The following Fedora 33 Security updates need testing:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e7a8e79fa8 xterm-366-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ee913722db
mingw-c-ares-1.17.1-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b7826fcedf
mingw-wavpack-5.4.0-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ed9c13a1d5
mingw-flac-1.3.3-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f8368da9af
php-horde-Horde-Text-Filter-2.3.7-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f3ebd7554c
radare2-5.1.1-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a639ec5d6e
prosody-0.11.8-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d7fc8949
dotnet3.1-3.1.112-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5522a34aa0
wireshark-3.4.3-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3286ac2acc libpq-12.6-1.fc33
postgresql-12.6-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-47f53a940a xen-4.14.1-5.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fb466fb623
buildah-1.19.6-1.fc33 containernetworking-plugins-0.9.1-2.fc33 containers-common-1-4.fc33
podman-3.0.1-1.fc33 skopeo-1.2.2-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-28f97e232d
bind-9.11.28-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4e92349087
nagios-4.4.6-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7d3a9004e2
python3.8-3.8.8-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
24
https://bodhi.fedoraproject.org/updates/FEDORA-2021-039b93d5e4
dnsmasq-2.84-1.fc33
19
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b302f21c3e
libsndfile-1.0.31-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-81a6fbe485
libburn-1.5.4-1.fc33 libisoburn-1.5.4-1.fc33 libisofs-1.5.4-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-06e61a3c53
osinfo-db-20210215-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d0cf00b5aa pungi-4.2.8-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e2e7579085
breeze-icon-theme-5.79.0-2.fc33 extra-cmake-modules-5.79.0-2.fc33 kf5-5.79.0-1.fc33
kf5-attica-5.79.0-1.fc33 kf5-baloo-5.79.0-2.fc33 kf5-bluez-qt-5.79.0-1.fc33
kf5-frameworkintegration-5.79.0-2.fc33 kf5-kactivities-5.79.0-2.fc33
kf5-kactivities-stats-5.79.0-2.fc33 kf5-kapidox-5.79.0-2.fc33 kf5-karchive-5.79.0-2.fc33
kf5-kauth-5.79.0-2.fc33 kf5-kbookmarks-5.79.0-2.fc33 kf5-kcalendarcore-5.79.0-2.fc33
kf5-kcmutils-5.79.0-2.fc33 kf5-kcodecs-5.79.0-2.fc33 kf5-kcompletion-5.79.0-2.fc33
kf5-kconfig-5.79.0-3.fc33 kf5-kconfigwidgets-5.79.0-2.fc33 kf5-kcontacts-5.79.0-2.fc33
kf5-kcoreaddons-5.79.0-2.fc33 kf5-kcrash-5.79.0-2.fc33 kf5-kdav-5.79.0-2.fc33
kf5-kdbusaddons-5.79.0-2.fc33 kf5-kdeclarative-5.79.0-2.fc33 kf5-kded-5.79.0-2.fc33
kf5-kdelibs4support-5.79.0-2.fc33 kf5-kdesignerplugin-5.79.0-2.fc33
kf5-kdesu-5.79.0-2.fc33 kf5-kdewebkit-5.79.0-2.fc33 kf5-kdnssd-5.79.1-1.fc33
kf5-kdoctools-5.79.0-2.fc33 kf5-kemoticons-5.79
.0-2.fc33 kf5-kfilemetadata-5.79.0-2.fc33 kf5-kglobalaccel-5.79.0-2.fc33
kf5-kguiaddons-5.79.0-2.fc33 kf5-kholidays-5.79.0-2.fc33 kf5-khtml-5.79.0-2.fc33
kf5-ki18n-5.79.0-2.fc33 kf5-kiconthemes-5.79.0-2.fc33 kf5-kidletime-5.79.0-2.fc33
kf5-kimageformats-5.79.0-2.fc33 kf5-kinit-5.79.0-2.fc33 kf5-kio-5.79.0-3.fc33
kf5-kirigami2-5.79.0-2.fc33 kf5-kitemmodels-5.79.0-2.fc33 kf5-kitemviews-5.79.0-2.fc33
kf5-kjobwidgets-5.79.0-2.fc33 kf5-kjs-5.79.0-2.fc33 kf5-kjsembed-5.79.0-2.fc33
kf5-kmediaplayer-5.79.0-2.fc33 kf5-knewstuff-5.79.0-2.fc33
kf5-knotifications-5.79.0-2.fc33 kf5-knotifyconfig-5.79.0-2.fc33
kf5-kpackage-5.79.0-2.fc33 kf5-kparts-5.79.0-2.fc33 kf5-kpeople-5.79.0-2.fc33
kf5-kplotting-5.79.0-2.fc33 kf5-kpty-5.79.0-2.fc33 kf5-kquickcharts-5.79.0-2.fc33
kf5-kross-5.79.0-2.fc33 kf5-krunner-5.79.0-2.fc33 kf5-kservice-5.79.0-2.fc33
kf5-ktexteditor-5.79.0-3.fc33 kf5-ktextwidgets-5.79.0-2.fc33
kf5-kunitconversion-5.79.0-2.fc33 kf5-kwallet-5.79.0-2.fc33 kf5-kwayland-5.79.0-2.fc33
kf5-kwid
getsaddons-5.79.0-2.fc33 kf5-kwindowsystem-5.79.0-2.fc33 kf5-kxmlgui-5.79.0-2.fc33
kf5-kxmlrpcclient-5.79.0-2.fc33 kf5-modemmanager-qt-5.79.0-2.fc33
kf5-networkmanager-qt-5.79.0-2.fc33 kf5-plasma-5.79.0-2.fc33 kf5-prison-5.79.0-2.fc33
kf5-purpose-5.79.0-2.fc33 kf5-solid-5.79.0-2.fc33 kf5-sonnet-5.79.0-2.fc33
kf5-syndication-5.79.0-2.fc33 kf5-syntax-highlighting-5.79.1-1.fc33
kf5-threadweaver-5.79.0-2.fc33 oxygen-icon-theme-5.79.0-2.fc33
qqc2-desktop-style-5.79.0-2.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c52f4ff33a
kernel-5.10.17-200.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f7f790e138
libgexiv2-0.12.2-2.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-20b9876f11
rygel-0.40.1-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-19a8c65741 pcre2-10.36-4.fc33
The following builds have been pushed to Fedora 33 updates-testing
ansible-2.9.18-1.fc33
ddnet-15.3.2-1.fc33
drbd-9.16.0-3.fc33
electrum-4.0.9-3.fc33
kwave-20.12.2-1.fc33
libprojectM-3.1.12-1.fc33
netdata-1.29.2-1.fc33
python3.9-3.9.2-1.fc33
qsstv-9.5.0-1.fc33
Details about builds:
================================================================================
ansible-2.9.18-1.fc33 (FEDORA-2021-e9478617ae)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to security and bugfix release 2.9.18.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 20 2021 Kevin Fenzi <kevin(a)scrye.com> - 2.9.18-1
- Update to 2.9.18.
- Fixes: CVE-2021-20228 CVE-2021-20178 CVE-2021-20180 CVE-2021-20191
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.9.17-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917287 - CVE-2021-20178 ansible: user data leak in snmp_facts module
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917287
[ 2 ] Bug #1917330 - CVE-2021-20178 ansible: user data leak in snmp_facts module
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917330
[ 3 ] Bug #1917463 - CVE-2021-20180 ansible: ansible-collection:
bitbucket_pipeline_variable exposes secured values [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917463
[ 4 ] Bug #1917465 - CVE-2021-20180 ansible: ansible-collection:
bitbucket_pipeline_variable exposes secured values [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917465
[ 5 ] Bug #1917473 - CVE-2021-20191 ansible: multiple collections exposes secured values
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917473
[ 6 ] Bug #1917474 - CVE-2021-20191 ansible: multiple collections exposes secured values
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917474
--------------------------------------------------------------------------------
================================================================================
ddnet-15.3.2-1.fc33 (FEDORA-2021-0ecf2f1894)
DDraceNetwork, a cooperative racing mod of Teeworlds
--------------------------------------------------------------------------------
Update Information:
Update to version 15.3.2. ---- Update to version 15.3.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 ElXreno <elxreno(a)gmail.com> - 15.3.2-1
- Update to version 15.3.2
* Mon Feb 15 2021 ElXreno <elxreno(a)gmail.com> - 15.3.1-1
- Update to version 15.3.1
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 15.2.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jan 25 2021 ElXreno <elxreno(a)gmail.com> - 15.2.5-2
- Drop gdb workaround
--------------------------------------------------------------------------------
================================================================================
drbd-9.16.0-3.fc33 (FEDORA-2021-31205a1c13)
DRBD user-land tools and scripts
--------------------------------------------------------------------------------
Update Information:
Upstream release of 9.16.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 Peter Hanecak <hany(a)hany.sk> - 9.16.0-1
- Upstream release of 9.16.0
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.15.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1926718 - drbd-9.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1926718
--------------------------------------------------------------------------------
================================================================================
electrum-4.0.9-3.fc33 (FEDORA-2021-85a67a1e1a)
A lightweight Bitcoin Client
--------------------------------------------------------------------------------
Update Information:
Updated to electrum 4.0.9 and added dependency for python3-cryptography (since
pycryptodomex is not supported since electrum 4.0.7, see
https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 Timothy Redaelli <tredaelli(a)redhat.com> - 4.0.9-3
- Add python3-cryptography dependency (#1909753)
* Mon Jan 4 2021 Timothy Redaelli <tredaelli(a)redhat.com> - 4.0.9-1
- Updated to version 4.0.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909751 - Update to electrum 4.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1909751
[ 2 ] Bug #1909753 - Electrum missing dependency on python3-pycryptodomex
https://bugzilla.redhat.com/show_bug.cgi?id=1909753
--------------------------------------------------------------------------------
================================================================================
kwave-20.12.2-1.fc33 (FEDORA-2021-181a461720)
Sound Editor for KDE
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 3 2021 Rex Dieter <rdieter(a)fedoraproject.org> - 20.12.2-1
- 20.12.2
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.12.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libprojectM-3.1.12-1.fc33 (FEDORA-2021-1f2f86d430)
The libraries for the projectM music visualization plugin
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.12 (#1931164) ---- New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
3.1.12-1
- Update to 3.1.12 (#1931164)
* Sun Feb 14 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
3.1.11-1
- Update to 3.1.11 (#1928290)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928290 - libprojectM-3.1.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1928290
[ 2 ] Bug #1931164 - libprojectM-3.1.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1931164
--------------------------------------------------------------------------------
================================================================================
netdata-1.29.2-1.fc33 (FEDORA-2021-660b469f83)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 19 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.29.2-1
- Update from upstream
* Thu Feb 11 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.29.1-1
- Update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1927059 - netdata-1.29.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1927059
--------------------------------------------------------------------------------
================================================================================
python3.9-3.9.2-1.fc33 (FEDORA-2021-b1843407ca)
Version 3.9 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
**Update to 3.9.2.** [Full
changelog.](https://docs.python.org/release/3.9.2/whatsnew/changelog.html)
Contains security fix for CVE-2021-23336. Compile the debug build
(`python3-debug` package) with `-O0` instead of `-Og` for easier debugging e.g.
with `gdb`.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 20 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 3.9.2-1
- Update to 3.9.2
* Thu Feb 18 2021 Tomas Hrnciar <thrnciar(a)redhat.com> - 3.9.2~rc1-1
- Update to 3.9.2rc1
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.9.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jan 25 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 3.9.1-4
- Rebuilt to be signed with Fedora 32 compatible signature,
to fix mock bootstrap chroot on Fedora 32 (and possibly EPELs)
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.o...
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928904 - CVE-2021-23336 python: Web Cache Poisoning via
urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters
https://bugzilla.redhat.com/show_bug.cgi?id=1928904
--------------------------------------------------------------------------------
================================================================================
qsstv-9.5.0-1.fc33 (FEDORA-2021-65feca7026)
Qt-based slow-scan TV and fax
--------------------------------------------------------------------------------
Update Information:
Update to 9.5.0, fixes problem with new qt 5.15.x.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 Richard Shaw <hobbes1069(a)gmail.com> - 9.5.0-1
- Update to 9.5.0.
* Sat Feb 6 2021 Richard Shaw <hobbes1069(a)gmail.com> - 9.4.4-6
- Rebuild for hamlib 4.1.
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.4.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Aug 18 2020 Jeff Law <law(a)redhat.com> - 9.4.4-6
- Force C++14 as this code is not C++17 ready
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1923431 - qsstv: FTBFS in Fedora rawhide/f34
https://bugzilla.redhat.com/show_bug.cgi?id=1923431
[ 2 ] Bug #1931210 - qsstv-9.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1931210
--------------------------------------------------------------------------------