The following Fedora 33 Security updates need testing: Age URL 185 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1 13 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa0e94198f openssh-8.4p1-8.fc33 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-0b7a484688 xen-4.14.3-2.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ae829e54ab httpd-2.4.51-1.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-7ff1c8680d libopenmpt-0.4.24-1.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c24b515a72 firefox-93.0-2.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c737bb848 gfbgraph-0.2.4-1.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-449a2bdaf3 rust-coreos-installer-0.10.1-2.fc33
The following Fedora 33 Critical Path updates have yet to be approved: Age URL 204 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb PackageKit-1.2.3-1.fc33 139 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33 libreport-2.15.1-1.fc33 satyr-0.37-2.fc33 55 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4ccf3840ed gnome-shell-3.38.6-1.fc33 mutter-3.38.6-1.fc33 13 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa0e94198f openssh-8.4p1-8.fc33 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-ac6363ae65 gdb-10.2-3.fc33 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-66109fb131 audit-3.0.6-1.fc33 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-77ae3066b2 gnome-software-3.38.2-4.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b61d7caf9e gjs-1.66.2-10.fc33 mozjs78-78.15.0-1.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1742d200f1 hwdata-0.352-1.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5a3272b373 pungi-4.3.0-2.fc33 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4208f76b26 nss-3.71.0-1.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-50faf017ce bc-1.07.1-14.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c24b515a72 firefox-93.0-2.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b48e0d8cb tzdata-2021c-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5d0f71681e btrfs-progs-5.14.2-1.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-269ba2a5f1 perl-Encode-3.08-461.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-edc35b2812 koji-1.26.1-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
Zim-0.74.2-1.fc33 borgmatic-1.5.20-1.fc33 ddccontrol-db-20210812-1.fc33 fillets-ng-data-1.0.1-16.fc33 flatpak-1.10.5-1.fc33 osbuild-composer-36-1.fc33 ovn-21.09.0-3.fc33 php-laminas-view-2.12.1-1.fc33 pomchecker-1.2.0-1.fc33 purple-facebook-0.9.6-10.fc33 python-virtualenv-20.0.30-2.fc33 python3.11-3.11.0~a1-1.fc33 reflections-0.9.12-8.fc33 rhino-1.7.13-6.fc33 vim-syntastic-3.10.0-13.fc33 wireshark-3.4.9-1.fc33
Details about builds:
================================================================================ Zim-0.74.2-1.fc33 (FEDORA-2021-8c8415de50) Desktop wiki & notekeeper -------------------------------------------------------------------------------- Update Information:
New upstream release https://lists.launchpad.net/zim-wiki/msg05159.html -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Robin Lee cheeselee@fedoraproject.org 0.74.2-1 - Update to 0.74.2 --------------------------------------------------------------------------------
================================================================================ borgmatic-1.5.20-1.fc33 (FEDORA-2021-a16aeefe53) Simple Python wrapper script for borgbackup -------------------------------------------------------------------------------- Update Information:
- [#387](https://projects.torsion.org/borgmatic- collective/borgmatic/issues/387): Fix error when configured source directories are not present on the filesystem at the time of backup. Now, Borg will complain, but the backup will still continue. - [#455](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/455): Mention changing borgmatic path in cron documentation. - Update sample systemd service file with more granular read-only filesystem settings. -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 11 2021 Felix Kaechele felix@kaechele.ca - 1.5.20-1 - update to 1.5.20 --------------------------------------------------------------------------------
================================================================================ ddccontrol-db-20210812-1.fc33 (FEDORA-2021-efb1d54bca) DDC/CI control database for ddccontrol -------------------------------------------------------------------------------- Update Information:
This is new version of ddccontrol-db. -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Jaroslav ��karvada jskarvad@redhat.com - 20210812-1 - New version Resolves: rhbz#2013474 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2013474 - ddccontrol-db-20210812 is available https://bugzilla.redhat.com/show_bug.cgi?id=2013474 --------------------------------------------------------------------------------
================================================================================ fillets-ng-data-1.0.1-16.fc33 (FEDORA-2021-83eed60041) Game data files for Fish Fillets Next Generation -------------------------------------------------------------------------------- Update Information:
Added patch that fixes crash when loading the "Warcraft" room -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Nikolay Nikolov nickysn@gmail.com - 1.0.1-16 - Added patch that fixes crash when loading the "Warcraft" room * Wed Jul 21 2021 Fedora Release Engineering releng@fedoraproject.org - 1.0.1-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri May 21 2021 Nikolay Nikolov nickysn@gmail.com - 1.0.1-14 - Replaced macros beginning with two underscores __ with actual binaries - Removed obsolete obsoletes tag - Use fontconfig to create symlinks to fonts -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2013131 - invalid escape sequence https://bugzilla.redhat.com/show_bug.cgi?id=2013131 --------------------------------------------------------------------------------
================================================================================ flatpak-1.10.5-1.fc33 (FEDORA-2021-c5a9c85737) Application deployment framework for desktop apps -------------------------------------------------------------------------------- Update Information:
Update to 1.10.5 * Fix CVE-2021-41133 -------------------------------------------------------------------------------- ChangeLog:
* Fri Oct 8 2021 David King amigadave@amigadave.com - 1.10.5-1 - Update to 1.10.5 * Fri Oct 8 2021 David King amigadave@amigadave.com - 1.10.4-1 - Update to 1.10.4 (#2012246) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2012245 - CVE-2021-41133 flatpak: sandbox bypass via recent VFS-manipulating syscalls https://bugzilla.redhat.com/show_bug.cgi?id=2012245 --------------------------------------------------------------------------------
================================================================================ osbuild-composer-36-1.fc33 (FEDORA-2021-f80b31df19) An image building service based on osbuild -------------------------------------------------------------------------------- Update Information:
Update osbuild-composer to the latest version -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Packit Service user-cont-team+packit-service@redhat.com - 36-1 - 36 (Achilleas Koutsou) - Revert "cloudapi/v1: Move depsolving to workers" (Sanne Raymaekers) - worker: Prefix https always (sanne) - cloudapi/v1: Move depsolving to workers (sanne) - cloudapi/v2: fix newV2Server() call in test (Achilleas Koutsou) - templates: Name service ports (sanne) - SPEC: Exclude `armv7hl` architecture (Tomas Hozza) - distro/rhel90 -> distro/rhel90beta: rename package (Achilleas Koutsou) - distro/rhel90: rename to rhel-90-beta and alias base name (Achilleas Koutsou) - spec: Split dnf-json into a subpackage (sanne) - cloudapi/v2: Use worker to depsolve (Ond��ej Budai) - worker: Add a depsolve job type (Tom Gundersen) - packit: Push downstream instead of creating PR (Simon Steinbeiss) - templates: Name services after endpoints (sanne) - worker: Make BasePath configurable (sanne) - cloudapi/v2: Listen on /api/image-builder-composer/v2 (sanne) - test/ostree: remove --ip-range from podman network (Achilleas Koutsou) - RHEL-8.6: add support for official EC2 SAP image (Tomas Hozza) - tools/provision: set up nightly repos for RHEL 8.6 (Achilleas Koutsou) - test/cases: add support for RHEL 8.6 to test scripts (Achilleas Koutsou) - schutzbot: pin osbuild to current main for 8.6 (Achilleas Koutsou) - schutzbot: update terraform sha (Achilleas Koutsou) - news: add entry about RHEL 8.6 (Achilleas Koutsou) - test: add RHEL 8.6 test manifests (Achilleas Koutsou) - test: add rpmrepo snapshots for RHEL 8.6 (Achilleas Koutsou) - ci: run all tests on RHEL 8.6 (Achilleas Koutsou) - test/data/repositories: add test repos for rhel-86 (Achilleas Koutsou) - distro/rhel85: remove rhel86 alias (Achilleas Koutsou) - distro/rhel86: copy all definitions from rhel85 (Achilleas Koutsou) - cloudapi/v2: Configurable aws bucket (sanne) - cloudapi/v2: Replace upload types with image types (sanne) - Tests/RHEL-9.0: add EC2 SAP image test (Tomas Hozza) - Tests/RHEL-9.0: add repos needed for EC2 SAP image tests (Tomas Hozza) - RHEL-9.0: add EC2 SAP image definition. (Tomas Hozza) - Tests/RHEL-9.0: add EC2 and EC2 HA image tests (Tomas Hozza) - Tests/RHEL-9.0: add repos needed for EC2 and EC2 HA image tests (Tomas Hozza) - Image tests: skip rpm-ostree-1-autovar.conf tmpfiles.d config on Fedora (Tomas Hozza) - composer: Don't dump sensitive fields from config (sanne) - tests: Update image_tests (Jakub Rusz) - templates: Duplicate value in composer config (sanne) - templates: Port names should be less than 15 characters (sanne) - templates: Make sure ports are unquoted (sanne) - cloudapi/v1: Return status created in compose handler (sanne) - worker: Use Recover middleware to handle panics (Diaa Sami) - worker: Improve logging (Diaa Sami) - Regenerate affected image test cases (Tomas Hozza) - generate-all-test-cases: allow specifying additional DNF repos (Tomas Hozza) - image-info: ensure that directory is analysed as read-only (Tomas Hozza) - tests: enable koji.sh test on RHEL-9 (Jakub Rusz) - tests/ci: enable vmware.sh and cross-distro.sh on rhel-9 (Jakub Rusz) - README: Add a link to our developer guide (Simon Steinbeiss) - templates: Composer OSD template (sanne) - internal/rpmmd: log repository files loaded during composer startup (Martin Sehnoutka) - dnf-json: expire metadata by default (Tom Gundersen) - schutzbot: Clean up non-default storage accounts (sanne) - main: IsNotExist() is no longer a valid check (Achilleas Koutsou) - config: update NonExisting test to check for default (Achilleas Koutsou) - config: don't fail LoadConfig if file doesn't exist (Achilleas Koutsou) - Test: regenerate all image test cases (Tomas Hozza) - Image tests: use RPMRepo with released RHEL-8.4 content (Tomas Hozza) - image-info: fix undefined variable in analyse_directory() (Tomas Hozza) - image-info: sort partitions list in the report. (Tomas Hozza) - image-info: use subprocess_check_output() in read_selinux_ctx_mismatch() (Tomas Hozza) - image-info: check not installed documentation (Tomas Hozza) - image-info: read content of /etc/resolv.conf (Tomas Hozza) - image-info: read sysctl.d config files from multiple paths (Tomas Hozza) - image-info: read security limits config files from multiple paths (Tomas Hozza) - image-info: read tmpfiles.d config files from multiple paths (Tomas Hozza) - image-info: read systemd service unit drop-ins from multiple paths (Tomas Hozza) - image-info: read cloud-init configs from multiple paths (Tomas Hozza) - image-info: read systemd-logind configs from multiple paths (Tomas Hozza) - image-info: read dracut configs from multiple paths (Tomas Hozza) - image-info: read modprobe configs from multiple paths (Tomas Hozza) - composer: More configuration of how composer is served (sanne) --------------------------------------------------------------------------------
================================================================================ ovn-21.09.0-3.fc33 (FEDORA-2021-8ed3aac4de) Open Virtual Network support -------------------------------------------------------------------------------- Update Information:
Backported the patches: ---- Synced with OVN upstream commit 98c6c04fb7cd731e26b96b53d59fe949b9ec06bc -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Numan Siddique numans@ovn.org - 21.09.0-3 - Backported the patches: - 855fb576af2("northd: Fix typo, from destroy_router_enternal_ips to destroy_router_external_ips.") - beed00c9206("northd: Always generate valid load balancer address set names.") * Wed Oct 6 2021 Numan Siddique numans@ovn.org - 21.09.0-2 - Synced with OVN upstream commit 98c6c04fb7cd731e26b96b53d59fe949b9ec06bc * Wed Oct 6 2021 Numan Siddique numans@ovn.org - 21.09.0-1 - Synced with the upstream release v21.09.0 --------------------------------------------------------------------------------
================================================================================ php-laminas-view-2.12.1-1.fc33 (FEDORA-2021-af437597c1) Laminas Framework View component -------------------------------------------------------------------------------- Update Information:
**Version 2.12.1** Bug, Documentation * 78: Fix Markdown Formatting for CI Round 2 thanks to @gsteel and @Ocramius * 74: Correctly attach Json Strategy. thanks to @nafetsrybak Bug * 70: Update Composer lock file and fix test failures thanks to @gsteel * 66: Missing dev dependencies causing tests to fail thanks to @gsteel Bug, Enhancement * 69: Fix CI pipeline according to newer test dependency requirements thanks to @Ocramius Enhancement * 67: Switch to GHA CI Setup thanks to @gsteel * 64: Fix tests without assertions thanks to @gsteel -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Remi Collet remi@remirepo.net - 2.12.1-1 - update to 2.12.1 --------------------------------------------------------------------------------
================================================================================ pomchecker-1.2.0-1.fc33 (FEDORA-2021-2f3c47b52f) POM syntax checker -------------------------------------------------------------------------------- Update Information:
Initial package -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ purple-facebook-0.9.6-10.fc33 (FEDORA-2021-b5a35a16e2) Facebook protocol plugin for purple2 -------------------------------------------------------------------------------- Update Information:
- Update Patch2 to fix Failed to read thrift / assertion 'id == 2' failed. See: https://github.com/dequis/purple-facebook/commit/1a6711f83d62 -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Bj��rn Esser besser82@fedoraproject.org - 0.9.6-10 - Update Patch2 to fix Failed to read thrift / assertion 'id == 2' failed See: https://github.com/dequis/purple-facebook/commit/1a6711f83d62 * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 0.9.6-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 0.9.6-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ python-virtualenv-20.0.30-2.fc33 (FEDORA-2021-97fccb58b1) Tool to create isolated Python environments -------------------------------------------------------------------------------- Update Information:
Introduce Python 3.11.0a1 and hotpatch virtualenv to work with it. -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 6 2021 Miro Hron��ok mhroncok@redhat.com - 20.0.30-2 - Remove /local/ part from virtualenv paths - Fixes rhbz#2011455 --------------------------------------------------------------------------------
================================================================================ python3.11-3.11.0~a1-1.fc33 (FEDORA-2021-97fccb58b1) Version 3.11 of the Python interpreter -------------------------------------------------------------------------------- Update Information:
Introduce Python 3.11.0a1 and hotpatch virtualenv to work with it. -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ reflections-0.9.12-8.fc33 (FEDORA-2021-766c3a0d39) Java run-time meta-data analysis -------------------------------------------------------------------------------- Update Information:
Automatic update for reflections ``` Changelog * Mon Oct 11 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 0.9.12-8 - Use macros: javadoc_package, autosetup, url - Remove BRs: jsr305, slf4j-api, slf4j-simple - Don't remove jar in test source directory ``` Automatic update for rhino ``` * Mon Oct 11 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-6 - Add requires: javapackages-tools - Fix manifest attributes ``` -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 11 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 0.9.12-8 - Use macros: javadoc_package, autosetup, url - Remove BRs: jsr305, slf4j-api, slf4j-simple - Don't remove jar in test source directory * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 0.9.12-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jun 11 2021 S��rgio Basto sergio@serjux.com - 0.9.12-6 - Drop BR java-atk-wrapper to let java-atk-wrapper be retired https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/... * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 0.9.12-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rhino-1.7.13-6.fc33 (FEDORA-2021-766c3a0d39) JavaScript for Java -------------------------------------------------------------------------------- Update Information:
Automatic update for reflections ``` Changelog * Mon Oct 11 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 0.9.12-8 - Use macros: javadoc_package, autosetup, url - Remove BRs: jsr305, slf4j-api, slf4j-simple - Don't remove jar in test source directory ``` Automatic update for rhino ``` * Mon Oct 11 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-6 - Add requires: javapackages-tools - Fix manifest attributes ``` -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 11 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-6 - Add requires: javapackages-tools - Fix manifest attributes * Fri Oct 8 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-5 - Fix surefire plugin - Don't reuse processes to execute tests * Thu Oct 7 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-4 - Fix some tests and include test262 * Wed Oct 6 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-3 - Disable failed tests * Tue Oct 5 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-2 - Enable singleton packaging: rhino, rhino-engine, and rhino-runtime - Fix %files to be more specific * Fri Sep 24 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 1.7.13-1 - Update to version 1.7.13 * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 1.7.7.1-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 1.7.7.1-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Mon Dec 14 2020 Jerry James loganjerry@gmail.com - 1.7.7.1-13 - Change jline dep to jline2 and jansi dep to jansi1 * Sun Aug 30 2020 Fabio Valentini decathorpe@gmail.com - 1.7.7.1-12 - Remove unnecessary dependency on parent POM. --------------------------------------------------------------------------------
================================================================================ vim-syntastic-3.10.0-13.fc33 (FEDORA-2021-abda637940) A vim plugins to check syntax for programming languages -------------------------------------------------------------------------------- Update Information:
Change go dep to golang-bin from gcc-go. Obsolete earlier go subpackages -------------------------------------------------------------------------------- ChangeLog:
* Tue Oct 12 2021 Martin Jackson mhjacks@swbell.net - 3.10.0-13 - Change go dep to golang-bin from gcc-go. Obsolete earlier go subpackages * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 3.10.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Wed Jul 7 2021 Martin Jackson mhjacks@swbell.net - 3.10.0-11 - Obsolete rnc subpackage as well, and remove the rnc dir from package. - Handle commented macro. * Wed Jul 7 2021 Martin Jackson mhjacks@swbell.net - 3.10.0-10 - Stop building rnc subpackage due to rnv's retirement. (rhbz#1955850) * Wed Jan 27 2021 Fedora Release Engineering releng@fedoraproject.org - 3.10.0-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jan 5 2021 Pavel Raiskup praiskup@redhat.com - 3.10.0-8 - drop javascript subpackage, javascript is going away from Fedora apparently - this is probably the last update of vim-syntastic package, I plan to orphan it and start maintaining vim-ale instead: https://copr.fedorainfracloud.org/coprs/praiskup/vim-ale/ --------------------------------------------------------------------------------
================================================================================ wireshark-3.4.9-1.fc33 (FEDORA-2021-d103c3687d) Network traffic analyzer -------------------------------------------------------------------------------- Update Information:
New version 3.4.9 -------------------------------------------------------------------------------- ChangeLog:
* Wed Oct 13 2021 Michal Ruprich mruprich@redhat.com - 1:3.4.9-1 - New version --------------------------------------------------------------------------------