The following Fedora 32 Security updates need testing: Age URL 37 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c8458e373 containernetworking-plugins-0.9.1-1.fc32 34 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b61fc0e1b7 linux-firmware-20210208-117.fc32 33 https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d1596c42 buildah-1.19.4-1.fc32 22 https://bodhi.fedoraproject.org/updates/FEDORA-2021-88d9d29680 python3-3.8.8-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-7d55c00267 switchboard-plug-bluetooth-2.3.5-1.fc32 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-dff7e97510 upx-3.96-8.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c88a96bd4b chromium-89.0.4389.82-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-344dd24c84 pki-core-10.10.5-5.fc32
The following Fedora 32 Critical Path updates have yet to be approved: Age URL 94 https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa iproute-5.9.0-1.fc32 70 https://bodhi.fedoraproject.org/updates/FEDORA-2021-50c22ae8fd lua-socket-3.0-0.27.rc1.fc32 34 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b61fc0e1b7 linux-firmware-20210208-117.fc32 22 https://bodhi.fedoraproject.org/updates/FEDORA-2021-88d9d29680 python3-3.8.8-1.fc32 18 https://bodhi.fedoraproject.org/updates/FEDORA-2021-449618a8a8 fwupd-1.5.7-1.fc32 14 https://bodhi.fedoraproject.org/updates/FEDORA-2021-be78216a31 dnf-4.6.0-1.fc32 libdnf-0.58.0-1.fc32 microdnf-3.7.1-1.fc32 14 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5cf5afe520 hwdata-0.345-1.fc32 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-530abc3f9a librepo-1.13.0-1.fc32 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-707856e2b2 zstd-1.4.9-1.fc32 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-23d8eeaedb galera-26.4.7-1.fc32 mariadb-10.4.18-1.fc32 mariadb-connector-c-3.1.12-1.fc32 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ef4aa8623e gdisk-1.0.7-1.fc32 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-28e528d2b6 cryptsetup-2.3.5-2.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b55547281d osinfo-db-20210312-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-777903ab41 kernel-5.10.23-100.fc32 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-0915b0d840 firefox-86.0.1-1.fc32 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-34250f214e gtk3-3.24.27-1.fc32
The following builds have been pushed to Fedora 32 updates-testing
boost-1.69.0-19.fc32 cotila-1.2.1-1.fc32 debconf-1.5.75-1.fc32 debmirror-2.34-1.fc32 diff-pdf-0.5-1.fc32 fedora-chromium-config-1.1-8.fc32 golang-tinygo-x-llvm-0-0.17.20210315git435a266.fc32 ipsilon-2.1.0-18.git20210315.8c0e216.fc32 moodle-3.8.8-1.fc32 ntfs2btrfs-20210105-1.fc32 php-icewind-streams-0.7.4-1.fc32 tcpdump-4.99.0-2.fc32 tinygo-0.17.0-1.fc32 vim-8.2.2607-1.fc32 youtube-dl-2021.03.14-1.fc32
Details about builds:
================================================================================ boost-1.69.0-19.fc32 (FEDORA-2021-5f94a30af2) The free peer-reviewed portable C++ source libraries -------------------------------------------------------------------------------- Update Information:
This update fixes a bug in Boost.Locale that can cause crashes when using Boost.Regex. -------------------------------------------------------------------------------- ChangeLog:
* Wed Mar 3 2021 Jonathan Wakely jwakely@redhat.com - 1.69.0-19 - Patch Boost.Locale to not access empty vector (#1899888) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1899888 - Undefined behaviour when getting address in do_basic_transform leads to crash https://bugzilla.redhat.com/show_bug.cgi?id=1899888 --------------------------------------------------------------------------------
================================================================================ cotila-1.2.1-1.fc32 (FEDORA-2021-d825effb46) Compile Time Linear Algegra -------------------------------------------------------------------------------- Update Information:
The new package for cotila (compile time linear algebra) for F34, F33, F32 and epel8. -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1936414 - Review Request: cotila - Compile-time Linear Algebra Header only library https://bugzilla.redhat.com/show_bug.cgi?id=1936414 --------------------------------------------------------------------------------
================================================================================ debconf-1.5.75-1.fc32 (FEDORA-2021-be9ef2ccc6) Debian configuration management system -------------------------------------------------------------------------------- Update Information:
Update to 1.5.75 (#1933511) -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 7 2021 S��rgio Basto sergio@serjux.com - 1.5.75-1 - Update to 1.5.75 (#1933511) * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 1.5.74-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering releng@fedoraproject.org - 1.5.74-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Jun 25 2020 Jitka Plesnikova jplesnik@redhat.com - 1.5.74-5 - Perl 5.32 rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1933511 - debconf-1.5.75 is available https://bugzilla.redhat.com/show_bug.cgi?id=1933511 --------------------------------------------------------------------------------
================================================================================ debmirror-2.34-1.fc32 (FEDORA-2021-4d30537f8b) Debian partial mirror script, with ftp and package pool support -------------------------------------------------------------------------------- Update Information:
Update to 2.34 (#1925826) -------------------------------------------------------------------------------- ChangeLog:
* Sat Feb 6 2021 Fedora Release Monitoring release-monitoring@fedoraproject.org - 2.34-1 - Update to 2.34 (#1925826) * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 2.33-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering releng@fedoraproject.org - 2.33-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1925826 - debmirror-2.34 is available https://bugzilla.redhat.com/show_bug.cgi?id=1925826 --------------------------------------------------------------------------------
================================================================================ diff-pdf-0.5-1.fc32 (FEDORA-2021-a478391a3c) A simple tool for visually comparing two PDF files -------------------------------------------------------------------------------- Update Information:
Update to 0.5. -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 15 2021 Vasiliy N. Glazov vascom2@gmail.com - 0.5-1 - Update to 0.5 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 0.4.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ fedora-chromium-config-1.1-8.fc32 (FEDORA-2021-20fac1fd77) Fedora customizations for Chromium/Chrome -------------------------------------------------------------------------------- Update Information:
Move away from using the deprecated policies. No change in functionality as the deprecated ones were renamed. -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 15 2021 Tomas Popela tpopela@redhat.com - 1.1-8 - Move away from using deprecated policies - see rhbz#1938931 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1938931 - fedora-chromium-config: Update policy names in 00_gssapi.json https://bugzilla.redhat.com/show_bug.cgi?id=1938931 --------------------------------------------------------------------------------
================================================================================ golang-tinygo-x-llvm-0-0.17.20210315git435a266.fc32 (FEDORA-2021-dfc91cd3f3) Go bindings to a system-installed LLVM -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 15 2021 Elliott Sales de Andrade quantum.analyst@gmail.com - 0-0.17.20210315git435a266 - Update to commit 435a266786c0b47e599079846359aad6062ec7ec * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 0-0.16.20201119git570e7a6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1936121 - tinygo-0.17.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1936121 --------------------------------------------------------------------------------
================================================================================ ipsilon-2.1.0-18.git20210315.8c0e216.fc32 (FEDORA-2021-4b1d73bd4e) An Identity Provider Server -------------------------------------------------------------------------------- Update Information:
Refresh Fedora theme for the FAS->Fedora accounts change -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 15 2021 Neal Gompa ngompa13@gmail.com - 2.1.0-18.git20210315.8c0e216 - Bump to new snapshot to refresh Fedora theme for FAS->Fedora Accounts change * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-17.git20200618.c90a76b - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ moodle-3.8.8-1.fc32 (FEDORA-2021-50f63a0161) A Course Management System -------------------------------------------------------------------------------- Update Information:
Fixes for multiple CVEs -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 15 2021 Gwyn Ciesla gwync@protonmail.com - 3.8.8-1 - 3.8.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1939035 - CVE-2021-20279 moodle: Stored XSS via ID number user profile field [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939035 [ 2 ] Bug #1939039 - CVE-2021-20280 moodle: Stored XSS and blind SSRF possible via feedback answer text [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939039 [ 3 ] Bug #1939047 - CVE-2021-20281 moodle: User full name disclosure within online users block [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939047 [ 4 ] Bug #1939049 - CVE-2021-20282 moodle: Bypass email verification secret when confirming account registration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939049 [ 5 ] Bug #1939053 - CVE-2021-20283 moodle: Fetching a user's enrolled courses via web services did not check profile access in each course [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939053 --------------------------------------------------------------------------------
================================================================================ ntfs2btrfs-20210105-1.fc32 (FEDORA-2021-c977302a80) Conversion tool from NTFS to Btrfs -------------------------------------------------------------------------------- Update Information:
Initial packaging for Fedora -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1938464 - Review Request: ntfs2btrfs - Conversion tool from NTFS to Btrfs https://bugzilla.redhat.com/show_bug.cgi?id=1938464 --------------------------------------------------------------------------------
================================================================================ php-icewind-streams-0.7.4-1.fc32 (FEDORA-2021-8557935a0b) A set of generic stream wrappers -------------------------------------------------------------------------------- Update Information:
**Version 0.7.4** * Don't throw an error when calling fclose on a wrapped stream that is already closed trough the inner stream -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 15 2021 Remi Collet remi@remirepo.net - 0.7.4-1 - update to 0.7.4 --------------------------------------------------------------------------------
================================================================================ tcpdump-4.99.0-2.fc32 (FEDORA-2021-dafa7b7926) A network traffic monitoring tool -------------------------------------------------------------------------------- Update Information:
New version of tcpslice-1.3 -------------------------------------------------------------------------------- ChangeLog:
* Fri Mar 12 2021 Michal Ruprich mruprich@redhat.com - 14:4.99.0-2 - New version of tcpslice-1.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1928121 - replace tcpslice-1.2a3.tar.gz with current code https://bugzilla.redhat.com/show_bug.cgi?id=1928121 --------------------------------------------------------------------------------
================================================================================ tinygo-0.17.0-1.fc32 (FEDORA-2021-dfc91cd3f3) Go compiler for small places -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 14 2021 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.17.0-1 - Update to latest version (#1936121) * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 0.16.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Fri Jan 22 2021 Tom Stellard tstellar@redhat.com - 0.16.0-2 - Rebuild for clang-11.1.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1936121 - tinygo-0.17.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1936121 --------------------------------------------------------------------------------
================================================================================ vim-8.2.2607-1.fc32 (FEDORA-2021-b71d103fef) The VIM editor -------------------------------------------------------------------------------- Update Information:
patchlevel 2607 -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 15 2021 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.2607-1 - patchlevel 2607 * Mon Mar 8 2021 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.2576-1 - patchlevel 2576 * Mon Mar 1 2021 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.2559-1 - patchlevel 2559 * Mon Mar 1 2021 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.2541-2 - 1928442 - vim-enhanced is replacing vim-wrappers-8.2.2465-1 --------------------------------------------------------------------------------
================================================================================ youtube-dl-2021.03.14-1.fc32 (FEDORA-2021-c68c6e63a3) A small command-line program to download online videos -------------------------------------------------------------------------------- Update Information:
Update to version 2021.03.14 -------------------------------------------------------------------------------- ChangeLog:
* Sun Mar 14 2021 David Schw��rer davidsch@fedoraproject.org - 2021.03.14-1 - Update to 2021.03.14 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1938513 - youtube-dl-2021.03.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=1938513 --------------------------------------------------------------------------------