fc32
system-config-printer-1.5.15-1.fc32
usbguard-1.0.0-1.fc32
vdr-extrecmenung-2.0.9-1.fc32
xpra-4.0.6-2.fc32
Details about builds:
================================================================================
Cadence-1.0.0-0.13.20200604gitc167f35.fc32 (FEDORA-2021-71ec155da7)
A set of tools useful for audio production
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.0-0.13.20200604gitc167f35
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Martin Gansser <martinkg(a)fedoraproject.org> -
1.0.0-0.13.20200604gitc167f35
- Update to 1.0.0-0.13.20200604gitc167f35
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0.0-0.12.20200504git5787908
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
buildah-1.19.1-1.fc32 (FEDORA-2021-3601bc1178)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Autobuilt v1.19.1 ---- Autobuilt v1.19.0 ---- harden cgo based go binaries
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 1.19.1-1
- autobuilt v1.19.1
* Sat Jan 9 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 1.19.0-1
- autobuilt v1.19.0
* Mon Dec 7 2020 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.18.0-3
- bump release tag for centos OBS
* Mon Dec 7 2020 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.18.0-2
- harden cgo based go binaries
- Reported-by: Wade Mealing <wmealing(a)gmail.com>
--------------------------------------------------------------------------------
================================================================================
castxml-0.4.1-1.fc32 (FEDORA-2021-84d7d938a3)
C-family abstract syntax tree XML output tool
--------------------------------------------------------------------------------
Update Information:
CastXML 0.4.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.4.1-1
- Update to version 0.4.1
* Thu Jan 14 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.4.0-1
- Update to version 0.4.0
- Fix expected test output on 32-bit architectures (i686/armv7hl)
* Tue Nov 10 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.6-2
- Rebuild for llvm/clang 10 (EPEL 8)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1915610 - castxml-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1915610
--------------------------------------------------------------------------------
================================================================================
chromium-87.0.4280.141-1.fc32 (FEDORA-2021-d9faeff8eb)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Update to 87.0.4280.141. Fixes: CVE-2021-21106 CVE-2021-21107 CVE-2021-21108
CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112 CVE-2021-21113
CVE-2020-16043 CVE-2021-21114 CVE-2020-15995 CVE-2021-21115 CVE-2021-21116
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 13 2021 Tom Callaway <spot(a)fedoraproject.org> - 87.0.4280.141-1
- update to 87.0.4280.141
* Wed Dec 30 2020 Tom Callaway <spot(a)fedoraproject.org> - 87.0.4280.88-2
- rebuild against new gcc (rawhide)
* Thu Dec 17 2020 Tom Callaway <spot(a)fedoraproject.org> - 87.0.4280.88-1.1
- add two patches for missing headers to build with gcc 11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913624 - CVE-2021-21106 chromium-browser: Use after free in autofill
https://bugzilla.redhat.com/show_bug.cgi?id=1913624
[ 2 ] Bug #1913625 - CVE-2021-21107 chromium-browser: Use after free in drag and drop
https://bugzilla.redhat.com/show_bug.cgi?id=1913625
[ 3 ] Bug #1913626 - CVE-2021-21108 chromium-browser: Use after free in media
https://bugzilla.redhat.com/show_bug.cgi?id=1913626
[ 4 ] Bug #1913627 - CVE-2021-21109 chromium-browser: Use after free in payments
https://bugzilla.redhat.com/show_bug.cgi?id=1913627
[ 5 ] Bug #1913629 - CVE-2021-21110 chromium-browser: Use after free in safe browsing
https://bugzilla.redhat.com/show_bug.cgi?id=1913629
[ 6 ] Bug #1913630 - CVE-2021-21111 chromium-browser: Insufficient policy enforcement in
WebUI
https://bugzilla.redhat.com/show_bug.cgi?id=1913630
[ 7 ] Bug #1913631 - CVE-2021-21112 chromium-browser: Use after free in Blink
https://bugzilla.redhat.com/show_bug.cgi?id=1913631
[ 8 ] Bug #1913632 - CVE-2021-21113 chromium-browser: Heap buffer overflow in Skia
https://bugzilla.redhat.com/show_bug.cgi?id=1913632
[ 9 ] Bug #1913633 - CVE-2020-16043 chromium-browser: Insufficient data validation in
networking
https://bugzilla.redhat.com/show_bug.cgi?id=1913633
[ 10 ] Bug #1913634 - CVE-2021-21114 chromium-browser: Use after free in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1913634
[ 11 ] Bug #1913635 - CVE-2020-15995 chromium-browser: Out of bounds write in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1913635
[ 12 ] Bug #1913636 - CVE-2021-21115 chromium-browser: Use after free in safe browsing
https://bugzilla.redhat.com/show_bug.cgi?id=1913636
[ 13 ] Bug #1913637 - CVE-2021-21116 chromium-browser: Heap buffer overflow in audio
https://bugzilla.redhat.com/show_bug.cgi?id=1913637
--------------------------------------------------------------------------------
================================================================================
conmon-2.0.24-1.fc32 (FEDORA-2021-d58fdc9071)
OCI container runtime monitor
--------------------------------------------------------------------------------
Update Information:
Autobuilt v2.0.24 ---- Autobuilt v2.0.23
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.0.24-1
- autobuilt v2.0.24
* Thu Jan 14 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.0.23-1
- autobuilt v2.0.23
--------------------------------------------------------------------------------
================================================================================
flatpak-1.8.5-1.fc32 (FEDORA-2021-f807eb480a)
Application deployment framework for desktop apps
--------------------------------------------------------------------------------
Update Information:
This is a security update that fixes a sandbox escape where a malicious
application can execute code outside the sandbox by controlling the environment
of the "flatpak run" command when spawning a sub-sandbox. See the advisory for
details:
https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-
fxf6-vxg2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Kalev Lember <klember(a)redhat.com> - 1.8.5-1
- Update to 1.8.5
* Wed Nov 18 2020 David King <amigadave(a)amigadave.com> - 1.8.3-2
- Drop obsolete Requires on system-release
--------------------------------------------------------------------------------
================================================================================
gnome-shell-3.36.8-1.fc32 (FEDORA-2021-b5281bf395)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 3.36.8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.7-0.23.20201230git3632ef8.fc32 (FEDORA-2021-6bd2c8b48f)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.7-0.23.20201230git3632ef8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.23.20201230git3632ef8
- Update to 0.4.7-0.23.20201230git3632ef8
--------------------------------------------------------------------------------
================================================================================
gutenprint-5.3.4-1.fc32 (FEDORA-2021-ccee5ed2db)
Printer Drivers Package
--------------------------------------------------------------------------------
Update Information:
5.3.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 13 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 5.3.4-1
- 5.3.4
--------------------------------------------------------------------------------
================================================================================
mutter-3.36.8-1.fc32 (FEDORA-2021-b5281bf395)
Window and compositing manager based on Clutter
--------------------------------------------------------------------------------
Update Information:
Update to 3.36.8
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
ovn-20.12.0-5.fc32 (FEDORA-2021-98d54eff74)
Open Virtual Network support
--------------------------------------------------------------------------------
Update Information:
Backport "bfd: introduce IPv6 support" (#1915739)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Numan Siddique <numans(a)ovn.org> - 20.12.0-5
- Backport "bfd: introduce IPv6 support" (#1915739)
* Wed Jan 13 2021 Numan Siddique <numans(a)ovn.org> - 20.12.0-4
- Backport "introduce BFD support in ovn-controller" (#1847570)
- Backport "ovn-northd: Move lswitch ARP/ND Responder to functions"
- Backport "ovn-northd: Move DHCP Options and Response to a function"
- Backport "ovn-northd: Move lswitch DNS lookup and response to a function"
- Backport "ovn-northd: Move DNS and DHCP defaults to a function"
- Backport "ovn-northd: Move ARP response for external ports to a function."
- Backport "ovn-northd: Move broadcast and multicast lookup in lswitch to a
function"
- Backport "ovn-northd: Move destination handling into functions."
- Backport "ovn-northd: split build_lswitch_output_port_sec into iterators"
- Backport "ovn-northd: Move lrouter arp and nd datapath processing to a
function"
- Backport "ovn-northd: Move ipv4 input to a function"
- Backport "ovn-northd: move NAT, Defrag and lb to a function"
* Mon Jan 11 2021 Numan Siddique <numans(a)ovn.org> - 20.12.0-3
- Backport "binding: Do not clear container lbinding->pb when parent is
deleted." (#1914304)
* Mon Jan 11 2021 Numan Siddique <numans(a)ovn.org> - 20.12.0-2
- Backport "ovn-trace: fix trigger_event warning" (#1909650)
* Mon Jan 11 2021 Numan Siddique <numans(a)ovn.org> - 20.12.0-1
- Rebase to OVN v20.12.0.
- Re-backport patches for #1883957 and #1881826 as there are not in v20.12.0.
- Use ovs sources from master commit - 252e1e576443("dpdk: Update to use DPDK
v20.11.").
--------------------------------------------------------------------------------
================================================================================
php-pecl-http-3.2.4-1.fc32 (FEDORA-2021-fd4fe7c554)
Extended HTTP support
--------------------------------------------------------------------------------
Update Information:
**Version 3.2.4** * Fixed configure on systems which do not provide icu-config
* Fixed gh-issue #89: Cookie handling cannot be disabled since v3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Remi Collet <remi(a)remirepo.net> - 3.2.4-1
- update to 3.2.4
--------------------------------------------------------------------------------
================================================================================
pyproject-rpm-macros-0-34.fc32 (FEDORA-2021-043d30a57d)
RPM macros for PEP 517 Python packages
--------------------------------------------------------------------------------
Update Information:
- List all files in `%pyproject_files` explicitly to avoid duplicate `%lang`
entries - If you amend the installed files after `%pyproject_install`,
`%pyproject_files` might break
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 4 2020 Miro Hron��ok <miro(a)hroncok.cz> - 0-34
- List all files in %pyproject_files explicitly to avoid duplicate %lang entries
- If you amend the installed files after %pyproject_install, %pyproject_files might break
* Fri Nov 27 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0-33
- Pass PYTHONDONTWRITEBYTECODE=1 to %tox to avoid packaged PYTEST bytecode
--------------------------------------------------------------------------------
================================================================================
python-keyring-21.8.0-1.fc32 (FEDORA-2021-0bbdc481b3)
Store and access your passwords safely
--------------------------------------------------------------------------------
Update Information:
New version 21.8.0 with minor improvements. Fixes rhbz#1910110
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 13 2021 Joel Capitao <jcapitao(a)redhat.com> - 21.8.0-1
- Update to 21.8.0 (rhbz#1910110)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1910110 - python-keyring-21.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1910110
--------------------------------------------------------------------------------
================================================================================
python-pysam-0.16.0.1-1.fc32 (FEDORA-2021-0c3ac0f9e1)
pysam
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829523 - Review Request: python-pysam - reading, manipulating and writing
genomic data sets
https://bugzilla.redhat.com/show_bug.cgi?id=1829523
--------------------------------------------------------------------------------
================================================================================
samba-4.12.11-0.fc32 (FEDORA-2021-4c3f67f024)
Server and Client software to interoperate with Windows machines
--------------------------------------------------------------------------------
Update Information:
Update to Samba 4.12.11
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Guenther Deschner <gdeschner(a)redhat.com> - 4.12.11-0
- Update to Samba 4.12.11
--------------------------------------------------------------------------------
================================================================================
system-config-printer-1.5.15-1.fc32 (FEDORA-2021-35b4f7fdda)
A printer administration tool
--------------------------------------------------------------------------------
Update Information:
1.5.15, apply eln changes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.5.15-1
- 1.5.15, apply eln changes
--------------------------------------------------------------------------------
================================================================================
usbguard-1.0.0-1.fc32 (FEDORA-2021-7d75c755f2)
A tool for implementing USB device usage policy
--------------------------------------------------------------------------------
Update Information:
rebase usbguard to 1.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Zoltan Fridrich <zfridric(a)redhat.com> - 1.0.0-1
- rebase usbguard to 1.0.0
- added support for rules covering combination of classes
- fix usbguard being killed
Resolves: rhbz#1916039
Resolves: rhbz#1861330
Resolves: rhbz#1905257
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1861330 - [RFE] Add support for rules covering combination of classes
https://bugzilla.redhat.com/show_bug.cgi?id=1861330
[ 2 ] Bug #1905257 - [abrt] usbguard: qb_ipcc_disconnect(): usbguard killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1905257
[ 3 ] Bug #1916039 - usbguard-1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1916039
--------------------------------------------------------------------------------
================================================================================
vdr-extrecmenung-2.0.9-1.fc32 (FEDORA-2021-44e99f2385)
Powerful next generation recordings menu replacement plugin for VDR
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.9
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909468 - Review Request: vdr-extrecmenung - VDR plugin for extended
recording menu NG
https://bugzilla.redhat.com/show_bug.cgi?id=1909468
--------------------------------------------------------------------------------
================================================================================
xpra-4.0.6-2.fc32 (FEDORA-2021-9cc1d421dc)
Remote display server for applications and desktops
--------------------------------------------------------------------------------
Update Information:
- Fix rhbz#1916026
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 14 2021 Antonio Trande <sagitter(a)fedoraproject.org> - 4.0.6-2
- Fix rhbz#1916026
--------------------------------------------------------------------------------