The following Fedora 32 Security updates need testing:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4578c4a082
java-11-openjdk-11.0.7.10-0.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-98e0f0f11b
python3-3.8.3-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-bf68101ad3
knot-resolver-5.1.1-1.fc32
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-04e3d34451
dpdk-19.11.1-2.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-11be4b36d4
drupal7-7.70-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d714c08261
marked-1.1.0-3.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-062e2c016b
qutebrowser-1.11.1-1.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-94211d0a7d
libarchive-3.4.3-1.fc32
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-98e0f0f11b
python3-3.8.3-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-886cc9af08
selinux-policy-3.14.5-39.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-53b85179ad
perl-Mozilla-CA-20200520-1.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-1738d289df
uboot-tools-2020.04-4.fc32
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5b9a39faa9 pungi-4.2.2-2.fc32
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-94211d0a7d
libarchive-3.4.3-1.fc32
The following builds have been pushed to Fedora 32 updates-testing
R-modelr-0.1.8-1.fc32
ant-1.10.8-1.fc32
bubblemail-1.0-1.fc32
drumkv1-0.9.14-1.fc32
elisa-player-20.04.1-1.fc32
geany-1.36-3.fc32
gnome-applets-3.36.4-1.fc32
gnome-flashback-3.36.3-2.fc32
gnome-panel-3.36.1-2.fc32
gnome-shell-extension-bubblemail-1.0-1.fc32
guayadeque-0.4.7-0.13.20200524gita066689.fc32
libretro-handy-0-0.4.20200317git5ff5581.fc32
perl-Regexp-Grammars-1.057-1.fc32
samplv1-0.9.14-1.fc32
sequeler-0.7.91-1.fc32
srain-1.1.0-1.fc32
sympa-6.2.56-1.fc32
synthv1-0.9.14-1.fc32
Details about builds:
================================================================================
R-modelr-0.1.8-1.fc32 (FEDORA-2020-228fce7ce4)
Modelling Functions that Work with the Pipe
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.1.8-1
- Update to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829919 - R-modelr-0.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1829919
--------------------------------------------------------------------------------
================================================================================
ant-1.10.8-1.fc32 (FEDORA-2020-7f07da3fef)
Java build tool
--------------------------------------------------------------------------------
Update Information:
Update to version 1.10.8. Resolves: CVE-2020-1945
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 16 2020 Fabio Valentini <decathorpe(a)gmail.com> - 0:1.10.8-1
- Update to version 1.10.8.
- Addresses: CVE-2020-1945
* Fri May 8 2020 Fabio Valentini <decathorpe(a)gmail.com> - 0:1.10.7-1
- Update to version 1.10.7.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835326 - ant-1.10.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1835326
[ 2 ] Bug #1837445 - CVE-2020-1945 ant: insecure temporary file vulnerability
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1837445
--------------------------------------------------------------------------------
================================================================================
bubblemail-1.0-1.fc32 (FEDORA-2020-492e4ff66e)
Extensible mail notification service
--------------------------------------------------------------------------------
Update Information:
Fixes for several bugs and some enhancements. For the full list see the
changelogs
[[1]](https://framagit.org/razer/bubblemail/-/blob/v1.0/CHANGELOG.md),
[[2]](https://framagit.org/razer/bubblemail-gnome-
shell/-/blob/v1.0/CHANGELOG.md) for this release.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 23 2020 Alexander Ploumistos <alexpl(a)fedoraproject.org> - 1.0-1
- Update to 1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1839343 - bubblemail-1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1839343
[ 2 ] Bug #1839528 - gnome-shell-extension-bubblemail-1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1839528
--------------------------------------------------------------------------------
================================================================================
drumkv1-0.9.14-1.fc32 (FEDORA-2020-de9e227ae5)
An old-school drum-kit sampler
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.14
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Guido Aulisi <guido.aulisi(a)gmail.com> - 0.9.14-1
- Update to 0.9.14
--------------------------------------------------------------------------------
================================================================================
elisa-player-20.04.1-1.fc32 (FEDORA-2020-eb76289e82)
Elisa music player
--------------------------------------------------------------------------------
Update Information:
Update to 20.04.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Vasiliy N. Glazov <vascom2(a)gmail.com> - 20.04.1-1
- Update to 20.04.1
--------------------------------------------------------------------------------
================================================================================
geany-1.36-3.fc32 (FEDORA-2020-d5af4d525e)
A fast and lightweight IDE using GTK3
--------------------------------------------------------------------------------
Update Information:
This update brings a new release of an existing Geany package to a Fedora box
near you. This just adds a recommendation for having xterm installed by default
as of RHBZ#1793743. There is no change to Geany itself.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Dominic Hopf <dmaphy(a)fedoraproject.org> - 1.36-3
- Add Recommends for xterm (RHBZ#1793743)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1793743 - Default config for Geany calls for xterm as default terminal
https://bugzilla.redhat.com/show_bug.cgi?id=1793743
--------------------------------------------------------------------------------
================================================================================
gnome-applets-3.36.4-1.fc32 (FEDORA-2020-58f4ec310f)
Small applications for the GNOME Flashback panel
--------------------------------------------------------------------------------
Update Information:
Update `gnome-applets` to 3.36.4 and disable LTO.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.36.4-1
- Update to 3.36.4
- Disable LTO
--------------------------------------------------------------------------------
================================================================================
gnome-flashback-3.36.3-2.fc32 (FEDORA-2020-58f4ec310f)
GNOME Flashback session
--------------------------------------------------------------------------------
Update Information:
Update `gnome-applets` to 3.36.4 and disable LTO.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.36.3-2
- Disable LTO
--------------------------------------------------------------------------------
================================================================================
gnome-panel-3.36.1-2.fc32 (FEDORA-2020-58f4ec310f)
GNOME Flashback panel
--------------------------------------------------------------------------------
Update Information:
Update `gnome-applets` to 3.36.4 and disable LTO.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.36.1-2
- Disable LTO
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-bubblemail-1.0-1.fc32 (FEDORA-2020-492e4ff66e)
GNOME Shell indicator for new and unread mail using Bubblemail
--------------------------------------------------------------------------------
Update Information:
Fixes for several bugs and some enhancements. For the full list see the
changelogs
[[1]](https://framagit.org/razer/bubblemail/-/blob/v1.0/CHANGELOG.md),
[[2]](https://framagit.org/razer/bubblemail-gnome-
shell/-/blob/v1.0/CHANGELOG.md) for this release.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Alexander Ploumistos <alexpl(a)fedoraproject.org> - 1.0-1
- Update to v1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1839343 - bubblemail-1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1839343
[ 2 ] Bug #1839528 - gnome-shell-extension-bubblemail-1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1839528
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.7-0.13.20200524gita066689.fc32 (FEDORA-2020-29b5465dc3)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.7-0.13.20200524gita066689 ---- Update to
0.4.7-0.12.20200522git41564bd ---- Update to 0.4.7-0.11.20200520git6be35ba
---- Update to 0.4.7-0.10.20200516gitb44f4c8
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.13.20200524gita066689
- Update to 0.4.7-0.13.20200524gita066689
* Sat May 23 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.12.20200522git41564bd
- Update to 0.4.7-0.12.20200522git41564bd
* Wed May 20 2020 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.11.20200520git6be35ba
- Update to 0.4.7-0.11.20200520git6be35ba
--------------------------------------------------------------------------------
================================================================================
libretro-handy-0-0.4.20200317git5ff5581.fc32 (FEDORA-2020-362747c448)
Atari Lynx emulator Handy for libretro
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> -
0-0.4.20200317git5ff5581
- Update to latest git snapshot
--------------------------------------------------------------------------------
================================================================================
perl-Regexp-Grammars-1.057-1.fc32 (FEDORA-2020-9e10617fef)
Add grammatical parsing features to perl regular expressions
--------------------------------------------------------------------------------
Update Information:
update to 1.057
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Bill Pemberton <wfp5p(a)worldbroken.com> - 1.057-1
- update to 1.057
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1839251 - perl-Regexp-Grammars-1.057 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1839251
--------------------------------------------------------------------------------
================================================================================
samplv1-0.9.14-1.fc32 (FEDORA-2020-f4a180acee)
A polyphonic sampler synthesizer with stereo fx
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.14
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Guido Aulisi <guido.aulisi(a)gmail.com> - 0.9.14-1
- Update to 0.9.14
--------------------------------------------------------------------------------
================================================================================
sequeler-0.7.91-1.fc32 (FEDORA-2020-43cc4ee74d)
SQL Client built in Vala
--------------------------------------------------------------------------------
Update Information:
Update to version 0.7.91. Release notes:
https://github.com/Alecaddd/sequeler/releases/tag/v0.7.91
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.91-1
- Update to version 0.7.91.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1835043 - sequeler-0.7.91 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1835043
--------------------------------------------------------------------------------
================================================================================
srain-1.1.0-1.fc32 (FEDORA-2020-7af7905990)
Modern, beautiful IRC client written in GTK+ 3
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.1.0-1
- Update to 1.1.0
- Disable LTO
--------------------------------------------------------------------------------
================================================================================
sympa-6.2.56-1.fc32 (FEDORA-2020-d767d9077b)
Powerful multilingual List Manager
--------------------------------------------------------------------------------
Update Information:
Update to sympa 6.2.56. Fixes CVE-2020-10936. For details, see: -
https://github.com/sympa-community/sympa/releases/tag/6.2.56 -
https://sympa-
community.github.io/security/2020-002.html
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 24 2020 Xavier Bachelot <xavier(a)bachelot.org> 6.2.56-1
- Update to 6.2.56 (Fixes CVE-2020-10936)
- Fix typo in url and also socket location in lighttpd configuration (RHBZ#1812325)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1770783 - multicomponent wwsympa_url with mod_proxy_fcgi is broken
https://bugzilla.redhat.com/show_bug.cgi?id=1770783
[ 2 ] Bug #1812325 - Migration with lighttpd is broken
https://bugzilla.redhat.com/show_bug.cgi?id=1812325
--------------------------------------------------------------------------------
================================================================================
synthv1-0.9.14-1.fc32 (FEDORA-2020-d90da7d41b)
A 4-oscillator subtractive polyphonic synthesizer
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.14
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 23 2020 Guido Aulisi <guido.aulisi(a)gmail.com> - 0.9.14-1
- Update to 0.9.14
--------------------------------------------------------------------------------