The following Fedora 32 Security updates need testing: Age URL 93 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c8458e373 containernetworking-plugins-0.9.1-1.fc32 89 https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d1596c42 buildah-1.19.4-1.fc32 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-be95e017e7 cups-2.3.3op2-5.fc32 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-158a237d4a bind-9.11.31-1.fc32 bind-dyndb-ldap-11.3-6.fc32 dnsperf-2.3.4-6.fc32 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ff893e12c5 chromium-90.0.4430.93-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5b6c69a73a community-mysql-8.0.24-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f9e87aaa4 php-7.4.19-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fcb25df974 djvulibre-3.5.27-25.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-38e1f87ac3 thunderbird-78.10.1-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ab09c9a7a1 python-impacket-0.9.22-3.fc32 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c0276e935 kernel-5.11.19-100.fc32 kernel-headers-5.11.19-100.fc32 kernel-tools-5.11.19-100.fc32 The following Fedora 32 Critical Path updates have yet to be approved: Age URL 151 https://bodhi.fedoraproject.org/updates/FEDORA-2020-345d2fd2aa iproute-5.9.0-1.fc32 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6efbebaf08 gnome-software-3.36.1-4.fc32 10 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2efb16d06b pungi-4.2.9-1.fc32 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bdf471bdb7 ethtool-5.12-1.fc32 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2650a24eec libxcrypt-4.4.20-2.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-38e1f87ac3 thunderbird-78.10.1-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e79d2e147 hwdata-0.347-1.fc32 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-19cdc5683f libmodulemd-2.12.1-1.fc32 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-7fd2a21f94 python3-3.8.10-1.fc32 python3-docs-3.8.10-1.fc32 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-f1edd94582 firefox-88.0-8.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-276b0013e8 gnome-terminal-3.36.3-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-151dc7fd1b vte291-0.60.4-1.fc32 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a2ee549bcb xorg-x11-drv-nouveau-1.0.17-1.fc32 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c0276e935 kernel-5.11.19-100.fc32 kernel-headers-5.11.19-100.fc32 kernel-tools-5.11.19-100.fc32 The following builds have been pushed to Fedora 32 updates-testing aime-8.20210510-1.fc32 bottles-3.1.8-1.fc32 btrfs-progs-5.11.1-1.fc32 cacti-1.2.17-1.fc32 cacti-spine-1.2.17-1.fc32 cozy-0.9.5-1.fc32 exif-0.6.22-1.fc32 gnuchess-6.2.8-1.fc32 icewm-2.3.4-2.fc32 moodle-3.8.9-1.fc32 php-pear-1.10.12-7.fc32 protontricks-1.5.1-1.fc32 python-overpy-0.6-1.fc32 syncthing-1.16.1-1.fc32 Details about builds: ================================================================================ aime-8.20210510-1.fc32 (FEDORA-2021-93c96df5c9) An application embeddable programming language interpreter -------------------------------------------------------------------------------- Update Information: - Update to 8.20210510 fixes rhbz#1938144 -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Filipe Rosset <rosset.filipe@xxxxxxxxx> - 8.20210510-1 - Update to 8.20210510 fixes rhbz#1938144 * Mon Jan 25 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 8.20210121-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ bottles-3.1.8-1.fc32 (FEDORA-2021-47b8dd79a1) Easily manage Wine prefix in a new way -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Wed May 5 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 3.1.8-1 - build(update): 3.1.8 * Sun May 2 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 3.1.7-1 - build(update): 3.1.7 * Mon Apr 26 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 3.1.6-1 - build(update): 3.1.6 -------------------------------------------------------------------------------- ================================================================================ btrfs-progs-5.11.1-1.fc32 (FEDORA-2021-f438908573) Userspace programs for btrfs -------------------------------------------------------------------------------- Update Information: * properly format checksums when a mismatch is reported * fix device path canonicalization for device mapper devices * check: fix false alert on tree block crossing 64K page boundary * convert: * refuse to convert filesystem with 'needs_recovery' * update documentation to require fsck before conversion * fi resize: improved summary * receive: remove workaround for setting capabilities, all stable kernels have been patched * receive: fix duplicate mount path detection * rescue: new subcommand create-control-device * device stats: minor fix for plain text format output * build: detect if e2fsprogs support 64bit timestamps * build: drop libmount, required functionality has been reimplemented * mkfs: warn when raid56 is used * balance convert: warn when raid56 is used * other * build: fix checks and autoconf defines * new and updated tests * documentation updates * seeding device * raid56 status -------------------------------------------------------------------------------- ChangeLog: * Sun Mar 28 2021 Igor Raits <ignatenkobrain@xxxxxxxxxxxxxxxxx> - 5.11.1-1 - Update to 5.11.1 * Fri Mar 5 2021 Igor Raits <ignatenkobrain@xxxxxxxxxxxxxxxxx> - 5.11-1 - Update to 5.11 * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 5.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ cacti-1.2.17-1.fc32 (FEDORA-2021-598b6d2924) An rrd based graphing tool -------------------------------------------------------------------------------- Update Information: - Update to 1.2.17 Release notes: https://www.cacti.net/release_notes.php?version=1.2.17 -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Morten Stevens <mstevens@xxxxxxxxxxxxxxxxx> - 1.2.17-1 - Update to 1.2.17 * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.2.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1915043 - CVE-2020-35701 cacti: SQL injection vulnerability in data_debug.php [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1915043 -------------------------------------------------------------------------------- ================================================================================ cacti-spine-1.2.17-1.fc32 (FEDORA-2021-598b6d2924) Threaded poller for Cacti written in C -------------------------------------------------------------------------------- Update Information: - Update to 1.2.17 Release notes: https://www.cacti.net/release_notes.php?version=1.2.17 -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Morten Stevens <mstevens@xxxxxxxxxxxxxxxxx> - 1.2.17-1 - Update to 1.2.17 * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.2.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1915043 - CVE-2020-35701 cacti: SQL injection vulnerability in data_debug.php [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1915043 -------------------------------------------------------------------------------- ================================================================================ cozy-0.9.5-1.fc32 (FEDORA-2021-619cbb0f9f) Modern audiobook player -------------------------------------------------------------------------------- Update Information: Update to v0.9.5 -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Artur Frenszek-Iwicki <fedora@xxxxxxxxxx> - 0.9.5-1 - Update to latest release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1958690 - cozy-0.9.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1958690 -------------------------------------------------------------------------------- ================================================================================ exif-0.6.22-1.fc32 (FEDORA-2021-477809f45f) Utility to show EXIF information hidden in JPEG files -------------------------------------------------------------------------------- Update Information: 0.6.22, patch for CVE-2021-27815. -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Gwyn Ciesla <gwync@xxxxxxxxxxxxxx> - 0.6.22-1 - 0.6.22, patch for CVE-2021-27815. * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.6.21-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Jul 27 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.6.21-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 13 2020 Tom Stellard <tstellar@xxxxxxxxxx> - 0.6.21-18 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro -------------------------------------------------------------------------------- References: [ 1 ] Bug #1958808 - CVE-2021-27815 exif: libexif: NULL Pointer Deference may lead to DoS by uploading a malicious JPEG file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1958808 -------------------------------------------------------------------------------- ================================================================================ gnuchess-6.2.8-1.fc32 (FEDORA-2021-a4d8a35f70) The GNU chess program -------------------------------------------------------------------------------- Update Information: 6.2.8 -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Gwyn Ciesla <gwync@xxxxxxxxxxxxxx> - 6.2.8-1 - 6.2.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1958670 - gnuchess-6.2.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1958670 -------------------------------------------------------------------------------- ================================================================================ icewm-2.3.4-2.fc32 (FEDORA-2021-170783dbce) Window manager designed for speed, usability, and consistency -------------------------------------------------------------------------------- Update Information: Update to 2.3.4 ---- Update to 2.3.4 -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 2.3.4-2 - build: Obsoletes icewm-fonts-settings package * Fri May 7 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 2.3.4-1 - build(update): 2.3.4 * Fri May 7 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 2.3.3-2 - build: Drop all custom stuff except default Fedora theme - build: Drop 'fonts-settings' sub-package -------------------------------------------------------------------------------- ================================================================================ moodle-3.8.9-1.fc32 (FEDORA-2021-6f5ce4a19c) A Course Management System -------------------------------------------------------------------------------- Update Information: Latest releases. -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Gwyn Ciesla <gwync@xxxxxxxxxxxxxx> - 3.8.9-1 - 3.8.9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1958717 - moodle-3.10.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1958717 -------------------------------------------------------------------------------- ================================================================================ php-pear-1.10.12-7.fc32 (FEDORA-2021-640f4a218a) PHP Extension and Application Repository framework -------------------------------------------------------------------------------- Update Information: **Archive_Tar 1.4.13** * Fix Bug pear#27010: Relative symlinks failing (out-of path file extraction) [mrook] -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Remi Collet <remi@xxxxxxxxxxxx> - 1:1.10.12-7 - update Archive_Tar to 1.4.13 -------------------------------------------------------------------------------- ================================================================================ protontricks-1.5.1-1.fc32 (FEDORA-2021-02f54e1996) Simple wrapper that does winetricks things for Proton enabled games -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 1.5.1-1 - build(update): 1.5.1 -------------------------------------------------------------------------------- ================================================================================ python-overpy-0.6-1.fc32 (FEDORA-2021-d0c17c4fa1) Python Wrapper to access the Overpass API -------------------------------------------------------------------------------- Update Information: New package -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1958564 - Review Request: python-overpy - Python Wrapper to access the Overpass API https://bugzilla.redhat.com/show_bug.cgi?id=1958564 -------------------------------------------------------------------------------- ================================================================================ syncthing-1.16.1-1.fc32 (FEDORA-2021-43ea1acc10) Continuous File Synchronization -------------------------------------------------------------------------------- Update Information: Update to version 1.16.1. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.16.0 -------------------------------------------------------------------------------- ChangeLog: * Mon May 10 2021 Fabio Valentini <decathorpe@xxxxxxxxx> - 1.16.1-1 - Update to version 1.16.1. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1956466 - syncthing-1.16.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1956466 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/test@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure