The following Fedora 33 Security updates need testing: Age URL 53 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-8917c5d9d2 exiv2-0.27.3-7.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e145f477df mingw-openjpeg2-2.3.1-12.fc33 openjpeg2-2.3.1-11.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-67691ad99d wireshark-3.4.5-1.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ac3ef133e8 singularity-3.7.4-1.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-8ca8263bde dhcp-4.4.2-9.b1.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4cdb0f68c7 python-lxml-4.5.1-4.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bdba47348c mingw-exiv2-0.27.3-6.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3193a4c13f mingw-djvulibre-3.5.27-12.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-dab56300b1 transfig-3.2.8a-2.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b libxml2-2.9.12-4.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4892dbbf76 musl-1.2.2-1.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a4be4c93e4 radsecproxy-1.9.0-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved: Age URL 71 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb PackageKit-1.2.3-1.fc33 13 https://bodhi.fedoraproject.org/updates/FEDORA-2021-55fc591f26 tpm2-tss-3.0.4-1.fc33 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-aca3c7bb56 koji-1.25.0-1.fc33 10 https://bodhi.fedoraproject.org/updates/FEDORA-2021-cd029398ef mpfr-4.1.0-7.fc33 10 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b2b5636c1a livecd-tools-28.1-1.fc33 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-35759ad8d3 openssh-8.4p1-6.fc33 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa3657ac97 kmod-29-2.fc33 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-8917c5d9d2 exiv2-0.27.3-7.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e145f477df mingw-openjpeg2-2.3.1-12.fc33 openjpeg2-2.3.1-11.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-24dd0fa996 usbredir-0.10.0-1.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b02a75816e dracut-055-1.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fed63bd217 libxcrypt-4.4.22-1.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33 libreport-2.15.1-1.fc33 satyr-0.37-2.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a963f18434 libedit-3.1-37.20210522cvs.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-60d664e252 cryptsetup-2.3.6-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-38972822f4 elfutils-0.185-2.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b libxml2-2.9.12-4.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e2de9e9e55 selinux-policy-3.14.6-38.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bd6d71d113 osinfo-db-20210531-1.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-85149db388 nss-3.65.0-1.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb251919 mtools-4.0.29-1.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4bf6df75a0 net-snmp-5.9.1-2.fc33
The following builds have been pushed to Fedora 33 updates-testing
CGAL-5.1.4-1.fc33 aajohan-comfortaa-fonts-3.101-1.fc33 adwaita-qt-1.3.1-1.fc33 butt-0.1.30-1.fc33 compose-utils-0.1.45-1.fc33 crun-0.20-1.fc33 dnsperf-2.4.0-3.fc33 dnssec-trigger-0.17-2.fc33 elementary-planner-2.7-1.fc33 fernflower-211.7442.40-1.fc33 flamethrower-0.11.0-2.fc33 ghostscript-9.54.0-2.fc33 gjs-1.66.2-6.fc33 gns3-gui-2.2.21-1.fc33 gns3-server-2.2.21-1.fc33 golang-github-cenkalti-backoff-4.1.1-1.fc33 golang-github-certifi-gocertifi-0.0.20210429-1.fc33 golang-github-checkpoint-restore-criu-5.0.0-1.fc33 golang-github-coreos-systemd-22.3.2-1.fc33 httpd-2.4.48-1.fc33 hwdata-0.348-1.fc33 icecat-78.11.0-1.rh1.fc33 jasper-2.0.32-1.fc33 lasso-2.7.0-1.fc33 libolm-3.2.4-1.fc33 lorax-33.11-1.fc33 mariadb-connector-c-3.1.13-1.fc33 mod_auth_openidc-2.4.8.4-1.fc33 mozjs78-78.11.0-1.fc33 netresolve-0.0.1-0.29.20160317git.fc33 nginx-1.20.1-2.fc33 nodejs-packaging-2021.06-1.fc33 nordugrid-arc-6.11.0-1.fc33.1 php-7.4.20-1.fc33 python-ogr-0.25.0-1.fc33 python-ots-8.1.4-1.fc33 qgnomeplatform-0.8.0-1.fc33 qt5-qtwayland-5.15.2-7.fc33 redis-6.0.14-1.fc33 rofimoji-5.1.0-5.fc33 squid-4.15-1.fc33 the_silver_searcher-2.2.0^2020704.5a1c8d8-1.fc33 tmt-1.6.0-1.fc33 vim-fugitive-3.3-1.fc33 xpanes-4.1.3-1.fc33
Details about builds:
================================================================================ CGAL-5.1.4-1.fc33 (FEDORA-2021-1f600fa159) Computational Geometry Algorithms Library -------------------------------------------------------------------------------- Update Information:
[New upstream release](https://www.cgal.org/2021/06/02/cgal514/). -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Laurent Rineau laurent.rineau@cgal.org - 5.1.4-1 - New upstream release --------------------------------------------------------------------------------
================================================================================ aajohan-comfortaa-fonts-3.101-1.fc33 (FEDORA-2021-a0877f3442) Modern style true type font -------------------------------------------------------------------------------- Update Information:
New release 3.101 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 1 2021 Luya Tshimbalanga luya@fedoraproject.org - 3.101-1 - Update to 3.101 - New source url - Resolves rhbz#1966444 - Resolves rhbz#1966659 * Mon Jan 25 2021 Fedora Release Engineering releng@fedoraproject.org - 3.001-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ adwaita-qt-1.3.1-1.fc33 (FEDORA-2021-6ed512f48f) Adwaita theme for Qt-based applications -------------------------------------------------------------------------------- Update Information:
Adwaita-qt 1.3.1 release. QGnomePlatform 0.8.0 release. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Jan Grulich jgrulich@redhat.com - 1.3.1-1 - 1.3.1 * Wed Jun 2 2021 Jan Grulich jgrulich@redhat.com - 1.3.0-1 - 1.3.0 --------------------------------------------------------------------------------
================================================================================ butt-0.1.30-1.fc33 (FEDORA-2021-3898e06292) Broadcast using this tool -------------------------------------------------------------------------------- Update Information:
Latest upstream 0.1.30 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 31 2021 Carl George carl@george.computer - 0.1.30-1 - Latest upstream - Fixes: rhbz#1891773 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 0.1.24-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ compose-utils-0.1.45-1.fc33 (FEDORA-2021-154f351804) Utilities for working with composes -------------------------------------------------------------------------------- Update Information:
Fix compatibility with python3-productmd-1.33 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 31 2021 Lubom��r Sedl���� lsedlar@redhat.com - 0.1.45-1 - new release 0.1.45 - Resolves: rhbz#1965933 - clean up old conditionals * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 0.1.44-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ crun-0.20-1.fc33 (FEDORA-2021-756a40404f) OCI runtime written in C -------------------------------------------------------------------------------- Update Information:
bump to 0.20 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 0.20-1 - bump to 0.20 --------------------------------------------------------------------------------
================================================================================ dnsperf-2.4.0-3.fc33 (FEDORA-2021-87c18dd24d) Benchmarking authorative and recursing DNS servers -------------------------------------------------------------------------------- Update Information:
Update for broken ldns update [FEDORA-2021-eebc69f7ea](https://bodhi.fedoraproje ct.org/updates/FEDORA-2021-eebc69f7ea) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Petr Men����k pemensik@redhat.com - 2.4.0-3 - Rebuild for new ldns -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1909396 - F34FailsToInstall: netresolve-backends-aresdns, netresolve-backends-avahi, netresolve-backends-compat, netresolve-backends-ubdns, netresolve-compat, netresolve-core, netresolve-tools https://bugzilla.redhat.com/show_bug.cgi?id=1909396 --------------------------------------------------------------------------------
================================================================================ dnssec-trigger-0.17-2.fc33 (FEDORA-2021-87c18dd24d) Tool for dynamic reconfiguration of validating resolver Unbound -------------------------------------------------------------------------------- Update Information:
Update for broken ldns update [FEDORA-2021-eebc69f7ea](https://bodhi.fedoraproje ct.org/updates/FEDORA-2021-eebc69f7ea) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Petr Men����k pemensik@redhat.com - 0.17-2 - Rebuild for new ldns -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1909396 - F34FailsToInstall: netresolve-backends-aresdns, netresolve-backends-avahi, netresolve-backends-compat, netresolve-backends-ubdns, netresolve-compat, netresolve-core, netresolve-tools https://bugzilla.redhat.com/show_bug.cgi?id=1909396 --------------------------------------------------------------------------------
================================================================================ elementary-planner-2.7-1.fc33 (FEDORA-2021-93adb505ef) Task manager with Todoist support designed for GNU/Linux -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Artem Polishchuk ego.cordatus@gmail.com - 1:2.7-1 - build(update): 2.7 * Fri Feb 19 2021 Fabio Valentini decathorpe@gmail.com - 1:2.6.7-4 - Rebuilt for granite 6 soname bump. * Fri Feb 12 2021 Kalev Lember klember@redhat.com - 1:2.6.7-3 - Rebuilt for evolution-data-server soname bump * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 1:2.6.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ fernflower-211.7442.40-1.fc33 (FEDORA-2021-0cc3fb3c52) JIdea's java decompiler -------------------------------------------------------------------------------- Update Information:
Updated to latest version. Pathced a bit to still be jdk8 compatible -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Marian Koncek mkoncek@redhat.com - 211.7442.40-1 - Update to upstream version 211.7442.40 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 183.5153.8-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ flamethrower-0.11.0-2.fc33 (FEDORA-2021-87c18dd24d) A DNS performance and functional testing utility -------------------------------------------------------------------------------- Update Information:
Update for broken ldns update [FEDORA-2021-eebc69f7ea](https://bodhi.fedoraproje ct.org/updates/FEDORA-2021-eebc69f7ea) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Petr Men����k pemensik@redhat.com - 0.11.0-2 - Rebuild for new ldns -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1909396 - F34FailsToInstall: netresolve-backends-aresdns, netresolve-backends-avahi, netresolve-backends-compat, netresolve-backends-ubdns, netresolve-compat, netresolve-core, netresolve-tools https://bugzilla.redhat.com/show_bug.cgi?id=1909396 --------------------------------------------------------------------------------
================================================================================ ghostscript-9.54.0-2.fc33 (FEDORA-2021-738a7a9c2b) Interpreter for PostScript language & PDF -------------------------------------------------------------------------------- Update Information:
Added Obsoletes/Provides for old ghostscript-core (#1962993) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Richard Lescak rlescak@redhat.com - 9.54.0-2 - Added Obsoletes/Provides for old ghostscript-core (#1962993) * Fri May 14 2021 Richard Lescak rlescak@redhat.com - 9.54.0-1 - Update to version 9.54.0 (#1944755) * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 9.53.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1944755 - ghostscript-9.54.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1944755 [ 2 ] Bug #1962993 - dnf errors with ghostscript-9.54.0-1.fc34 https://bugzilla.redhat.com/show_bug.cgi?id=1962993 --------------------------------------------------------------------------------
================================================================================ gjs-1.66.2-6.fc33 (FEDORA-2021-65c3388877) Javascript Bindings for GNOME -------------------------------------------------------------------------------- Update Information:
- update to mozjs78-78.11.0: https://www.mozilla.org/en- US/firefox/78.11.0/releasenotes/ - gjs rebuild against new mozjs78 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Frantisek Zatloukal fzatlouk@redhat.com - 1.66.2-6 - Rebuild against mozjs78-78.11.0-1 --------------------------------------------------------------------------------
================================================================================ gns3-gui-2.2.21-1.fc33 (FEDORA-2021-f528c9be67) GNS3 graphical user interface -------------------------------------------------------------------------------- Update Information:
Update to gns3 2.2.21 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Nicolas Chauvet kwizart@gmail.com - 2.2.21-1 - Update to 2.2.21 --------------------------------------------------------------------------------
================================================================================ gns3-server-2.2.21-1.fc33 (FEDORA-2021-f528c9be67) Graphical Network Simulator 3 -------------------------------------------------------------------------------- Update Information:
Update to gns3 2.2.21 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Nicolas Chauvet kwizart@gmail.com - 2.2.21-1 - Update to 2.2.21 --------------------------------------------------------------------------------
================================================================================ golang-github-cenkalti-backoff-4.1.1-1.fc33 (FEDORA-2021-0322378a56) Exponential backoff algorithm in Go -------------------------------------------------------------------------------- Update Information:
Update to 4.1.1 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Robert-Andr�� Mauchin zebob.m@gmail.com - 4.1.1-1 - Update to 4.1.1 - Close: rhbz#1965931 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 4.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1965931 - golang-github-cenkalti-backoff-4.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1965931 --------------------------------------------------------------------------------
================================================================================ golang-github-certifi-gocertifi-0.0.20210429-1.fc33 (FEDORA-2021-c1c03ad931) Carefully curated collection of Root Certificates -------------------------------------------------------------------------------- Update Information:
Update to 0.0.20210429 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Robert-Andr�� Mauchin zebob.m@gmail.com - 0.0.20210429-1 - Update to 0.0.20210429 - Close: rhbz#1955625 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 0.0.20200922-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1955625 - golang-github-certifi-gocertifi-2021.04.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=1955625 --------------------------------------------------------------------------------
================================================================================ golang-github-checkpoint-restore-criu-5.0.0-1.fc33 (FEDORA-2021-468fa00b53) Go Bindings for CRIU -------------------------------------------------------------------------------- Update Information:
Update to 5.0.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Robert-Andr�� Mauchin zebob.m@gmail.com - 5.0.0-1 - Update to 5.0.0 - Close: rhbz#1933461 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 4.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1933461 - golang-github-checkpoint-restore-criu-5.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1933461 --------------------------------------------------------------------------------
================================================================================ golang-github-coreos-systemd-22.3.2-1.fc33 (FEDORA-2021-9d54cf3be3) Go bindings to systemd socket activation, journal, D-Bus, and unit files -------------------------------------------------------------------------------- Update Information:
Update to 22.3.2 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Robert-Andr�� Mauchin zebob.m@gmail.com - 22.3.2-1 - Update to 22.3.2 - Close: rhbz#1934527 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 22.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1934527 - golang-github-coreos-systemd-22.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1934527 --------------------------------------------------------------------------------
================================================================================ httpd-2.4.48-1.fc33 (FEDORA-2021-efa8eb2e55) Apache HTTP Server -------------------------------------------------------------------------------- Update Information:
- new version 2.4.48 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Lubo�� Uhliarik luhliari@redhat.com - 2.4.48-1 - new version 2.4.48 - Resolves: #1964746 - httpd-2.4.48 is available -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1964746 - httpd-2.4.48 is available https://bugzilla.redhat.com/show_bug.cgi?id=1964746 --------------------------------------------------------------------------------
================================================================================ hwdata-0.348-1.fc33 (FEDORA-2021-5095433f1e) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information:
Update pci, usb and vendor ids -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Vitezslav Crhonek vcrhonek@redhat.com - 0.348-1 - Update pci, usb and vendor ids --------------------------------------------------------------------------------
================================================================================ icecat-78.11.0-1.rh1.fc33 (FEDORA-2021-a3bf01c31d) GNU version of Firefox browser -------------------------------------------------------------------------------- Update Information:
- Release 78.11.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 1 2021 Antonio Trande sagitter@fedoraproject.org - 78.11.0-1.rh1 - Release 78.11.0 * Fri May 7 2021 Antonio Trande sagitter@fedoraproject.org - 78.10.1-2.rh1 - Hide DRM Content option in Preference -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1953221 - Cloudflare: Infinite loop. https://bugzilla.redhat.com/show_bug.cgi?id=1953221 --------------------------------------------------------------------------------
================================================================================ jasper-2.0.32-1.fc33 (FEDORA-2021-9a005b5bf4) Implementation of the JPEG-2000 standard, Part 1 -------------------------------------------------------------------------------- Update Information:
New upstream release 2.0.32 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Josef Ridky jridky@redhat.com - 2.0.32-1 - New upstream release 2.0.32 (#1950621) * Tue Mar 30 2021 Josef Ridky jridky@redhat.com - 2.0.28-1 - New upstream release 2.0.28 (#1944481) * Wed Mar 24 2021 Josef Ridky jridky@redhat.com - 2.0.27-1 - New upstream release 2.0.27 (#1940455) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1950621 - jasper-2.0.32 is available https://bugzilla.redhat.com/show_bug.cgi?id=1950621 --------------------------------------------------------------------------------
================================================================================ lasso-2.7.0-1.fc33 (FEDORA-2021-508acb1153) Liberty Alliance Single Sign On -------------------------------------------------------------------------------- Update Information:
CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Jakub Hrozek jhrozek@redhat.com - 2.7.0 - Lasso 2.7.0 - https://listes.entrouvert.com/arc/lasso/2021-06/msg00000.html - don't package java bindings as they are not maintained upstream anymore and there seem to be no users - Resolves: rhbz#1966607 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses * Sun May 23 2021 Jitka Plesnikova jplesnik@redhat.com - 2.6.1-9 - Perl 5.34 rebuild * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 2.6.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Thu Aug 13 2020 Jakub Hrozek jhrozek@redhat.com - 2.6.1-7 - Temporarily build with OpenJDK 8 - upstream ticket for OpenJDK11 support: https://dev.entrouvert.org/issues/45876 * Fri Aug 7 2020 Jeff Law law@redhat.com - 2.6.1-6 - Revert last change. I lost the patchfile and I can't reproduce the gcc-11 problem which almost certainly prompted it * Fri Aug 7 2020 Jeff Law law@redhat.com - 2.6.1-5 - Fix format string problem * Sat Aug 1 2020 Fedora Release Engineering releng@fedoraproject.org - 2.6.1-4 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering releng@fedoraproject.org - 2.6.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Fri Jul 10 2020 Jiri Vanek jvanek@redhat.com - 2.6.1-2 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1940089 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses https://bugzilla.redhat.com/show_bug.cgi?id=1940089 --------------------------------------------------------------------------------
================================================================================ libolm-3.2.4-1.fc33 (FEDORA-2021-7794bc6e33) Double Ratchet cryptographic library -------------------------------------------------------------------------------- Update Information:
Updated to version 3.2.4. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Vitaly Zaitsev vitaly@easycoding.org - 3.2.4-1 - Updated to version 3.2.4. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1966715 - libolm-3.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1966715 --------------------------------------------------------------------------------
================================================================================ lorax-33.11-1.fc33 (FEDORA-2021-d9ea48fdbb) Tool for creating the anaconda install images -------------------------------------------------------------------------------- Update Information:
- Add a context manager for dracut (bcl@redhat.com) Resolves: rhbz#1962975 - live/x86.tmpl: Copy livecd-iso-to-disk script, if installed (david.ward@ll.mit.edu) - templates: Copy license files from the correct path (david.ward@ll.mit.edu) - New lorax documentation - 33.10 (bcl@redhat.com) -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 1 2021 Brian C. Lane bcl@redhat.com 33.11-1 - Add a context manager for dracut (bcl@redhat.com) Resolves: rhbz#1962975 - live/x86.tmpl: Copy livecd-iso-to-disk script, if installed (david.ward@ll.mit.edu) - templates: Copy license files from the correct path (david.ward@ll.mit.edu) - New lorax documentation - 33.10 (bcl@redhat.com) --------------------------------------------------------------------------------
================================================================================ mariadb-connector-c-3.1.13-1.fc33 (FEDORA-2021-fa2ef886a2) The MariaDB Native Client library (C driver) -------------------------------------------------------------------------------- Update Information:
**MariaDB connector C/C++** Release notes: https://mariadb.com/kb/en/mariadb-connector-c-3113-release-notes/ -------------------------------------------------------------------------------- ChangeLog:
* Fri May 14 2021 Michal Schorm mschorm@redhat.com - 3.1.13-1 - Rebase to 3.1.13 --------------------------------------------------------------------------------
================================================================================ mod_auth_openidc-2.4.8.4-1.fc33 (FEDORA-2021-cc85f79f63) OpenID Connect auth module for Apache HTTP Server -------------------------------------------------------------------------------- Update Information:
1965325 - CVE-2021-20718 mod_auth_openidc: DoS in oidc_util_read_post_params() in util.c -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Jakub Hrozek jhrozek@redhat.com - 2.4.8.3-1 - New upstream release - Resolves: rhbz#1966756 - mod_auth_openidc-2.4.8.3 is available * Mon May 10 2021 Jakub Hrozek jhrozek@redhat.com - 2.4.8.2-1 - New upstream release - Resolves: rhbz#1958466 - mod_auth_openidc-2.4.8.2 is available * Thu May 6 2021 Jakub Hrozek jhrozek@redhat.com - 2.4.7.2-1 - New upstream release - Resolves: rhbz#1900913 - mod_auth_openidc-2.4.7.2 is available * Fri Apr 30 2021 Tomas Halman thalman@redhat.com - 2.4.4.1-3 - Remove unnecessary LTO patch * Fri Feb 26 2021 Jakub Hrozek jhrozek@redhat.com - 2.4.4.1-1 - Temporarily disable check to get around a FTBFS issue (#1923374) * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 2.4.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Fri Sep 4 2020 Jakub Hrozek jhrozek@redhat.com - 2.4.4.1-1 - New upstream version 2.4.4.1 * Tue Sep 1 2020 Jakub Hrozek jhrozek@redhat.com - 2.4.4-1 - New upstream version 2.4.4 * Thu Aug 27 2020 Joe Orton jorton@redhat.com - 2.4.3-5 - update to use correct apxs via _httpd_apxs macro * Thu Aug 27 2020 Joe Orton jorton@redhat.com - 2.4.3-4 - work around LTO build failure -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1965324 - CVE-2021-20718 mod_auth_openidc: DoS in oidc_util_read_post_params() in util.c https://bugzilla.redhat.com/show_bug.cgi?id=1965324 --------------------------------------------------------------------------------
================================================================================ mozjs78-78.11.0-1.fc33 (FEDORA-2021-65c3388877) SpiderMonkey JavaScript library -------------------------------------------------------------------------------- Update Information:
- update to mozjs78-78.11.0: https://www.mozilla.org/en- US/firefox/78.11.0/releasenotes/ - gjs rebuild against new mozjs78 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Frantisek Zatloukal fzatlouk@redhat.com - 78.11.0-1 - Update to 78.11.0 --------------------------------------------------------------------------------
================================================================================ netresolve-0.0.1-0.29.20160317git.fc33 (FEDORA-2021-87c18dd24d) Generic name resolution library -------------------------------------------------------------------------------- Update Information:
Update for broken ldns update [FEDORA-2021-eebc69f7ea](https://bodhi.fedoraproje ct.org/updates/FEDORA-2021-eebc69f7ea) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Petr Men����k pemensik@redhat.com - 0.0.1-0.29.20160317git - Rebuild for new ldns -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1909396 - F34FailsToInstall: netresolve-backends-aresdns, netresolve-backends-avahi, netresolve-backends-compat, netresolve-backends-ubdns, netresolve-compat, netresolve-core, netresolve-tools https://bugzilla.redhat.com/show_bug.cgi?id=1909396 --------------------------------------------------------------------------------
================================================================================ nginx-1.20.1-2.fc33 (FEDORA-2021-b37cffac0d) A high performance web server and reverse proxy server -------------------------------------------------------------------------------- Update Information:
Fix log permissions issue ---- Security: 1-byte memory overwrite might occur during DNS server response processing if the "resolver" directive was used, allowing an attacker who is able to forge UDP packets from the DNS server to cause worker process crash or, potentially, arbitrary code execution (CVE-2021-23017). -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 1 2021 Felix Kaechele heffer@fedoraproject.org - 1:1.20.1-2 - use different fix for rhbz#1683388 as it introduced permissions issues in 1:1.20.0-2 * Tue May 25 2021 Felix Kaechele heffer@fedoraproject.org - 1:1.20.1-1 - update to 1.20.1 (fixes CVE-2021-23017) * Fri May 21 2021 Jitka Plesnikova jplesnik@redhat.com - 1:1.20.0-4 - Perl 5.34 rebuild * Fri Apr 30 2021 Lubos Uhliarik luhliari@redhat.com - 1:1.20.0-3 - Related: #1636235 - centralizing default index.html on nginx -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1964820 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1964820 [ 2 ] Bug #1966367 - nginx doesn't reopen the log file https://bugzilla.redhat.com/show_bug.cgi?id=1966367 --------------------------------------------------------------------------------
================================================================================ nodejs-packaging-2021.06-1.fc33 (FEDORA-2021-69c55ffcd7) RPM Macros and Utilities for Node.js Packaging -------------------------------------------------------------------------------- Update Information:
## Update to 2021.06 * bundler: Handle archaic license metadata * bundler: Warn about bundled dependencies with no license metadata -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Stephen Gallagher sgallagh@redhat.com - 2021.06-1 - Update to 2021.06-1 - bundler: Handle archaic license metadata - bundler: Warn about bundled dependencies with no license metadata * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 2021.01-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1920206 - Bundler script should handle license objects https://bugzilla.redhat.com/show_bug.cgi?id=1920206 [ 2 ] Bug #1920223 - Bundler script should flag null licenses for manual review https://bugzilla.redhat.com/show_bug.cgi?id=1920223 --------------------------------------------------------------------------------
================================================================================ nordugrid-arc-6.11.0-1.fc33.1 (FEDORA-2021-6f1a3d4510) Advanced Resource Connector Middleware -------------------------------------------------------------------------------- Update Information:
rebuilt for ldns so bump -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Paul Wouters paul.wouters@aiven.io - 6.11.0-1.1 - rebuilt for ldns so bump --------------------------------------------------------------------------------
================================================================================ php-7.4.20-1.fc33 (FEDORA-2021-09af51fc26) PHP scripting language for creating dynamic web sites -------------------------------------------------------------------------------- Update Information:
**PHP version 7.4.20** (03 Jun 2021) **Core:** * Fixed bug php#80929 (Method name corruption related to repeated calls to call_user_func_array). (twosee) * Fixed bug php#80960 (opendir() warning wrong info when failed on Windows). (cmb) * Fixed bug php#67792 (HTTP Authorization schemes are treated as case- sensitive). (cmb) * Fixed bug php#80972 (Memory exhaustion on invalid string offset). (girgias) **FPM:** * Fixed bug php#65800 (Events port mechanism). (psumbera) **FTP:** * Fixed bug php#80901 (Info leak in ftp extension). (cmb) * Fixed bug php#79100 (Wrong FTP error messages). (cmb) **GD:** * Fixed bug php#81032 (GD install is affected by external libgd installation). (Flavio Heleno, cmb) **MBString:** * Fixed bug php#81011 (mb_convert_encoding removes references from arrays). (cmb) **ODBC:** * Fixed bug php#80460 (ODBC doesn't account for SQL_NO_TOTAL indicator). (cmb) **PDO_MySQL:** * Fixed bug php#81037 (PDO discards error message text from prepared statement). (Kamil Tekiela) **PDO_ODBC:** * Fixed bug php#44643 (bound parameters ignore explicit type definitions). (cmb) **pgsql:** * Fixed php_pgsql_fd_cast() wrt. php_stream_can_cast(). (cmb) **SPL:** * Fixed bug php#80933 (SplFileObject::DROP_NEW_LINE is broken for NUL and CR). (cmb, Nikita) **Opcache:** * Fixed bug php#80900 (switch statement behavior inside function). (twosee) * Fixed bug php#81015 (Opcache optimization assumes wrong part of ternary operator in if-condition). (Nikita) **XMLReader:** * Fixed bug php#73246 (XMLReader: encoding length not checked). (cmb) **Zip:** * Fixed bug php#80863 (ZipArchive::extractTo() ignores references). (cmb) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Remi Collet remi@remirepo.net - 7.4.20-1 - Update to 7.4.20 - http://www.php.net/releases/7_4_20.php --------------------------------------------------------------------------------
================================================================================ python-ogr-0.25.0-1.fc33 (FEDORA-2021-9686156afa) One API for multiple git forges -------------------------------------------------------------------------------- Update Information:
New upstream release: 0.25.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 1 2021 Packit Service user-cont-team+packit-service@redhat.com - 0.25.0-1 - Add support for listing of projects in GitLab and Github (by our external contributor [@abkosar](https://github.com/abkosar)) --------------------------------------------------------------------------------
================================================================================ python-ots-8.1.4-1.fc33 (FEDORA-2021-d35bfa99b3) Python wrapper for the OpenType Sanitizer -------------------------------------------------------------------------------- Update Information:
Initial package -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1964425 - Review Request: python-ots - Python wrapper for the OpenType Sanitizer https://bugzilla.redhat.com/show_bug.cgi?id=1964425 --------------------------------------------------------------------------------
================================================================================ qgnomeplatform-0.8.0-1.fc33 (FEDORA-2021-6ed512f48f) Qt Platform Theme aimed to accommodate Gnome settings -------------------------------------------------------------------------------- Update Information:
Adwaita-qt 1.3.1 release. QGnomePlatform 0.8.0 release. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Jan Grulich jgrulich@redhat.com - 0.8.0-1 - 0.8.0 --------------------------------------------------------------------------------
================================================================================ qt5-qtwayland-5.15.2-7.fc33 (FEDORA-2021-6ed512f48f) Qt5 - Wayland platform support and QtCompositor module -------------------------------------------------------------------------------- Update Information:
Adwaita-qt 1.3.1 release. QGnomePlatform 0.8.0 release. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Jan Grulich jgrulich@redhat.com - 5.15.2-7 - Client: expose toplevel window state (change from Qt6) --------------------------------------------------------------------------------
================================================================================ redis-6.0.14-1.fc33 (FEDORA-2021-0ad4bec5b1) A persistent key-value database -------------------------------------------------------------------------------- Update Information:
**Redis 6.0.14** - Released Tue June 1 12:00:00 IST 2021 Upgrade urgency: SECURITY, Contains fixes to security issues that affect authenticated client connections. MODERATE otherwise. Fix integer overflow in STRALGO LCS (**CVE-2021-32625**) An integer overflow bug in Redis version 6.0 or newer can be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. Other bug fixes: * Fix crash in UNLINK on a stream key with deleted consumer groups (#8932) * SINTERSTORE: Add missing keyspace del event when none of the sources exist (#8949) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Remi Collet remi@remirepo.net - 6.0.14-1 - Upstream 6.0.14 release. --------------------------------------------------------------------------------
================================================================================ rofimoji-5.1.0-5.fc33 (FEDORA-2021-31c566a3df) A character picker for rofi ���� -------------------------------------------------------------------------------- Update Information:
First rofimoji packages for Fedora 33 and 34. ���� -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1961783 - Review Request: rofimoji - A character picker for rofi https://bugzilla.redhat.com/show_bug.cgi?id=1961783 --------------------------------------------------------------------------------
================================================================================ squid-4.15-1.fc33 (FEDORA-2021-24af72ff2c) The Squid proxy caching server -------------------------------------------------------------------------------- Update Information:
- version update - security update -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Lubo�� Uhliarik luhliari@redhat.com - 7:4.15-1 - new version 4.15 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1939940 - CVE-2021-28116 squid: out-of-bounds read in WCCP protocol data may lead to information disclosure [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939940 [ 2 ] Bug #1959538 - CVE-2021-33620 squid: denial of service in HTTP response processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1959538 [ 3 ] Bug #1962596 - CVE-2021-31806 squid: improper input validation in HTTP Range header [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1962596 [ 4 ] Bug #1962598 - CVE-2021-31807 squid: incorrect memory management may lead to DoS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1962598 [ 5 ] Bug #1962600 - CVE-2021-31808 squid: an integer overflow may lead to a DoS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1962600 [ 6 ] Bug #1963363 - CVE-2021-28652 squid: denial of service issue in Cache Manager [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1963363 [ 7 ] Bug #1963381 - CVE-2021-28662 squid: denial of service in HTTP response processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1963381 [ 8 ] Bug #1963391 - CVE-2021-28651 squid: denial of service in URN processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1963391 --------------------------------------------------------------------------------
================================================================================ the_silver_searcher-2.2.0^2020704.5a1c8d8-1.fc33 (FEDORA-2021-882a674dab) Super-fast text searching tool (ag) -------------------------------------------------------------------------------- Update Information:
- Switch to caret versioning - Build against system uthash - Add patch for zsh completion of new flags -------------------------------------------------------------------------------- ChangeLog:
* Fri May 28 2021 Carl George carl@george.computer - 2.2.0^2020704.5a1c8d8-1 - Switch to caret versioning - Build against system uthash - Add patch for zsh completion of new flags * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 2.2.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ tmt-1.6.0-1.fc33 (FEDORA-2021-5db45239d4) Test Management Tool -------------------------------------------------------------------------------- Update Information:
Debuginfo install, pass environment, obsolete minute... -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Petr ��pl��chal psplicha@redhat.com - 1.6.0-1 - Adjust the new plugin documentation - Add plugin examples and documentation - Ensure that the discover git reference is a string - Report plugin for JUnit output - Fix issue when raising error for NoneType - Print better error when nitrate testcase not found. - Use `count=True` for multiple flag options - Add option to explicitly use default plan - Adjust debuginfo installation, add test coverage - Use debuginfo-install for installing debuginfos - Update the documentation based on refactoring - Implement tmt story lint - Refactor Node class to Core - Correctly handle spaces in file/directory names - Hand over plan environment during local execution - Do not execute manual test cases - Fix option handling for plugins with common prefix - Propagate options to guests based on the step - Support fetching libraries from a local directory - Add a simple example of a test written in ansible - Pass environment variables to ansible (local) - Pass environment variables to ansible (virtual) - Adjust warning for extra lines in Makefile targets - Add test import warning for run and build targets - Enable a few more pre-commit hooks, sort imports - Give a warning about the obsoleted minute plugin - Clarify adjust dependency on explicit context - Fix the EPEL installation instructions - Adjust the new list options for the minute plugin - New print method, used now in minute plugin - Implement listing available minute images/flavors - Update default option values for verbose and debug - Avoid creating workdir on --help - Do not keep run workdir during testing - Clean up the code style, remove the vagrant plugin --------------------------------------------------------------------------------
================================================================================ vim-fugitive-3.3-1.fc33 (FEDORA-2021-e9150dd094) A Git wrapper so awesome, it should be illegal -------------------------------------------------------------------------------- Update Information:
Latest upstream 3.3 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 31 2021 Carl George carl@george.computer - 3.3-1 - Latest upstream * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 3.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ xpanes-4.1.3-1.fc33 (FEDORA-2021-1e1a13ecbd) Awesome tmux-based terminal divider -------------------------------------------------------------------------------- Update Information:
Latest upstream 4.1.3 -------------------------------------------------------------------------------- ChangeLog:
* Mon May 31 2021 Carl George carl@george.computer - 4.1.3-1 - Latest upstream * Thu Jan 28 2021 Fedora Release Engineering releng@fedoraproject.org - 4.1.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------