The following Fedora 34 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-93bb56ad9b qt-4.8.7-61.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f213fea441
python-django-filter-21.1-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9f68f5f752 php-7.4.25-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7701833090
java-1.8.0-openjdk-1.8.0.312.b07-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0b37146973
strongswan-5.9.4-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-27ba6780e5
java-latest-openjdk-17.0.1.0.12-1.rolling.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-082bea5b34
stb-0-0.7.20211022gitaf1a5bc.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-483d896d1d
webkit2gtk3-2.34.1-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3fc69d203c sdrpp-1.0.4-3.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
200
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
69
https://bodhi.fedoraproject.org/updates/FEDORA-2021-10b1f23f5e
iio-sensor-proxy-3.3-1.fc34 libgudev-237-1.fc34
18
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6c2c811a05
gnome-remote-desktop-40.2-1.fc34
17
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6ebbda1d9f fwupd-1.7.0-1.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b711f60c72
libical-3.0.11-1.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-93bb56ad9b qt-4.8.7-61.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8b068e370a
osinfo-db-20211013-1.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7e153429af bluez-5.62-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-757db45bc5
gnome-online-accounts-3.40.1-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-00891047cf
selinux-policy-34.22-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9f1f3732e0 gdb-11.1-2.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e4843341ca dracut-055-5.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d046c4fde0
kernel-5.14.14-200.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-483d896d1d
webkit2gtk3-2.34.1-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2f9a4cab2c
xorg-x11-server-Xwayland-21.1.2.901-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1d1d99af0e
pycairo-1.20.1-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
CuraEngine-4.11.0-2.fc34
fcft-2.4.6-1.fc34
menulibre-2.2.3-2.fc34
perl-CBOR-XS-1.85-1.fc34
perl-CPAN-Perl-Releases-5.20211020-1.fc34
perl-DateTime-TimeZone-2.51-1.fc34
perl-Locale-SubCountry-2.07-1.fc34
perl-Module-CoreList-5.20211020-1.fc34
php-composer-semver3-3.2.6-1.fc34
php-doctrine-inflector2-2.0.4-1.fc34
pipewire-0.3.39-1.fc34
qcoro-0.3.0-1.fc34
xtl-0.7.3-1.fc34
Details about builds:
================================================================================
CuraEngine-4.11.0-2.fc34 (FEDORA-2021-8ea648186c)
Engine for processing 3D models into G-code instructions for 3D printers
--------------------------------------------------------------------------------
Update Information:
Rebuild with updated stb_image to patch CVE-2021-28021, CVE-2021-42715, and
CVE-2021-42716
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 23 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1:4.11.0-2
- Rebuild with updated stb_image to patch CVE-2021-28021, CVE-2021-42715, and
CVE-2021-42716
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2015229 - CVE-2021-28021 stb: buffer overflow in stbi__extend_receive() in
stb_image.h via a crafted JPEG file
https://bugzilla.redhat.com/show_bug.cgi?id=2015229
--------------------------------------------------------------------------------
================================================================================
fcft-2.4.6-1.fc34 (FEDORA-2021-37f7bdd4ef)
Simple library for font loading and glyph rasterization
--------------------------------------------------------------------------------
Update Information:
Update to 2.4.6 (#2016766)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 24 2021 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 2.4.6-1
- Update to 2.4.6 (#2016766)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016766 - fcft-2.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016766
--------------------------------------------------------------------------------
================================================================================
menulibre-2.2.3-2.fc34 (FEDORA-2021-174c259478)
FreeDesktop.org compliant menu editor
--------------------------------------------------------------------------------
Update Information:
Updating to 2.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 24 2021 Lyes Saadi <mail(a)lyes.eu> 2.2.3-2
- Resolving build dependency issues
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.1-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 2.2.1-7
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2007924 - menulibre-2.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2007924
--------------------------------------------------------------------------------
================================================================================
perl-CBOR-XS-1.85-1.fc34 (FEDORA-2021-19d258aad2)
Concise Binary Object Representation (CBOR)
--------------------------------------------------------------------------------
Update Information:
This release fixes a UTF-8 check for empty strings.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Petr Pisar <ppisar(a)redhat.com> - 1.85-1
- 1.85 bump
* Thu Oct 21 2021 Petr Pisar <ppisar(a)redhat.com> - 1.84-1
- 1.84 bump
- Package the tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016223 - perl-CBOR-XS-1.84 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016223
[ 2 ] Bug #2016731 - perl-CBOR-XS-1.85 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016731
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-5.20211020-1.fc34 (FEDORA-2021-0eff4801ec)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated for v5.35.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20211020-1
- 5.20211020 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016542 - perl-CPAN-Perl-Releases-5.20211020 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016542
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-TimeZone-2.51-1.fc34 (FEDORA-2021-3dabf27f9e)
Time zone object base class and factory
--------------------------------------------------------------------------------
Update Information:
This release is based on version 2021e of the Olson database. This release
includes contemporary changes for Palestine.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.51-1
- 2.51 bump (2021e Olson database)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016582 - perl-DateTime-TimeZone-2.51 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016582
--------------------------------------------------------------------------------
================================================================================
perl-Locale-SubCountry-2.07-1.fc34 (FEDORA-2021-306d1d3920)
ISO 3166-2 two letter subcountry codes
--------------------------------------------------------------------------------
Update Information:
This release updates a codes database and adds a KX code for Kosovo. This update
also package the tests in a dedicated subpackage.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Petr Pisar <ppisar(a)redhat.com> - 2.07-1
- 2.07 bump
- Package the tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016725 - perl-Locale-SubCountry-2.07 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016725
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20211020-1.fc34 (FEDORA-2021-af8d377abe)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
Updated for v5.35.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:5.20211020-1
- 5.20211020 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016538 - perl-Module-CoreList-5.20211020 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016538
--------------------------------------------------------------------------------
================================================================================
php-composer-semver3-3.2.6-1.fc34 (FEDORA-2021-ed66540f18)
Semver library version 3
--------------------------------------------------------------------------------
Update Information:
**Version 3.2.6** - 2021-10-25 * Fixed: type improvements to parseStability
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Remi Collet <remi(a)remirepo.net> - 3.2.6-1
- update to 3.2.6
--------------------------------------------------------------------------------
================================================================================
php-doctrine-inflector2-2.0.4-1.fc34 (FEDORA-2021-40a0b8b9f8)
Common string manipulations with regard to casing and singular/plural rules
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.4** Bug * 189: Supports french pluralization of -al
exceptions thanks to @gquemener
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Remi Collet <remi(a)remirepo.net> - 2.0.4-1
- update to 2.0.4
- switch to phpunit9
--------------------------------------------------------------------------------
================================================================================
pipewire-0.3.39-1.fc34 (FEDORA-2021-49a33e790f)
Media Sharing Server
--------------------------------------------------------------------------------
Update Information:
Update version to 0.3.39
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Wim Taymans <wtaymans(a)redhat.com> - 0.3.39-1
- Update version to 0.3.39
--------------------------------------------------------------------------------
================================================================================
qcoro-0.3.0-1.fc34 (FEDORA-2021-b6b20e4c6e)
C++ Coroutines for Qt
--------------------------------------------------------------------------------
Update Information:
Updated to version 0.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.3.0-1
- Updated to version 0.3.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016954 - qcoro-0.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016954
--------------------------------------------------------------------------------
================================================================================
xtl-0.7.3-1.fc34 (FEDORA-2021-d8192dd881)
QuantStack tools library
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 25 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 0.7.3-1
- Update to latest version (#2016608)
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Sun Jul 11 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.7.2-2
- Fix build with Sphinx 4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016608 - xtl-0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016608
--------------------------------------------------------------------------------