The following Fedora 32 Security updates need testing:
Age URL
47
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c8458e373
containernetworking-plugins-0.9.1-1.fc32
43
https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d1596c42
buildah-1.19.4-1.fc32
32
https://bodhi.fedoraproject.org/updates/FEDORA-2021-88d9d29680
python3-3.8.8-1.fc32
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-87e26421fb
linux-firmware-20210315-119.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6945629745
lib3mf-2.0.1-1.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-138728e59b
dotnet5.0-5.0.104-1.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a468f36bbe xen-4.13.2-8.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1d72d8cea2
slic3r-1.3.0-14.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-265a3c7cb9
dotnet3.1-3.1.113-1.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-edc673e864
rubygem-kramdown-2.1.0-5.fc32
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dc83ae690a
pdfbox-2.0.23-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2024803354
busybox-1.32.1-1.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-662680e477
rpm-4.15.1.1-1.fc32.1
The following Fedora 32 Critical Path updates have yet to be approved:
Age URL
104
https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa
iproute-5.9.0-1.fc32
80
https://bodhi.fedoraproject.org/updates/FEDORA-2021-50c22ae8fd
lua-socket-3.0-0.27.rc1.fc32
32
https://bodhi.fedoraproject.org/updates/FEDORA-2021-88d9d29680
python3-3.8.8-1.fc32
23
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5cf5afe520
hwdata-0.345-1.fc32
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ef4aa8623e gdisk-1.0.7-1.fc32
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-28e528d2b6
cryptsetup-2.3.5-2.fc32
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b55547281d
osinfo-db-20210312-1.fc32
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d191e54a3c
nfs-utils-2.5.3-1.fc32
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-49b5302e38
libmaxminddb-1.5.2-1.fc32
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b48c01f40a
gnome-shell-3.36.9-1.fc32 mutter-3.36.9-1.fc32
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-87e26421fb
linux-firmware-20210315-119.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e33f35a999
thunderbird-78.8.1-1.fc32
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6540e26fc2 quota-4.05-10.fc32
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-38d10033c9
libgweather-3.36.1-2.fc32
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-662680e477
rpm-4.15.1.1-1.fc32.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7fa34a0d1f taglib-1.12-3.fc32
The following builds have been pushed to Fedora 32 updates-testing
distcc-3.3.5-5.fc32
foliate-2.6.1-1.fc32
kernel-5.11.9-100.fc32
libdnf-0.58.0-2.fc32
mate-control-center-1.24.2-1.fc32
nspr-4.30.0-1.fc32
python-jupyter-console-6.4.0-1.fc32
syncthing-1.14.0-1.fc32
Details about builds:
================================================================================
distcc-3.3.5-5.fc32 (FEDORA-2021-636ab9285d)
Distributed C/C++ compilation
--------------------------------------------------------------------------------
Update Information:
Fix desktop file icon path
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 24 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 3.3.5-5
- Fix desktop file icon path.
* Mon Mar 8 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 3.3.5-4
- Silence update-distcc-symlinks at install time.
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 3.3.5-3
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
foliate-2.6.1-1.fc32 (FEDORA-2021-f957daafb0)
Simple and modern GTK eBook reader
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.1 ---- Update to 2.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 24 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.6.1-1
- build(update): 2.6.1
* Wed Mar 24 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.6.0-1
- build(update): 2.6.0
--------------------------------------------------------------------------------
================================================================================
kernel-5.11.9-100.fc32 (FEDORA-2021-25441d8137)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.11.9 stable update contains a number of important fixes across the tree.
---- The 5.11.8 stable kernel update contains a number of important fixes
across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 24 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.11.9-11]
- KVM: PPC: Book3S HV: Save and restore FSCR in the P9 path (Fabiano Rosas)
- drm/nouveau/kms/nve4-nv108: Don't advertise 256x256 cursor support yet (Lyude Paul)
- platform/x86: intel-vbtn: Stop reporting SW_DOCK events (Hans de Goede)
- platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Hans de
Goede)
- platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are
not found (Hans de Goede)
- platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Hans de
Goede)
- platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on
init_bios_attributes() failure (Hans de Goede)
- platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times
(Hans de Goede)
- platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Hans de Goede)
- platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Hans
de Goede)
- platform/x86: thinkpad_acpi: Disable DYTC CQL mode around switching to balanced mode
(Hans de Goede)
- platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (Esteve Varela
Colominas)
- platform/x86: thinkpad_acpi: check dytc version for lapmode sysfs (Mark Pearson)
- platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 (Alban Bedel)
* Sun Mar 21 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.11.8-10]
- This is a released kernel branch (Justin M. Forbes)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1940623 - CVE-2020-27171 kernel: Integer underflow when restricting
speculative pointer arithmetic
https://bugzilla.redhat.com/show_bug.cgi?id=1940623
[ 2 ] Bug #1940627 - CVE-2020-27170 kernel: Speculation on pointer arithmetic against
bpf_context pointer
https://bugzilla.redhat.com/show_bug.cgi?id=1940627
[ 3 ] Bug #1941769 - CVE-2021-28951 kernel: DoS because of deadlock in fs/io_uring.c
https://bugzilla.redhat.com/show_bug.cgi?id=1941769
[ 4 ] Bug #1941774 - CVE-2021-28952 kernel: buffer overflow in sound/soc/qcom/sdm845.c
when an unexpected port ID number is encountered
https://bugzilla.redhat.com/show_bug.cgi?id=1941774
[ 5 ] Bug #1941781 - CVE-2021-28972 kernel: Buffer overflow in hotplug/rpadlpar_sysfs.c
https://bugzilla.redhat.com/show_bug.cgi?id=1941781
[ 6 ] Bug #1941784 - CVE-2021-28971 kernel: System crash in intel_pmu_drain_pebs_nhm in
arch/x86/events/intel/ds.c
https://bugzilla.redhat.com/show_bug.cgi?id=1941784
[ 7 ] Bug #1941804 - CVE-2021-28964 kernel: race condition in get_old_root function in
fs/btrfs/ctree.c because of a lack of locking on an extent buffer before a cloning
operation
https://bugzilla.redhat.com/show_bug.cgi?id=1941804
--------------------------------------------------------------------------------
================================================================================
libdnf-0.58.0-2.fc32 (FEDORA-2021-a2e909d1fc)
Library providing simplified C and Python API to libsolv
--------------------------------------------------------------------------------
Update Information:
libdnf-0.58.0-2 - Update libmodulemd required version This will fix dnf which
otherwise will break
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 24 2021 Nicola Sella <nsella(a)redhat.com> - 0.58.0-2
- Update libmodulemd required version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1942236 - dnf 4.6.0-1.fc32 breaks dnf
https://bugzilla.redhat.com/show_bug.cgi?id=1942236
--------------------------------------------------------------------------------
================================================================================
mate-control-center-1.24.2-1.fc32 (FEDORA-2021-9d5c7c6aeb)
MATE Desktop control-center
--------------------------------------------------------------------------------
Update Information:
- update to 1.24.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 23 2021 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.24.2-1
- update to 1.24.2
--------------------------------------------------------------------------------
================================================================================
nspr-4.30.0-1.fc32 (FEDORA-2021-71928b0f1d)
Netscape Portable Runtime
--------------------------------------------------------------------------------
Update Information:
Update NSPR to 4.30 for NSS 3.63
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 24 2021 Bob Relyea <rrelyea(a)redhat.com> - 4.30.0-1
- Update to NSPR 4.30
--------------------------------------------------------------------------------
================================================================================
python-jupyter-console-6.4.0-1.fc32 (FEDORA-2021-b31ce7adfe)
Jupyter terminal console
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 23 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 6.4.0-1
- Update to latest version (#1942249)
* Sun Mar 21 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 6.3.0-1
- Update to latest version (#1939562)
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1939562 - python-jupyter-console-6.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1939562
[ 2 ] Bug #1942249 - python-jupyter-console-6.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1942249
--------------------------------------------------------------------------------
================================================================================
syncthing-1.14.0-1.fc32 (FEDORA-2021-bbf52b0187)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 1.14.0. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v1.14.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 24 2021 Fabio Valentini <decathorpe(a)gmail.com> - 1.14.0-1
- Update to version 1.14.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1926570 - syncthing-1.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1926570
--------------------------------------------------------------------------------