The following Fedora 33 Security updates need testing: Age URL 102 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-36e10d3f9f varnish-6.4.0-5.fc33 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-112557d2c5 buildah-1.21.3-1.fc33 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-0c53d8738d containernetworking-plugins-1.0.0-0.2.rc1.fc33 containers-common-1-20.fc33 crun-0.20.1-1.fc33 podman-3.2.3-1.fc33 skopeo-1.3.1-1.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-30c84b4924 chromium-91.0.4472.164-1.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4ead17c8f6 linux-firmware-20210716-121.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1bfb61f77c golang-1.15.14-1.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-166e461c8d systemd-246.15-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved: Age URL 120 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb PackageKit-1.2.3-1.fc33 56 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33 libreport-2.15.1-1.fc33 satyr-0.37-2.fc33 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-de131565a6 ethtool-5.13-1.fc33 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c09b022e8f dracut-055-3.fc33 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-abcaa79b71 libmodulemd-2.13.0-1.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e57bbe4837 webkit2gtk3-2.32.2-1.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1fe1b325f5 gjs-1.66.2-7.fc33 mozjs78-78.12.0-1.fc33 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bcea139c5d audit-3.0.3-1.fc33 7 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5e6e793ad5 libedit-3.1-38.20210714cvs.fc33 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4ead17c8f6 linux-firmware-20210716-121.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-13f06367c7 net-snmp-5.9.1-3.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3bdb6861cb mtools-4.0.33-1.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-49d6a73d5b libidn2-2.3.2-1.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-166e461c8d systemd-246.15-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
centpkg-0.6.6-3.fc33 claws-mail-3.18.0-1.fc33 curl-7.71.1-10.fc33 firefox-90.0.1-1.fc33 gnome-shell-extension-netspeed-3.30-0.14.20210621git1598dc3.fc33 gpodder-3.10.21-1.fc33 ibus-table-1.14.0-1.fc33 lxcfs-4.0.9-1.fc33 notcurses-2.3.11-1.fc33 php-pear-1.10.12-9.fc33 php-phar-io-manifest2-2.0.3-1.fc33 python-google-auth-1.33.1-1.fc33 python-msal-1.13.0-1.fc33 rebase-helper-0.25.0-1.fc33 remmina-1.4.20-1.fc33 stalld-1.14.1-1.fc33 testcloud-0.6.1-1.fc33 tuned-2.16.0-1.fc33 wordpress-5.8-1.fc33
Details about builds:
================================================================================ centpkg-0.6.6-3.fc33 (FEDORA-2021-238b42fd48) CentOS utility for working with dist-git -------------------------------------------------------------------------------- Update Information:
Resolves https://git.centos.org/centos/centpkg/issue/49. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Carl George carl@george.computer - 0.6.6-3 - Backport upstream patch for "name 'header' is not defined" error * Wed Jul 21 2021 Fedora Release Engineering releng@fedoraproject.org - 0.6.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ claws-mail-3.18.0-1.fc33 (FEDORA-2021-053e634fdc) Email client and news reader based on GTK+ -------------------------------------------------------------------------------- Update Information:
Update from 3.17.8 to 3.18.0 -- https://www.claws-mail.org/news.php -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 20 2021 Michael Schwendt mschwendt@fedoraproject.org - 3.18.0-1 - Update to 3.18.0. - Patch pdf_viewer plugin for deprecated ghostscript option. rhbz#1968349 * Mon Feb 15 2021 Michael Schwendt mschwendt@fedoraproject.org - 3.17.8-4 - Apply latest upstream commit for previous patch to be in sync with Clawsker. * Mon Feb 15 2021 Michael Schwendt mschwendt@fedoraproject.org - 3.17.8-3 - Patch to use g_get_user_runtime_dir() instead of g_get_tmp_dir() * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 3.17.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ curl-7.71.1-10.fc33 (FEDORA-2021-5d21b90a30) A utility for getting files from remote servers (FTP, HTTP, and others) -------------------------------------------------------------------------------- Update Information:
- fix TELNET stack contents disclosure again (CVE-2021-22925) - fix bad connection reuse due to flawed path name checks (CVE-2021-22924) - disable metalink support to fix the following vulnerabilities CVE-2021-22923 - metalink download sends credentials CVE-2021-22922 - wrong content via metalink not discarded -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 2 2021 Kamil Dudka kdudka@redhat.com - 7.71.1-10 - fix TELNET stack contents disclosure again (CVE-2021-22925) - fix TELNET stack contents disclosure (CVE-2021-22898) - fix bad connection reuse due to flawed path name checks (CVE-2021-22924) - disable metalink support to fix the following vulnerabilities CVE-2021-22923 - metalink download sends credentials CVE-2021-22922 - wrong content via metalink not discarded -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1984325 - CVE-2021-22922 curl: wrong content via metalink is not being discarded [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1984325 [ 2 ] Bug #1984326 - CVE-2021-22923 curl: Metalink download sends credentials [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1984326 [ 3 ] Bug #1984327 - CVE-2021-22924 curl: bad connection reuse due to flawed path name checks [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1984327 [ 4 ] Bug #1984328 - CVE-2021-22925 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1984328 --------------------------------------------------------------------------------
================================================================================ firefox-90.0.1-1.fc33 (FEDORA-2021-8339b59d17) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information:
New upstream update (91.0.1) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Martin Stransky stransky@redhat.com - 90.0.1-1 - Updated to 90.0.1 - Added fixes to build on rawhide * Thu Jul 15 2021 Martin Stransky stransky@redhat.com - 90.0-3 - Disabled Wayland backend on KDE due to https://bugzilla.mozilla.org/show_bug.cgi?id=1714132 * Tue Jul 13 2021 Martin Stransky stransky@redhat.com - 90.0-2 - Added xorg-x11-server-Xwayland dependency for Mutter --------------------------------------------------------------------------------
================================================================================ gnome-shell-extension-netspeed-3.30-0.14.20210621git1598dc3.fc33 (FEDORA-2021-4a4742cc29) A gnome-shell extension to show speed of the internet -------------------------------------------------------------------------------- Update Information:
Update to 3.30-0.14.20210621git1598dc3 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Martin Gansser martinkg@fedoraproject.org - 3.30-0.14.20210621git1598dc3 - Update to 3.30-0.14.20210621git1598dc * Fri Mar 5 2021 Martin Gansser martinkg@fedoraproject.org - 3.30-0.13.20200323git9d74599 - Add gnome 40.beta and 4.0 Support * Tue Feb 2 2021 Martin Gansser martinkg@fedoraproject.org - 3.30-0.12.20200323git9d74599 - Add BR glib2 * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 3.30-0.11.20200323git9d74599 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ gpodder-3.10.21-1.fc33 (FEDORA-2021-35be4e4c51) Podcast receiver/catcher written in Python -------------------------------------------------------------------------------- Update Information:
3.10.21 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Gwyn Ciesla gwync@protonmail.com - 3.10.21-1 - 3.10.21 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1984220 - gpodder-3.10.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=1984220 --------------------------------------------------------------------------------
================================================================================ ibus-table-1.14.0-1.fc33 (FEDORA-2021-0c07fbb35e) The Table engine for IBus platform -------------------------------------------------------------------------------- Update Information:
Update to 1.14.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Mike FABIAN mfabian@redhat.com - 1.14.0-1 - Update to 1.14.0 - Add option to set dynamic adjust at runtime - Resolves: https://github.com/mike-fabian/ibus-table/issues/70 - Also add a button to forget all the data learned by typing and selecting candidates. - Add options to play sound file on error - Resolves: https://github.com/kaio/ibus-table/issues/75 - Use checkbuttons instead of [Yes/No] comboboxes - Hide options which make no sense for certain tables instead of just graying them out - Add ���Recommends: python3-simpleaudio��� (Without that the new sound option is ignored) --------------------------------------------------------------------------------
================================================================================ lxcfs-4.0.9-1.fc33 (FEDORA-2021-e183322c3d) FUSE based filesystem for LXC -------------------------------------------------------------------------------- Update Information:
Update LXCFS to the latest stable release. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Thomas Moschny thomas.moschny@gmx.de - 4.0.9-1 - Update to 4.0.9. --------------------------------------------------------------------------------
================================================================================ notcurses-2.3.11-1.fc33 (FEDORA-2021-71592eb8bb) Character graphics and TUI library -------------------------------------------------------------------------------- Update Information:
New upstream, supports iTerm2 and the Linux framebuffer. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Nick Black dankamongmen@gmail.com - 2.3.11-1 - New upstream release, add zlib-devel dep * Mon Jul 12 2021 Nick Black dankamongmen@gmail.com - 2.3.9-1 - New upstream release, bugfix-oriented --------------------------------------------------------------------------------
================================================================================ php-pear-1.10.12-9.fc33 (FEDORA-2021-c9c1f6e5c7) PHP Extension and Application Repository framework -------------------------------------------------------------------------------- Update Information:
**Archive_Tar 1.4.14** * Properly fix symbolic link path traversal (**CVE-2021-32610**) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Remi Collet remi@remirepo.net - 1:1.10.12-9 - update Archive_Tar to 1.4.14 - fedora/autoloader is optional --------------------------------------------------------------------------------
================================================================================ php-phar-io-manifest2-2.0.3-1.fc33 (FEDORA-2021-0760383287) Component for reading phar.io manifest information -------------------------------------------------------------------------------- Update Information:
**Version 2.0.3** - 20.07.2021 - Fixed PHP 7.2 / PHP 7.3 incompatibility introduced in previous release ---- **Version 2.0.2** - 20.07.2021 - Fixed PHP 8.1 deprecation notice -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Remi Collet remi@remirepo.net - 2.0.3-1 - update to 2.0.3 --------------------------------------------------------------------------------
================================================================================ python-google-auth-1.33.1-1.fc33 (FEDORA-2021-e63ca08efd) Google Auth Python Library -------------------------------------------------------------------------------- Update Information:
Update to 1.33.1 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Fedora Release Monitoring release-monitoring@fedoraproject.org - 1:1.33.1-1 - Update to 1.33.1 (#1978114) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1978114 - python-google-auth-1.33.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1978114 --------------------------------------------------------------------------------
================================================================================ python-msal-1.13.0-1.fc33 (FEDORA-2021-e0f05dc05f) Microsoft Authentication Library (MSAL) for Python -------------------------------------------------------------------------------- Update Information:
Update to 1.13.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Major Hayden major@mhtx.net - 1.13.0-1 - Update to 1.13.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1984187 - python-msal-1.13.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1984187 --------------------------------------------------------------------------------
================================================================================ rebase-helper-0.25.0-1.fc33 (FEDORA-2021-73cfa45136) The tool that helps you to rebase your package to the latest version -------------------------------------------------------------------------------- Update Information:
**News in version 0.25.0:** - Added lookaside cache preset for **centpkg** - Started using C locale for updating *%changelog* section - Fixed documentation builds with Sphinx 4 - Fixed macro value detection in `SpecFile.set_tag()` - Fixed **licensecheck** availability test - Moved from using deprecated `--old- chroot` `mock` option to `--isolation simple` - Migrated from Travis CI to Github Actions - Moved away from soon-to-be-deprecated distutils -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 13 2021 Packit Service user-cont-team+packit-service@redhat.com - 0.25.0-1 - Release 0.25.0 (Nikola Forr��) - Switch from python docker images to UBI (Nikola Forr��) - Make container with tests privileged (Franti��ek Ne��as) - Replace soon-to-be deprecated distutils (Franti��ek Ne��as) - Fix licensecheck availability test (Nikola Forr��) - Fix macro value detection in set_tag (Franti��ek Ne��as) - Support exception chaining (PEP 3134) in autoargs (Nikola Forr��) - Fix for Sphinx 4 (Nikola Forr��) - Install required library stubs (Franti��ek Ne��as) - Migrate to Github actions (Franti��ek Ne��as) - Use Fedora registry for Fedora images (Nikola Forr��) - Add glibc-langpack-de to base images (Nikola Forr��) - CONTRIBUTING.md: Start a contributing file (Stef Walter) - FIXUP for review (Stef Walter) - Use C locale for updating %changelog (Stef Walter) - Change approach to lookaside cache servers (Nikola Forr��) - Add lookaside cache preset for centpkg (Nikola Forr��) - Avoid using deprecated mock option (Nikola Forr��) - Add missing make to BuildRequires (Nikola Forr��) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1982037 - rebase-helper-0.25.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1982037 --------------------------------------------------------------------------------
================================================================================ remmina-1.4.20-1.fc33 (FEDORA-2021-2b6a28a75a) Remote Desktop Client -------------------------------------------------------------------------------- Update Information:
Update to 1.4.20, drop nx, st and xdmcp plugins. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Simone Caronni negativo17@gmail.com - 1.4.20-1 - Update to 1.4.20. - Remove unmaintained nx, st, xdmcp plugins. * Wed Jun 30 2021 Simone Caronni negativo17@gmail.com - 1.4.19-1 - Update to 1.4.19. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1959672 - Remmina crashes when trying to rdp to a remote system. https://bugzilla.redhat.com/show_bug.cgi?id=1959672 [ 2 ] Bug #1976479 - [abrt] remmina: gtk_box_pack(): remmina killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1976479 [ 3 ] Bug #1977368 - remmina-1.4.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=1977368 [ 4 ] Bug #1981815 - Remmina 1.4.19 is unusable , problem fixed upstream, please update to 1.4.20 https://bugzilla.redhat.com/show_bug.cgi?id=1981815 [ 5 ] Bug #1983157 - [abrt] remmina: remmina_rdp_open_connection(): remmina killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1983157 --------------------------------------------------------------------------------
================================================================================ stalld-1.14.1-1.fc33 (FEDORA-2021-a3d722bbfb) Daemon that finds starving tasks and gives them a temporary boost -------------------------------------------------------------------------------- Update Information:
* Mon Jul 19 2021 Fernando Pacheco fpacheco@redhat.com - 1.14.1-1 - stalld: Coding style cleanup - stalld: spaces in place of <TAB> - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off() - throttling: Check open() on turn_off_rt_throttling - throttling: Adjust variables in restore_rt_throttling() - stalld.c: utils.c: Remove complex assignments from variable declarations - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them - stalld: Adjust variables in parse_old_task_format() - utils.c: Use MAX_PATH for pidfile - stalld.c: Remove variable declaration from the middle of the function - stalld: Respect -l option in single threaded mode - utils: s/try_to_open_file/check_file_exists/ - utils: use check_file_exists in setup_hr_tick() - utils: Check for the new sched_features path -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 19 2021 Fernando Pacheco fpacheco@redhat.com - 1.14.1-1 - stalld: Coding style cleanup - stalld: spaces in place of <TAB> - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off() - throttling: Check open() on turn_off_rt_throttling - throttling: Adjust variables in restore_rt_throttling() - stalld.c: utils.c: Remove complex assignments from variable declarations - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them - stalld: Adjust variables in parse_old_task_format() - utils.c: Use MAX_PATH for pidfile - stalld.c: Remove variable declaration from the middle of the function - stalld: Respect -l option in single threaded mode - utils: s/try_to_open_file/check_file_exists/ - utils: use check_file_exists in setup_hr_tick() - utils: Check for the new sched_features path * Fri Jul 2 2021 Fernando Pacheco fpacheco@redhat.com - 1.13-1 - stalld: Fix log message on boost_cpu_starving_vector() - stalld: Add the overload control to the single-threaded mode - stalld: Add the adaptive mode option - stalld: Use the last mode set in the cmdline - stalld: Fallback to the adaptive mode if force_fifo is selected - stalld: Make single-threaded mode the default one - stalld.service: Always restart stalld on exit - utils.c: Fail if user is not root - utils.c: Make the path to sched_debug path dynamic * Tue Jun 29 2021 Fernando Pacheco fpacheco@redhat.com - 1.12-1 - stalld.8: fix diff cruft left in manpage source - stalld.c: clean up handling of nr_running - stalld.c: remove duplicate parameter to fill_waiting_task() - stalld: Add error handling in get_cpu_idle_time() - stalld.service: Run stalld as sched_fifo via systemd - packaging: clean up Makefiles and rpm specfile - stalld: Always print current function for info messages - stalld: Always print current function for warn messages - stalld: Always print current function for die messages - utils: change PATHMAX to 4096 * Thu May 13 2021 Clark Williams williams@redhat.com - 1.11-1 - redhat/stalld.spec: pick up gating test version for changelog - utils.c: set daemon umask to restrict global write/execute (1934586) - hardening fixes from coverity scan (1934590) --------------------------------------------------------------------------------
================================================================================ testcloud-0.6.1-1.fc33 (FEDORA-2021-34bef38f59) Tool for running cloud images locally -------------------------------------------------------------------------------- Update Information:
- Add wait and retry around dom.create() - lazy_refcounts=on and cache=unsafe - Bash completion (by lbrabec) - Let's have also short t7d binary - Add long project description for pypi - Style: Let's not have lines with hundreds of characters... - API: Add reboot function - FileLock: Make sure we don't overwrite config_data.DATA_DIR - Fix systems using systemd-networkd in user session mode -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Frantisek Zatloukal fzatlouk@redhat.com - 0.6.1-1 - Add wait and retry around dom.create() - lazy_refcounts=on and cache=unsafe - Bash completion (by lbrabec) - Let's have also short t7d binary - Add long project description for pypi - Style: Let's not have lines with hundreds of characters... - API: Add reboot function - FileLock: Make sure we don't overwrite config_data.DATA_DIR - Fix systems using systemd-networkd in user session mode --------------------------------------------------------------------------------
================================================================================ tuned-2.16.0-1.fc33 (FEDORA-2021-58e9b8c55b) A dynamic adaptive system tuning daemon -------------------------------------------------------------------------------- Update Information:
This is new TuneD version. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Jaroslav ��karvada jskarvad@redhat.com - 2.16.0-1 - new release - rebased tuned to latest upstream related: rhbz#1936426 --------------------------------------------------------------------------------
================================================================================ wordpress-5.8-1.fc33 (FEDORA-2021-cefaf4dfe2) Blog tool and publishing platform -------------------------------------------------------------------------------- Update Information:
Upstream announcement: [WordPress 5.8 Tatum](https://wordpress.org/news/2021/07/tatum/) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 21 2021 Remi Collet remi@remirepo.net - 5.8-1 - WordPress 5.8 Tatum --------------------------------------------------------------------------------