The following Fedora 32 Security updates need testing: Age URL 63 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c8458e373 containernetworking-plugins-0.9.1-1.fc32 59 https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d1596c42 buildah-1.19.4-1.fc32 13 https://bodhi.fedoraproject.org/updates/FEDORA-2021-619711d709 webkit2gtk3-2.30.6-1.fc32 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-26a293c72b curl-7.69.1-8.fc32 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c9e634a6ff seamonkey-2.53.7-2.fc32 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-57661d377a perl-Net-CIDR-Lite-0.22-1.fc32 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-65100169e4 mosquitto-1.6.14-1.fc32 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-596fc11138 libpano13-2.9.20-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b6b6093b3a python3-3.8.9-1.fc32 python3-docs-3.8.9-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9433bedebd dnsmasq-2.85-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-29b96724c5 clamav-0.103.2-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a58cb9bc7a gnuchess-6.2.7-5.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2e174e8a96 singularity-3.7.3-1.fc32 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-0ea39d8eb3 ruby-2.7.3-136.fc32 The following Fedora 32 Critical Path updates have yet to be approved: Age URL 120 https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa iproute-5.9.0-1.fc32 29 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b55547281d osinfo-db-20210312-1.fc32 29 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ef4aa8623e gdisk-1.0.7-1.fc32 13 https://bodhi.fedoraproject.org/updates/FEDORA-2021-619711d709 webkit2gtk3-2.30.6-1.fc32 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a51c0106f6 libkcapi-1.2.1-1.fc32 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-71928b0f1d nspr-4.30.0-1.fc32 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-7fa34a0d1f taglib-1.12-4.fc32 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-26a293c72b curl-7.69.1-8.fc32 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-247880fa9f appstream-data-32-9.fc32 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4bacddc79e usbredir-0.9.0-1.fc32 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8095ab0ab fedora-repos-32-13 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ab94d98d88 gtk3-3.24.28-2.fc32 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-47595160ab hwdata-0.346-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-13132f7ab7 createrepo_c-0.17.1-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-8953a0780d kernel-5.11.12-100.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9433bedebd dnsmasq-2.85-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b6b6093b3a python3-3.8.9-1.fc32 python3-docs-3.8.9-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5f3eded325 libbluray-1.3.0-1.fc32 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-af77f2149b libxcrypt-4.4.19-1.fc32 The following builds have been pushed to Fedora 32 updates-testing CImg-2.9.7-1.fc32 butane-0.11.0-1.fc32 gmic-2.9.7-1.fc32 guayadeque-0.4.7-0.28.20210409gitdfc6b42.fc32 libburn-1.5.4-2.fc32 libisoburn-1.5.4-2.fc32 librsync-2.3.2-1.fc32 modulemd-tools-0.9-1.fc32 mtr-0.94-3.fc32 nodejs-12.22.1-1.fc32 protontricks-1.5.0-1.fc32 srain-1.2.1-1.fc32 Details about builds: ================================================================================ CImg-2.9.7-1.fc32 (FEDORA-2021-bc6585e31a) C++ Template Image Processing Toolkit -------------------------------------------------------------------------------- Update Information: new version -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 9 2021 josef radinger <cheese@xxxxxxxxxxxxxx> - 1:2.9.7-1 - bump version * Wed Feb 10 2021 josef radinger <cheese@xxxxxxxxxxxxxx> - 1:2.9.6-1 - bump version * Mon Jan 25 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1:2.9.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1893378 - CVE-2020-25693 CImg: multiple integer overflows leading to heap-based buffer-overflows [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1893378 [ 2 ] Bug #1898107 - gmic-2.9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1898107 -------------------------------------------------------------------------------- ================================================================================ butane-0.11.0-1.fc32 (FEDORA-2021-f39663030e) Butane config transpiler -------------------------------------------------------------------------------- Update Information: Fedora CoreOS Config Transpiler is now Butane. New upstream release; details [here](https://github.com/coreos/butane/blob/v0.11.0/NEWS). -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- ================================================================================ gmic-2.9.7-1.fc32 (FEDORA-2021-bc6585e31a) GREYC's Magic for Image Computing -------------------------------------------------------------------------------- Update Information: new version -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 9 2021 josef radinger <cheese@xxxxxxxxxxxxxx> - 2.9.7-1 - bump version * Thu Feb 11 2021 josef radinger <cheese@xxxxxxxxxxxxxx> - 2.9.6-1 - bump version * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.9.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jan 12 2021 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 2.9.4-5 - Again try to build on all archs * Tue Jan 12 2021 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 2.9.4-4 - Once make this package available on buildable arch * Mon Jan 4 2021 josef radinger <cheese@xxxxxxxxxxxxxx> - 2.9.4-3 - remove stray stash file * Fri Jan 1 2021 Richard Shaw <hobbes1069@xxxxxxxxx> - 2.9.4-2 - Rebuild for OpenEXR 2.5.3. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1893378 - CVE-2020-25693 CImg: multiple integer overflows leading to heap-based buffer-overflows [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1893378 [ 2 ] Bug #1898107 - gmic-2.9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1898107 -------------------------------------------------------------------------------- ================================================================================ guayadeque-0.4.7-0.28.20210409gitdfc6b42.fc32 (FEDORA-2021-a39b68bead) Music player -------------------------------------------------------------------------------- Update Information: Update to 0.4.7-0.28.20210409gitdfc6b42 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 10 2021 Martin Gansser <martinkg@xxxxxxxxxxxxxxxxx> - 0.4.7-0.28.20210409gitdfc6b42 - Update to 0.4.7-0.28.20210409gitdfc6b42 -------------------------------------------------------------------------------- ================================================================================ libburn-1.5.4-2.fc32 (FEDORA-2021-c832ec8669) Library for reading, mastering and writing optical discs -------------------------------------------------------------------------------- Update Information: * Correct alternatives handling for cdrecord man page -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 9 2021 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 1.5.4-2 - Correct alternatives handling for cdrecord man page -------------------------------------------------------------------------------- ================================================================================ libisoburn-1.5.4-2.fc32 (FEDORA-2021-db95cf8ade) Library to enable creation and expansion of ISO-9660 filesystems -------------------------------------------------------------------------------- Update Information: * Make `xorrecord` a `cdrecord` alternative -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 9 2021 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 1.5.4-2 - Make xorrecord a cdrecord alternative (thanks to Jiri Kucera) -------------------------------------------------------------------------------- ================================================================================ librsync-2.3.2-1.fc32 (FEDORA-2021-6013f49ebc) Rsync remote-delta algorithm library -------------------------------------------------------------------------------- Update Information: librsync 2.3.2 ============== * Fix heap corruption for too small `kbloom`. This could have crashed delta operations for very small files/signatures. Strangely it didn't seem to cause problems for most compilers/platforms, but did trigger errors for new versions of MSVC. * Fix and add Travis Windows checks and improve compatibility. Turn on `-Wconversion -Wno-sign-conversion` warnings for `clang`. Add MSVC compiler flags to turn off posix warnings. Make all code compile clean with no warnings on all Travis platforms. Added `cmake` config checking for windows `io.h` and improve `fileutil.c` for MSVC. Fix broken error handling in `rs_file_copy_cb()`. Improved trace output, making it less spamy and more consistent. Add patch checking for invalid literal lengths. Improve internal variable and argument types. Add explicit type conversions. * Fix a bug so patch will now fail returning `RS_CORRUPT` on encountering a zero length copy command instead of hanging. Make `copy_cb()` copying more data than requested an assert-fail on debug builds, and a log-warning for release builds. Make trace output a little less spammy about `copy_cb()` return values. -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 10 2021 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 2.3.2-1 - Upgrade to 2.3.2 (#1948216) * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.3.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Aug 4 2020 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 2.3.1-3 - Work around CMake out-of-source builds on all branches (#1864045) * Tue Jul 28 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1948216 - librsync-2.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1948216 -------------------------------------------------------------------------------- ================================================================================ modulemd-tools-0.9-1.fc32 (FEDORA-2021-5ad5e660ed) Collection of tools for parsing and generating modulemd YAML files -------------------------------------------------------------------------------- Update Information: Yet another maintenance release with no end-user enhancements. ### repo2module - Dropped dependency on python3-click ---- This is a maintenance release with no end-user enhancements. - New tests suites for `modulemd-merge` and `createrepo_mod` commands and for `modulemd_tools` library - Dropped dependency on `python3-parameterized` -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 9 2021 Jakub Kadlcik <frostyx@xxxxxxxx> 0.9-1 - repo2module: drop python-click dependency (frostyx@xxxxxxxx) * Tue Apr 6 2021 Jakub Kadlcik <frostyx@xxxxxxxx> 0.8-1 - modulemd_tools: drop python3-parameterized dependency (frostyx@xxxxxxxx) - Package modulemd_tools helper lib (fvalder@xxxxxxxxxx) - Add modulemd-merge tests (fvalder@xxxxxxxxxx) - Add createrepo_mod tests (fvalder@xxxxxxxxxx) - Replace master in fedora releaser to rawhide (frostyx@xxxxxxxx) -------------------------------------------------------------------------------- ================================================================================ mtr-0.94-3.fc32 (FEDORA-2021-d288193f1d) Network diagnostic tool combining 'traceroute' and 'ping' -------------------------------------------------------------------------------- Update Information: - Add upstream patches to fix various `xmtr` issues (#1488417) -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 10 2021 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> - 2:0.94-3 - Add upstream patches to fix various xmtr issues (#1488417) * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2:0.94-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1488417 - xmtr doesn't actually work https://bugzilla.redhat.com/show_bug.cgi?id=1488417 -------------------------------------------------------------------------------- ================================================================================ nodejs-12.22.1-1.fc32 (FEDORA-2021-d934acdb42) JavaScript runtime -------------------------------------------------------------------------------- Update Information: https://nodejs.org/en/blog/vulnerability/april-2021-security-releases/ -------------------------------------------------------------------------------- ChangeLog: * Thu Apr 8 2021 Stephen Gallagher <sgallagh@xxxxxxxxxx> - 1:12.22.1-1 - Update to 12.22.1 * Tue Mar 9 2021 Zuzana Svetlikova <zsvetlik@xxxxxxxxxx - 1:12.21.0-3 - Only require nodejs-packaging on Fedora - remove --debug-nghttp2 (#1930775) - always build with systemtap -------------------------------------------------------------------------------- ================================================================================ protontricks-1.5.0-1.fc32 (FEDORA-2021-fd542b6b2b) Simple wrapper that does winetricks things for Proton enabled games -------------------------------------------------------------------------------- Update Information: Update to 1.5.0 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 10 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 1.5.0-1 - build(update): 1.5.0 * Wed Feb 3 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 1.4.4-1 - build(update): 1.4.4 * Wed Jan 27 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.4.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ srain-1.2.1-1.fc32 (FEDORA-2021-53b33c95b5) Modern, beautiful IRC client written in GTK+ 3 -------------------------------------------------------------------------------- Update Information: Update to 1.2.1 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 10 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 1.2.1-1 - build(update): 1.2.1 * Wed Mar 3 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 1.2.0-1 - build(update): 1.2.0 * Wed Jan 27 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.1.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Wed Jul 29 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/test@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
