The following Fedora 33 Security updates need testing: Age URL 97 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-0c98725795 opendmarc-1.4.1.1-3.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2bae525fd3 krb5-1.18.2-30.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6f327296fe nextcloud-19.0.13-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f4132bb56 glibc-2.32-10.fc33
The following Fedora 33 Critical Path updates have yet to be approved: Age URL 115 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb PackageKit-1.2.3-1.fc33 50 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33 libreport-2.15.1-1.fc33 satyr-0.37-2.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e0aedafbc9 coreutils-8.32-21.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-47368106b3 hwdata-0.349-1.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fe782f6705 libbytesize-2.6-1.fc33 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-de131565a6 ethtool-5.13-1.fc33 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c09b022e8f dracut-055-3.fc33 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-abcaa79b71 libmodulemd-2.13.0-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e57bbe4837 webkit2gtk3-2.32.2-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1fe1b325f5 gjs-1.66.2-7.fc33 mozjs78-78.12.0-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f4132bb56 glibc-2.32-10.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bcea139c5d audit-3.0.3-1.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5e6e793ad5 libedit-3.1-38.20210714cvs.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c62d0025fe mtools-4.0.32-1.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6b0a829d13 kernel-5.12.17-200.fc33 kernel-headers-5.12.17-200.fc33 kernel-tools-5.12.17-200.fc33
The following builds have been pushed to Fedora 33 updates-testing
armadillo-10.6.0-2.fc33 buildah-1.21.3-1.fc33 containernetworking-plugins-1.0.0-0.2.rc1.fc33 containers-common-1-20.fc33 crun-0.20.1-1.fc33 gnucash-4.6-2.fc33 ibus-m17n-1.4.6-1.fc33 liquidctl-1.7.1-1.fc33 lua-unbound-1.0.0-1.fc33 picocli-4.6.1-3.fc33 podman-3.2.3-1.fc33 python-asyncpg-0.23.0-6.fc33 python3.9-3.9.6-2.fc33 qpid-dispatch-1.16.1-1.fc33 qpid-proton-0.35.0-1.fc33 sayonara-1.7.0-3.stable3.fc33 skopeo-1.3.1-1.fc33 varnish-6.4.0-5.fc33 wireshark-3.4.7-1.fc33
Details about builds:
================================================================================ armadillo-10.6.0-2.fc33 (FEDORA-2021-b8f3f54b8b) Fast C++ matrix library with syntax similar to MATLAB and Octave -------------------------------------------------------------------------------- Update Information:
Update to the latest stable release. The main changes since the last version are: * expanded `chol()` to optionally use pivoted decomposition; * expanded `vector`, `matrix` and `cube` constructors to allow element initialisation via `fill::value(scalar)`, eg. `mat X(4,5,fill::value(123))`; * faster loading of CSV files when using OpenMP; * added `csv_opts::semicolon` option to allow saving/loading of CSV files with semicolon (`;`) instead of comma (`,`) as the separator. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jul 15 2021 Jos�� Matos jamatos@fedoraproject.org - 10.6.0-1 - update to 10.6.0 - BR flexiblas for Fedora and lapack, openblas and atlas for EPEL - adapt armadillo-devel accordingly -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1950741 - Sanitize armadillo-devel requires https://bugzilla.redhat.com/show_bug.cgi?id=1950741 [ 2 ] Bug #1982490 - armadillo-10.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1982490 --------------------------------------------------------------------------------
================================================================================ buildah-1.21.3-1.fc33 (FEDORA-2021-112557d2c5) A command line tool used for creating OCI Images -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-3602 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 1.21.3-1 - Resolves: #1969264, #1982880 - Security fix for CVE-2021-3602 - bump to v1.21.3 * Wed Jun 30 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 1.21.2-1 - bump to v1.21.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build container when using chroot isolation https://bugzilla.redhat.com/show_bug.cgi?id=1969264 --------------------------------------------------------------------------------
================================================================================ containernetworking-plugins-1.0.0-0.2.rc1.fc33 (FEDORA-2021-0c53d8738d) Libraries for writing CNI plugin -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine- cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets` definition in /usr/share/containers/containers.conf -------------------------------------------------------------------------------- ChangeLog:
* Mon Jun 7 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 1.0.0-0.2.rc1 - Resolves: #1962008 - use correct plugin path in unitfile -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build container when using chroot isolation https://bugzilla.redhat.com/show_bug.cgi?id=1969264 --------------------------------------------------------------------------------
================================================================================ containers-common-1-20.fc33 (FEDORA-2021-0c53d8738d) Common configuration and documentation for containers -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine- cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets` definition in /usr/share/containers/containers.conf -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 4:1-20 - rebuild to add it to podman CVE errata * Thu Jul 15 2021 Dan Walsh dwalsh@fedoraproject.org - 4:1-19 - Update containers.conf to the correct version * Wed Jun 23 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 4:1-18 - Resolves: #1958474 - allow futex_time64 in seccomp.json * Wed Jun 9 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 4:1-17 - use configs from latest upstream tags -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build container when using chroot isolation https://bugzilla.redhat.com/show_bug.cgi?id=1969264 --------------------------------------------------------------------------------
================================================================================ crun-0.20.1-1.fc33 (FEDORA-2021-0c53d8738d) OCI runtime written in C -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine- cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets` definition in /usr/share/containers/containers.conf -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 9 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 0.20.1-1 - Fixes: https://github.com/containers/crun/issues/687 * Wed Jun 2 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 0.20-1 - bump to 0.20 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build container when using chroot isolation https://bugzilla.redhat.com/show_bug.cgi?id=1969264 --------------------------------------------------------------------------------
================================================================================ gnucash-4.6-2.fc33 (FEDORA-2021-ed8aa33ea9) Finance management application -------------------------------------------------------------------------------- Update Information:
Two bugfixes. -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Paul Howarth paul@city-fan.org - 4.6-2 - Add fix for crash in transfers between accounts with different currencies https://bugs.gnucash.org/show_bug.cgi?id=798221 https://bugs.gnucash.org/show_bug.cgi?id=798243 - Add fix for truncation of fund/currency prices https://bugs.gnucash.org/show_bug.cgi?id=798219 --------------------------------------------------------------------------------
================================================================================ ibus-m17n-1.4.6-1.fc33 (FEDORA-2021-eef794b811) The M17N engine for IBus platform -------------------------------------------------------------------------------- Update Information:
Update to 1.4.6; Make inscript2 engines rank higher than inscript engines -------------------------------------------------------------------------------- ChangeLog:
* Thu Jul 15 2021 Mike FABIAN mfabian@redhat.com - 1.4.6-1 - Update to 1.4.6 - Make inscript2 engines rank higher than inscript engines - Resolves: rhbz#1982546 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1982546 - Make inscript2 engines rank higher than inscript engines https://bugzilla.redhat.com/show_bug.cgi?id=1982546 --------------------------------------------------------------------------------
================================================================================ liquidctl-1.7.1-1.fc33 (FEDORA-2021-2c1aac6eeb) Tool for controlling liquid coolers, case fans and RGB LED strips -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release ---- Update to latest upstream release -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Artur Frenszek-Iwicki fedora@svgames.pl - 1.7.1-1 - Update to latest upstream release * Wed Jul 14 2021 Artur Frenszek-Iwicki fedora@svgames.pl - 1.7.0-1 - Update to latest upstream release - Add the "udev" subpackage --------------------------------------------------------------------------------
================================================================================ lua-unbound-1.0.0-1.fc33 (FEDORA-2021-abdb555f56) Binding to libunbound for Lua -------------------------------------------------------------------------------- Update Information:
- Upgrade to 1.0.0 (#1982222) -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Robert Scheck robert@fedoraproject.org 1.0.0-1 - Upgrade to 1.0.0 (#1982222) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1982222 - lua-unbound-1.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1982222 --------------------------------------------------------------------------------
================================================================================ picocli-4.6.1-3.fc33 (FEDORA-2021-3d367fb192) Java command line parser with both an annotations API and a programmatic API -------------------------------------------------------------------------------- Update Information:
Add picocli-shell-jline2 ---- Add picocli-parent and picocli-codegen ---- First picocli package -------------------------------------------------------------------------------- ChangeLog:
-------------------------------------------------------------------------------- References:
[ 1 ] Bug #1980117 - Review Request: picocli - Java command line parser with both an annotations API and a programmatic API https://bugzilla.redhat.com/show_bug.cgi?id=1980117 --------------------------------------------------------------------------------
================================================================================ podman-3.2.3-1.fc33 (FEDORA-2021-0c53d8738d) Manage Pods, Containers and Container Images -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine- cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets` definition in /usr/share/containers/containers.conf -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 3:3.2.3-1 - Resolves: #1969264, #1982881 - Security fix for CVE-2021-3602 - bump to v3.2.3 * Fri Jun 25 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 3:3.2.2-1 - bump to v3.2.2 * Mon Jun 14 2021 RH Container Bot rhcontainerbot@fedoraproject.org - 3:3.2.1-1 - autobuilt v3.2.1 * Thu Jun 10 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 3:3.2.0-5 - fix crun dependency issue * Wed Jun 9 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 3:3.2.0-4 - use latest containers-common * Tue Jun 8 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 3:3.2.0-3 - keep crun on 0.19.1-3 * Tue Jun 8 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 3:3.2.0-2 - include podman-machine-cni in podman-plugins subpackage * Fri Jun 4 2021 RH Container Bot rhcontainerbot@fedoraproject.org - 3:3.2.0-1 - autobuilt v3.2.0 * Wed May 26 2021 RH Container Bot rhcontainerbot@fedoraproject.org - 3:3.2.0-0.2.rc3 - autobuilt v3.2.0-rc3 * Fri May 21 2021 RH Container Bot rhcontainerbot@fedoraproject.org - 3:3.2.0-0.1.rc2 - autobuilt v3.2.0-rc2 * Wed May 12 2021 Dusty Mabe dusty@dustymabe.com - 3:3.1.2-3 - Backport upstream bugfix: https://github.com/containers/podman/pull/10253 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build container when using chroot isolation https://bugzilla.redhat.com/show_bug.cgi?id=1969264 --------------------------------------------------------------------------------
================================================================================ python-asyncpg-0.23.0-6.fc33 (FEDORA-2021-afa4571bbf) A fast PostgreSQL Database Client Library for Python/asyncio -------------------------------------------------------------------------------- Update Information:
The `python-asyncpg-doc` package now depends on `python3-docs`, and the `python3-asyncpg` package now does not. -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Benjamin A. Beasley code@musicinmybrain.net - 0.23.0-6 - Dependency on python3-docs should have been in -doc subpackage * Fri Jul 2 2021 Benjamin A. Beasley code@musicinmybrain.net - 0.23.0-5 - Allow later versions of test dependencies pycodestyle and uvloop --------------------------------------------------------------------------------
================================================================================ python3.9-3.9.6-2.fc33 (FEDORA-2021-5194033b8b) Version 3.9 of the Python interpreter -------------------------------------------------------------------------------- Update Information:
- Require pyproject-rpm-macros from python3-debug, to enable packaging according to new guidelines See: https://fedoraproject.org/wiki/Changes/PythonPackagingGuidelines202x - Add "python-turtle" provide to python3-tkinter -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Petr Viktorin pviktori@redhat.com - 3.9.6-2 - Provide python3-turtle from python3-tkinter - Require pyproject-rpm-macros from python3-devel -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1952565 - Add %py_provides for optional stdlib modules https://bugzilla.redhat.com/show_bug.cgi?id=1952565 --------------------------------------------------------------------------------
================================================================================ qpid-dispatch-1.16.1-1.fc33 (FEDORA-2021-c5b36f394d) Dispatch router for Qpid -------------------------------------------------------------------------------- Update Information:
Rebased to 1.16.1 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Kim van der Riet kvanderr@redhat.com - 1.16.1-1 - Rebased to 1.16.1 --------------------------------------------------------------------------------
================================================================================ qpid-proton-0.35.0-1.fc33 (FEDORA-2021-055b191c6c) A high performance, lightweight messaging library -------------------------------------------------------------------------------- Update Information:
Rebased to qpid-proton 0.35.0 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Kim van der Riet kvanderr@redhat.com - 0.35.0-1 - Rebased to 0.35.0 --------------------------------------------------------------------------------
================================================================================ sayonara-1.7.0-3.stable3.fc33 (FEDORA-2021-7551ea44b3) A lightweight Qt Audio player -------------------------------------------------------------------------------- Update Information:
Update to 1.7.0-3.stable3 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 16 2021 Martin Gansser martinkg@fedoraproject.org - 1.7.0-3 - Update to 1.7.0 stable3 --------------------------------------------------------------------------------
================================================================================ skopeo-1.3.1-1.fc33 (FEDORA-2021-0c53d8738d) Inspect container images and repositories on registries -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine- cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets` definition in /usr/share/containers/containers.conf -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 30 2021 Lokesh Mandvekar lsm5@fedoraproject.org - 1:1.3.1-1 - bump to v1.3.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build container when using chroot isolation https://bugzilla.redhat.com/show_bug.cgi?id=1969264 --------------------------------------------------------------------------------
================================================================================ varnish-6.4.0-5.fc33 (FEDORA-2021-36e10d3f9f) High-performance HTTP accelerator -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-36740 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ wireshark-3.4.7-1.fc33 (FEDORA-2021-df26b4e7e8) Network traffic analyzer -------------------------------------------------------------------------------- Update Information:
New version 3.4.7 Fix for CVE-2021-22235 -------------------------------------------------------------------------------- ChangeLog:
* Thu Jul 15 2021 Michal Ruprich mruprich@redhat.com - 1:3.4.7-1 - New version 3.4.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1982495 - wireshark-3.4.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1982495 --------------------------------------------------------------------------------