The following Fedora 33 Security updates need testing:
Age URL
181
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa0e94198f
openssh-8.4p1-8.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-669df5ceb9
dr_libs-0-0.5.20211002gitf13cbcf.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fbad11014a
xstream-1.4.18-2.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-56d8173b5e
mediawiki-1.35.4-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8913c7900c
redis-6.0.16-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7ddc28a14b rt-4.4.5-4.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4d2e7691ca squid-5.2-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0b7a484688 xen-4.14.3-2.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
199
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
134
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
50
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4ccf3840ed
gnome-shell-3.38.6-1.fc33 mutter-3.38.6-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa0e94198f
openssh-8.4p1-8.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ac6363ae65 gdb-10.2-3.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-66109fb131 audit-3.0.6-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-77ae3066b2
gnome-software-3.38.2-4.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b61d7caf9e gjs-1.66.2-10.fc33
mozjs78-78.15.0-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1742d200f1
hwdata-0.352-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5a3272b373 pungi-4.3.0-2.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a461198449
perl-Encode-3.08-460.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4208f76b26 nss-3.71.0-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
bc-1.07.1-14.fc33
festival-freebsoft-utils-0.10-21.fc33
firefox-93.0-2.fc33
httpd-2.4.51-1.fc33
kernel-5.14.10-100.fc33
libopenmpt-0.4.24-1.fc33
libquotient-0.6.11-1.fc33
notcurses-2.4.5-2.fc33
openxr-1.0.18-2.fc33
pcp-5.3.4-1.fc33
pdf2djvu-0.9.18-1.fc33
shntool-3.0.10-27.fc33
tzdata-2021c-1.fc33
Details about builds:
================================================================================
bc-1.07.1-14.fc33 (FEDORA-2021-50faf017ce)
GNU's bc (a numeric processing language) and dc (a calculator)
--------------------------------------------------------------------------------
Update Information:
Echo empty lines, useful for delimiting work
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 14 2021 P��draig Brady <P(a)draigBrady.com> - 1.07.1-14
- Echo empty lines, useful for delimiting work
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.07.1-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.07.1-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
festival-freebsoft-utils-0.10-21.fc33 (FEDORA-2021-bd1c7ad4f7)
Utilities that enhance Festival with some useful features
--------------------------------------------------------------------------------
Update Information:
General spec file cleanup and modernization; add -doc subpackage
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 8 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.10-21
- General spec file cleanup and modernization
- Weaken sox dependency and add a weak dependency on iconv
- Drop unnecessary BR on festival
- Add a -doc package with info, PDF, and HTML documentation
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
firefox-93.0-2.fc33 (FEDORA-2021-c24b515a72)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- New upstream update (93.0) - Fixed NSS package dependency (NSS 3.70) ---- -
New upstream release (93.0) ---- New upstream release (92.0.1)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 7 2021 Martin Stransky <stransky(a)redhat.com> - 93.0-2
- Require NSS 3.70
* Wed Sep 29 2021 Martin Stransky <stransky(a)redhat.com> - 93.0-1
- Updated to 93.0
* Mon Sep 27 2021 Martin Stransky <stransky(a)redhat.com> - 92.0.1-1
- Updated to 92.0.1
* Mon Sep 13 2021 Martin Stransky <stransky(a)redhat.com> - 92.0-3
- Added fix for mozbz#1725828
--------------------------------------------------------------------------------
================================================================================
httpd-2.4.51-1.fc33 (FEDORA-2021-ae829e54ab)
Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
- new version 2.4.51 - security fix
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 8 2021 Lubo�� Uhliarik <luhliari(a)redhat.com> - 2.4.51-1
- new version 2.4.51
--------------------------------------------------------------------------------
================================================================================
kernel-5.14.10-100.fc33 (FEDORA-2021-9dd76a1ed0)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.14.10 stable kernel update contains a number of important fixes across the
tree
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 7 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.14.10-0]
- Revert "net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable warnings"
(Peter Robinson)
- e100e: Fix packet loss issues seen on Intel network controller (Mark Pearson)
- bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu)
- Revert "acpi: prefer booting with ACPI over DTS" (Justin M. Forbes)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2000627 - CVE-2021-3744 kernel: crypto: ccp - fix resource leaks in
ccp_run_aes_gcm_cmd()
https://bugzilla.redhat.com/show_bug.cgi?id=2000627
[ 2 ] Bug #2010463 - CVE-2021-41864 kernel: eBPF multiplication integer overflow in
prealloc_elems_and_freelist() in kernel/bpf/stackmap.c leads to out-of-bounds write
https://bugzilla.redhat.com/show_bug.cgi?id=2010463
--------------------------------------------------------------------------------
================================================================================
libopenmpt-0.4.24-1.fc33 (FEDORA-2021-7ff1c8680d)
C/C++ library to decode tracker music module (MOD) files
--------------------------------------------------------------------------------
Update Information:
https://lib.openmpt.org/libopenmpt/2021/10/04/security-
updates-0.5.12-0.4.24-0.3.33/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 7 2021 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.4.24-1
- update to 0.4.24 (security release)
--------------------------------------------------------------------------------
================================================================================
libquotient-0.6.11-1.fc33 (FEDORA-2021-06914635c9)
Qt5 library to write cross-platform clients for Matrix
--------------------------------------------------------------------------------
Update Information:
Updated to version 0.6.11. ---- Updated to version 0.6.10.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 7 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.6.11-1
- Updated to version 0.6.11.
* Mon Oct 4 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.6.10-1
- Updated to version 0.6.10.
--------------------------------------------------------------------------------
================================================================================
notcurses-2.4.5-2.fc33 (FEDORA-2021-55e6d4f051)
Character graphics and TUI library
--------------------------------------------------------------------------------
Update Information:
https://github.com/dankamongmen/notcurses/releases/tag/v2.4.5 Resolves invalid
memory access in `ncplane_reparent_family()`. Resolves several problems
introduced in 2.4.4 regarding input handling, including failure of Backspace in
several terminals and failure to start depending on initial cursor location.
Properly initialize `evtype` field for `NCKEY_RESIZE` events. Fix
`ncplane_dup()` for root planes. Fix divide-by-zero in `intro` demo when we know
the cell but not the pixel geometry. Strongly recommended for users for 2.4.4.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 7 2021 Nick Black <dankamongmen(a)gmail.com> 2.4.5-1
- new upstream 2.4.5
* Tue Oct 5 2021 Richard Shaw <hobbes1069(a)gmail.com> 2.4.4-2
- Rebuild for OpenImageIO 2.3.8.0.
* Sun Oct 3 2021 Nick Black <dankamongmen(a)gmail.com> 2.4.4-1
- new upstream 2.4.4
--------------------------------------------------------------------------------
================================================================================
openxr-1.0.18-2.fc33 (FEDORA-2021-42cd4f2fa2)
An API for writing VR and AR software
--------------------------------------------------------------------------------
Update Information:
Openxr ---------- Updated to 1.0.18 for Fedora 34 and up. See [Release
Notes](https://github.com/KhronosGroup/OpenXR-SDK-
Source/releases/tag/release-1.0.20) Blender ------------ Update to 2.93.5 USD
------ * Enable aarch64 support for Fedora 35 and up * Disable support for
Fedora 34 and lower due to missing Imath dependency
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 28 2021 Luya Tshimbalanga <luya(a)fedoraproject.org> 1.0.18-2
- RPMAUTOSPEC: unresolvable merge
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969698 - openxr-1.0.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1969698
--------------------------------------------------------------------------------
================================================================================
pcp-5.3.4-1.fc33 (FEDORA-2021-154cf0396b)
System-level performance monitoring and performance management
--------------------------------------------------------------------------------
Update Information:
Update to latest PCP sources.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 8 2021 Nathan Scott <nathans(a)redhat.com> - 5.3.4-1
- Update to latest PCP sources.
--------------------------------------------------------------------------------
================================================================================
pdf2djvu-0.9.18-1.fc33 (FEDORA-2021-430ebd73b2)
PDF to DjVu converter
--------------------------------------------------------------------------------
Update Information:
- Update to 0.9.18 fixes rhbz#1969290
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 7 2021 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.9.18-1
- Update to 0.9.18 fixes rhbz#1969290
* Thu Aug 5 2021 Marek Kasik <mkasik(a)redhat.com> - 0.9.17.1-5
- Rebuild for poppler-21.08.0
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.9.17.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.9.17.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jan 19 2021 Marek Kasik <mkasik(a)redhat.com> - 0.9.17.1-2
- Rebuild for poppler-21.01.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969290 - pdf2djvu-0.9.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1969290
--------------------------------------------------------------------------------
================================================================================
shntool-3.0.10-27.fc33 (FEDORA-2021-9053f06af4)
A multi-purpose WAVE data processing and reporting utility
--------------------------------------------------------------------------------
Update Information:
Support newer wavpack header versions
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 8 2021 Felix Kaechele <felix(a)kaechele.ca> - 3.0.10-27
- add patch to support newer wavepack header versions (rhbz#1940701)
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.10-26
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.10-25
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1940701 - shntool: cannot convert WV files with 0x410 header version
https://bugzilla.redhat.com/show_bug.cgi?id=1940701
--------------------------------------------------------------------------------
================================================================================
tzdata-2021c-1.fc33 (FEDORA-2021-3b48e0d8cb)
Timezone data
--------------------------------------------------------------------------------
Update Information:
Rebase to tzdata-2021c - Revert most 2021b changes to the 'backward' file. -
Fix 'zic -b fat' bug in pre-1970 32-bit data reported in tzdata-2021b. - Fix two
Link line typos from tzdata-2021b. - Distribute the new SECURITY file.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 7 2021 Patsy Griffin <patsy(a)redhat.com> - 2021c-1
- Rebase to tzdata-2021c
- Revert most 2021b changes to the 'backward' file.
- Fix 'zic -b fat' bug in pre-1970 32-bit data reported in tzdata-2021b.
- Fix two Link line typos from tzdata-2021b.
- Distribute the new SECURITY file.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2009906 - tzdata-2021c is available
https://bugzilla.redhat.com/show_bug.cgi?id=2009906
--------------------------------------------------------------------------------