- Update to Firefox 84

  - Built with system nss

Please give karma to nss packages which are needed for this update :

https://bodhi.fedoraproject.org/updates/FEDORA-2020-c489b93b18 https://bodhi.fedoraproject.org/updates/FEDORA-2020-d04a8e97b3

----

  - New upstream version (Firefox 84)

  - Enabled WebRender by default on Gnome Wayland and     Gnome/X.org

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 87.0.4280.88. As with pretty much every chromium release ever, this fixes some security bugs. This batch is :

CVE-2020-16037 CVE-2020-16038 CVE-2020-16039 CVE-2020-16040 CVE-2020-16041 CVE-2020-16042

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release 1.1.1i with important security fix for possible server DoS issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.2.6.2 (#1906752)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest upstream version.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upstream release notes:
https://github.com/matrix-org/synapse/blob/master/CHANGES.md#synapse-1 240rc1-2020-12-02 This release includes some minor changes which may affect homeserver admins:
https://github.com/matrix-org/synapse/blob/develop/UPGRADE.rst#upgradi ng-to-v1240

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update backports a patch for CVE-2020-27828.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.16.9

Release notes: https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.9.14 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upstream update to v1.12.0-stable Security fix for CVE-2020-15117

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fixed CVE-2019-2708

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update backports patches for CVE-2020-27824 and CVE-2020-27823.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebase to go1.14.13

  - Security fix for CVE-2020-28362, CVE-2020-28367 and     CVE-2020-28366

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes 3 security issues in the RPC protocol which p11-kit server/remote commands use :

- https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5j67-fw89-fp6x

- https://github.com/p11-glue/p11-kit/security/advisories/GHSA-5wpq-43j2-6qwc

- https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- https://www.drupal.org/project/drupal/releases/8.9.11

- https://www.drupal.org/project/drupal/releases/8.9.10

    - https://www.drupal.org/sa-core-2020-013       (CVE-2020-28948 / CVE-2020-28949)

- https://www.drupal.org/project/drupal/releases/8.9.9

    - https://www.drupal.org/sa-core-2020-012       (CVE-2020-13671)

- https://www.drupal.org/project/drupal/releases/8.9.8

- https://www.drupal.org/project/drupal/releases/8.9.7

- https://www.drupal.org/project/drupal/releases/8.9.6

    - https://www.drupal.org/sa-core-2020-011       (CVE-2020-13670)

    - https://www.drupal.org/sa-core-2020-010       (CVE-2020-13669)

    - https://www.drupal.org/sa-core-2020-009       (CVE-2020-13668)

    - https://www.drupal.org/sa-core-2020-008       (CVE-2020-13667)

    - https://www.drupal.org/sa-core-2020-007       (CVE-2020-13666)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.53.3 Security fix for CVE-2020-28924

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- curl: Inferior OCSP verification (CVE-2020-8286)

  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)

  - curl: trusting FTP PASV responses (CVE-2020-8284)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Build with hardening flags enabled; also, add -doc subpackage, fix .so version symlinking, make -devel dependency on main package strict (arched), and other minor improvements.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New version 3.4.0. Security fix for CVE-2020-26575, CVE-2020-28030.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-27819

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-Septembe r/000263.html

The 1.34.x series is now end-of-life and the 1.35.x series is a LTS release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 1.9.8.1307. Correct playback speed with PulseAdio.
Don't try to guess whether to use HTTPS, provided you're using LMS 8.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 5.9.13 stable kernel update contains a number of important fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Ruild with hardening flags enabled; also, add -doc subpackage, fix .so version symlinking, make -devel dependency on main package strict (arched), and other minor improvements

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 14.15.1

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

fix CVE-2020-27780: authentication bypass when the user doesn't exist

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update matrix-synapse to 1.23.0 to resolve CVE-2020-26890.

There may be breaking changes, please review prior to upgrade :

https://github.com/matrix-org/synapse/blob/develop/UPGRADE.rst

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-15257

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ceph 15.2.7 GA

----

ceph-15.2.6 GA Security fix for CVE-2020-25660

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Backport patch for CVE-2020-27814.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to v0.39

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-1695

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix [CVE-2020-20739](https://nvd.nist.gov/vuln/detail/CVE-2020-20739).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Severity
144489	Fedora 33 : firefox (2020-af3857afd5)	High
144488	Fedora 32 : firefox (2020-0e26e95566)	High
144487	Fedora 32 : chromium (2020-5b9c42f1b9)	High
144486	Fedora 32 : 1:openssl (2020-a31b01e945)	Medium
144484	Fedora 32 : phpldapadmin (2020-c6fa47ecd7)	Low
144482	Fedora 33 : phpldapadmin (2020-6cc5654c0e)	Low
144481	Fedora 33 : thunderbird (2020-a7b6d9467e)	High
144480	Fedora 33 : matrix-synapse (2020-eeb66c2ece)	Medium
144479	Fedora 32 : mingw-jasper (2020-596e40f29c)	Medium
144475	Fedora 32 : matrix-synapse (2020-a2172c484d)	Medium
144474	Fedora 33 : mingw-jasper (2020-c549cf2462)	Medium
144440	Fedora 33 : mbedtls (2020-9e97ec4cba)	High
144362	Fedora 32 : kernel (2020-bc0cc81a7a)	High
144347	Fedora 32 : 1:synergy (2020-2ef60a0580)	Medium
144342	Fedora 33 : kernel (2020-b732958765)	High
144325	Fedora 33 : libdb (2020-62d2ff9fa8)	Low
144324	Fedora 33 : 1:synergy (2020-cc19e88a1f)	Medium
144323	Fedora 33 : 1:openssl (2020-ef1870065a)	Medium
144319	Fedora 33 : mingw-openjpeg2 / openjpeg2 (2020-4cd57a6876)	High
144315	Fedora 32 : golang (2020-e971480183)	Medium
144310	Fedora 33 : p11-kit (2020-b0b85758e9)	High
144247	Fedora 32 : drupal8 (2020-d50d74d6f2)	Medium
144246	Fedora 33 : rclone (2020-3b0bb05117)	Medium
144241	Fedora 33 : curl (2020-ceaf490686)	Medium
144225	Fedora 33 : drupal8 (2020-6f1079934c)	Medium
144183	Fedora 33 : libpri (2020-2f1ef40a96)	High
144175	Fedora 32 : 1:wireshark (2020-d4344dd12f)	Medium
144166	Fedora 33 : libxls (2020-ad84def381)	High
144163	Fedora 33 : 1:wireshark (2020-4cff262f07)	Medium
144140	Fedora 33 : mediawiki / php-oojs-oojs-ui / php-wikimedia-assert / etc (2020-a4802c53d9)	Medium
144136	Fedora 33 : squeezelite (2020-9217a5606d)	High
144135	Fedora 32 : libslirp (2020-331e1318dd)	Medium
144134	Fedora 33 : libslirp (2020-77f93f41be)	Medium
144132	Fedora 32 : libxls (2020-688a51575a)	High
144129	Fedora 33 : kernel / kernel-headers (2020-7f021f609c)	High
144127	Fedora 32 : libpri (2020-e74ae9e90e)	High
144124	Fedora 33 : 1:nodejs (2020-43d5a372fc)	Medium
144123	Fedora 32 : kernel / kernel-headers (2020-c2081fca05)	High
144117	Fedora 32 : squeezelite (2020-8d8de2e043)	High
144091	Fedora 32 : pam (2020-bd83344365)	Critical
144045	Fedora 32 : matrix-synapse / python-authlib / python-canonicaljson / etc (2020-b90dac7fc4)	Medium
144042	Fedora 33 : containerd (2020-baeb8dbaea)	Low
144040	Fedora 33 : 2:ceph (2020-a8f1120195)	Medium
144039	Fedora 33 : mingw-openjpeg2 / openjpeg2 (2020-9cd524eeca)	High
144038	Fedora 32 : spice-gtk (2020-5567866bb0)	High
144036	Fedora 33 : chromium (2020-f43efd09e8)	High
144031	Fedora 33 : matrix-synapse / python-canonicaljson (2020-2578d943d2)	Medium
144030	Fedora 33 : spice-gtk (2020-79a7a31fea)	High
143598	Fedora 32 : resteasy (2020-239503f5fa)	Medium
143596	Fedora 32 : vips (2020-d82261f7b1)	Medium

Fedora Local Security Checks Family for Nessus