The following Fedora 33 Security updates need testing:
Age URL
28
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-be94728b95
exiv2-0.27.3-6.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7b698513d5
cups-2.3.3op2-5.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ecf4fed550
php-phpmailer6-6.4.1-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8015a8cdc4 dom4j-2.0.3-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-35d2bb4627
chromium-90.0.4430.93-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-da76643229
hivex-1.3.20-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b8b7829a83
community-mysql-8.0.24-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6f34b7c382 php-7.4.19-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d4c1c98a58
djvulibre-3.5.27-27.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8f13872334
thunderbird-78.10.1-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8b19c99d6a
redis-6.0.13-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-888ccfd5b6
python-impacket-0.9.22-3.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
47
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-56ab6d4bcc
osinfo-db-20210426-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6761b1adac
shadow-utils-4.8.1-6.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-988350dcad
poppler-0.90.0-7.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-610deea5b8
pipewire-0.3.26-2.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ea13091639
gnome-software-3.38.2-2.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d6696fafa9
qt5-qtwayland-5.15.2-6.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-be94728b95
exiv2-0.27.3-6.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9af76fe9fa pungi-4.2.9-1.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-44402e3dcf
libglvnd-1.3.3-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-da76643229
hivex-1.3.20-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8f13872334
thunderbird-78.10.1-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-04e178963a
libmodulemd-2.12.1-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-13d768bd1a
firefox-88.0-8.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a26a789e4
gnome-terminal-3.38.3-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ac643a7ce9
xorg-x11-drv-nouveau-1.0.17-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0e0f47f6ca
xfce4-settings-4.14.4-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
dialect-1.3.0-1.fc33
git-secret-0.4.0-1.fc33
gnome-shell-extension-system-monitor-applet-38-12.20210507gitbc38ccf.fc33
homebank-5.5.2-1.fc33
kernel-5.11.19-200.fc33
kernel-headers-5.11.19-200.fc33
kernel-tools-5.11.19-200.fc33
libretls-3.3.3-1.fc33
livecd-tools-28.0-2.fc33
notekit-0.1-4.fc33
qownnotes-21.5.1-1.fc33
rust-1.52.0-1.fc33
systemtap-4.5-1.fc33
Details about builds:
================================================================================
dialect-1.3.0-1.fc33 (FEDORA-2021-b1dd8bde10)
A translation app for GNOME based on Google Translate
--------------------------------------------------------------------------------
Update Information:
Updating to 1.3.0 (Fix #1958511)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 8 2021 Lyes Saadi <fedora(a)lyes.eu> - 1.3.0-1
- Updating to 1.3.0 (Fix #1958511)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958511 - dialect-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958511
--------------------------------------------------------------------------------
================================================================================
git-secret-0.4.0-1.fc33 (FEDORA-2021-d15b136c8d)
A bash-tool to store your private data inside a git repository
--------------------------------------------------------------------------------
Update Information:
0.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Gergely Gombos <gombosg(a)disroot.org> 0.4.0-1
- 0.4.0
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-system-monitor-applet-38-12.20210507gitbc38ccf.fc33
(FEDORA-2021-f49fd9bb19)
A Gnome shell system monitor extension
--------------------------------------------------------------------------------
Update Information:
Updated to last upstream commits
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Nicolas Vi��ville <nicolas.vieville(a)uphf.fr> -
1:38-12.20210507gitbc38ccf
- Updated to last upstream commits
- Added and updated translations
- Add units for network speeds over one gigabit
- Don't use version but check for function
- Fixed thermal sensor dropdown label rendering
- Prevent refreshes while the Shell is busy
- gpu_usage.sh improvements
- prefs: Remove unused Clutter reference
- Update prefs to support gnome 40 - RHBZ#1956148, RHBZ#1957479
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1956148 - gnome-shell-extension-system-monitor-applet preferences bug:
Error: No property border_width on GtkFrame
https://bugzilla.redhat.com/show_bug.cgi?id=1956148
[ 2 ] Bug #1957479 - gnome 40 compatibility change
https://bugzilla.redhat.com/show_bug.cgi?id=1957479
--------------------------------------------------------------------------------
================================================================================
homebank-5.5.2-1.fc33 (FEDORA-2021-c5e45703a2)
Free easy personal accounting for all
--------------------------------------------------------------------------------
Update Information:
- Update to 5.5.2 fixes rhbz#1958531 ---- - Update to 5.5.1 fixes
rhbz#1936313
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 8 2021 Filipe Rosset <rosset.filipe(a)gmail.com> - 5.5.2-1
- Update to 5.5.2 fixes rhbz#1958531
* Mon May 3 2021 Filipe Rosset <rosset.filipe(a)gmail.com> - 5.5.1-1
- Update to 5.5.1 fixes rhbz#1936313
--------------------------------------------------------------------------------
================================================================================
kernel-5.11.19-200.fc33 (FEDORA-2021-7c085ca697)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.11.9 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.11.19-0]
- Fedora-5.12: Make amd_pinctrl module builtin (Hans de Goede)
- ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA (Takashi Iwai)
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Mathias Krause)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957788 - CVE-2021-31829 kernel: protection of stack pointer against
speculative pointer arithmetic can be bypassed to leak content of kernel memory
https://bugzilla.redhat.com/show_bug.cgi?id=1957788
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.11.19-200.fc33 (FEDORA-2021-7c085ca697)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.11.9 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.11.19-200
- Linux v5.11.19
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957788 - CVE-2021-31829 kernel: protection of stack pointer against
speculative pointer arithmetic can be bypassed to leak content of kernel memory
https://bugzilla.redhat.com/show_bug.cgi?id=1957788
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.11.19-200.fc33 (FEDORA-2021-7c085ca697)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.11.9 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.11.19-200
- Linux v5.11.19
* Thu May 6 2021 Jiri Olsa <jolsa@jolsa(a)redhat.com>
- Remove libbpf package
* Thu May 6 2021 Justin M. Forbes <jforbes(a)fedoraproject.org>
- Build and package intel-speed-select (rhbz 1882427)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957788 - CVE-2021-31829 kernel: protection of stack pointer against
speculative pointer arithmetic can be bypassed to leak content of kernel memory
https://bugzilla.redhat.com/show_bug.cgi?id=1957788
--------------------------------------------------------------------------------
================================================================================
libretls-3.3.3-1.fc33 (FEDORA-2021-a66907d12b)
Port of libtls from LibreSSL to OpenSSL
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.3.3 (#1958568)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 8 2021 Robert Scheck <robert(a)fedoraproject.org> 3.3.3-1
- Upgrade to 3.3.3 (#1958568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958568 - libretls-3.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958568
--------------------------------------------------------------------------------
================================================================================
livecd-tools-28.0-2.fc33 (FEDORA-2021-b2b5636c1a)
Tools for building live CDs
--------------------------------------------------------------------------------
Update Information:
Highlights of this new release: * Experimental AArch64 live ISO support * Fixes
around x86 UEFI support
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 8 2021 Neal Gompa <ngompa13(a)gmail.com> - 1:28.0-2
- Add missing dependencies (urlgrabber, dracut-live)
- Remove hfsplus-tools as a dependency for EL8+
* Sat May 8 2021 Neal Gompa <ngompa13(a)gmail.com> - 1:28.0-1
- Release 28.0 (ngompa13)
- HACKING: Fix URL for the Git repository (ngompa13)
- imgcreate/live: Add missing variable "_isDracut" (ngompa13)
- imgcreate/live: Use the right EFI binaries for x86 images (ngompa13)
- imgcreate/live: Add AArch64 support (ngompa13)
- imgcreate/live: Rework ISO creation to split x86 specific parts out (ngompa13)
- Add missing files to uninstall section of makefile (quanterium)
- Separate the errors for no ks specified and file not found (bcotton)
- Pass package_types to dnf base group_install as tuple, not set (awilliam)
- imgcreate: Allow more SquashFS compression options. (fgrose)
- BindChrootMount: Expand this class to include bind mounting of files. (fgrose)
- Obsolete osmin.img processing. (fgrose)
- live.py: harmonize xorrisofs arguments with lorax live/x86.tmpl (fgrose)
- imgcreate/kickstart: Use urlgrabber again instead of urllib (ngompa13)
- Make --livedir & --multi handling more robust. (fgrose)
- editliveos: Use USERNAME now instead of LOGNAME. (fgrose)
- livecd-iso-to-disk: Update test for 'gio' presence. (fgrose)
- live.py: Store EFI boot images in /images/. (fgrose)
- livecd-iso-to-disk: Use -E, --exit-if-exists option to udevadm settle. (fgrose)
- live.py: Update xorrisofs_options for x86 images. (fgrose)
- editliveos: Rework installing packages into image (khoidinhtrinh)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:27.1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1911799 - livecd-creator fails after installing grub2-efi-x64-cdboot
https://bugzilla.redhat.com/show_bug.cgi?id=1911799
--------------------------------------------------------------------------------
================================================================================
notekit-0.1-4.fc33 (FEDORA-2021-0f1c379ae3)
Hierarchical markdown notetaking application with tablet support
--------------------------------------------------------------------------------
Update Information:
Hierarchical markdown notetaking application with tablet support -
https://github.com/blackhole89/notekit
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917075 - Review Request: notekit - Hierarchical markdown notetaking
application with tablet support
https://bugzilla.redhat.com/show_bug.cgi?id=1917075
--------------------------------------------------------------------------------
================================================================================
qownnotes-21.5.1-1.fc33 (FEDORA-2021-2799e443ba)
Plain-text file markdown note taking with Nextcloud integration
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 8 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 21.5.1-1
- build(update): 21.5.1
* Tue Apr 27 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> -
21.3.1-2.20210312gitb71ba02
- build(rebuild): 'botan2' soname bump
--------------------------------------------------------------------------------
================================================================================
rust-1.52.0-1.fc33 (FEDORA-2021-1204226ec6)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
Update to Rust 1.52.0: - Separate output for `cargo clippy` and `cargo check`.
- Stabilized APIs See the [blog post](https://blog.rust-
lang.org/2021/05/06/Rust-1.52.0.html) and [release
notes](https://github.com/rust-
lang/rust/blob/master/RELEASES.md#version-1520-2021-05-06) for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 6 2021 Josh Stone <jistone(a)redhat.com> - 1.52.0-1
- Update to 1.52.0.
--------------------------------------------------------------------------------
================================================================================
systemtap-4.5-1.fc33 (FEDORA-2021-87e1f53b44)
Programmable system-wide instrumentation system
--------------------------------------------------------------------------------
Update Information:
SystemTap upstream release 4.5.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 7 2021 Serhei Makarov <me(a)serhei.io> - 4.5-1
- Upstream release.
* Mon Mar 22 2021 Frank Ch. Eigler <fche(a)redhat.com> - 4.4-4
- Add kernel 5.11 compatibility backports
* Wed Feb 10 2021 Frank Ch. Eigler <fche(a)redhat.com> - 4.4-3
- Add debuginfod client-lib prereq for buildid probing
* Mon Dec 7 2020 Stan Cox <scox(a)redhat.com> - 4.4-2
- Rebuild for dyninst 10.2
* Mon Nov 9 2020 Frank Ch. Eigler <fche(a)redhat.com> - 4.4-1
- Upstream release.
* Thu Jun 11 2020 Frank Ch. Eigler <fche(a)redhat.com> - 4.3-1
- Upstream release.
* Mon Nov 18 2019 Sagar Patel <sapatel(a)redhat.com> - 4.2-1
- Upstream release.
--------------------------------------------------------------------------------