The following Fedora 31 Security updates need testing:
Age URL
96
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fcd5fd47bd
qutebrowser-1.11.1-1.fc31
49
https://bodhi.fedoraproject.org/updates/FEDORA-2020-218ab035b1
knot-resolver-5.1.2-1.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8dd86f1b3f qt-4.8.7-55.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-126a0dd319 curl-7.66.0-3.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c83556709c lua-5.3.5-8.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-14c194e5af bind-9.11.22-1.fc31
bind-dyndb-ldap-11.2-4.fc31 dnsperf-2.3.4-2.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-0d3d3f5072
httpd-2.4.46-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-73af8655eb squid-4.13-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f136f60e5f
firefox-80.0-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9a0b272cc1
libX11-1.6.12-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3689b67b53 xen-4.12.3-4.fc31
1
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cd8b8f887b
dovecot-2.3.11.3-4.fc31
The following Fedora 31 Critical Path updates have yet to be approved:
Age URL
90
https://bodhi.fedoraproject.org/updates/FEDORA-2020-03e14f6120
dracut-050-61.git20200529.fc31
74
https://bodhi.fedoraproject.org/updates/FEDORA-2020-5ccd452c8e
gnutls-3.6.14-2.fc31
23
https://bodhi.fedoraproject.org/updates/FEDORA-2020-a07ca7ca52 ethtool-5.8-1.fc31
16
https://bodhi.fedoraproject.org/updates/FEDORA-2020-72bc7df001
libunwind-1.3.1-7.fc31
13
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8dd86f1b3f qt-4.8.7-55.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b4469f6a58
linux-firmware-20200817-111.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-51e7e254c8
gnome-desktop3-3.34.8-1.fc31
10
https://bodhi.fedoraproject.org/updates/FEDORA-2020-25be37fb18 gupnp-1.0.6-1.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-47791b7bd3
p11-kit-0.23.21-2.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f70218f526
langtable-0.0.52-1.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6af045f96b
perl-Getopt-Long-2.52-1.fc31
9
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9ac0b3900e pungi-4.2.4-1.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c83556709c lua-5.3.5-8.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-126a0dd319 curl-7.66.0-3.fc31
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-724817ea52
python-productmd-1.27-1.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f82325860d
vim-8.2.1484-2.fc31
7
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d2537f11b0
python3-3.7.9-1.fc31 python3-docs-3.7.9-1.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-44ece22b25
kernel-5.7.17-100.fc31 kernel-headers-5.7.17-100.fc31 kernel-tools-5.7.17-100.fc31
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8f69c7534c
iproute-5.4.0-2.fc31
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fc8c9ab641
libcap-ng-0.7.11-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9a0b272cc1
libX11-1.6.12-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f136f60e5f
firefox-80.0-1.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3689b67b53 xen-4.12.3-4.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-fa3b6f1396
samba-4.11.12-0.fc31
2
https://bodhi.fedoraproject.org/updates/FEDORA-2020-70b012d07b
tracker-2.3.5-1.fc31.1
The following builds have been pushed to Fedora 31 updates-testing
cups-filters-1.28.1-1.fc31
fail2ban-0.11.1-10.fc31
golang-github-deepmap-oapi-codegen-1.3.12-1.fc31
golang-github-golangci-lint-1-0-0.1.20200828gitd2cdd8c.fc31
golang-github-labstack-echo-4-4.1.16-1.fc31
golang-github-labstack-gommon-0.3.0-1.fc31
odcs-0.2.49-1.fc31
php-horde-Horde-Core-2.31.15-1.fc31
php-horde-imp-6.2.27-1.fc31
pspg-3.1.3-1.fc31
python-cups-2.0.1-5.fc31
python-mailmerge-2.1.1-1.fc31
python-readability-lxml-0.8.1-1.fc31
rubygem-pdfkit-0.8.4.3.2-1.fc31
selinux-policy-3.14.4-54.fc31
Details about builds:
================================================================================
cups-filters-1.28.1-1.fc31 (FEDORA-2020-e7955de1e9)
OpenPrinting CUPS filters and backends
--------------------------------------------------------------------------------
Update Information:
1.28.1 - added driverless fax support
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 27 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.28.1-1
- 1.28.1 - added driverless fax support
* Fri Aug 21 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.27.5-7
- use configure option instead of downstream, cups-browsed.conf editing, patch
- the exact path in cups-browsed manpage was removed, use the patch removing it instead of
downstream one
- use configure option to dont save queues between restarts instead of downstream patch
reverting the issue
- memory leaks patch is from upstream too
--------------------------------------------------------------------------------
================================================================================
fail2ban-0.11.1-10.fc31 (FEDORA-2020-8f383fc231)
Daemon to ban hosts that cause multiple authentication errors
--------------------------------------------------------------------------------
Update Information:
reate shorewall-lite subpackage package which conflicts with shorewall
subpackage. Fixes RHBZ#1872759.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 28 2020 Richard Shaw <hobbes1069(a)gmail.com> - 0.11.1-10.2
- Create shorewall-lite subpackage package which conflicts with shorewall
subpackage. Fixes RHBZ#1872759.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860139 - setting backend = systemd[journalfiles in 0.11.1-6 results in
coredump
https://bugzilla.redhat.com/show_bug.cgi?id=1860139
--------------------------------------------------------------------------------
================================================================================
golang-github-deepmap-oapi-codegen-1.3.12-1.fc31 (FEDORA-2020-3b48b35baa)
Generate Go client and server boilerplate from OpenAPI 3 specifications
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
golang-github-golangci-lint-1-0-0.1.20200828gitd2cdd8c.fc31 (FEDORA-2020-3b48b35baa)
Fork of the official Go linter with API enhancements
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
golang-github-labstack-echo-4-4.1.16-1.fc31 (FEDORA-2020-3b48b35baa)
High performance, minimalist Go web framework
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
golang-github-labstack-gommon-0.3.0-1.fc31 (FEDORA-2020-3b48b35baa)
Common packages for Go
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
odcs-0.2.49-1.fc31 (FEDORA-2020-8e18611e9c)
The On Demand Compose Service
--------------------------------------------------------------------------------
Update Information:
New version 0.2.49.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 19 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.49-1
- new version
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.48-2
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jul 31 2020 Jan Kaluza <jkaluza(a)redhat.com> - 0.2.48-1
- new version
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.46-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.2.46-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Core-2.31.15-1.fc31 (FEDORA-2020-3fab48b4c2)
Horde Core Framework libraries
--------------------------------------------------------------------------------
Update Information:
**Horde_Core 2.31.15** * [mjr] Fix ActiveSync SmartForward handling.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 28 2020 Remi Collet <remi(a)remirepo.net> - 2.31.15-1
- update to 2.31.15
--------------------------------------------------------------------------------
================================================================================
php-horde-imp-6.2.27-1.fc31 (FEDORA-2020-4a9d3ba2d3)
A web based webmail system
--------------------------------------------------------------------------------
Update Information:
**imp 6.2.27** * [mjr] Fix attachments disappearing when forwarding in PHP 7.4
(Bug #15031). * [mjr] Prevent creating an empty To: header (Bug #15019). * |+
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 28 2020 Remi Collet <remi(a)remirepo.net> - 6.2.27-1
- update to 6.2.27
--------------------------------------------------------------------------------
================================================================================
pspg-3.1.3-1.fc31 (FEDORA-2020-a49634ec4a)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes: -
https://github.com/okbob/pspg/releases/tag/3.1.3 -
https://github.com/okbob/pspg/releases/tag/3.1.2 -
https://github.com/okbob/pspg/releases/tag/3.1.1 -
https://github.com/okbob/pspg/releases/tag/3.0.7 -
https://github.com/okbob/pspg/releases/tag/3.0.6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 28 2020 Pavel Raiskup <praiskup(a)redhat.com> - 3.1.3-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/3.1.3
https://github.com/okbob/pspg/releases/tag/3.1.2
https://github.com/okbob/pspg/releases/tag/3.1.1
https://github.com/okbob/pspg/releases/tag/3.0.7
https://github.com/okbob/pspg/releases/tag/3.0.6
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1826790 - pspg-3.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1826790
--------------------------------------------------------------------------------
================================================================================
python-cups-2.0.1-5.fc31 (FEDORA-2020-169a53dc4a)
Python bindings for CUPS
--------------------------------------------------------------------------------
Update Information:
1873385 - ignore driverless utilities during tags creation
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 28 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 2.0.1-5
- 1873385 - ignore driverless utilities during tags creation
* Wed Jul 29 2020 Zdenek Dohnal <zdohnal(a)redhat.com> - 2.0.1-4
- use %python3_sitearch in filter_provides_in, otherwise the package fails to build
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.1-2
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1873385 - Errors during generating dependencies for cups-filters
https://bugzilla.redhat.com/show_bug.cgi?id=1873385
--------------------------------------------------------------------------------
================================================================================
python-mailmerge-2.1.1-1.fc31 (FEDORA-2020-1ae7ff134c)
Simple command line mail merge tool
--------------------------------------------------------------------------------
Update Information:
Update to version 2.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 27 2020 Brian Exelbierd <bexelbie(a)redhat.com> - 2.1.1-1
- Update to 2.1.1
--------------------------------------------------------------------------------
================================================================================
python-readability-lxml-0.8.1-1.fc31 (FEDORA-2020-14dc4b1215)
Fast html to text parser (article readability tool)
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 27 2020 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.8.1-1
- Update to 0.8.1
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.7.1-4.20200326gitede4d01
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 0.7.1-3.20200326gitede4d01
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
rubygem-pdfkit-0.8.4.3.2-1.fc31 (FEDORA-2020-a32c10711b)
HTML+CSS to PDF using wkhtmltopdf
--------------------------------------------------------------------------------
Update Information:
New version 0.8.4.3.2 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 28 2020 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.8.4.3.2-1
- 0.8.4.3.2
--------------------------------------------------------------------------------
================================================================================
selinux-policy-3.14.4-54.fc31 (FEDORA-2020-b2d6cffc6f)
SELinux policy configuration
--------------------------------------------------------------------------------
Update Information:
New F31 selinux-policy build
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 27 2020 Zdenek Pytela <zpytela(a)redhat.com> - 3.14.4-54
- Allow munin domain transition with NoNewPrivileges
- Allow syslogd_t domain to read/write tmpfs systemd-bootchart files
- Allow unconfined_t to node_bind icmp_sockets in node_t domain
- Change transitions for ~/.config/Yubico
- Add file context for ~/.config/Yubico
- Create macro corenet_icmp_bind_generic_node()
- Allow traceroute_t and ping_t to bind generic nodes.
- Allow systemd set efivarfs files attributes
- Split the arping path regexp to 2 lines to prevent from relabeling
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1775780 - SELinux is preventing systemd from 'setattr' accesses on
the file LoaderSystemToken-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f.
https://bugzilla.redhat.com/show_bug.cgi?id=1775780
[ 2 ] Bug #1857381 - munin is generating an avc denial when trying to access
/usr/bin/munin-cron
https://bugzilla.redhat.com/show_bug.cgi?id=1857381
--------------------------------------------------------------------------------