The following Fedora 33 Security updates need testing:
Age URL
53
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8917c5d9d2
exiv2-0.27.3-7.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e145f477df
mingw-openjpeg2-2.3.1-12.fc33 openjpeg2-2.3.1-11.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-67691ad99d
wireshark-3.4.5-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ac3ef133e8
singularity-3.7.4-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8ca8263bde
dhcp-4.4.2-9.b1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4cdb0f68c7
python-lxml-4.5.1-4.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bdba47348c
mingw-exiv2-0.27.3-6.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3193a4c13f
mingw-djvulibre-3.5.27-12.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dab56300b1
transfig-3.2.8a-2.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b
libxml2-2.9.12-4.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4892dbbf76 musl-1.2.2-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a4be4c93e4
radsecproxy-1.9.0-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
71
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-55fc591f26
tpm2-tss-3.0.4-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aca3c7bb56 koji-1.25.0-1.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-cd029398ef mpfr-4.1.0-7.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b2b5636c1a
livecd-tools-28.1-1.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-35759ad8d3
openssh-8.4p1-6.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa3657ac97 kmod-29-2.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8917c5d9d2
exiv2-0.27.3-7.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e145f477df
mingw-openjpeg2-2.3.1-12.fc33 openjpeg2-2.3.1-11.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-24dd0fa996
usbredir-0.10.0-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b02a75816e dracut-055-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fed63bd217
libxcrypt-4.4.22-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a963f18434
libedit-3.1-37.20210522cvs.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-60d664e252
cryptsetup-2.3.6-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-38972822f4
elfutils-0.185-2.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b
libxml2-2.9.12-4.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e2de9e9e55
selinux-policy-3.14.6-38.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bd6d71d113
osinfo-db-20210531-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-85149db388 nss-3.65.0-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb251919
mtools-4.0.29-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4bf6df75a0
net-snmp-5.9.1-2.fc33
The following builds have been pushed to Fedora 33 updates-testing
CGAL-5.1.4-1.fc33
aajohan-comfortaa-fonts-3.101-1.fc33
adwaita-qt-1.3.1-1.fc33
butt-0.1.30-1.fc33
compose-utils-0.1.45-1.fc33
crun-0.20-1.fc33
dnsperf-2.4.0-3.fc33
dnssec-trigger-0.17-2.fc33
elementary-planner-2.7-1.fc33
fernflower-211.7442.40-1.fc33
flamethrower-0.11.0-2.fc33
ghostscript-9.54.0-2.fc33
gjs-1.66.2-6.fc33
gns3-gui-2.2.21-1.fc33
gns3-server-2.2.21-1.fc33
golang-github-cenkalti-backoff-4.1.1-1.fc33
golang-github-certifi-gocertifi-0.0.20210429-1.fc33
golang-github-checkpoint-restore-criu-5.0.0-1.fc33
golang-github-coreos-systemd-22.3.2-1.fc33
httpd-2.4.48-1.fc33
hwdata-0.348-1.fc33
icecat-78.11.0-1.rh1.fc33
jasper-2.0.32-1.fc33
lasso-2.7.0-1.fc33
libolm-3.2.4-1.fc33
lorax-33.11-1.fc33
mariadb-connector-c-3.1.13-1.fc33
mod_auth_openidc-2.4.8.4-1.fc33
mozjs78-78.11.0-1.fc33
netresolve-0.0.1-0.29.20160317git.fc33
nginx-1.20.1-2.fc33
nodejs-packaging-2021.06-1.fc33
nordugrid-arc-6.11.0-1.fc33.1
php-7.4.20-1.fc33
python-ogr-0.25.0-1.fc33
python-ots-8.1.4-1.fc33
qgnomeplatform-0.8.0-1.fc33
qt5-qtwayland-5.15.2-7.fc33
redis-6.0.14-1.fc33
rofimoji-5.1.0-5.fc33
squid-4.15-1.fc33
the_silver_searcher-2.2.0^2020704.5a1c8d8-1.fc33
tmt-1.6.0-1.fc33
vim-fugitive-3.3-1.fc33
xpanes-4.1.3-1.fc33
Details about builds:
================================================================================
CGAL-5.1.4-1.fc33 (FEDORA-2021-1f600fa159)
Computational Geometry Algorithms Library
--------------------------------------------------------------------------------
Update Information:
[New upstream
release](https://www.cgal.org/2021/06/02/cgal514/).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Laurent Rineau <laurent.rineau(a)cgal.org> - 5.1.4-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
aajohan-comfortaa-fonts-3.101-1.fc33 (FEDORA-2021-a0877f3442)
Modern style true type font
--------------------------------------------------------------------------------
Update Information:
New release 3.101
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 1 2021 Luya Tshimbalanga <luya(a)fedoraproject.org> - 3.101-1
- Update to 3.101
- New source url
- Resolves rhbz#1966444
- Resolves rhbz#1966659
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.001-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
adwaita-qt-1.3.1-1.fc33 (FEDORA-2021-6ed512f48f)
Adwaita theme for Qt-based applications
--------------------------------------------------------------------------------
Update Information:
Adwaita-qt 1.3.1 release. QGnomePlatform 0.8.0 release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Jan Grulich <jgrulich(a)redhat.com> - 1.3.1-1
- 1.3.1
* Wed Jun 2 2021 Jan Grulich <jgrulich(a)redhat.com> - 1.3.0-1
- 1.3.0
--------------------------------------------------------------------------------
================================================================================
butt-0.1.30-1.fc33 (FEDORA-2021-3898e06292)
Broadcast using this tool
--------------------------------------------------------------------------------
Update Information:
Latest upstream 0.1.30
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 31 2021 Carl George <carl(a)george.computer> - 0.1.30-1
- Latest upstream
- Fixes: rhbz#1891773
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.24-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
compose-utils-0.1.45-1.fc33 (FEDORA-2021-154f351804)
Utilities for working with composes
--------------------------------------------------------------------------------
Update Information:
Fix compatibility with python3-productmd-1.33
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 31 2021 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 0.1.45-1
- new release 0.1.45
- Resolves: rhbz#1965933
- clean up old conditionals
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.44-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
crun-0.20-1.fc33 (FEDORA-2021-756a40404f)
OCI runtime written in C
--------------------------------------------------------------------------------
Update Information:
bump to 0.20
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.20-1
- bump to 0.20
--------------------------------------------------------------------------------
================================================================================
dnsperf-2.4.0-3.fc33 (FEDORA-2021-87c18dd24d)
Benchmarking authorative and recursing DNS servers
--------------------------------------------------------------------------------
Update Information:
Update for broken ldns update [FEDORA-2021-eebc69f7ea](https://bodhi.fedoraproje
ct.org/updates/FEDORA-2021-eebc69f7ea)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Petr Men����k <pemensik(a)redhat.com> - 2.4.0-3
- Rebuild for new ldns
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909396 - F34FailsToInstall: netresolve-backends-aresdns,
netresolve-backends-avahi, netresolve-backends-compat, netresolve-backends-ubdns,
netresolve-compat, netresolve-core, netresolve-tools
https://bugzilla.redhat.com/show_bug.cgi?id=1909396
--------------------------------------------------------------------------------
================================================================================
dnssec-trigger-0.17-2.fc33 (FEDORA-2021-87c18dd24d)
Tool for dynamic reconfiguration of validating resolver Unbound
--------------------------------------------------------------------------------
Update Information:
Update for broken ldns update [FEDORA-2021-eebc69f7ea](https://bodhi.fedoraproje
ct.org/updates/FEDORA-2021-eebc69f7ea)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Petr Men����k <pemensik(a)redhat.com> - 0.17-2
- Rebuild for new ldns
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909396 - F34FailsToInstall: netresolve-backends-aresdns,
netresolve-backends-avahi, netresolve-backends-compat, netresolve-backends-ubdns,
netresolve-compat, netresolve-core, netresolve-tools
https://bugzilla.redhat.com/show_bug.cgi?id=1909396
--------------------------------------------------------------------------------
================================================================================
elementary-planner-2.7-1.fc33 (FEDORA-2021-93adb505ef)
Task manager with Todoist support designed for GNU/Linux
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1:2.7-1
- build(update): 2.7
* Fri Feb 19 2021 Fabio Valentini <decathorpe(a)gmail.com> - 1:2.6.7-4
- Rebuilt for granite 6 soname bump.
* Fri Feb 12 2021 Kalev Lember <klember(a)redhat.com> - 1:2.6.7-3
- Rebuilt for evolution-data-server soname bump
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.6.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fernflower-211.7442.40-1.fc33 (FEDORA-2021-0cc3fb3c52)
JIdea's java decompiler
--------------------------------------------------------------------------------
Update Information:
Updated to latest version. Pathced a bit to still be jdk8 compatible
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Marian Koncek <mkoncek(a)redhat.com> - 211.7442.40-1
- Update to upstream version 211.7442.40
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
183.5153.8-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
flamethrower-0.11.0-2.fc33 (FEDORA-2021-87c18dd24d)
A DNS performance and functional testing utility
--------------------------------------------------------------------------------
Update Information:
Update for broken ldns update [FEDORA-2021-eebc69f7ea](https://bodhi.fedoraproje
ct.org/updates/FEDORA-2021-eebc69f7ea)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Petr Men����k <pemensik(a)redhat.com> - 0.11.0-2
- Rebuild for new ldns
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909396 - F34FailsToInstall: netresolve-backends-aresdns,
netresolve-backends-avahi, netresolve-backends-compat, netresolve-backends-ubdns,
netresolve-compat, netresolve-core, netresolve-tools
https://bugzilla.redhat.com/show_bug.cgi?id=1909396
--------------------------------------------------------------------------------
================================================================================
ghostscript-9.54.0-2.fc33 (FEDORA-2021-738a7a9c2b)
Interpreter for PostScript language & PDF
--------------------------------------------------------------------------------
Update Information:
Added Obsoletes/Provides for old ghostscript-core (#1962993)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Richard Lescak rlescak(a)redhat.com - 9.54.0-2
- Added Obsoletes/Provides for old ghostscript-core (#1962993)
* Fri May 14 2021 Richard Lescak rlescak(a)redhat.com - 9.54.0-1
- Update to version 9.54.0 (#1944755)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.53.3-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1944755 - ghostscript-9.54.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1944755
[ 2 ] Bug #1962993 - dnf errors with ghostscript-9.54.0-1.fc34
https://bugzilla.redhat.com/show_bug.cgi?id=1962993
--------------------------------------------------------------------------------
================================================================================
gjs-1.66.2-6.fc33 (FEDORA-2021-65c3388877)
Javascript Bindings for GNOME
--------------------------------------------------------------------------------
Update Information:
- update to mozjs78-78.11.0:
https://www.mozilla.org/en-
US/firefox/78.11.0/releasenotes/ - gjs rebuild against new mozjs78
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 1.66.2-6
- Rebuild against mozjs78-78.11.0-1
--------------------------------------------------------------------------------
================================================================================
gns3-gui-2.2.21-1.fc33 (FEDORA-2021-f528c9be67)
GNS3 graphical user interface
--------------------------------------------------------------------------------
Update Information:
Update to gns3 2.2.21
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Nicolas Chauvet <kwizart(a)gmail.com> - 2.2.21-1
- Update to 2.2.21
--------------------------------------------------------------------------------
================================================================================
gns3-server-2.2.21-1.fc33 (FEDORA-2021-f528c9be67)
Graphical Network Simulator 3
--------------------------------------------------------------------------------
Update Information:
Update to gns3 2.2.21
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Nicolas Chauvet <kwizart(a)gmail.com> - 2.2.21-1
- Update to 2.2.21
--------------------------------------------------------------------------------
================================================================================
golang-github-cenkalti-backoff-4.1.1-1.fc33 (FEDORA-2021-0322378a56)
Exponential backoff algorithm in Go
--------------------------------------------------------------------------------
Update Information:
Update to 4.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 4.1.1-1
- Update to 4.1.1
- Close: rhbz#1965931
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965931 - golang-github-cenkalti-backoff-4.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1965931
--------------------------------------------------------------------------------
================================================================================
golang-github-certifi-gocertifi-0.0.20210429-1.fc33 (FEDORA-2021-c1c03ad931)
Carefully curated collection of Root Certificates
--------------------------------------------------------------------------------
Update Information:
Update to 0.0.20210429
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.0.20210429-1
- Update to 0.0.20210429
- Close: rhbz#1955625
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.0.20200922-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1955625 - golang-github-certifi-gocertifi-2021.04.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1955625
--------------------------------------------------------------------------------
================================================================================
golang-github-checkpoint-restore-criu-5.0.0-1.fc33 (FEDORA-2021-468fa00b53)
Go Bindings for CRIU
--------------------------------------------------------------------------------
Update Information:
Update to 5.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 5.0.0-1
- Update to 5.0.0
- Close: rhbz#1933461
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933461 - golang-github-checkpoint-restore-criu-5.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1933461
--------------------------------------------------------------------------------
================================================================================
golang-github-coreos-systemd-22.3.2-1.fc33 (FEDORA-2021-9d54cf3be3)
Go bindings to systemd socket activation, journal, D-Bus, and unit files
--------------------------------------------------------------------------------
Update Information:
Update to 22.3.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 22.3.2-1
- Update to 22.3.2
- Close: rhbz#1934527
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 22.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1934527 - golang-github-coreos-systemd-22.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1934527
--------------------------------------------------------------------------------
================================================================================
httpd-2.4.48-1.fc33 (FEDORA-2021-efa8eb2e55)
Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
- new version 2.4.48
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Lubo�� Uhliarik <luhliari(a)redhat.com> - 2.4.48-1
- new version 2.4.48
- Resolves: #1964746 - httpd-2.4.48 is available
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1964746 - httpd-2.4.48 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1964746
--------------------------------------------------------------------------------
================================================================================
hwdata-0.348-1.fc33 (FEDORA-2021-5095433f1e)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Update pci, usb and vendor ids
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 0.348-1
- Update pci, usb and vendor ids
--------------------------------------------------------------------------------
================================================================================
icecat-78.11.0-1.rh1.fc33 (FEDORA-2021-a3bf01c31d)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Release 78.11.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 1 2021 Antonio Trande <sagitter(a)fedoraproject.org> - 78.11.0-1.rh1
- Release 78.11.0
* Fri May 7 2021 Antonio Trande <sagitter(a)fedoraproject.org> - 78.10.1-2.rh1
- Hide DRM Content option in Preference
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953221 - Cloudflare: Infinite loop.
https://bugzilla.redhat.com/show_bug.cgi?id=1953221
--------------------------------------------------------------------------------
================================================================================
jasper-2.0.32-1.fc33 (FEDORA-2021-9a005b5bf4)
Implementation of the JPEG-2000 standard, Part 1
--------------------------------------------------------------------------------
Update Information:
New upstream release 2.0.32
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Josef Ridky <jridky(a)redhat.com> - 2.0.32-1
- New upstream release 2.0.32 (#1950621)
* Tue Mar 30 2021 Josef Ridky <jridky(a)redhat.com> - 2.0.28-1
- New upstream release 2.0.28 (#1944481)
* Wed Mar 24 2021 Josef Ridky <jridky(a)redhat.com> - 2.0.27-1
- New upstream release 2.0.27 (#1940455)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950621 - jasper-2.0.32 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1950621
--------------------------------------------------------------------------------
================================================================================
lasso-2.7.0-1.fc33 (FEDORA-2021-508acb1153)
Liberty Alliance Single Sign On
--------------------------------------------------------------------------------
Update Information:
CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML
responses
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Jakub Hrozek <jhrozek(a)redhat.com> - 2.7.0
- Lasso 2.7.0
-
https://listes.entrouvert.com/arc/lasso/2021-06/msg00000.html
- don't package java bindings as they are not maintained upstream
anymore and there seem to be no users
- Resolves: rhbz#1966607 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
* Sun May 23 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.6.1-9
- Perl 5.34 rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.1-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Thu Aug 13 2020 Jakub Hrozek <jhrozek(a)redhat.com> - 2.6.1-7
- Temporarily build with OpenJDK 8
- upstream ticket for OpenJDK11 support:
https://dev.entrouvert.org/issues/45876
* Fri Aug 7 2020 Jeff Law <law(a)redhat.com> - 2.6.1-6
- Revert last change. I lost the patchfile and I can't reproduce the gcc-11
problem which almost certainly prompted it
* Fri Aug 7 2020 Jeff Law <law(a)redhat.com> - 2.6.1-5
- Fix format string problem
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.1-4
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jul 10 2020 Jiri Vanek <jvanek(a)redhat.com> - 2.6.1-2
- Rebuilt for JDK-11, see
https://fedoraproject.org/wiki/Changes/Java11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1940089 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when
parsing SAML responses
https://bugzilla.redhat.com/show_bug.cgi?id=1940089
--------------------------------------------------------------------------------
================================================================================
libolm-3.2.4-1.fc33 (FEDORA-2021-7794bc6e33)
Double Ratchet cryptographic library
--------------------------------------------------------------------------------
Update Information:
Updated to version 3.2.4.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.2.4-1
- Updated to version 3.2.4.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1966715 - libolm-3.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1966715
--------------------------------------------------------------------------------
================================================================================
lorax-33.11-1.fc33 (FEDORA-2021-d9ea48fdbb)
Tool for creating the anaconda install images
--------------------------------------------------------------------------------
Update Information:
- Add a context manager for dracut (bcl(a)redhat.com) Resolves: rhbz#1962975
- live/x86.tmpl: Copy livecd-iso-to-disk script, if installed
(david.ward(a)ll.mit.edu) - templates: Copy license files from the correct path
(david.ward(a)ll.mit.edu) - New lorax documentation - 33.10 (bcl(a)redhat.com)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 1 2021 Brian C. Lane <bcl(a)redhat.com> 33.11-1
- Add a context manager for dracut (bcl(a)redhat.com)
Resolves: rhbz#1962975
- live/x86.tmpl: Copy livecd-iso-to-disk script, if installed (david.ward(a)ll.mit.edu)
- templates: Copy license files from the correct path (david.ward(a)ll.mit.edu)
- New lorax documentation - 33.10 (bcl(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
mariadb-connector-c-3.1.13-1.fc33 (FEDORA-2021-fa2ef886a2)
The MariaDB Native Client library (C driver)
--------------------------------------------------------------------------------
Update Information:
**MariaDB connector C/C++** Release notes:
https://mariadb.com/kb/en/mariadb-connector-c-3113-release-notes/
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 14 2021 Michal Schorm <mschorm(a)redhat.com> - 3.1.13-1
- Rebase to 3.1.13
--------------------------------------------------------------------------------
================================================================================
mod_auth_openidc-2.4.8.4-1.fc33 (FEDORA-2021-cc85f79f63)
OpenID Connect auth module for Apache HTTP Server
--------------------------------------------------------------------------------
Update Information:
1965325 - CVE-2021-20718 mod_auth_openidc: DoS in oidc_util_read_post_params()
in util.c
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Jakub Hrozek <jhrozek(a)redhat.com> - 2.4.8.3-1
- New upstream release
- Resolves: rhbz#1966756 - mod_auth_openidc-2.4.8.3 is available
* Mon May 10 2021 Jakub Hrozek <jhrozek(a)redhat.com> - 2.4.8.2-1
- New upstream release
- Resolves: rhbz#1958466 - mod_auth_openidc-2.4.8.2 is available
* Thu May 6 2021 Jakub Hrozek <jhrozek(a)redhat.com> - 2.4.7.2-1
- New upstream release
- Resolves: rhbz#1900913 - mod_auth_openidc-2.4.7.2 is available
* Fri Apr 30 2021 Tomas Halman <thalman(a)redhat.com> - 2.4.4.1-3
- Remove unnecessary LTO patch
* Fri Feb 26 2021 Jakub Hrozek <jhrozek(a)redhat.com> - 2.4.4.1-1
- Temporarily disable check to get around a FTBFS issue (#1923374)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.4.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Fri Sep 4 2020 Jakub Hrozek <jhrozek(a)redhat.com> - 2.4.4.1-1
- New upstream version 2.4.4.1
* Tue Sep 1 2020 Jakub Hrozek <jhrozek(a)redhat.com> - 2.4.4-1
- New upstream version 2.4.4
* Thu Aug 27 2020 Joe Orton <jorton(a)redhat.com> - 2.4.3-5
- update to use correct apxs via _httpd_apxs macro
* Thu Aug 27 2020 Joe Orton <jorton(a)redhat.com> - 2.4.3-4
- work around LTO build failure
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965324 - CVE-2021-20718 mod_auth_openidc: DoS in
oidc_util_read_post_params() in util.c
https://bugzilla.redhat.com/show_bug.cgi?id=1965324
--------------------------------------------------------------------------------
================================================================================
mozjs78-78.11.0-1.fc33 (FEDORA-2021-65c3388877)
SpiderMonkey JavaScript library
--------------------------------------------------------------------------------
Update Information:
- update to mozjs78-78.11.0:
https://www.mozilla.org/en-
US/firefox/78.11.0/releasenotes/ - gjs rebuild against new mozjs78
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 78.11.0-1
- Update to 78.11.0
--------------------------------------------------------------------------------
================================================================================
netresolve-0.0.1-0.29.20160317git.fc33 (FEDORA-2021-87c18dd24d)
Generic name resolution library
--------------------------------------------------------------------------------
Update Information:
Update for broken ldns update [FEDORA-2021-eebc69f7ea](https://bodhi.fedoraproje
ct.org/updates/FEDORA-2021-eebc69f7ea)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Petr Men����k <pemensik(a)redhat.com> - 0.0.1-0.29.20160317git
- Rebuild for new ldns
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909396 - F34FailsToInstall: netresolve-backends-aresdns,
netresolve-backends-avahi, netresolve-backends-compat, netresolve-backends-ubdns,
netresolve-compat, netresolve-core, netresolve-tools
https://bugzilla.redhat.com/show_bug.cgi?id=1909396
--------------------------------------------------------------------------------
================================================================================
nginx-1.20.1-2.fc33 (FEDORA-2021-b37cffac0d)
A high performance web server and reverse proxy server
--------------------------------------------------------------------------------
Update Information:
Fix log permissions issue ---- Security: 1-byte memory overwrite might occur
during DNS server response processing if the "resolver" directive was
used, allowing an attacker who is able to forge UDP packets from the DNS
server to cause worker process crash or, potentially, arbitrary code
execution (CVE-2021-23017).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 1 2021 Felix Kaechele <heffer(a)fedoraproject.org> - 1:1.20.1-2
- use different fix for rhbz#1683388 as it introduced permissions issues in 1:1.20.0-2
* Tue May 25 2021 Felix Kaechele <heffer(a)fedoraproject.org> - 1:1.20.1-1
- update to 1.20.1 (fixes CVE-2021-23017)
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:1.20.0-4
- Perl 5.34 rebuild
* Fri Apr 30 2021 Lubos Uhliarik <luhliari(a)redhat.com> - 1:1.20.0-3
- Related: #1636235 - centralizing default index.html on nginx
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1964820 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy() when labels
are followed by a pointer to a root domain name [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1964820
[ 2 ] Bug #1966367 - nginx doesn't reopen the log file
https://bugzilla.redhat.com/show_bug.cgi?id=1966367
--------------------------------------------------------------------------------
================================================================================
nodejs-packaging-2021.06-1.fc33 (FEDORA-2021-69c55ffcd7)
RPM Macros and Utilities for Node.js Packaging
--------------------------------------------------------------------------------
Update Information:
## Update to 2021.06 * bundler: Handle archaic license metadata *
bundler: Warn about bundled dependencies with no license metadata
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Stephen Gallagher <sgallagh(a)redhat.com> - 2021.06-1
- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2021.01-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1920206 - Bundler script should handle license objects
https://bugzilla.redhat.com/show_bug.cgi?id=1920206
[ 2 ] Bug #1920223 - Bundler script should flag null licenses for manual review
https://bugzilla.redhat.com/show_bug.cgi?id=1920223
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-6.11.0-1.fc33.1 (FEDORA-2021-6f1a3d4510)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
rebuilt for ldns so bump
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Paul Wouters <paul.wouters(a)aiven.io> - 6.11.0-1.1
- rebuilt for ldns so bump
--------------------------------------------------------------------------------
================================================================================
php-7.4.20-1.fc33 (FEDORA-2021-09af51fc26)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.4.20** (03 Jun 2021) **Core:** * Fixed bug php#80929 (Method
name corruption related to repeated calls to call_user_func_array). (twosee) *
Fixed bug php#80960 (opendir() warning wrong info when failed on Windows). (cmb)
* Fixed bug php#67792 (HTTP Authorization schemes are treated as case-
sensitive). (cmb) * Fixed bug php#80972 (Memory exhaustion on invalid string
offset). (girgias) **FPM:** * Fixed bug php#65800 (Events port mechanism).
(psumbera) **FTP:** * Fixed bug php#80901 (Info leak in ftp extension). (cmb)
* Fixed bug php#79100 (Wrong FTP error messages). (cmb) **GD:** * Fixed bug
php#81032 (GD install is affected by external libgd installation). (Flavio
Heleno, cmb) **MBString:** * Fixed bug php#81011 (mb_convert_encoding removes
references from arrays). (cmb) **ODBC:** * Fixed bug php#80460 (ODBC doesn't
account for SQL_NO_TOTAL indicator). (cmb) **PDO_MySQL:** * Fixed bug
php#81037 (PDO discards error message text from prepared statement). (Kamil
Tekiela) **PDO_ODBC:** * Fixed bug php#44643 (bound parameters ignore explicit
type definitions). (cmb) **pgsql:** * Fixed php_pgsql_fd_cast() wrt.
php_stream_can_cast(). (cmb) **SPL:** * Fixed bug php#80933
(SplFileObject::DROP_NEW_LINE is broken for NUL and CR). (cmb, Nikita)
**Opcache:** * Fixed bug php#80900 (switch statement behavior inside function).
(twosee) * Fixed bug php#81015 (Opcache optimization assumes wrong part of
ternary operator in if-condition). (Nikita) **XMLReader:** * Fixed bug
php#73246 (XMLReader: encoding length not checked). (cmb) **Zip:** * Fixed bug
php#80863 (ZipArchive::extractTo() ignores references). (cmb)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Remi Collet <remi(a)remirepo.net> - 7.4.20-1
- Update to 7.4.20 -
http://www.php.net/releases/7_4_20.php
--------------------------------------------------------------------------------
================================================================================
python-ogr-0.25.0-1.fc33 (FEDORA-2021-9686156afa)
One API for multiple git forges
--------------------------------------------------------------------------------
Update Information:
New upstream release: 0.25.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 1 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
0.25.0-1
- Add support for listing of projects in GitLab and Github (by our external
contributor [@abkosar](https://github.com/abkosar))
--------------------------------------------------------------------------------
================================================================================
python-ots-8.1.4-1.fc33 (FEDORA-2021-d35bfa99b3)
Python wrapper for the OpenType Sanitizer
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1964425 - Review Request: python-ots - Python wrapper for the OpenType
Sanitizer
https://bugzilla.redhat.com/show_bug.cgi?id=1964425
--------------------------------------------------------------------------------
================================================================================
qgnomeplatform-0.8.0-1.fc33 (FEDORA-2021-6ed512f48f)
Qt Platform Theme aimed to accommodate Gnome settings
--------------------------------------------------------------------------------
Update Information:
Adwaita-qt 1.3.1 release. QGnomePlatform 0.8.0 release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Jan Grulich <jgrulich(a)redhat.com> - 0.8.0-1
- 0.8.0
--------------------------------------------------------------------------------
================================================================================
qt5-qtwayland-5.15.2-7.fc33 (FEDORA-2021-6ed512f48f)
Qt5 - Wayland platform support and QtCompositor module
--------------------------------------------------------------------------------
Update Information:
Adwaita-qt 1.3.1 release. QGnomePlatform 0.8.0 release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Jan Grulich <jgrulich(a)redhat.com> - 5.15.2-7
- Client: expose toplevel window state (change from Qt6)
--------------------------------------------------------------------------------
================================================================================
redis-6.0.14-1.fc33 (FEDORA-2021-0ad4bec5b1)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
**Redis 6.0.14** - Released Tue June 1 12:00:00 IST 2021 Upgrade urgency:
SECURITY, Contains fixes to security issues that affect authenticated client
connections. MODERATE otherwise. Fix integer overflow in STRALGO LCS
(**CVE-2021-32625**) An integer overflow bug in Redis version 6.0 or newer can
be exploited using the STRALGO LCS command to corrupt the heap and potentially
result with remote code execution. This is a result of an incomplete fix by
CVE-2021-29477. Other bug fixes: * Fix crash in UNLINK on a stream key with
deleted consumer groups (#8932) * SINTERSTORE: Add missing keyspace del event
when none of the sources exist (#8949)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Remi Collet <remi(a)remirepo.net> - 6.0.14-1
- Upstream 6.0.14 release.
--------------------------------------------------------------------------------
================================================================================
rofimoji-5.1.0-5.fc33 (FEDORA-2021-31c566a3df)
A character picker for rofi ����
--------------------------------------------------------------------------------
Update Information:
First rofimoji packages for Fedora 33 and 34. ����
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961783 - Review Request: rofimoji - A character picker for rofi
https://bugzilla.redhat.com/show_bug.cgi?id=1961783
--------------------------------------------------------------------------------
================================================================================
squid-4.15-1.fc33 (FEDORA-2021-24af72ff2c)
The Squid proxy caching server
--------------------------------------------------------------------------------
Update Information:
- version update - security update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Lubo�� Uhliarik <luhliari(a)redhat.com> - 7:4.15-1
- new version 4.15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1939940 - CVE-2021-28116 squid: out-of-bounds read in WCCP protocol data may
lead to information disclosure [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1939940
[ 2 ] Bug #1959538 - CVE-2021-33620 squid: denial of service in HTTP response processing
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1959538
[ 3 ] Bug #1962596 - CVE-2021-31806 squid: improper input validation in HTTP Range
header [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1962596
[ 4 ] Bug #1962598 - CVE-2021-31807 squid: incorrect memory management may lead to DoS
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1962598
[ 5 ] Bug #1962600 - CVE-2021-31808 squid: an integer overflow may lead to a DoS
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1962600
[ 6 ] Bug #1963363 - CVE-2021-28652 squid: denial of service issue in Cache Manager
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1963363
[ 7 ] Bug #1963381 - CVE-2021-28662 squid: denial of service in HTTP response processing
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1963381
[ 8 ] Bug #1963391 - CVE-2021-28651 squid: denial of service in URN processing
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1963391
--------------------------------------------------------------------------------
================================================================================
the_silver_searcher-2.2.0^2020704.5a1c8d8-1.fc33 (FEDORA-2021-882a674dab)
Super-fast text searching tool (ag)
--------------------------------------------------------------------------------
Update Information:
- Switch to caret versioning - Build against system uthash - Add patch for zsh
completion of new flags
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 28 2021 Carl George <carl(a)george.computer> - 2.2.0^2020704.5a1c8d8-1
- Switch to caret versioning
- Build against system uthash
- Add patch for zsh completion of new flags
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
tmt-1.6.0-1.fc33 (FEDORA-2021-5db45239d4)
Test Management Tool
--------------------------------------------------------------------------------
Update Information:
Debuginfo install, pass environment, obsolete minute...
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 2 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 1.6.0-1
- Adjust the new plugin documentation
- Add plugin examples and documentation
- Ensure that the discover git reference is a string
- Report plugin for JUnit output
- Fix issue when raising error for NoneType
- Print better error when nitrate testcase not found.
- Use `count=True` for multiple flag options
- Add option to explicitly use default plan
- Adjust debuginfo installation, add test coverage
- Use debuginfo-install for installing debuginfos
- Update the documentation based on refactoring
- Implement tmt story lint
- Refactor Node class to Core
- Correctly handle spaces in file/directory names
- Hand over plan environment during local execution
- Do not execute manual test cases
- Fix option handling for plugins with common prefix
- Propagate options to guests based on the step
- Support fetching libraries from a local directory
- Add a simple example of a test written in ansible
- Pass environment variables to ansible (local)
- Pass environment variables to ansible (virtual)
- Adjust warning for extra lines in Makefile targets
- Add test import warning for run and build targets
- Enable a few more pre-commit hooks, sort imports
- Give a warning about the obsoleted minute plugin
- Clarify adjust dependency on explicit context
- Fix the EPEL installation instructions
- Adjust the new list options for the minute plugin
- New print method, used now in minute plugin
- Implement listing available minute images/flavors
- Update default option values for verbose and debug
- Avoid creating workdir on --help
- Do not keep run workdir during testing
- Clean up the code style, remove the vagrant plugin
--------------------------------------------------------------------------------
================================================================================
vim-fugitive-3.3-1.fc33 (FEDORA-2021-e9150dd094)
A Git wrapper so awesome, it should be illegal
--------------------------------------------------------------------------------
Update Information:
Latest upstream 3.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 31 2021 Carl George <carl(a)george.computer> - 3.3-1
- Latest upstream
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xpanes-4.1.3-1.fc33 (FEDORA-2021-1e1a13ecbd)
Awesome tmux-based terminal divider
--------------------------------------------------------------------------------
Update Information:
Latest upstream 4.1.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 31 2021 Carl George <carl(a)george.computer> - 4.1.3-1
- Latest upstream
* Thu Jan 28 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------