The following Fedora 33 Security updates need testing:
Age URL
81
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-71de23bedd
libslirp-4.3.1-5.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f29b4643c7 glibc-2.32-8.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4ad7c70d71
ansible-2.9.23-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a856024cca
nginx-1.20.1-3.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-57e3c4261a
libtpms-0.8.4-1.20210624gita594c4692a.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-717516a2e9
php-league-flysystem-1.1.4-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-891c1ab1ac
dovecot-2.3.15-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-58ea3e138d
rabbitmq-server-3.8.18-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-01f851ab8d
seamonkey-2.53.8-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c5f3b8aae
python-urllib3-1.25.8-5.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-172c8bd11d php-7.4.21-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
99
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
34
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-443a2c1229
libpcap-1.10.1-1.fc33 tcpdump-4.99.1-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8a4490b862 satyr-0.38-1.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5d7402c3ff nspr-4.31.0-1.fc33
nss-3.67.0-1.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-71de23bedd
libslirp-4.3.1-5.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e599e61c55
osinfo-db-20210621-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ad3e5e224a
nfs-utils-2.5.4-0.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f29b4643c7 glibc-2.32-8.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d24ae1c1 gdb-10.2-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-71a6c4fbe4
libxcrypt-4.4.23-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6875ea999b gdisk-1.0.8-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-31b3bb27dc
mtools-4.0.31-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
bgpq3-0.1.35-0.fc33
buildah-1.21.2-1.fc33
chromium-91.0.4472.114-1.fc33
containernetworking-plugins-1.0.0-0.2.rc1.fc33
containers-common-1-18.fc33
crun-0.20.1-1.fc33
kchmviewer-8.0-1.fc33
kernel-5.12.14-200.fc33
libzia-4.30-1.fc33
nextcloud-19.0.12-1.fc33
nfs-ganesha-3.5-7.fc33
perl-Mojolicious-8.73-2.fc33
podman-3.2.2-1.fc33
python-tqdm-4.61.1-1.fc33
python3.6-3.6.14-1.fc33
python3.7-3.7.11-1.fc33
rpminspect-data-centos-1.0-1.fc33
rust-plotters-backend-0.3.1-1.fc33
rust-plotters-svg-0.3.1-1.fc33
skopeo-1.3.1-1.fc33
sshguard-2.4.2-1.fc33
tucnak-4.30-1.fc33
wine-dxvk-1.9-1.fc33
xtb-6.4.1-2.fc33
Details about builds:
================================================================================
bgpq3-0.1.35-0.fc33 (FEDORA-2021-294e87fac4)
Automate BGP filter generation based on routing database information
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release v 0.1.35
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Bennie Joubert <benniej(a)fedoraproject.org> - 0.1.35-0
- Update to latest upstream release v 0.1.35
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.31-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
buildah-1.21.2-1.fc33 (FEDORA-2021-0c53d8738d)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1 ---- Autobuilt v3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.21.2-1
- bump to v1.21.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
[ 3 ] Bug #1977533 - buildah-1.21.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977533
--------------------------------------------------------------------------------
================================================================================
chromium-91.0.4472.114-1.fc33 (FEDORA-2021-689d9fd1dc)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Security fixes. CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509
CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513 CVE-2021-30514
CVE-2021-30515 CVE-2021-30516 CVE-2021-30517 CVE-2021-30518 CVE-2021-30519
CVE-2021-30520 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524
CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528 CVE-2021-30529
CVE-2021-30530 CVE-2021-30531 CVE-2021-30532 CVE-2021-30533 CVE-2021-30534
CVE-2021-30535 CVE-2021-30536 CVE-2021-30537 CVE-2021-30538 CVE-2021-30539
CVE-2021-30540 CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547
CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551 CVE-2021-30552
CVE-2021-30553 CVE-2021-30554 CVE-2021-30555 CVE-2021-30556 CVE-2021-30557
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 23 2021 Tom Callaway <spot(a)fedoraproject.org> - 91.0.4472.114-1
- update to 91.0.4472.114
* Tue Jun 1 2021 Tom Callaway <spot(a)fedoraproject.org> - 91.0.4472.77-1
- update to 91.0.4472.77
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965424 - CVE-2021-30521 chromium-browser: Heap buffer overflow in Autofill
https://bugzilla.redhat.com/show_bug.cgi?id=1965424
[ 2 ] Bug #1965425 - CVE-2021-30522 chromium-browser: Use after free in WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1965425
[ 3 ] Bug #1965426 - CVE-2021-30523 chromium-browser: Use after free in WebRTC
https://bugzilla.redhat.com/show_bug.cgi?id=1965426
[ 4 ] Bug #1965427 - CVE-2021-30524 chromium-browser: Use after free in TabStrip
https://bugzilla.redhat.com/show_bug.cgi?id=1965427
[ 5 ] Bug #1965428 - CVE-2021-30525 chromium-browser: Use after free in TabGroups
https://bugzilla.redhat.com/show_bug.cgi?id=1965428
[ 6 ] Bug #1965429 - CVE-2021-30526 chromium-browser: Out of bounds write in TabStrip
https://bugzilla.redhat.com/show_bug.cgi?id=1965429
[ 7 ] Bug #1965430 - CVE-2021-30527 chromium-browser: Use after free in WebUI
https://bugzilla.redhat.com/show_bug.cgi?id=1965430
[ 8 ] Bug #1965431 - CVE-2021-30528 chromium-browser: Use after free in
WebAuthentication
https://bugzilla.redhat.com/show_bug.cgi?id=1965431
[ 9 ] Bug #1965432 - CVE-2021-30529 chromium-browser: Use after free in Bookmarks
https://bugzilla.redhat.com/show_bug.cgi?id=1965432
[ 10 ] Bug #1965433 - CVE-2021-30530 chromium-browser: Out of bounds memory access in
WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1965433
[ 11 ] Bug #1965434 - CVE-2021-30531 chromium-browser: Insufficient policy enforcement
in Content Security Policy
https://bugzilla.redhat.com/show_bug.cgi?id=1965434
[ 12 ] Bug #1965435 - CVE-2021-30532 chromium-browser: Insufficient policy enforcement
in Content Security Policy
https://bugzilla.redhat.com/show_bug.cgi?id=1965435
[ 13 ] Bug #1965436 - CVE-2021-30533 chromium-browser: Insufficient policy enforcement
in PopupBlocker
https://bugzilla.redhat.com/show_bug.cgi?id=1965436
[ 14 ] Bug #1965437 - CVE-2021-30534 chromium-browser: Insufficient policy enforcement
in iFrameSandbox
https://bugzilla.redhat.com/show_bug.cgi?id=1965437
[ 15 ] Bug #1965438 - CVE-2021-30535 chromium-browser: Double free in ICU
https://bugzilla.redhat.com/show_bug.cgi?id=1965438
[ 16 ] Bug #1965439 - CVE-2021-30536 chromium-browser: Out of bounds read in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1965439
[ 17 ] Bug #1965440 - CVE-2021-30537 chromium-browser: Insufficient policy enforcement
in cookies
https://bugzilla.redhat.com/show_bug.cgi?id=1965440
[ 18 ] Bug #1965441 - CVE-2021-30538 chromium-browser: Insufficient policy enforcement
in content security policy
https://bugzilla.redhat.com/show_bug.cgi?id=1965441
[ 19 ] Bug #1965442 - CVE-2021-30539 chromium-browser: Insufficient policy enforcement
in content security policy
https://bugzilla.redhat.com/show_bug.cgi?id=1965442
[ 20 ] Bug #1965443 - CVE-2021-30540 chromium-browser: Incorrect security UI in
payments
https://bugzilla.redhat.com/show_bug.cgi?id=1965443
[ 21 ] Bug #1970106 - CVE-2021-30544 chromium-browser: Use after free in BFCache
https://bugzilla.redhat.com/show_bug.cgi?id=1970106
[ 22 ] Bug #1970107 - CVE-2021-30545 chromium-browser: Use after free in Extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1970107
[ 23 ] Bug #1970108 - CVE-2021-30546 chromium-browser: Use after free in Autofill
https://bugzilla.redhat.com/show_bug.cgi?id=1970108
[ 24 ] Bug #1970109 - CVE-2021-30547 chromium-browser: Out of bounds write in ANGLE
https://bugzilla.redhat.com/show_bug.cgi?id=1970109
[ 25 ] Bug #1970110 - CVE-2021-30548 chromium-browser: Use after free in Loader
https://bugzilla.redhat.com/show_bug.cgi?id=1970110
[ 26 ] Bug #1970111 - CVE-2021-30549 chromium-browser: Use after free in Spell check
https://bugzilla.redhat.com/show_bug.cgi?id=1970111
[ 27 ] Bug #1970112 - CVE-2021-30550 chromium-browser: Use after free in Accessibility
https://bugzilla.redhat.com/show_bug.cgi?id=1970112
[ 28 ] Bug #1970113 - CVE-2021-30551 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1970113
[ 29 ] Bug #1970114 - CVE-2021-30552 chromium-browser: Use after free in Extensions
https://bugzilla.redhat.com/show_bug.cgi?id=1970114
[ 30 ] Bug #1970115 - CVE-2021-30553 chromium-browser: Use after free in Network
service
https://bugzilla.redhat.com/show_bug.cgi?id=1970115
[ 31 ] Bug #1971568 - CVE-2021-30506 chromium-browser: Incorrect security UI in Web App
Installs
https://bugzilla.redhat.com/show_bug.cgi?id=1971568
[ 32 ] Bug #1971569 - CVE-2021-30507 chromium-browser: Inappropriate implementation in
Offline
https://bugzilla.redhat.com/show_bug.cgi?id=1971569
[ 33 ] Bug #1971570 - CVE-2021-30508 chromium-browser: Heap buffer overflow in Media
Feeds
https://bugzilla.redhat.com/show_bug.cgi?id=1971570
[ 34 ] Bug #1971571 - CVE-2021-30509 chromium-browser: Out of bounds write in Tab Strip
https://bugzilla.redhat.com/show_bug.cgi?id=1971571
[ 35 ] Bug #1971572 - CVE-2021-30510 chromium-browser: Race in Aura
https://bugzilla.redhat.com/show_bug.cgi?id=1971572
[ 36 ] Bug #1971573 - CVE-2021-30511 chromium-browser: Out of bounds read in Tab Groups
https://bugzilla.redhat.com/show_bug.cgi?id=1971573
[ 37 ] Bug #1971574 - CVE-2021-30512 chromium-browser: Use after free in Notifications
https://bugzilla.redhat.com/show_bug.cgi?id=1971574
[ 38 ] Bug #1971575 - CVE-2021-30513 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1971575
[ 39 ] Bug #1971576 - CVE-2021-30514 chromium-browser: Use after free in Autofill
https://bugzilla.redhat.com/show_bug.cgi?id=1971576
[ 40 ] Bug #1971577 - CVE-2021-30516 chromium-browser: Heap buffer overflow in History
https://bugzilla.redhat.com/show_bug.cgi?id=1971577
[ 41 ] Bug #1971578 - CVE-2021-30517 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1971578
[ 42 ] Bug #1971579 - CVE-2021-30518 chromium-browser: Heap buffer overflow in Reader
Mode
https://bugzilla.redhat.com/show_bug.cgi?id=1971579
[ 43 ] Bug #1971580 - CVE-2021-30519 chromium-browser: Use after free in Payments
https://bugzilla.redhat.com/show_bug.cgi?id=1971580
[ 44 ] Bug #1971581 - CVE-2021-30520 chromium-browser: Use after free in Tab Strip
https://bugzilla.redhat.com/show_bug.cgi?id=1971581
[ 45 ] Bug #1973547 - CVE-2021-30554 chromium-browser: Use after free in WebGL
https://bugzilla.redhat.com/show_bug.cgi?id=1973547
[ 46 ] Bug #1973548 - CVE-2021-30555 chromium-browser: Use after free in Sharing
https://bugzilla.redhat.com/show_bug.cgi?id=1973548
[ 47 ] Bug #1973549 - CVE-2021-30556 chromium-browser: Use after free in WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1973549
[ 48 ] Bug #1973550 - CVE-2021-30557 chromium-browser: Use after free in TabGroups
https://bugzilla.redhat.com/show_bug.cgi?id=1973550
--------------------------------------------------------------------------------
================================================================================
containernetworking-plugins-1.0.0-0.2.rc1.fc33 (FEDORA-2021-0c53d8738d)
Libraries for writing CNI plugin
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1 ---- Autobuilt v3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 7 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.0.0-0.2.rc1
- Resolves: #1962008 - use correct plugin path in unitfile
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
[ 3 ] Bug #1977533 - buildah-1.21.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977533
--------------------------------------------------------------------------------
================================================================================
containers-common-1-18.fc33 (FEDORA-2021-0c53d8738d)
Common configuration and documentation for containers
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1 ---- Autobuilt v3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 23 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 4:1-18
- Resolves: #1958474 - allow futex_time64 in seccomp.json
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 4:1-17
- use configs from latest upstream tags
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
[ 3 ] Bug #1977533 - buildah-1.21.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977533
--------------------------------------------------------------------------------
================================================================================
crun-0.20.1-1.fc33 (FEDORA-2021-0c53d8738d)
OCI runtime written in C
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1 ---- Autobuilt v3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.20.1-1
- Fixes:
https://github.com/containers/crun/issues/687
* Wed Jun 2 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.20-1
- bump to 0.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
[ 3 ] Bug #1977533 - buildah-1.21.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977533
--------------------------------------------------------------------------------
================================================================================
kchmviewer-8.0-1.fc33 (FEDORA-2021-81ec1ab3af)
CHM viewer
--------------------------------------------------------------------------------
Update Information:
New release based on Qt Webengine.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Robin Lee <cheeselee(a)fedoraproject.org> - 8.0-1
- Update to 8.0
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1977550 - kchmviewer-8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977550
--------------------------------------------------------------------------------
================================================================================
kernel-5.12.14-200.fc33 (FEDORA-2021-95f2f1cfc7)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.12.14 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.12.14-0]
- Add CONFIG_SYSTEM_REVOCATION_LIST backported config option for 5.12.14 (Justin M.
Forbes)
- can: bcm: delay release of struct bcm_op after synchronize_rcu (Thadeu Lima de Souza
Cascardo)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965461 - CVE-2021-22543 kernel: Improper handling of VM_IO|VM_PFNMAP vmas in
KVM can bypass RO checks
https://bugzilla.redhat.com/show_bug.cgi?id=1965461
[ 2 ] Bug #1971651 - CVE-2021-3609 kernel: race condition in net/can/bcm.c leads to
local privilege escalation
https://bugzilla.redhat.com/show_bug.cgi?id=1971651
--------------------------------------------------------------------------------
================================================================================
libzia-4.30-1.fc33 (FEDORA-2021-f76296edd4)
Platform abstraction layer for the tucnak package
--------------------------------------------------------------------------------
Update Information:
This is an update of tucnak.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.30-1
- New version
Related: rhbz#1977455
--------------------------------------------------------------------------------
================================================================================
nextcloud-19.0.12-1.fc33 (FEDORA-2021-afa7968aeb)
Private file sync and share server
--------------------------------------------------------------------------------
Update Information:
- Update to Nextcloud 19.0.12, fixes CVE-2021-22915 (RHBZ 1977202) - Include
php-fpm config in httpd subpackage - Set php memory limit to 512MB (RHBZ
1933529) - Add Referrer-policy no-referrer to nginx config (RHBZ 1933530)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Christopher Engelhard <ce(a)lcts.de> - 19.0.12-1
- Update to Nextcloud 19.0.12, fixes CVE-2021-22915 (RHBZ 1977202)
- Include php-fpm config in httpd subpackage
- Set php memory limit to 512MB (RHBZ 1933529)
- Add Referrer-policy no-referrer to nginx config (RHBZ 1933530)
* Sun Feb 28 2021 Christopher Engelhard <ce(a)lcts.de> - 19.0.9-1
- Update to Nextcloud 19.0.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933529 - The PHP memory limit is below the recommended value of 512MB
https://bugzilla.redhat.com/show_bug.cgi?id=1933529
[ 2 ] Bug #1933530 - The ���Referrer-Policy��� HTTP header is not set to
���no-referrer���, ���no-referrer-when-downgrade���, ���strict-origin���,
���strict-origin-when-cross-origin��� or ���same-origin���
https://bugzilla.redhat.com/show_bug.cgi?id=1933530
[ 3 ] Bug #1977202 - CVE-2021-22915 nextcloud: lack of inclusion of IPv6 subnets in
rate-limiting considerations allows brute force attacks [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1977202
--------------------------------------------------------------------------------
================================================================================
nfs-ganesha-3.5-7.fc33 (FEDORA-2021-1b1a57568e)
NFS-Ganesha is a NFS Server running in user space
--------------------------------------------------------------------------------
Update Information:
rebuild with libntirpc-3.5, again
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-8.73-2.fc33 (FEDORA-2021-eee91f69df)
A next generation web framework for Perl
--------------------------------------------------------------------------------
Update Information:
This update backports some significant security fixes relating to session
security from the upstream 9.19 release. See
https://github.com/mojolicious/mojo/pull/1791 and
https://github.com/mojolicious
/mojo/commit/3f10b6af0271c4b5b589d2d9c31ea43c8e9087d6 for more details. Please
restart any running services that use Mojolicious after installing the update.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Adam Williamson <awilliam(a)redhat.com> - 8.73-2
- Backport session security fixes from 9.19
--------------------------------------------------------------------------------
================================================================================
podman-3.2.2-1.fc33 (FEDORA-2021-0c53d8738d)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1 ---- Autobuilt v3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 25 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.2-1
- bump to v3.2.2
* Mon Jun 14 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 3:3.2.1-1
- autobuilt v3.2.1
* Thu Jun 10 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-5
- fix crun dependency issue
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-4
- use latest containers-common
* Tue Jun 8 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-3
- keep crun on 0.19.1-3
* Tue Jun 8 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-2
- include podman-machine-cni in podman-plugins subpackage
* Fri Jun 4 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 3:3.2.0-1
- autobuilt v3.2.0
* Wed May 26 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> -
3:3.2.0-0.2.rc3
- autobuilt v3.2.0-rc3
* Fri May 21 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> -
3:3.2.0-0.1.rc2
- autobuilt v3.2.0-rc2
* Wed May 12 2021 Dusty Mabe <dusty(a)dustymabe.com> - 3:3.1.2-3
- Backport upstream bugfix:
https://github.com/containers/podman/pull/10253
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
[ 3 ] Bug #1977533 - buildah-1.21.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977533
--------------------------------------------------------------------------------
================================================================================
python-tqdm-4.61.1-1.fc33 (FEDORA-2021-3eea5c6d4f)
Fast, Extensible Progress Meter
--------------------------------------------------------------------------------
Update Information:
Update to 4.61.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Stephen Gallagher <sgallagh(a)redhat.com> - 4.61.1-1
- Update to 4.61.1
* Wed Jun 30 2021 Stephen Gallagher <sgallagh(a)redhat.com> - 4.61.0-1
- Update to 4.61.0
* Wed Jun 2 2021 Python Maint <python-maint(a)redhat.com> - 4.60.0-2
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1964242 - python-tqdm-4.61.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1964242
--------------------------------------------------------------------------------
================================================================================
python3.6-3.6.14-1.fc33 (FEDORA-2021-5f8ed427be)
Version 3.6 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Update to 3.6.14
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 29 2021 Tomas Hrnciar <thrnciar(a)redhat.com> - 3.6.14-1
- Update to 3.6.14
* Fri May 14 2021 Charalampos Stratakis <cstratak(a)redhat.com> - 3.6.13-3
- Add virtual provides for the bundled libmpdec (rhbz#1943359)
* Thu Feb 25 2021 Petr Viktorin <pviktori(a)redhat.com> - 3.6.13-2
- Fix alignment issue causing failures on x86-64
Resolves:
https://bugzilla.redhat.com/show_bug.cgi?id=1923658
--------------------------------------------------------------------------------
================================================================================
python3.7-3.7.11-1.fc33 (FEDORA-2021-8a69aba1bb)
Version 3.7 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Update to 3.7.11
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 29 2021 Tomas Hrnciar <thrnciar(a)redhat.com> - 3.7.11-1
- Update to 3.7.11
* Fri May 14 2021 Charalampos Stratakis <cstratak(a)redhat.com> - 3.7.10-2
- Add virtual provides for the bundled libmpdec (rhbz#1943359)
--------------------------------------------------------------------------------
================================================================================
rpminspect-data-centos-1.0-1.fc33 (FEDORA-2021-471f0e3569)
Build deviation compliance tool data files for CentOS
--------------------------------------------------------------------------------
Update Information:
rpminspect-data-centos-1.0
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957928 - Review Request: rpminspect-data-centos - Build deviation compliance
tool data files
https://bugzilla.redhat.com/show_bug.cgi?id=1957928
--------------------------------------------------------------------------------
================================================================================
rust-plotters-backend-0.3.1-1.fc33 (FEDORA-2021-375fee7c05)
Plotters Backend API
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 R��mi Lauzier <remilauzier(a)protonmail.com> - 0.3.1-1
- Update to 0.3.1.
- Fixes RHBZ#1977505
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1977505 - rust-plotters-backend-0.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977505
--------------------------------------------------------------------------------
================================================================================
rust-plotters-svg-0.3.1-1.fc33 (FEDORA-2021-877d4e636a)
Plotters SVG backend
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.1. ---- Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1971220 - Review Request: rust-plotters-svg - Plotters SVG backend
https://bugzilla.redhat.com/show_bug.cgi?id=1971220
[ 2 ] Bug #1977548 - rust-plotters-svg-0.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977548
--------------------------------------------------------------------------------
================================================================================
skopeo-1.3.1-1.fc33 (FEDORA-2021-0c53d8738d)
Inspect container images and repositories on registries
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1 ---- Autobuilt v3.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1:1.3.1-1
- bump to v1.3.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
[ 3 ] Bug #1977533 - buildah-1.21.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1977533
--------------------------------------------------------------------------------
================================================================================
sshguard-2.4.2-1.fc33 (FEDORA-2021-b0e73872bf)
Protects hosts from brute-force attacks against SSH and other services
--------------------------------------------------------------------------------
Update Information:
Update to sshguard 2.4.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 9 2021 Christopher Engelhard <ce(a)lcts.de> 2.4.2-1
- Update to 2.4.2
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 2.4.1-6
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1939315 - sshguard-2.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1939315
--------------------------------------------------------------------------------
================================================================================
tucnak-4.30-1.fc33 (FEDORA-2021-f76296edd4)
VHF contest logging program
--------------------------------------------------------------------------------
Update Information:
This is an update of tucnak.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.30-1
- New version
Resolves: rhbz#1977455
* Sun May 30 2021 Richard Shaw <hobbes1069(a)gmail.com> - 4.29-2
- Rebuild for hamlib 4.2.
--------------------------------------------------------------------------------
================================================================================
wine-dxvk-1.9-1.fc33 (FEDORA-2021-987e338bb5)
Vulkan-based D3D11 and D3D10 implementation for Linux / Wine
--------------------------------------------------------------------------------
Update Information:
dxvk 1.9:
https://github.com/doitsujin/dxvk/releases/tag/v1.9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 25 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 1.9-1
- Release 1.9
--------------------------------------------------------------------------------
================================================================================
xtb-6.4.1-2.fc33 (FEDORA-2021-0cfb6c86bd)
Semiempirical Extended Tight-Binding Program Package
--------------------------------------------------------------------------------
Update Information:
Ensure that data files get installed.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 6.4.1-2
- Split data files into separate package.
--------------------------------------------------------------------------------