The following Fedora 34 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b71cc4df92
hivex-1.3.20-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-52dfb60726
python-impacket-0.9.22-3.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b2bd2b1d13 exif-0.6.22-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d04010b90e
yubihsm-connector-3.0.1-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ee3c072cd0
golang-1.16.4-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0e0fd08e44 cacti-1.2.17-1.fc34
cacti-spine-1.2.17-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4d3de3183f
python-pydantic-1.7.4-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-286375de1e
kernel-5.11.20-300.fc34 kernel-headers-5.11.20-300.fc34 kernel-tools-5.11.20-300.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a33f6e36e1
prosody-0.11.9-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e8b7e177a4
libxml2-2.9.12-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-721731dc86
dotnet5.0-5.0.203-1.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
37
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b71cc4df92
hivex-1.3.20-1.fc34
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-43b7562583
fuse3-3.10.3-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b80dcb1360
iptables-1.8.7-8.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6a13e93204
annobin-9.71-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e0bcaeca5
xorg-x11-drv-nouveau-1.0.17-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2d424a6bbb
livecd-tools-28.0-2.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-35bb824391
gnome-terminal-3.40.1-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dad80ca42e
createrepo_c-0.17.2-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9334936788
rdma-core-35.0-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-286375de1e
kernel-5.11.20-300.fc34 kernel-headers-5.11.20-300.fc34 kernel-tools-5.11.20-300.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-02ae6fcb10
gstreamer1-plugins-good-1.18.4-2.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e8b7e177a4
libxml2-2.9.12-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2a65a0f15b
breeze-icon-theme-5.82.0-1.fc34 extra-cmake-modules-5.82.0-1.fc34 kf5-5.82.0-1.fc34
kf5-attica-5.82.0-1.fc34 kf5-baloo-5.82.0-1.fc34 kf5-bluez-qt-5.82.0-1.fc34
kf5-frameworkintegration-5.82.0-1.fc34 kf5-kactivities-5.82.0-1.fc34
kf5-kactivities-stats-5.82.0-1.fc34 kf5-kapidox-5.82.0-1.fc34 kf5-karchive-5.82.0-1.fc34
kf5-kauth-5.82.0-1.fc34 kf5-kbookmarks-5.82.0-1.fc34 kf5-kcalendarcore-5.82.0-1.fc34
kf5-kcmutils-5.82.0-1.fc34 kf5-kcodecs-5.82.0-1.fc34 kf5-kcompletion-5.82.0-1.fc34
kf5-kconfig-5.82.0-1.fc34 kf5-kconfigwidgets-5.82.0-1.fc34 kf5-kcontacts-5.82.0-1.fc34
kf5-kcoreaddons-5.82.0-1.fc34 kf5-kcrash-5.82.0-1.fc34 kf5-kdav-5.82.0-1.fc34
kf5-kdbusaddons-5.82.0-1.fc34 kf5-kdeclarative-5.82.0-1.fc34 kf5-kded-5.82.0-1.fc34
kf5-kdelibs4support-5.82.0-1.fc34 kf5-kdesignerplugin-5.82.0-1.fc34
kf5-kdesu-5.82.0-1.fc34 kf5-kdewebkit-5.82.0-1.fc34 kf5-kdnssd-5.82.0-1.fc34
kf5-kdoctools-5.82.0-1.fc34 kf5-kemoticons-5.82
.0-1.fc34 kf5-kfilemetadata-5.82.0-1.fc34 kf5-kglobalaccel-5.82.0-1.fc34
kf5-kguiaddons-5.82.0-1.fc34 kf5-kholidays-5.82.0-1.fc34 kf5-khtml-5.82.0-1.fc34
kf5-ki18n-5.82.0-1.fc34 kf5-kiconthemes-5.82.0-1.fc34 kf5-kidletime-5.82.0-1.fc34
kf5-kimageformats-5.82.0-1.fc34 kf5-kinit-5.82.0-1.fc34 kf5-kio-5.82.0-2.fc34
kf5-kirigami2-5.82.0-1.fc34 kf5-kitemmodels-5.82.0-1.fc34 kf5-kitemviews-5.82.0-1.fc34
kf5-kjobwidgets-5.82.0-1.fc34 kf5-kjs-5.82.0-1.fc34 kf5-kjsembed-5.82.0-1.fc34
kf5-kmediaplayer-5.82.0-1.fc34 kf5-knewstuff-5.82.0-1.fc34
kf5-knotifications-5.82.0-1.fc34 kf5-knotifyconfig-5.82.0-1.fc34
kf5-kpackage-5.82.0-1.fc34 kf5-kparts-5.82.0-1.fc34 kf5-kpeople-5.82.0-1.fc34
kf5-kplotting-5.82.0-1.fc34 kf5-kpty-5.82.0-1.fc34 kf5-kquickcharts-5.82.0-1.fc34
kf5-kross-5.82.0-1.fc34 kf5-krunner-5.82.0-1.fc34 kf5-kservice-5.82.0-1.fc34
kf5-ktexteditor-5.82.0-1.fc34 kf5-ktextwidgets-5.82.0-1.fc34
kf5-kunitconversion-5.82.0-1.fc34 kf5-kwallet-5.82.0-1.fc34 kf5-kwayland-5.82.0-1.fc34
kf5-kwid
getsaddons-5.82.0-1.fc34 kf5-kwindowsystem-5.82.0-1.fc34 kf5-kxmlgui-5.82.0-1.fc34
kf5-kxmlrpcclient-5.82.0-1.fc34 kf5-modemmanager-qt-5.82.0-1.fc34
kf5-networkmanager-qt-5.82.0-1.fc34 kf5-plasma-5.82.0-1.fc34 kf5-prison-5.82.0-1.fc34
kf5-purpose-5.82.0-1.fc34 kf5-solid-5.82.0-1.fc34 kf5-sonnet-5.82.0-1.fc34
kf5-syndication-5.82.0-1.fc34 kf5-syntax-highlighting-5.82.0-1.fc34
kf5-threadweaver-5.82.0-1.fc34 oxygen-icon-theme-5.82.0-1.fc34
qqc2-desktop-style-5.82.0-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ec18a84d86
selinux-policy-34.7-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-27a5d39518 chrony-4.1-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-880e58a29a dnf-4.7.0-1.fc34
dnf-plugins-core-4.0.21-1.fc34 libdnf-0.62.0-1.fc34 librepo-1.14.0-1.fc34
microdnf-3.8.0-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a58d257dfe
procps-ng-3.3.17-1.fc34.1
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f7c961a96a
libidn2-2.3.1-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fd0a2d9259
btrfs-progs-5.12.1-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
ceph-16.2.4-1.fc34
conmon-2.0.28-1.fc34
dotnet3.1-3.1.115-1.fc34
krecorder-21.05-1.fc34
libapreq2-2.16-1.fc34
libnbd-1.7.10-1.fc34
packit-0.30.1-1.fc34
python-databases-0.4.3-2.fc34
python-fastapi-0.65.1-2.fc34
python-fireflyalgorithm-0.0.4-2.fc34
python-starlette-0.14.2-6.fc34
rust-systemd-0.8.2-1.fc34
wpebackend-fdo-1.9.92-1.fc34
Details about builds:
================================================================================
ceph-16.2.4-1.fc34 (FEDORA-2021-ec414c5e18)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
ceph 16.2.4 GA notes=Security fix for CVE-2021-3524, CVE-2021-3531 ---- Ceph
16.2.3 GA
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 13 2021 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.2.4-1
- 16.2.4 GA
* Thu May 6 2021 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.2.3-1
- 16.2.3 GA
* Wed May 5 2021 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.2.2-1
- 16.2.2 GA
--------------------------------------------------------------------------------
================================================================================
conmon-2.0.28-1.fc34 (FEDORA-2021-60a7cfc390)
OCI container runtime monitor
--------------------------------------------------------------------------------
Update Information:
Autobuilt v2.0.28
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 14 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.0.28-1
- autobuilt v2.0.28
--------------------------------------------------------------------------------
================================================================================
dotnet3.1-3.1.115-1.fc34 (FEDORA-2021-13e3bd248f)
.NET Core Runtime and SDK
--------------------------------------------------------------------------------
Update Information:
This is the May 2021 release for .NET Core 3.1. Release Notes are
here:https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.15/3....
This includes a fix for CVE-2021-31204: NET Core Elevation of Privilege
Vulnerability Please note this additional change needed to benefit from the CVE
fix: > Additionally, if you've deployed self-contained applications targeting
any of the impacted versions, these applications are also vulnerable and must be
recompiled and redeployed.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 12 2021 Omair Majid <omajid(a)redhat.com> - 3.1.115-1
- Update to .NET SDK 3.1.115 and Runtime 3.1.15
--------------------------------------------------------------------------------
================================================================================
krecorder-21.05-1.fc34 (FEDORA-2021-7d6870b166)
Convergent KDE audio recording application
--------------------------------------------------------------------------------
Update Information:
``` * Thu May 06 2021 Onuralp SEZER <thunderbirdtr(a)fedoraproject.org> - 21.05-1
- initial package ```
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
libapreq2-2.16-1.fc34 (FEDORA-2021-7a7d06583a)
Apache HTTP request library
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version, 2.16.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 15 2021 Bojan Smojver <bojan(a)rexursive.com> - 2.16-1
- Bump up to 2.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1960400 - Upgrade libapreq2 to 2.16
https://bugzilla.redhat.com/show_bug.cgi?id=1960400
--------------------------------------------------------------------------------
================================================================================
libnbd-1.7.10-1.fc34 (FEDORA-2021-b91a54e218)
NBD client library in userspace
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.7.10.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 14 2021 Richard W.M. Jones <rjones(a)redhat.com> - 1.7.10-1
- New upstream version 1.7.10.
--------------------------------------------------------------------------------
================================================================================
packit-0.30.1-1.fc34 (FEDORA-2021-86f23070c8)
A tool for integrating upstream projects with Fedora operating system
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 14 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
0.30.1-1
- Fixed a bug caused by new click release. (#1238)
--------------------------------------------------------------------------------
================================================================================
python-databases-0.4.3-2.fc34 (FEDORA-2021-e7fabd81fb)
Async database support for Python
--------------------------------------------------------------------------------
Update Information:
Initial python-databases package for Fedora 34. ----- Rebuilt python-starlette
with tests using python-databases enabled. ---- Rebuilt python-databases with
tests using python-databases enabled. New python-databases version 0.65.1
excludes versions of the python-pydantic dependency that are affected by
CVE-2021-29510. New python-databases release 0.65.0 includes proper support for
python-starlette 0.14.2 New python-databases release 0.64.0 includes
documentation, translation, and internal enhancements, plus: **Features** - ���
Add support for adding multiple examples in request bodies and path, query,
cookie, and header params. New docs: Declare Request Example Data. Initial PR
#1267 by @austinorr. **Fixes** - ���� Pin SQLAlchemy range for tests, as it
doesn't use SemVer. PR #3001 by @tiangolo. - ���� Add newly required type
annotations for mypy. PR #2882 by @tiangolo. - ���� Remove internal "type:
ignore",
now unnecessary. PR #2424 by @AsakuraMizu.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1954259 - Review Request: python-databases - Async database support for
Python
https://bugzilla.redhat.com/show_bug.cgi?id=1954259
[ 2 ] Bug #1958112 - python-fastapi-0.64.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958112
[ 3 ] Bug #1959047 - python-fastapi-0.65.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1959047
[ 4 ] Bug #1959603 - python-fastapi-0.65.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1959603
--------------------------------------------------------------------------------
================================================================================
python-fastapi-0.65.1-2.fc34 (FEDORA-2021-e7fabd81fb)
FastAPI framework
--------------------------------------------------------------------------------
Update Information:
Initial python-databases package for Fedora 34. ----- Rebuilt python-starlette
with tests using python-databases enabled. ---- Rebuilt python-databases with
tests using python-databases enabled. New python-databases version 0.65.1
excludes versions of the python-pydantic dependency that are affected by
CVE-2021-29510. New python-databases release 0.65.0 includes proper support for
python-starlette 0.14.2 New python-databases release 0.64.0 includes
documentation, translation, and internal enhancements, plus: **Features** - ���
Add support for adding multiple examples in request bodies and path, query,
cookie, and header params. New docs: Declare Request Example Data. Initial PR
#1267 by @austinorr. **Fixes** - ���� Pin SQLAlchemy range for tests, as it
doesn't use SemVer. PR #3001 by @tiangolo. - ���� Add newly required type
annotations for mypy. PR #2882 by @tiangolo. - ���� Remove internal "type:
ignore",
now unnecessary. PR #2424 by @AsakuraMizu.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 14 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.65.1-2
- Add python-databases+sqlite BR where it is available
* Thu May 13 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.65.1-1
- New upstream release 0.65.1
- Allow newer sqlalchemy dependency version than that pinned upstream
* Mon May 10 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.65.0-1
- New upstream release 0.65.0
- Drop fastapi-0.63.0-pr-2335.patch, now upstream
* Sat May 8 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.64.0-1
- New upstream release 0.64.0
- Fix Korean summary
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1954259 - Review Request: python-databases - Async database support for
Python
https://bugzilla.redhat.com/show_bug.cgi?id=1954259
[ 2 ] Bug #1958112 - python-fastapi-0.64.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958112
[ 3 ] Bug #1959047 - python-fastapi-0.65.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1959047
[ 4 ] Bug #1959603 - python-fastapi-0.65.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1959603
--------------------------------------------------------------------------------
================================================================================
python-fireflyalgorithm-0.0.4-2.fc34 (FEDORA-2021-25ca8e596b)
Implementation of Firefly Algorithm in Python
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-starlette-0.14.2-6.fc34 (FEDORA-2021-e7fabd81fb)
The little ASGI library that shines
--------------------------------------------------------------------------------
Update Information:
Initial python-databases package for Fedora 34. ----- Rebuilt python-starlette
with tests using python-databases enabled. ---- Rebuilt python-databases with
tests using python-databases enabled. New python-databases version 0.65.1
excludes versions of the python-pydantic dependency that are affected by
CVE-2021-29510. New python-databases release 0.65.0 includes proper support for
python-starlette 0.14.2 New python-databases release 0.64.0 includes
documentation, translation, and internal enhancements, plus: **Features** - ���
Add support for adding multiple examples in request bodies and path, query,
cookie, and header params. New docs: Declare Request Example Data. Initial PR
#1267 by @austinorr. **Fixes** - ���� Pin SQLAlchemy range for tests, as it
doesn't use SemVer. PR #3001 by @tiangolo. - ���� Add newly required type
annotations for mypy. PR #2882 by @tiangolo. - ���� Remove internal "type:
ignore",
now unnecessary. PR #2424 by @AsakuraMizu.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 14 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.14.2-6
- Add databases[sqlite] BR for testing where available (F34+)
* Tue Mar 16 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.14.2-5
- Drop python3dist(setuptools) BR, redundant with %pyproject_buildrequires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1954259 - Review Request: python-databases - Async database support for
Python
https://bugzilla.redhat.com/show_bug.cgi?id=1954259
[ 2 ] Bug #1958112 - python-fastapi-0.64.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958112
[ 3 ] Bug #1959047 - python-fastapi-0.65.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1959047
[ 4 ] Bug #1959603 - python-fastapi-0.65.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1959603
--------------------------------------------------------------------------------
================================================================================
rust-systemd-0.8.2-1.fc34 (FEDORA-2021-dd116f8411)
Rust interface to libsystemd/libelogind provided APIs
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1944422 - Review Request: rust-systemd - A rust interface to
libsystemd/libelogind provided APIs
https://bugzilla.redhat.com/show_bug.cgi?id=1944422
--------------------------------------------------------------------------------
================================================================================
wpebackend-fdo-1.9.92-1.fc34 (FEDORA-2021-72b0305521)
A WPE backend designed for Linux desktop systems
--------------------------------------------------------------------------------
Update Information:
Fixes frozen web views not being updated after process swap when multiple web
views are in use.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 14 2021 Michael Catanzaro <mcatanzaro(a)redhat.com> - 1.9.92-1
- Update to 1.9.92
- Add GPG verification of source tarball
--------------------------------------------------------------------------------