The following Fedora 34 Security updates need testing:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-359a715688
libjpeg-turbo-2.0.90-3.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-244a18163c
python-mpmath-1.2.1-2.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c35235c250
grafana-7.5.10-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-450d81de95
dr_libs-0-0.5.20211002gitf13cbcf.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
180
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
49
https://bodhi.fedoraproject.org/updates/FEDORA-2021-10b1f23f5e
iio-sensor-proxy-3.3-1.fc34 libgudev-237-1.fc34
27
https://bodhi.fedoraproject.org/updates/FEDORA-2021-91081360ab
libtirpc-1.3.2-0.rc1.fc34
18
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6c2c811a05
gnome-remote-desktop-40.2-1.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f0b3b90a0e
libdb-5.3.28-49.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f8f82bc868
glslang-11.6.0-1.20210825.git2fb89a0.fc34 spirv-headers-1.5.4-7.20210728.git449bc98.fc34
spirv-tools-2021.3-1.20210825.git1fbed83.fc34 vulkan-headers-1.2.189.0-1.fc34
vulkan-loader-1.2.189.0-1.fc34 vulkan-tools-1.2.189.0-1.fc34
vulkan-validation-layers-1.2.189.0-1.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-03b9f525f0
dnsmasq-2.86-2.fc34
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3c562281be fwupd-1.6.4-1.fc34
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-23a3e5e5eb
libguestfs-1.46.0-1.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-359a715688
libjpeg-turbo-2.0.90-3.fc34
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa73464e97
rdma-core-37.0-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bba60cc45a
kexec-tools-2.0.22-4.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9f40bdf3be
openldap-2.4.57-6.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d1bbad7516 gtk3-3.24.30-4.fc34
gtk4-4.2.1-4.fc34
The following builds have been pushed to Fedora 34 updates-testing
csmock-3.0.0-1.fc34
dolphin-emu-5.0.15105-1.fc34
fakeroot-1.26-4.fc34
fpart-1.4.0-1.fc34
gjs-1.68.4-3.fc34
glusterfs-9.4-1.fc34
hwdata-0.352-1.fc34
iaito-5.3.1-4.fc34
igt-gpu-tools-1.26-1.20211003git1bf33ae.fc34
libabigail-2.0-1.fc34
libquotient-0.6.10-1.fc34
mediawiki-1.35.4-1.fc34
mozjs78-78.15.0-1.fc34
netpbm-10.96.00-1.fc34
perl-Gtk3-ImageView-10-1.fc34
php-doctrine-dbal-2.13.4-1.fc34
php-doctrine-dbal3-3.1.3-1.fc34
php-doctrine-doctrine-bundle2-2.4.3-1.fc34
php-doctrine-orm-2.9.6-1.fc34
php-pecl-xdebug3-3.1.0-1.fc34
php-phpdocumentor-type-resolver1-1.5.1-1.fc34
php-yoast-phpunit-polyfills-1.0.2-1.fc34
php-zstd-0.11.0-1.fc34
picocli-4.6.1-17.fc34
pungi-4.3.0-2.fc34
python-ansible-pygments-0.1.0-1.fc34
python-bluepyopt-1.11.5-1.fc34
python-cachelib-0.4.0-1.fc34
python-rpm-head-signing-1.5.1-1.fc34
python3.10-3.10.0-1.fc34
pytz-2021.3-1.fc34
qt5-qtwayland-5.15.2-14.fc34
radare2-5.4.2-1.fc34
redis-6.2.6-1.fc34
rt-4.4.5-3.fc34
soundconverter-4.0.1-5.fc34
tang-10-3.fc34
udisks2-2.9.4-1.fc34
xstream-1.4.18-2.fc34
Details about builds:
================================================================================
csmock-3.0.0-1.fc34 (FEDORA-2021-f436948477)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Kamil Dudka <kdudka(a)redhat.com> 3.0.0-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
dolphin-emu-5.0.15105-1.fc34 (FEDORA-2021-288525a772)
GameCube / Wii / Triforce Emulator
--------------------------------------------------------------------------------
Update Information:
Update to latest Dolphin (5.0-15105) Mostly bug fixes, see upstream notes:
https://dolphin-emu.org/blog/2021/09/07/dolphin-progress-report-august-2021/
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 2 2021 Jeremy Newton <alexjnewt at hotmail dot com> - 5.0.15105-1
- Update to 5.0-15105
--------------------------------------------------------------------------------
================================================================================
fakeroot-1.26-4.fc34 (FEDORA-2021-1a7ea45cd6)
Gives a fake root environment
--------------------------------------------------------------------------------
Update Information:
- Update to 1.26 (#2001811) - Relax autoconf version - Relax tar unittest
version 2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 S��rgio Basto <sergio(a)serjux.com> - 1.26-4
- Relax tar test v2
* Mon Oct 4 2021 S��rgio Basto <sergio(a)serjux.com> - 1.26-3
- Relax tar test
* Sun Oct 3 2021 S��rgio Basto <sergio(a)serjux.com> - 1.26-2
- Relax autoconf version
- t.tar test, now just fail on ppc64le
* Wed Sep 22 2021 S��rgio Basto <sergio(a)serjux.com> - 1.26-1
- Update to 1.26 (#2001811)
- Drop upstreamed patches
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2001811 - fakeroot-1.26 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2001811
--------------------------------------------------------------------------------
================================================================================
fpart-1.4.0-1.fc34 (FEDORA-2021-10f5fbb72b)
a tool that sorts files and packs them into bags
--------------------------------------------------------------------------------
Update Information:
Latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Sam P <survient(a)fedoraproject.org> - 1.4.0-1
- new version
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gjs-1.68.4-3.fc34 (FEDORA-2021-e7e4c8d6f0)
Javascript Bindings for GNOME
--------------------------------------------------------------------------------
Update Information:
- update to mozjs78-78.15.0:
https://www.mozilla.org/en-
US/firefox/78.15.0/releasenotes/ - gjs rebuild against new mozjs78
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 1.68.4-3
- Rebuild against mozjs78-78.15.0-1
- Increase test timeouts to make it more reliable on armv7
* Mon Sep 27 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 1.68.4-2
- Rebuild against mozjs78-78.14.0-1
--------------------------------------------------------------------------------
================================================================================
glusterfs-9.4-1.fc34 (FEDORA-2021-7678a9cc17)
Distributed File System
--------------------------------------------------------------------------------
Update Information:
glusterfs 9.4 GA
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 9.4-1
- 9.4 GA
--------------------------------------------------------------------------------
================================================================================
hwdata-0.352-1.fc34 (FEDORA-2021-3e6b616631)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Update pci and vendor ids
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 0.352-1
- Update pci and vendor ids
--------------------------------------------------------------------------------
================================================================================
iaito-5.3.1-4.fc34 (FEDORA-2021-362d1e1f42)
GUI for radare2 reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
Update radare2 to 5.4.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Henrik Nordstrom <henrik(a)henriknordstrom.net> - 5.3.1-4
- rebuilt with radare2 5.4.2
--------------------------------------------------------------------------------
================================================================================
igt-gpu-tools-1.26-1.20211003git1bf33ae.fc34 (FEDORA-2021-8d00cdd764)
Test suite and tools for DRM drivers
--------------------------------------------------------------------------------
Update Information:
New git snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Lyude Paul <lyude(a)redhat.com> - 1.26-1.20211003git1bf33ae
- New git snapshot
--------------------------------------------------------------------------------
================================================================================
libabigail-2.0-1.fc34 (FEDORA-2021-39ce3ce2ba)
Set of ABI analysis tools
--------------------------------------------------------------------------------
Update Information:
Update to upstream 2.0 tarball
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Dodji Seketeli <dodji(a)redhat.com> - 2.0-1
- Update to upstream 2.0 tarball
- Change License to ASL 2.0 to comply with the upstream license change.
--------------------------------------------------------------------------------
================================================================================
libquotient-0.6.10-1.fc34 (FEDORA-2021-5a1d053e62)
Qt5 library to write cross-platform clients for Matrix
--------------------------------------------------------------------------------
Update Information:
Updated to version 0.6.10.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 0.6.10-1
- Updated to version 0.6.10.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2010094 - libquotient-0.6.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2010094
--------------------------------------------------------------------------------
================================================================================
mediawiki-1.35.4-1.fc34 (FEDORA-2021-eee8b7514f)
A wiki engine
--------------------------------------------------------------------------------
Update Information:
https://www.mediawiki.org/wiki/Release_notes/1.35#MediaWiki_1.35.4
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Michael Cronenworth <mike(a)cchtml.com> - 1.35.4-1
- Update to 1.35.4
-
https://www.mediawiki.org/wiki/Release_notes/1.35#MediaWiki_1.35.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1980309 - CVE-2021-35197 mediawiki: blocked users are able to purge pages
impacting Integrity [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1980309
[ 2 ] Bug #1995203 - CVE-2021-31556 mediawiki: MWOAuthConsumerSubmitControl.php does not
ensure that the length of an RSA key will fit in a MySQL blob [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1995203
[ 3 ] Bug #2010198 - CVE-2021-41798 mediawiki: Cross-site scripting (XSS) in
Special:Search [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2010198
[ 4 ] Bug #2010199 - CVE-2021-41800 mediawiki: improper access restrictions in
PoolCounter protection of Special:Contributions. [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2010199
[ 5 ] Bug #2010201 - CVE-2021-41799 mediawiki: ApiQueryBacklinks can cause a full table
scan and as a result DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2010201
--------------------------------------------------------------------------------
================================================================================
mozjs78-78.15.0-1.fc34 (FEDORA-2021-e7e4c8d6f0)
SpiderMonkey JavaScript library
--------------------------------------------------------------------------------
Update Information:
- update to mozjs78-78.15.0:
https://www.mozilla.org/en-
US/firefox/78.15.0/releasenotes/ - gjs rebuild against new mozjs78
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 78.15.0-1
- Update to 78.15.0
* Mon Sep 27 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 78.14.0-1
- Update to 78.14.0
--------------------------------------------------------------------------------
================================================================================
netpbm-10.96.00-1.fc34 (FEDORA-2021-231824373d)
A library for handling different graphics file formats
--------------------------------------------------------------------------------
Update Information:
New upstream release 10.96.00
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Josef Ridky <jridky(a)redhat.com> - 10.96.00-1
- New upstream release 10.96.00 (#2007871)
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
10.95.00-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2007871 - netpbm-10.96.00 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2007871
--------------------------------------------------------------------------------
================================================================================
perl-Gtk3-ImageView-10-1.fc34 (FEDORA-2021-c33e145fbd)
Image viewer widget for GTK 3
--------------------------------------------------------------------------------
Update Information:
This release adds a support for a draggable selector.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Petr Pisar <ppisar(a)redhat.com> - 10-1
- Version 10 bump (bug #2010062)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2010062 - perl-Gtk3-ImageView-10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2010062
--------------------------------------------------------------------------------
================================================================================
php-doctrine-dbal-2.13.4-1.fc34 (FEDORA-2021-f95964f3b3)
Doctrine Database Abstraction Layer (DBAL)
--------------------------------------------------------------------------------
Update Information:
**Version 2.13.4** PHP * 4818: Cast decimals to string on SQLite thanks to
@derrabus Bug * 4792: Do not normalize current version during comparison
thanks to @morozov Documentation * 4833: Add explanation why we need to
cast float to string in decimal type thanks to @andrew-demb * 4827: Backport
doc block fix thanks to @derrabus
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 2.13.4-1
- update to 2.13.4
--------------------------------------------------------------------------------
================================================================================
php-doctrine-dbal3-3.1.3-1.fc34 (FEDORA-2021-6114911f39)
Doctrine Database Abstraction Layer (DBAL) version 3
--------------------------------------------------------------------------------
Update Information:
**Version 3.1.3** Static Analysis * 4826: Remove obsolete error suppression
thanks to @derrabus Bug,Console * 4825: Fix version displayed in
ConsoleRunner thanks to @derrabus * 4824: Remove pinned platform thanks to
@derrabus Bug,Platforms,Regression,SQLite * 4815: Fix renaming upper-cased
SQLite columns thanks to @morozov and @Spice-King Bug,Schema * 4811: Fix
Schema::getTableNames() thanks to @morozov
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 3.1.3-1
- update to 3.1.3
--------------------------------------------------------------------------------
================================================================================
php-doctrine-doctrine-bundle2-2.4.3-1.fc34 (FEDORA-2021-2cbd7c5ac9)
Symfony Bundle for Doctrine
--------------------------------------------------------------------------------
Update Information:
**Version 2.4.3** CI * 1400: Run PHPCS on PHP 8 thanks to @derrabus Bug *
1399: Fix tests (DBAL 3, Symfony 6) thanks to @derrabus * 1397: Fix
CacheCompatibilityPass for doctrine slc caches thanks to @ostrolucky and @Ne-
Lexa * 1379: Loosen dependency on symfony/validator bundle thanks to @m-vo *
1392: Add native return type to commands thanks to @nicolas-grekas
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 2.4.3-1
- update to 2.4.3
- add dependency on doctrine/annotations
--------------------------------------------------------------------------------
================================================================================
php-doctrine-orm-2.9.6-1.fc34 (FEDORA-2021-823434b9f9)
Doctrine Object-Relational-Mapper (ORM)
--------------------------------------------------------------------------------
Update Information:
**Version 2.9.6** CI * 9058: Run PHP 8.1 CI with stable dependencies thanks
to @derrabus * 9006: Add PHP 8.1 to CI thanks to @derrabus * 8979: Bump
PHPStan and Psalm thanks to @derrabus Bug * 9053: Fix locking non-existing
entity thanks to @sztyup * 9028: Don't presume one-to-one lookup returned an
entity thanks to @gregtyler * 9024: Fix docblock types for some nullable
properties thanks to @phansys * 9010: Fix ignoring custom types for
PersistentCollection matching() thanks to @sztyup * 9001: Remove Proxy from
EntityManagerInterface contract thanks to @derrabus * 9000: Fix class casing
and avoid name collisions thanks to @derrabus * 8959: Fix getEntityChangeSet
return typehint thanks to @norkunas * 8903: SchemaValidator: Fix mapped
superclass missing in discriminator map thanks to @olsavmic Improvement *
9048: Duplicate testTwoIterateHydrations thanks to @derrabus * 9017: Fix some
typehints in QueryBuilder thanks to @norkunas * 9007: Add tests for
Query::getQueryCacheDriver() thanks to @derrabus * 8997: Drop unused classes
thanks to @greg0ire * 8992: Add extension point for the "embedded" XML node
thanks to @phansys * 8981: Restore functional cache tests thanks to @derrabus
Documentation * 9038: Minor change about double The thanks to @Cartman34 *
8987: Fix English in note. thanks to @ash-m * 8978: Remove detach deprecation
entry in UPGRADE.md thanks to @simonberger * 8960: Fix typo thanks to @inarli
* 8435: Minor rewording thanks to @ThomasLandauer
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 2.9.6-1
- update to 2.9.6
--------------------------------------------------------------------------------
================================================================================
php-pecl-xdebug3-3.1.0-1.fc34 (FEDORA-2021-5de3043b78)
Provides functions for function traces and profiling
--------------------------------------------------------------------------------
Update Information:
Mon, Oct 04, 2021 - **Xdebug 3.1.0** Fixed bugs: - Fixed issue #1472: Add
assignments to computer readable trace format - Fixed issue #1537: Add links to
documentation to various different "features" after wizard has run - Fixed
issue
#1738: Add xdebug_notify() function to send data through DBGp to a debugging
client - Fixed issue #1853: Enable profile compression for cachegrind files -
Fixed issue #1890: Add connected client and protocol features to diagnostic page
- Fixed issue #1898: API for querying the currently active mode(s) - Fixed issue
#1933: Allow for cloud ID to be set through the trigger - Fixed issue #1938:
Branches in traits aren���t marked as executed - Fixed issue #1948: Do not
redirect warning and error messages to PHP's error log if an Xdebug log is
active - Fixed issue #1949: private properties for internal classes can't be
fetched for debugging - Fixed issue #1963: php exit code = -1073741819 when
xdebug.mode = off (Windows Thread Safe Only) - Fixed issue #1969: Provide
breakpoint ID / info in DBGp run command responses - Fixed issue #1970:
xdebug_get_function_stack with unnamed (internal) parameters have wrong index -
Fixed issue #1972: Add support for PHP 8.1 Fibers - Fixed issue #1974: Add gzip
support to trace files - Fixed issue #1976: Switch debug session cookie to Lax,
and remove expiry time - Fixed issue #1978: Xdebug's log messages are cut off at
512 bytes - Fixed issue #1980: PHP 8.1: Mark enum classes as "enum" - Fixed
issue #1986: Add support for multiple trigger values - Fixed issue #1989:
Profiling does not output correct class when parent keyword is used - Fixed
issue #1992: Code Coverage with filter produces Segmentation fault on
xdebug_stop_code_coverage() - Fixed issue #1993: eval-ing broken code causes
stepping to break - Fixed issue #1996: Add support for Closure visualisation in
traces, debugging, and Xdebug's var_dump - Fixed issue #1997: Added
xdebug_connect_to_client() to attempt a debugging connect while running code -
Fixed issue #1998: Double facet attribute generated for enums that are stored in
properties - Fixed issue #1999: Add "readonly" facet to PHP 8.1 readonly
properties - Fixed issue #2001: Add 'xdebug.use_compression' setting to turn
on/off compression for profiling files - Fixed issue #2004: Figure out what
"XDEBUG_SHOW_FNAME_TODO" define is for - Fixed issue #2007: xdebug 3.x fails to
build on OS X 10.11 or earlier due to clock_gettime_nsec_np requirement - Fixed
issue #2008: Using the XDEBUG_SESSION cookie could bypass shared-secret checks -
Fixed issue #2009: xdebug_stop_code_coverage's argument has type mismatch -
Fixed issue #2011: Closures as protected properties have double facet XML
attribute - Fixed issue #2013: Support PHP 8.1 - Fixed issue #2018: zlib
compression support on Windows - Fixed issue #2019: Xdebug crash because of
uninitialized memory - Fixed issue #2020: segfault if xdebug.dump.GET=* and
integer key without value in URL - Fixed issue #2021: Segmentation fault due to
NULL bytes in internal anonymous class names - Fixed issue #2025: Anonymous
classes which extend are not detected as anonymous classes since PHP 8.0 ----
Sun, Sep 05, 2021 - **Xdebug 3.1.0beta1** New features: - Fixed issue #1738:
Add xdebug_notify() function to send data through DBGp to a debugging client -
Fixed issue #1853: Enable profile compression for cachegrind files - Fixed issue
#1898: API for querying the currently active mode(s) - Fixed issue #1972: Add
support for PHP 8.1 Fibers - Fixed issue #1974: Add gzip support to trace files
- Fixed issue #1997: Added xdebug_connect_to_client() to attempt a debugging
connect while running code - Fixed issue #2001: Add 'xdebug.use_compression'
setting to turn on/off compression for profiling files - Fixed issue #2013:
Support PHP 8.1 Improvements: - Fixed issue #1472: Add assignments to computer
readable trace format - Fixed issue #1890: Add connected client and protocol
features to diagnostic page - Fixed issue #1933: Allow for cloud ID to be set
through the trigger - Fixed issue #1969: Provide breakpoint ID / info in DBGp
run command responses - Fixed issue #1976: Switch debug session cookie to Lax,
and remove expiry time - Fixed issue #1980: PHP 8.1: Mark enum classes as
"enum"
- Fixed issue #1986: Add support for multiple trigger values - Fixed issue
#1996: Add support for Closure visualisation in traces, debugging, and Xdebug's
var_dump - Fixed issue #1999: Add "readonly" facet to PHP 8.1 readonly
properties Fixed bugs: - Fixed issue #1938: Branches in traits aren���t marked
as executed - Fixed issue #1948: Do not redirect warning and error messages to
PHP's error log if an Xdebug log is active - Fixed issue #1949: private
properties for internal classes can't be fetched for debugging - Fixed issue
#1963: php exit code = -1073741819 when xdebug.mode = off (Windows Thread Safe
Only) - Fixed issue #1970: xdebug_get_function_stack with unnamed (internal)
parameters have wrong index - Fixed issue #1978: Xdebug's log messages are cut
off at 512 bytes - Fixed issue #1989: Profiling does not output correct class
when parent keyword is used - Fixed issue #1992: Code Coverage with filter
produces Segmentation fault on xdebug_stop_code_coverage() - Fixed issue #1993:
eval-ing broken code causes stepping to break - Fixed issue #1998: Double facet
attribute generated for enums that are stored in properties - Fixed issue #2004:
Figure out what "XDEBUG_SHOW_FNAME_TODO" define is for - Fixed issue #2008:
Using the XDEBUG_SESSION cookie could bypass shared-secret checks - Fixed issue
#2009: xdebug_stop_code_coverage's argument has type mismatch - Fixed issue
#2011: Closures as protected properties have double facet XML attribute
Documentation - Fixed issue #1537: Add links to documentation to various
different "features" after wizard has run
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 3.1.0-1
- update to 3.1.0
--------------------------------------------------------------------------------
================================================================================
php-phpdocumentor-type-resolver1-1.5.1-1.fc34 (FEDORA-2021-852047cd07)
A PSR-5 based resolver of Class names, Types and Structural Element Names
--------------------------------------------------------------------------------
Update Information:
**Version 1.5.1** Added * add support for literal-string, thanks to @voku *
fix "PseudoType" for ArrayKey, thanks to @voku Fixed * fix
"RuntimeException" for "array-key" and for "class-string",
thanks to @voku
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 1.5.1-1
- update to 1.5.1
--------------------------------------------------------------------------------
================================================================================
php-yoast-phpunit-polyfills-1.0.2-1.fc34 (FEDORA-2021-d00bb838e6)
Set of polyfills for changed PHPUnit functionality
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.2** Added * README: FAQ section about installing and using
the library via the shivammathur/setup-php action. PR #52 Changed * README:
minor textual clarifications and improvements. PRs #52, [$54], props Pierre
Gordon. * General housekeeping. Fixed * Autoloader: improved
compatibility with packages which create a class_alias for the
PHPUnit_Runner_Version or PHPUnit\Runner\Version class. PR #59
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 1.0.2-1
- update to 1.0.2
--------------------------------------------------------------------------------
================================================================================
php-zstd-0.11.0-1.fc34 (FEDORA-2021-c418a16693)
Zstandard extension
--------------------------------------------------------------------------------
Update Information:
**Version 0.11.0** - change response when compression level 0 of
zstd_compress() - add compression level arguments to zstd_compress_dict() -
change second argument of dictionary function to mandatory
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 0.11.0-1
- update to 0.11.0
--------------------------------------------------------------------------------
================================================================================
picocli-4.6.1-17.fc34 (FEDORA-2021-2af2c20daa)
Java command line parser with both an annotations API and a programmatic API
--------------------------------------------------------------------------------
Update Information:
``` * Mon Oct 4 2021 Didik Supriadi <didiksupriadi41(a)fedoraproject.org> -
4.6.1-17 - Remove BR bnd-maven-plugin - Remove rpmautospec ```
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Didik Supriadi <didiksupriadi41(a)fedoraproject.org> - 4.6.1-17
- Remove BR bnd-maven-plugin
- Remove rpmautospec
--------------------------------------------------------------------------------
================================================================================
pungi-4.3.0-2.fc34 (FEDORA-2021-d7371cd154)
Distribution compose tool
--------------------------------------------------------------------------------
Update Information:
Fix crash after start when running within ODCS.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.3.0-2
- Backport patch to avoid crash on missing COMPOSE_ID
--------------------------------------------------------------------------------
================================================================================
python-ansible-pygments-0.1.0-1.fc34 (FEDORA-2021-95a05c99cb)
Provides Pygments highlighter for Ansible output for use in Sphinx
--------------------------------------------------------------------------------
Update Information:
new package python-ansible-pygments
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-bluepyopt-1.11.5-1.fc34 (FEDORA-2021-b962768910)
Bluebrain Python Optimisation Library (bluepyopt)
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 3 2021 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 1.11.5-1
- feat: update to 1.11.5
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> 1.10.36-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> 1.10.36-4
- Rebuilt for Python 3.10
* Fri May 28 2021 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com>
1.10.36-3
- fix: add tweak to make tests pass on all arches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1987234 - python-bluepyopt-1.11.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1987234
--------------------------------------------------------------------------------
================================================================================
python-cachelib-0.4.0-1.fc34 (FEDORA-2021-587a9e245c)
A collection of cache libraries with a common API
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.4.0 - All cache types now implement the `BaseCache`
interface. - Add type information for static typing tools. - `FileNotFound`
exceptions no longer logged in `FileSystemCache` methods.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Mat��j Grabovsk�� <mgrabovs(a)redhat.com> - 0.4.0-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
python-rpm-head-signing-1.5.1-1.fc34 (FEDORA-2021-934753b669)
Small python module to extract RPM header and file digests
--------------------------------------------------------------------------------
Update Information:
Release 1.5.1 Adds the determine function, and fixes it for empty packages.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 1.5.1-1
- fix: ensure that the determine function handles empty packages
* Wed Sep 29 2021 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 1.5-1
- feat: add determine function to determine package status
* Mon Sep 27 2021 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 1.4.3-1
- Fix: ignore RPM Ghost files
- Fix: ignore empty RPMs
--------------------------------------------------------------------------------
================================================================================
python3.10-3.10.0-1.fc34 (FEDORA-2021-ad2c1fdf07)
Version 3.10 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Update to 3.10 final.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 3.10.0-1
- Update to 3.10.0 final
--------------------------------------------------------------------------------
================================================================================
pytz-2021.3-1.fc34 (FEDORA-2021-5c25421ad2)
World Timezone Definitions for Python
--------------------------------------------------------------------------------
Update Information:
2021.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 2021.3-1
- 2021.3
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2021.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Wed Jun 2 2021 Python Maint <python-maint(a)redhat.com> - 2021.1-3
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2009930 - pytz-2021.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2009930
--------------------------------------------------------------------------------
================================================================================
qt5-qtwayland-5.15.2-14.fc34 (FEDORA-2021-379eb8a86c)
Qt5 - Wayland platform support and QtCompositor module
--------------------------------------------------------------------------------
Update Information:
Fix clipboard issue.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Jan Grulich <jgrulich(a)redhat.com> - 5.15.2-14
- Update clipboard patch
* Mon Oct 4 2021 Jan Grulich <jgrulich(a)redhat.com> - 5.15.2-13
- Backport clipboard fixes
Resolves: bz#1957503
* Tue Sep 14 2021 Rex Dieter <rdieter(a)fedoraproject.org> - 5.15.2-12
- Pull in latest kde/5.15 branch fixes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957503 - Right click empties the clipboard on Qt 5 applications
https://bugzilla.redhat.com/show_bug.cgi?id=1957503
--------------------------------------------------------------------------------
================================================================================
radare2-5.4.2-1.fc34 (FEDORA-2021-362d1e1f42)
The reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
Update radare2 to 5.4.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 23 2021 Henrik Nordstrom <henrik(a)henriknordstrom.net> - 5.4.2-1
- Update to version 5.4.2
--------------------------------------------------------------------------------
================================================================================
redis-6.2.6-1.fc34 (FEDORA-2021-61c487f241)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
**Redis 6.2.** - 6 Released Mon Oct 4 12:00:00 IDT 2021 Upgrade urgency:
SECURITY, contains fixes to security issues. Security Fixes: *
(**CVE-2021-41099**) Integer to heap buffer overflow handling certain string
commands and network payloads, when proto-max-bulk-len is manually configured
to a non-default, very large value [reported by yiyuaner]. *
(**CVE-2021-32762**) Integer to heap buffer overflow issue in redis-cli and
redis-sentinel parsing large multi-bulk replies on some older and less common
platforms [reported by Microsoft Vulnerability Research]. * (**CVE-2021-32687**)
Integer to heap buffer overflow with intsets, when set-max-intset-entries is
manually configured to a non-default, very large value [reported by Pawel
Wieczorkiewicz, AWS]. * (**CVE-2021-32675**) Denial Of Service when processing
RESP request payloads with a large number of elements on many connections. *
(**CVE-2021-32672**) Random heap reading issue with Lua Debugger [reported by
Meir Shpilraien]. * (**CVE-2021-32628**) Integer to heap buffer overflow
handling ziplist-encoded data types, when configuring a large, non-default
value for hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-
entries or zset-max-ziplist-value [reported by sundb]. * (**CVE-2021-32627**)
Integer to heap buffer overflow issue with streams, when configuring a non-
default, large value for proto-max-bulk-len and client-query-buffer-limit
[reported by sundb]. * (**CVE-2021-32626**) Specially crafted Lua scripts may
result with Heap buffer overflow [reported by Meir Shpilraien]. Bug fixes
that involve behavior changes: * GEO* STORE with empty source key deletes the
destination key and return 0 (#9271) Previously it would have returned an
empty array like the non-STORE variant. * PUBSUB NUMPAT replies with number of
patterns rather than number of subscriptions (#9209) This actually changed in
6.2.0 but was overlooked and omitted from the release notes. Bug fixes that are
only applicable to previous releases of Redis 6.2: * Fix CLIENT PAUSE, used an
old timeout from previous PAUSE (#9477) * Fix CLIENT PAUSE in a replica would
mess the replication offset (#9448) * Add some missing error statistics in INFO
errorstats (#9328) Other bug fixes: * Fix incorrect reply of COMMAND command
key positions for MIGRATE command (#9455) * Fix appendfsync to always guarantee
fsync before reply, on MacOS and FreeBSD (kqueue) (#9416) * Fix the wrong mis-
detection of sync_file_range system call, affecting performance (#9371) CLI
tools: * When redis-cli received ASK response, it didn't handle it (#8930)
Improvements: * Add latency monitor sample when key is deleted via lazy expire
(#9317) * Sanitize corrupt payload improvements (#9321, #9399) * Delete empty
keys when loading RDB file or handling a RESTORE command (#9297, #9349)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Remi Collet <remi(a)remirepo.net> - 6.2.6-1
- Upstream 6.2.6 release.
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 6.2.5-2
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
================================================================================
rt-4.4.5-3.fc34 (FEDORA-2021-f2e6978f90)
Request tracker
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-38562
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.5-3
- Note this update addresses CVE-2021-38562 (RHBZ#2008957, RHBZ#2008958).
- BR: perl(GnuPG::Interface) >= 1.02 for rt-4.4.x >= 4.4.5.
- Remove anacronistic Conflict with perl(DBD::Pg) = 3.3.0.
* Fri Sep 24 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.5-2
- Revert previous erronious commit.
* Thu Sep 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.5-1
- Upgrade to rt-4.4.5.
- Add BR: perl(Parallel::ForkManager).
- Preps for rt-5.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2008957 - CVE-2021-38562 rt: User enumeration through a timing side-channel
attack
https://bugzilla.redhat.com/show_bug.cgi?id=2008957
--------------------------------------------------------------------------------
================================================================================
soundconverter-4.0.1-5.fc34 (FEDORA-2021-4d32422379)
Simple sound converter application for GNOME
--------------------------------------------------------------------------------
Update Information:
This update backports a fix for a bug which could cause soundconverter to crash
with a "ValueError: your selected folder should be in URI format." error. It
also backports a fix to make soundconverter work correctly with gstreamer
1.19.2. soundconverter should continue to work as normal with earlier versions
of gstreamer as well.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Adam Williamson <awilliam(a)redhat.com> - 4.0.1-5
- Backport PR #54 to fix crasher bug #1988116
* Mon Oct 4 2021 Adam Williamson <awilliam(a)redhat.com> - 4.0.1-4
- Backport fixes for
https://bugs.launchpad.net/soundconverter/+bug/1945838
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.0.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 4.0.1-2
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1988116 - [abrt] soundconverter: __init__():
namegenerator.py:175:__init__:ValueError: your selected folder should be in URI format.
https://bugzilla.redhat.com/show_bug.cgi?id=1988116
--------------------------------------------------------------------------------
================================================================================
tang-10-3.fc34 (FEDORA-2021-09ff9ffaf0)
Network Presence Binding Daemon
--------------------------------------------------------------------------------
Update Information:
Keys are created with 0440 mode
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Sergio Arroutbi <sarroutb(a)redhat.com> - 10-3
- Keys are created with 0440 mode
Resolves rhbz#2008204
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2008204 - key files default permissions
https://bugzilla.redhat.com/show_bug.cgi?id=2008204
--------------------------------------------------------------------------------
================================================================================
udisks2-2.9.4-1.fc34 (FEDORA-2021-55f3c0b6f1)
Disk Manager
--------------------------------------------------------------------------------
Update Information:
Update to upstream stable release 2.9.4, includes a fix for CVE-2021-3802
(#2003650, #2003649)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Tomas Bzatek <tbzatek(a)redhat.com> - 2.9.4-1
- Version 2.9.4
- Fixes CVE-2021-3802 (#2003650)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1898705 - [abrt] udisks2: udisks_block_get_device(): udisksd killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1898705
[ 2 ] Bug #1904831 - [abrt] udisks2: udisks_block_get_id_uuid(): udisksd killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1904831
[ 3 ] Bug #1935817 - [abrt] udisks2: udisks_block_get_id_uuid(): udisksd killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1935817
[ 4 ] Bug #1958543 - [abrt] udisks2: g_dbus_object_get_interface(): udisksd killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1958543
[ 5 ] Bug #1980057 - [abrt] udisks2: udisks_block_get_id_uuid(): udisksd killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1980057
[ 6 ] Bug #1983052 - [abrt] udisks2: udisks_block_get_id_uuid(): udisksd killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1983052
[ 7 ] Bug #1998546 - [abrt] udisks2: udisks_block_get_id_usage(): udisksd killed by
SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1998546
--------------------------------------------------------------------------------
================================================================================
xstream-1.4.18-2.fc34 (FEDORA-2021-d894ca87dc)
Java XML serialization library
--------------------------------------------------------------------------------
Update Information:
``` * Mon Oct 04 2021 Didik Supriadi <didiksupriadi41(a)fedoraproject.org> -
1.4.18-2 - Enable activation, cglib, dom4j, jdom, and jdom2 * Fri Oct 01 2021
Didik Supriadi <didiksupriadi41(a)fedoraproject.org> - 1.4.18-1 - Update to
version 1.4.18 ```
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 4 2021 Didik Supriadi <didiksupriadi41(a)fedoraproject.org> - 1.4.18-2
- Enable activation, cglib, dom4j, jdom, and jdom2
* Fri Oct 1 2021 Didik Supriadi <didiksupriadi41(a)fedoraproject.org> - 1.4.18-1
- Update to version 1.4.18
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1908833 - CVE-2020-26258 xstream: Server-Side Forgery Request vulnerability
can be activated when unmarshalling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1908833
[ 2 ] Bug #1908838 - CVE-2020-26259 xstream: arbitrary file deletion on the local host
when unmarshalling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1908838
[ 3 ] Bug #1942540 - CVE-2021-21341 xstream: allow a remote attacker to cause DoS only
by manipulating the processed input stream [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942540
[ 4 ] Bug #1942547 - CVE-2021-21342 xstream: SSRF via crafted input stream [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942547
[ 5 ] Bug #1942551 - CVE-2021-21343 xstream: arbitrary file deletion on the local host
via crafted input stream [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942551
[ 6 ] Bug #1942556 - CVE-2021-21344 xstream: arbitrary code execution via crafted input
stream [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942556
[ 7 ] Bug #1942560 - CVE-2021-21345 xstream: allow a remote attacker who has sufficient
rights to execute commands of the host only by manipulating the processed input stream
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942560
[ 8 ] Bug #1942579 - CVE-2021-21346 xstream: allow a remote attacker to load and execute
arbitrary code from a remote host only by manipulating the processed input stream
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942579
[ 9 ] Bug #1942631 - CVE-2021-21347 xstream: allow a remote attacker to load and execute
arbitrary code from a remote host only by manipulating the processed input stream
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942631
[ 10 ] Bug #1942634 - CVE-2021-21348 xstream: ReDoS vulnerability [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942634
[ 11 ] Bug #1942636 - CVE-2021-21349 xstream: SSRF can be activated unmarshalling with
XStream to access data streams from an arbitrary URL referencing a resource in an intranet
or the local host [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942636
[ 12 ] Bug #1942638 - CVE-2021-21350 xstream: allow a remote attacker to execute
arbitrary code only by manipulating the processed input stream [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942638
[ 13 ] Bug #1942643 - CVE-2021-21351 xstream: allow a remote attacker to load and
execute arbitrary code from a remote host only by manipulating the processed input stream
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1942643
[ 14 ] Bug #1966736 - CVE-2021-29505 xstream: remote command execution attack by
manipulating the processed input stream [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1966736
[ 15 ] Bug #1997764 - CVE-2021-39139 xstream: vulnerable to an arbitrary code execution
attack by manipulating the processed input stream with type information [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997764
[ 16 ] Bug #1997767 - CVE-2021-39140 xstream: DoS by manipulating the processed input
stream [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997767
[ 17 ] Bug #1997770 - CVE-2021-39141 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997770
[ 18 ] Bug #1997773 - CVE-2021-39144 xstream: vulnerable to a remote command execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997773
[ 19 ] Bug #1997776 - CVE-2021-39145 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997776
[ 20 ] Bug #1997778 - CVE-2021-39146 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997778
[ 21 ] Bug #1997780 - CVE-2021-39147 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997780
[ 22 ] Bug #1997782 - CVE-2021-39148 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997782
[ 23 ] Bug #1997785 - CVE-2021-39149 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997785
[ 24 ] Bug #1997788 - CVE-2021-39150 xstream: SSRF can be activated unmarshalling with
XStream to access data streams from an arbitrary URL referencing a resource in an intranet
or the local host [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997788
[ 25 ] Bug #1997792 - CVE-2021-39151 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997792
[ 26 ] Bug #1997794 - CVE-2021-39152 xstream: SSRF can be activated unmarshalling with
XStream to access data streams from an arbitrary URL referencing a resource in an intranet
or the local host [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997794
[ 27 ] Bug #1997796 - CVE-2021-39153 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997796
[ 28 ] Bug #1997802 - CVE-2021-39154 xstream: vulnerable to an arbitrary code execution
attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997802
--------------------------------------------------------------------------------