The following Fedora 33 Security updates need testing:
Age URL
43
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8794383d6f libntlm-1.6-1.fc33
30
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3b4dfd9df8 tor-0.4.4.6-1.fc33
19
https://bodhi.fedoraproject.org/updates/FEDORA-2020-9fa782be3e
perl-Convert-ASN1-0.27-21.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-62d2ff9fa8
libdb-5.3.28-45.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-3b0bb05117
rclone-1.53.3-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6f1079934c
drupal8-8.9.11-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2020-cc19e88a1f
synergy-1.12.0-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ef1870065a
openssl-1.1.1i-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ceaf490686 curl-7.71.1-8.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4cd57a6876
mingw-openjpeg2-2.3.1-10.fc33 openjpeg2-2.3.1-9.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-c549cf2462
mingw-jasper-2.0.22-3.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8a8f8b244f
libmaxminddb-1.4.3-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-eeb66c2ece
matrix-synapse-1.24.0-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-f997de7d0e
fprintd-1.90.8-1.fc33 libfprint-1.90.6-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-6cc5654c0e
phpldapadmin-1.2.6.2-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b732958765
kernel-5.9.14-200.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
33
https://bodhi.fedoraproject.org/updates/FEDORA-2020-880fbc10b8
openbox-3.6.1-16.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2020-60572c0ffc
mtools-4.0.26-1.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e117bc477b bolt-0.9.1-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d7c4e7177a
iproute-5.9.0-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-07c0f162b9
kexec-tools-2.0.20-21.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-152c03e942 dnf-4.5.2-1.fc33
dnf-plugins-extras-4.0.13-1.fc33 libdnf-0.55.2-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d9d43bbfe0
perl-Encode-3.08-458.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-62d2ff9fa8
libdb-5.3.28-45.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4fbf4c6152
pipewire-0.3.17-3.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2020-eae3e56589 pungi-4.2.7-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-d89f865ef5
libmodulemd-2.11.0-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-8a8f8b244f
libmaxminddb-1.4.3-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4cd57a6876
mingw-openjpeg2-2.3.1-10.fc33 openjpeg2-2.3.1-9.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ceaf490686 curl-7.71.1-8.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-35c98b7834
annobin-9.49-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-ef1870065a
openssl-1.1.1i-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2020-e307fe0d5e
perl-libnet-3.12-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-b732958765
kernel-5.9.14-200.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2020-74872a7110
libreport-2.14.0-15.fc33
The following builds have been pushed to Fedora 33 updates-testing
bandit-1.7.0-1.fc33
dislocker-0.7.3-1.fc33
fldigi-4.1.17-1.fc33
flrig-1.3.53-1.fc33
gammastep-2.0.6-1.fc33
gmediarender-0.0.8-6.fc33
golang-github-yuin-goldmark-1.3.0-1.fc33
gsequencer-3.7.7-0.fc33
onedrive-2.4.8-1.fc33
pngcheck-2.4.0-4.fc33
python-mplcursors-0.4-1.fc33
python-natsort-7.1.0-1.fc33
python-nikola-8.1.2-1.fc33
python-pytest-mpl-0.12-1.fc33
sympy-1.7.1-1.fc33
wine-6.0-0.2rc2.fc33
xsnow-3.1.8-1.fc33
yash-2.51-1.fc33
youtube-dl-2020.12.14-1.fc33
Details about builds:
================================================================================
bandit-1.7.0-1.fc33 (FEDORA-2020-9b6cfd2417)
A framework for performing security analysis of Python source code
--------------------------------------------------------------------------------
Update Information:
Bump to 1.7.0 ---- Version bump
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1.7.0-1
- Update to 1.7.0 (#1907119)
* Sun Dec 6 2020 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 1.6.3-1
- Version bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1904861 - bandit-1.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1904861
--------------------------------------------------------------------------------
================================================================================
dislocker-0.7.3-1.fc33 (FEDORA-2020-769d151294)
Utility to access BitLocker encrypted volumes
--------------------------------------------------------------------------------
Update Information:
dislocker 0.7.3 =============== This version is only used to update dislocker's
brew file and the BitBake recipe for OSX's and BitBake's users to be able to
download v0.7.2. If you're not an OSX nor a BitBake user, you can use either
v0.7.2 or v0.7.3, this won't make any difference. dislocker 0.7.2
=============== Bugfixes -------- * Fix compilation on OSX when ruby
dependency is installed Feature improvement ------------------- * Reported
NTFS volume size is more accurate * Add ability to decrypt from a VMK file *
Add ability to read the user password from the environment variable
`DISLOCKER_PASSWORD` * Add ability to read the user password from pipes *
Decryption/encryption speed has been improved by disabling faulty threading
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Robert Scheck <robert(a)fedoraproject.org> 0.7.3-1
- Spec file cleanup
- Upgrade to 0.7.3 (#1876804, thanks to Eshin Kunishima)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1876804 - Segmentation fault
https://bugzilla.redhat.com/show_bug.cgi?id=1876804
--------------------------------------------------------------------------------
================================================================================
fldigi-4.1.17-1.fc33 (FEDORA-2020-4846353afe)
Digital modem program for Linux
--------------------------------------------------------------------------------
Update Information:
This is a paired release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 3 2020 Richard Shaw <hobbes1069(a)gmail.com> - 4.1.17-1
- Update to 4.1.17.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1897714 - fldigi-4.1.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1897714
[ 2 ] Bug #1903899 - flrig-1.3.53 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1903899
--------------------------------------------------------------------------------
================================================================================
flrig-1.3.53-1.fc33 (FEDORA-2020-4846353afe)
Transceiver control program
--------------------------------------------------------------------------------
Update Information:
This is a paired release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 10 2020 Richard Shaw <hobbes1069(a)gmail.com> - 1.3.53-1
- Update to 1.3.53.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1897714 - fldigi-4.1.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1897714
[ 2 ] Bug #1903899 - flrig-1.3.53 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1903899
--------------------------------------------------------------------------------
================================================================================
gammastep-2.0.6-1.fc33 (FEDORA-2020-6f8e9100c5)
Adjusts the color temperature of your screen according to time of day
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.6
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 2.0.6-1
- Update to 2.0.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1907113 - gammastep-2.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1907113
--------------------------------------------------------------------------------
================================================================================
gmediarender-0.0.8-6.fc33 (FEDORA-2020-fa16bcad0c)
Resource efficient UPnP/DLNA renderer
--------------------------------------------------------------------------------
Update Information:
Fix 1794908 by fixing the directory ownership
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Zamir SUN <sztsian(a)gmail.com> - 0.0.8-6
- Fix directory ownership
- Fixes 1794908
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1794908 - gmediarender doesn't work as a service
https://bugzilla.redhat.com/show_bug.cgi?id=1794908
--------------------------------------------------------------------------------
================================================================================
golang-github-yuin-goldmark-1.3.0-1.fc33 (FEDORA-2020-5a9944eaae)
Markdown parser written in Go
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.3.0-1
- Update to latest version (#1907235)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1907235 - golang-github-yuin-goldmark-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1907235
--------------------------------------------------------------------------------
================================================================================
gsequencer-3.7.7-0.fc33 (FEDORA-2020-17ea9f2d99)
Audio processing engine
--------------------------------------------------------------------------------
Update Information:
updated Source to point to new minor version directory
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
onedrive-2.4.8-1.fc33 (FEDORA-2020-f7f7ee11ef)
OneDrive Free Client written in D
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.8 to apply more fixes
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Zamir SUN <sztsian(a)gmail.com> - 2.4.8-1
- Update to 2.4.8 to apply more fixes
* Sat Nov 28 2020 Zamir SUN <sztsian(a)gmail.com> - 2.4.7-1
- Update to 2.4.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1902629 - onedrive-2.4.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1902629
--------------------------------------------------------------------------------
================================================================================
pngcheck-2.4.0-4.fc33 (FEDORA-2020-88e5bc9a0b)
Verifies the integrity of PNG, JNG and MNG files
--------------------------------------------------------------------------------
Update Information:
Security fix for multiple buffer overflows from crafted file input
(RHBZ#1902786,1902806,1902810: no CVE yet assigned), and for buffer overrun
printing the contents of the sPLT chunk in certain malformed inputs
(RHBZ#1905775: no tracking bug or CVE yet assigned); also, new eXIf support and
assorted small bug fixes
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.4.0-4
- Bounds-check all accesses into enumerated-value name arrays; a malformed file
could have caused a buffer overrun in several of these cases. (RHBZ#1902810)
- Fix buffer overrun when print_buffer() is passed a nonpositive size, which
can occur in practice for certain malformed inputs. (RHBZ#1902810)
- In some cases, the chunk length from the file data (sz) is used to index into
the read buffer without sufficient bounds-checking, leading to a buffer
overrun. Fix this for PPLT, hIST, sCAL, FRAM, SAVE, nEED, PAST, DISC, DROP,
DBYK, ORDR, and SEEK chunks. (RHBZ#1902810)
- Fix buffer overrun printing the contents of the sPLT chunk in certain
malformed inputs. (RHBZ#1905775)
- Backport fix for off-by-one bug in check_magic() from 3.0.0
- Backport fix for zlib version warnings going to stdout from 3.0.0
- Use name macro when referencing patches.
- Add BR on make in anticipation of
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot.
- New upstream version 2.4.0
- Added new license file for main package (same MIT-style license)
- Drop format-security patch, now upstreamed
- Use upstreamed man pages; no need to generate with help2man anymore
- Add rpmlintrc rules for -extras subpackage
- Add rpmlintrc file to suppress spurious rpmlint warnings
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1902806 - pngcheck: Multiple buffer overflows from crafted file input
https://bugzilla.redhat.com/show_bug.cgi?id=1902806
--------------------------------------------------------------------------------
================================================================================
python-mplcursors-0.4-1.fc33 (FEDORA-2020-cafe6afee2)
Interactive data selection cursors for Matplotlib
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 12 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.4-1
- Update to latest version (#1906201)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1906201 - python-mplcursors-0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1906201
--------------------------------------------------------------------------------
================================================================================
python-natsort-7.1.0-1.fc33 (FEDORA-2020-d59e38d953)
Python library that sorts lists using the "natural order" sort
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. Changes from previous release are: ###
Added - ``os_sorted``, ``os_sort_keygen``, and ``os_sort_key`` to better
support sorting like the file browser on the current operating system -
Support for Python 3.9 ### Changed - Treate `None` like `NaN` internally to
avoid `TypeError` - No longer fail tests every time a new Python version is
released ### Fixed - Various typos, missing figures, and out-of-date
information in the "How it works" - Fix typo in CHANGELOG - Updated "How
it
works" to account for Pandas updates
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Jos�� Matos <jamatos(a)fedoraproject.org> - 7.1.0-1
- Update to 7.1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1900210 - python-natsort-7.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1900210
--------------------------------------------------------------------------------
================================================================================
python-nikola-8.1.2-1.fc33 (FEDORA-2020-f2c54afa57)
A modular, fast, simple, static website and blog generator
--------------------------------------------------------------------------------
Update Information:
New in v8.1.2 ============= Features -------- * Support for multiple authors
per post ��� comma-separated, enabled by ``MULTIPLE_AUTHORS_PER_POST`` setting
(Issue #3252) * Add ``navbar_custom_bg`` theme option to ``bootstrap4`` and
document options for ``bootstrap4`` better (Issue #3443) * Add Marathi
translation * Restore ``caps`` typogrify filter (wraps strings of capital
letters with ``<span class="caps">`` (via Issue #3405) * Improve
``nikola
auto`` performance with rate-limiting, support ``-n`` argument to pass to
``nikola build`` (Issue #3401) * Add support for the `Utterances
<
https://utteranc.es>`_ comment system Bugfixes -------- * Fix previewimages
(post- and root-relative) in bootblog4/galleries featured posts for non-
server-root sites (Issue #3471) * Windows: Also fix symlinks when installing
from source with pip; if possible, enable Developer Mode and run ``git config
--global core.symlinks true`` before cloning the Nikola repo * Fix clicking on
links to image files. baguetteBox now requires a link (``<a>``) to have an
``<img>`` as a child in order to make the link activate the lightbox. (Issue
#3472) * Fix ``LINK_CHECK_WHITELIST`` having issues due to mixing Unicode and
bytestrings (Issue #3466) * Add support for ``nbconvert>=6.0.0`` (Issue #3457) *
Read files as utf-8-sig to allow BOM in input files * Don���t break slugs with
slashes in ``doc`` directive (Issue #3450) * Avoid warnings from type
annotations in ``auto`` caused by missing ``aiohttp`` (Issue #3451) * Ensure
query strings and fragments are kept with ``URL_TYPE = "full_path"`` (Issue
#3448) * Don���t run typogrify filters on ``<title>`` tag to avoid adding extra
tags (Issue #3405) * Fix handling of duplicate plugins on Windows * Allow else
clause in post-list plugin. (Issue #3436) * Ensure ``type`` metadata value from
plugins is preserved (Issue 3445) * Fix path handlers with slashes on Windows
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Jos�� Matos <jamatos(a)fedoraproject.org> - 8.1.2-1
- update to 8.2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1897904 - python-nikola-8.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1897904
--------------------------------------------------------------------------------
================================================================================
python-pytest-mpl-0.12-1.fc33 (FEDORA-2020-0c5243fc5b)
Pytest plugin for testing figure output from Matplotlib
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.12-1
- Update to latest version (#1894886)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1894886 - python-pytest-mpl-0.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1894886
--------------------------------------------------------------------------------
================================================================================
sympy-1.7.1-1.fc33 (FEDORA-2020-d312b367e4)
A Python library for symbolic mathematics
--------------------------------------------------------------------------------
Update Information:
Core changes in version 1.7.1: - There was a regression in 1.7 that meant that
`__slots__` would not work correctly for Basic instances and they would end up
having `__dict__`. This also made it possible to set arbitrary attributes on
Basic instances such as symbols which breaks immutability. This was fixed in
1.7.1 to ensure that Basic instances do not have `__dict__` and it is not
possible to set attributes on them. (#20590 by @oscarbenjamin) Series changes
in 1.7.1: - Fixed lazy iteration of series with `expr.series(x, n=None)` which
was broken in the 1.7 release. (#20589 by @oscarbenjamin and @sachin-4099)
Stats changes in 1.7.1: - Updated documentation for sympy.stats.sample for seed
argument. (#20555 by @czgdp1807) - sympy.stats.sample now has an optional seed
argument. (#20528 by @czgdp1807) - Random failures with sympy.stats.sample have
now been fixed. (#20527 by @czgdp1807) In addition, this update works around a
problem preventing preview of images. See the associated bug for details.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 12 2020 Jerry James <loganjerry(a)gmail.com> - 1.7.1-1
- Version 1.7.1
* Thu Dec 10 2020 Jerry James <loganjerry(a)gmail.com> - 1.7-2
- Fix preview of PNG images (bz 1906363)
- Add missing Recommends needed to preview images (bz 1906363)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1906363 - sympy.preview uses png codec removed from pyglet
https://bugzilla.redhat.com/show_bug.cgi?id=1906363
[ 2 ] Bug #1907106 - sympy-1.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1907106
--------------------------------------------------------------------------------
================================================================================
wine-6.0-0.2rc2.fc33 (FEDORA-2020-f1e3867352)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
- Bug fixes only, we are in code freeze.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 12 2020 Michael Cronenworth <mike(a)cchtml.com> 6.0-0.2rc2
- version update
--------------------------------------------------------------------------------
================================================================================
xsnow-3.1.8-1.fc33 (FEDORA-2020-f739528c12)
Let it snow on your desktop
--------------------------------------------------------------------------------
Update Information:
* draw stars and meteorites behind birds * reduce the amount of generated snow *
minor changes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 7 2020 Andrea Musuruane <musuruan(a)gmail.com> - 3.1.8-1
- Updated to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1900670 - xsnow-3.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1900670
--------------------------------------------------------------------------------
================================================================================
yash-2.51-1.fc33 (FEDORA-2020-c39008ee0e)
Yet Another SHell
--------------------------------------------------------------------------------
Update Information:
New version 2.51 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.51-1
- 2.51
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2020.12.14-1.fc33 (FEDORA-2020-79b3ceb959)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to version 2020.12.14
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 David Schw��rer <davidsch(a)fedoraproject.org> - 2020.12.14-1
- Update to 2020.12.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1907224 - youtube-dl-2020.12.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1907224
--------------------------------------------------------------------------------