The following Fedora 33 Security updates need testing:
Age URL
46
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1b6848f31c
python-pip-20.2.2-2.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f3ad34aa9f
php-symfony3-3.4.49-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2eb67ba3c2
runc-1.0.0-378.rc95.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-121edb82dd
php-symfony4-4.4.24-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-98720f3785
python2.7-2.7.18-11.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bfbc1088b6
java-1.8.0-openjdk-aarch32-1.8.0.292.b10-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b
libxml2-2.9.12-2.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a4c0a91884
rxvt-unicode-9.26-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8b85b2de05
eterm-0.9.6-26.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1ec3c5ed63
opendmarc-1.4.1-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e8cab459ab cflow-1.6-8.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-454a0f6f76
gnutls-3.6.16-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-faab70f09a
mapserver-7.4.5-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8917c5d9d2
exiv2-0.27.3-7.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7190a83164
chromium-90.0.4430.212-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bf77566c9
nginx-1.20.1-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-77756994ba
mingw-python-pillow-7.2.0-6.fc33 python-pillow-7.2.0-6.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
64
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b331c0278
wpebackend-fdo-1.8.4-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-efdc2e7167 chrony-4.1-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e7f17262ce
libidn2-2.3.1-1.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ae71327f68
libtirpc-1.2.6-4.rc4.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5cc6457b38
rpcbind-1.2.6-0.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-55fc591f26
tpm2-tss-3.0.4-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aca3c7bb56 koji-1.25.0-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b1189d72ea
dracut-054-12.git20210521.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b
libxml2-2.9.12-2.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-cd029398ef mpfr-4.1.0-7.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b2b5636c1a
livecd-tools-28.1-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-35759ad8d3
openssh-8.4p1-6.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-454a0f6f76
gnutls-3.6.16-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa3657ac97 kmod-29-2.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8917c5d9d2
exiv2-0.27.3-7.fc33
The following builds have been pushed to Fedora 33 updates-testing
Carla-2.3.0-2.fc33
abrt-2.14.6-1.fc33
appx-util-0.4-1.fc33
azote-1.9.1-2.fc33
cockpit-245-1.fc33
cockpit-podman-31-1.fc33
fedora-easy-karma-0-0.47.20210526gitfa76ab7.fc33
golang-github-openprinting-ipp-usb-0.9.19-1.fc33
kernel-5.12.7-200.fc33
libpq-12.7-1.fc33
libreport-2.15.1-1.fc33
libxcrypt-4.4.21-1.fc33
mingw-djvulibre-3.5.27-12.fc33
mingw-exiv2-0.27.3-6.fc33
mkvtoolnix-57.0.0-1.fc33
net-snmp-5.9.1-1.fc33
oval-graph-1.2.7-1.fc33
perl-CPAN-Perl-Releases-5.20210521-1.fc33
perl-Module-CoreList-5.20210521-1.fc33
podman-3.2.0-0.2.rc3.fc33
postgresql-12.7-1.fc33
pypy-7.3.1-4.fc33
pypy3-7.3.1-6.fc33
python-lxml-4.5.1-4.fc33
python-smart_open-5.0.0-1.fc33
python3.10-3.10.0~b1-2.fc33
rubygem-mercenary-0.4.0-1.fc33
satyr-0.37-2.fc33
scap-security-guide-0.1.56-1.fc33
singularity-3.7.4-1.fc33
tcmu-runner-1.5.4-1.fc33
vokoscreenNG-3.0.9-1.fc33
Details about builds:
================================================================================
Carla-2.3.0-2.fc33 (FEDORA-2021-bb4601778a)
Audio plugin host
--------------------------------------------------------------------------------
Update Information:
Add carla.appdata.xml file
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Jan Beran <jaberan(a)redhat.com> - 1:2.3.0-2
- Add carla.appdata.xml file
--------------------------------------------------------------------------------
================================================================================
abrt-2.14.6-1.fc33 (FEDORA-2021-4797e362b3)
Automatic bug detection and reporting tool
--------------------------------------------------------------------------------
Update Information:
* Wed May 26 2021 Michal Fabik <mfabik(a)redhat.com> satyr-0.37-2: -
sr_distances_cluster_objects: Check arg safety - spec: Drop trailing comment
libreport-2.15.1-1 - gui-wizard-gtk: Improve docs - cli: Address of local
auto-variable assigned to a function parameter - Add support for excluding
whole elements from search for sensitive words - ignored_words: add more
"key"
variations - Various memory management and other fixes abrt-2.14.6-1: -
Add support of master + subkeys gpg - hooks: Remove stale workaround for a
fixed bug - cli: Gracefully handle disappearance of problem directory -
libs: Add version info script - retrace-client: Output task ID to console in
batch mode - retrace-client: Separate commands by commas - Doc: Improve man
page for abrt-action-analyze-vulnerability - Various memory management and
other fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 25 2021 Michal Fabik <mfabik(a)redhat.com> - 2.14.6-1
- Add support of master + subkeys gpg.
- hooks: Remove stale workaround for a fixed bug
- cli: Gracefully handle disappearance of problem directory
- libs: Add version info script
- retrace-client: Output task ID to console in batch mode
- retrace-client: Separate commands by commas
- Doc: Improve man page for abrt-action-analyze-vulnerability
- Various memory management and other fixes
--------------------------------------------------------------------------------
================================================================================
appx-util-0.4-1.fc33 (FEDORA-2021-d5269da5cd)
Utility to create Microsoft .appx packages
--------------------------------------------------------------------------------
Update Information:
More licensing documentation
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Neal Gompa <ngompa13(a)gmail.com> - 0.4-1
- Update to 0.4
--------------------------------------------------------------------------------
================================================================================
azote-1.9.1-2.fc33 (FEDORA-2021-579ac1c997)
Wallpaper and color manager for Sway, i3 and some other WMs
--------------------------------------------------------------------------------
Update Information:
added dependency on feh and xlr-xrandr if Xserver is installed
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Bob Hepple <bob.hepple(a)gmail.com>
- added dependency on feh and xlr-xrandr if Xserver is installed
* Wed May 26 2021 Bob Hepple <bob.hepple(a)gmail.com> - 1.9.1-1
- new version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1964504 - Missing dependencies for azote: feh and or wlr-randr
https://bugzilla.redhat.com/show_bug.cgi?id=1964504
--------------------------------------------------------------------------------
================================================================================
cockpit-245-1.fc33 (FEDORA-2021-4d35210e6d)
Web Console for Linux servers
--------------------------------------------------------------------------------
Update Information:
- Metrics: New PCP configuration dialog - Storage: Show both SHA256 and SHA1
Tang fingerprints - Release: No more cockpit-cache tarball
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Martin Pitt <mpitt(a)redhat.com> - 245-1
- Metrics: New PCP configuration dialog
- Storage: Show both SHA256 and SHA1 Tang fingerprints
- Release: No more cockpit-cache tarball
--------------------------------------------------------------------------------
================================================================================
cockpit-podman-31-1.fc33 (FEDORA-2021-5ac7229f7d)
Cockpit component for Podman containers
--------------------------------------------------------------------------------
Update Information:
- Added Korean translation
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Matej Marusak <mmarusak(a)redhat.com> - 31-1
- Added Korean translation
--------------------------------------------------------------------------------
================================================================================
fedora-easy-karma-0-0.47.20210526gitfa76ab7.fc33 (FEDORA-2021-d4dc17935f)
Fedora update feedback made easy
--------------------------------------------------------------------------------
Update Information:
- Production url for oraculum - Handle bunch of possible auth errors gracefully
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> -
0-0.47.20210526gitfa76ab7
- Production url for oraculum
- Handle bunch of possible auth errors gracefully
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.46.20200427git6fc0f39
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-github-openprinting-ipp-usb-0.9.19-1.fc33 (FEDORA-2021-dcd0332e5a)
HTTP reverse proxy, backed by IPP-over-USB connection to device
--------------------------------------------------------------------------------
Update Information:
1963156 - golang-github-openprinting-ipp-usb-0.9.19 is available ---- 1959620
- golang-github-openprinting-ipp-usb-0.9.18 is available
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 0.9.19-1
- 1963156 - golang-github-openprinting-ipp-usb-0.9.19 is available
* Thu May 20 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 0.9.18-1
- 1959620 - golang-github-openprinting-ipp-usb-0.9.18 is available
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.9.17-2
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1959620 - golang-github-openprinting-ipp-usb-0.9.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1959620
[ 2 ] Bug #1963156 - golang-github-openprinting-ipp-usb-0.9.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1963156
--------------------------------------------------------------------------------
================================================================================
kernel-5.12.7-200.fc33 (FEDORA-2021-bb5e43a5a4)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.12.7 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.12.7-0]
- Fix up merge issue resulting in dual entries for ALC295_FIXUP_ASUS_DACS (Justin M.
Forbes)
- powerpc/64s/syscall: Fix ptrace syscall info with scv syscalls (Nicholas Piggin)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1963782 - Kernel 5.12.5-300.fc34.x86_64 is not usable
https://bugzilla.redhat.com/show_bug.cgi?id=1963782
--------------------------------------------------------------------------------
================================================================================
libpq-12.7-1.fc33 (FEDORA-2021-0331627c24)
PostgreSQL client library
--------------------------------------------------------------------------------
Update Information:
update to 12.7
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Filip Janu�� <fjanus(a)redhat.com> - 12.7-1
- Update to 12.7
--------------------------------------------------------------------------------
================================================================================
libreport-2.15.1-1.fc33 (FEDORA-2021-4797e362b3)
Generic library for reporting various problems
--------------------------------------------------------------------------------
Update Information:
* Wed May 26 2021 Michal Fabik <mfabik(a)redhat.com> satyr-0.37-2: -
sr_distances_cluster_objects: Check arg safety - spec: Drop trailing comment
libreport-2.15.1-1 - gui-wizard-gtk: Improve docs - cli: Address of local
auto-variable assigned to a function parameter - Add support for excluding
whole elements from search for sensitive words - ignored_words: add more
"key"
variations - Various memory management and other fixes abrt-2.14.6-1: -
Add support of master + subkeys gpg - hooks: Remove stale workaround for a
fixed bug - cli: Gracefully handle disappearance of problem directory -
libs: Add version info script - retrace-client: Output task ID to console in
batch mode - retrace-client: Separate commands by commas - Doc: Improve man
page for abrt-action-analyze-vulnerability - Various memory management and
other fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 4 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
2.15.1-1
- Release version 2.15.1-1 (Michal Fabik)
- ureport: Strange usage of tmp variable (Michal ��idek)
- steal_directory: Silence a warning (Michal ��idek)
- dump_dir: Use g_free and re-init to NULL (Michal ��idek)
- dump_dir: Use g_free instead of free (Michal ��idek)
- dirsize: No need to check for NULL (Michal ��idek)
- dirsize: Bad checks for NULL (Michal ��idek)
- gui-wizard-gtk: Possible double free (Michal ��idek)
- gui-wizard-gtk: Check if EXCLUDE_FROM_REPORT is set (Michal ��idek)
- gui-wizard-gtk: Improve docs and add missing free (Michal ��idek)
- cli: Address of local auto-variable assigned to a function parameter (Michal ��idek)
- gtk-helpers: Add missing g_strfreev() (Michal ��idek)
- cli: Add missing g_free call (Michal ��idek)
- gitignore: Drop misleading comment (Michal Fabik)
- spec: Sync upstream with distgit (Michal Fabik)
- changelog: Add missing link to changes in 2.15.0 (Mat��j Grabovsk��)
- spec: Make plugin-mailx depend on /usr/bin/mailx (Mat��j Grabovsk��)
- Add support for excluding whole elements from search for sensitive words (Michal Srb)
- ignored_words: add more "key" variations (Michal Srb)
--------------------------------------------------------------------------------
================================================================================
libxcrypt-4.4.21-1.fc33 (FEDORA-2021-fed63bd217)
Extended crypt library for descrypt, md5crypt, bcrypt, and others
--------------------------------------------------------------------------------
Update Information:
- New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.21-1
- New upstream release
* Wed May 19 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.20-3
- Run test for glibc compatibility symbols
- Run a build with all possible tests enabled
--------------------------------------------------------------------------------
================================================================================
mingw-djvulibre-3.5.27-12.fc33 (FEDORA-2021-3193a4c13f)
MinGW Windows djvulibre library
--------------------------------------------------------------------------------
Update Information:
Apply fix for CVE-2021-3500. ---- Apply fix for CVE-2021-32490,
CVE-2021-32491, CVE-2021-32492, CVE-2021-32493
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Sandro Mani <manisandro(a)gmail.com> - 3.5.27-12
- Apply fix for CVE-2021-3500
* Tue May 25 2021 Sandro Mani <manisandro(a)gmail.com> - 3.5.27-11
- Apply fix for CVE-2021-32490, CVE-2021-32491, CVE-2021-32492, CVE-2021-32493
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.27-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958165 - CVE-2021-3500 mingw-djvulibre: djvulibre: Stack overflow in
function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1958165
[ 2 ] Bug #1958172 - CVE-2021-32490 mingw-djvulibre: djvulibre: Out of bounds write in
function DJVU::filter_bv() via crafted djvu file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1958172
[ 3 ] Bug #1958176 - CVE-2021-32491 mingw-djvulibre: djvulibre: Integer overflow in
function render() in tools/ddjvu via crafted djvu file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1958176
[ 4 ] Bug #1958178 - CVE-2021-32492 mingw-djvulibre: djvulibre: Out of bounds read in
function DJVU::DataPool::has_data() via crafted djvu file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1958178
[ 5 ] Bug #1958180 - CVE-2021-32493 mingw-djvulibre: djvulibre: Heap buffer overflow in
function DJVU::GBitmap::decode() via crafted djvu file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1958180
--------------------------------------------------------------------------------
================================================================================
mingw-exiv2-0.27.3-6.fc33 (FEDORA-2021-bdba47348c)
MinGW Windows exiv2 library
--------------------------------------------------------------------------------
Update Information:
Backport fixes for CVE-2021-32617, CVE-2021-29623.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Sandro Mani <manisandro(a)gmail.com> - 0.27.3-6
- Backport patch for CVE-2021-32617, CVE-2021-29623
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961651 - CVE-2021-29623 mingw-exiv2: exiv2: a read of uninitialized memory
may lead to information leak [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1961651
[ 2 ] Bug #1961693 - CVE-2021-32617 mingw-exiv2: exiv2: DoS due to quadratic complexity
in ProcessUTF8Portion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1961693
--------------------------------------------------------------------------------
================================================================================
mkvtoolnix-57.0.0-1.fc33 (FEDORA-2021-37d91e7038)
Matroska container manipulation utilities
--------------------------------------------------------------------------------
Update Information:
# Version 57.0.0 "Till The End" 2021-05-22 ## New features and enhancements *
mkvmerge: MP4 reader: added support for reading Dolby Vision from MP4 files
(FourCCs `dvh1` and `dvhe`; configuration records `dvcC`, `dvvC` and `hvcE` will
be converted into block addition mappings). Implements #2784. * mkvmerge: SRT
subtitles: mkvmerge now accepts empty text files with the extension `.srt` as
SRT subtitle files, enabling the creation of empty SRT tracks. Implements #3089.
* mkvmerge, mkvextract: HEVC/H.265: access unit delimiter NALUs will no longer
be discarded, neither during muxing nor during extraction. * MKVToolNix GUI:
preferences: switched the order & wording of controls in the "enabling
items"
panel to make it clearer that certain controls define exceptions. Inspired by
3086. ## Bug fixes * mkvmerge: HEVC/H.265 parser: several NALU types, notably
the Dolby Vision-specific NALUs ("unspecified 62" and "unspecified
63") and
suffix SEI NALUs, are now stored with the frame they belong to instead of with
the next frame. Part of fixing & implementing #2784, #2818, #3093 and #3113. *
mkvmerge: HEVC/H.265 packetizer: fixed setting the track's default duration when
reading HEVC/H.265 from Matroska files that don't have a default duration set. *
mkvmerge: HEVC/H.265 packetizer: fixed the calculation of the duration of frames
so that `SimpleBlock` elements can be used again instead of `BlockGroups` with
`BlockDuration` elements. Fixes #3114. * mkvmerge, mkvextract: HEVC/H.265
parser: fixed issues with ordering & duplication of certain NALUs (parameter set
& prefix SEI NALUs). Part of fixing & implementing of #2784, #2818, #3093 and
#3113. * MKVToolNix GUI: multiplexer: when dragging & dropping files to the
multiplexer, the source directory will be remembered as the "last open
directory" again, causing subsequent uses of the "open file" dialog to
start in
the same directory. Fixes #3110. * mkvinfo: fixed the position of frames in
block groups containing "block duration" elements in summary mode (e.g. for
subtitle tracks). ## Build system changes * `configure` will now try to detect
`libmagic` via `pkg-config` and fall back to including & linking directly if it
cannot be found via `pkg-config`. ---- # Version 56.1.0 "My Friend"
2021-04-09
## New features and enhancements * mkvmerge: AAC: added support for LOAS/LATM
files with channel configuration indexes 9���21 (e.g. channel count 22.2 for index
13) according to Rec. ITU-R BS.1196-7 & ISO/IEC 23008-3:2019. Fixes #3081. ##
Bug fixes * mkvmerge: HEVC/H.265 parser: fixed invalid memory access that could
happen when reading certain types of HEVC data (e.g. with changing parameter
sets mid-stream) from certain containers (e.g. Matroska). This bug was
introduced in release 56.0.0. Fixes #3083. * mkvextract: AAC: mkvextract will
now abort with an useful error message when the user tries to extract a track
whose 'audio-specific config' element in `CodecPrivate` signals a number of
channels of 7 or greater than 8 as that isn't supported by the ADTS format. ##
Build system changes * configure: the `--enable-ubsan` option hasn't actually
enabled anything since release 39.0.0. # Version 56.0.0 "Strasbourg / St.
Denis" 2021-04-05 ## New features and enhancements * mkvmerge, mkvpropedit:
tags: the programs will no longer write tag elements that are mandatory and set
to their default value (e.g. "tag language" set to `und` = undetermined). *
mkvmerge, mkvpropedit, MKVToolNix GUI chapter editor: chapters: the programs
will no longer write chapter elements that are mandatory and set to their
default value (e.g. "chapter language" set to `eng` = English or "Chapter
flag
enabled" = 1). * mkvextract: chapters: mkvextract will no longer add a
`ChapterLanguage` element set to `eng` to the generated XML content if the
source file doesn't contain such an element. * MKVToolNix GUI: multiplexer: when
using the "tab widget below the files & tracks" layout option for the track
properties the elements in the "general options" tab will use six rows �� four
columns instead of twelve rows �� two columns, greatly reducing the required
height. Implements #3062. ## Bug fixes * mkvmerge: AAC reader: fixed mkvmerge
aborting to read AAC files bigger than 2 GB with a message about not being able
to allocate memory. Fixes #3059. * mkvmerge: chapters: `ChapLanguageIETF`
elements were still created when the option `--disable-language-ietf` was given
after an option leading to the creation of chapters. Now the position doesn't
matter anymore. Part of the fix of #3069. * mkvmerge: chapters: when the option
`--disable-language-ietf` is used, `ChapLanguageIETF` elements won't be written
even when sources are read (Matroska files or XML chapters files) that do
contain those elements. Part of the fix of #3069. * mkvmerge: tags: when the
option `--disable-language-ietf` is used, `TagLanguageIETF` elements won't be
written. Fixes #3070. * mkvmerge: tags: mkvmerge will no longer write language
elements for the track statistics tags it creates, making the effective language
"undetermined" due to `und` being the default value for the legacy tag language
element. Fixes #3073. * mkvmerge: tags: the XML tag parser will now validate all
`<Simple>` children of `<Tag>` elements, not just the first for each
`<Tag>`.
Part of the fix of #3071. * mkvmerge: tags: the XML tag parser now uses the
spec-compliant `und` ("undetermined") as the default language for
`<Simple>`
tags instead of `eng`. Part of the fix of #3071. * mkvmerge, mkvpropedit: tags:
mkvmerge will no longer set the "target type" for track statistics tags
(earlier
it used `MOVIE`). The "target type value" will still be set to `50`. Fixes
#3074. * mkvmerge, mkvextract: HEVC/H.265: both programs will now normalize the
placement of VPS, SPS and PPS NALUs. Each key frame is prefixed with exactly one
copy of the currently active parameter sets. This fixes certain classes of bugs
related to splitting/appending. Fixes #3034. * mkvinfo: when compiled with newer
versions of the `fmt` library, certain numbers were not output correctly (e.g. a
track's audio sampling frequency of 48000 might be output as 48). * MKVToolNix
GUI: multiplexer: deriving the track language from the file name will match
languages case insensitively again (like versions prior to v55). Fixes #3068. *
MKVToolNix GUI: multiplexer: under certain circumstances keyboard shortcuts such
as `Ctrl+W` for closing the active tab or `Ctrl+R` for starting to multiplex
ceased to work until the user did certain other things (such as switching to a
different tool & back to the multiplexer or opening the multiplexer menu). This
started with v54. Fixes #3051. * MKVToolNix GUI: chapter editor: the editor will
no longer create empty `ChapterCountry` elements when adding a chapter name with
no default country selected in the preferences. Fixes #3072. # Version 55.0.0
"Waiting For Space" 2021-03-06 ## Bug fixes * MKVToolNix GUI: multiplexer:
the
user can now configure what to do when using the "Add source files" button
independently of the setting for what happens when files are dragged & dropped
onto the GUI. The same options are available, but they're distinct settings,
allowing for different use cases. Fixes #3035. * MKVToolNix GUI: multiplexer:
deriving the track language from file names doesn't use one big regular
expression of all enabled languages anymore. Instead, the file name is split
into parts on a list of characters (such as `.` or `(` and `)`; configurable in
the preferences). This prevents the regular expression becoming too big for the
regular expression library to handle when many languages are enabled. Fixes
#3048. * MKVToolNix GUI: preferences: the language lists for "deriving track
languages" and "enabling items by language" always included all the ISO
639-3
languages, even if those weren't enabled in the "often-used languages"
pane.
Fixes #3047. ## Other changes * mkvmerge, MKVToolNix GUI multiplexer: the
functionality for changing the length of the NALU "size" field for AVC/H.264
and
HEVC/H.265 tracks has been removed. The corresponding command-line option will
continue to be recognized by mkvmerge as not to break existing third-party
applications, but it won't actually do anything. # Version 54.0.0 "F Maj
Pixie"
2021-02-26 ## New features and enhancements * mkvmerge: added support for
using ISO 639-3 language codes in IETF BF47 language tags. Part of the
implementation of #3007. * mkvmerge: AC-3 parser: added support for byte-swapped
AC-3 data. Implements #3022. * mkvmerge: Matroska reader: for audio tracks that
have the bit depth track header set mkvmerge will now keep that header even for
codecs that don't require it for decoding. Implements #3009. * mkvmerge: MPEG
transport stream reader, PCM audio tracks: mkvmerge will now re-order the
channels for 5.1, 7.0 and 7.1 channel tracks from the Blu-ray layout to the
WAVEFORMATEXTENSIBLE layout expected in Matroska. Patch by Tom Yan. Implements
#2988. * mkvmerge, mkvinfo, mkvpropedit, MKVToolNix GUI: added support for the
following new track header elements: "hearing impaired" flag, "visual
impaired"
flag, "text descriptions" flag, "original" flag,
"commentary" flag. Implements
#3011. * MKVToolNix GUI: added support for using ISO 639-3 language codes in
IETF BF47 language tags. As there are several thousand of them, they're
deactivated by default and must be activated in the preferences ("GUI" ���
"Often
used selections" ��� "Languages"). Part of the implementation of #3007. *
MKVToolNix GUI: multiplexer: when adding Blu-rays the user can select multiple
playlists to add simultaneously in the "select playlist to add" dialog.
Implements #2961. * MKVToolNix GUI: multiplexer: the file name extensions "eb3"
and "ec3" were added for Dolby Digital Plus & "mpl" for Dolby
TrueHD in the file
dialogs. Part of the implementation of #3027. * MKVToolNix GUI: multiplexer:
when adding multiple files the dialog asking the user what to do with them has
gained a new checkbox. If enabled, all files containing at least one video track
will always be placed in newly created multiplex setting. Implements #2966. *
MKVToolNix GUI: multiplexer: added a menu entry in the "Multiplexer" for adding
all files that are currently in the clipboard. Implements #3006. ## Bug fixes
* mkvextract: AAC: fixed wrong channel mask field in the ADTS headers for 7.1
channel layouts. Fix by Tom Yan. Fixes #2636. * mkvextract: HEVC/H.265
extraction: if the first frame starts with the parameter sets (SPS, PPS & VPS),
the ones from CodecPrivate aren't written and the ones from the first frame are
kept. Fixes #3031. * mkvmerge: fixed the calculation of chapter timestamps read
from NTSC DVDs. Fix by Tom Yan. * MKVToolNix GUI: IETF BCP 47 language widget:
the language combo box will now always contain the language code the user enters
in the free-form field, even if it isn't in the list of often-used languages the
user configured in the preferences. * MKVToolNix GUI: multiplexer: when browsing
for the destination file name the default directory is now chosen according to
the preferences regarding how the destination file name should be formed. For
example, if the policy is set to "fixed output directory" then that output
directory will be the one initially set when the directory selection dialog is
opened. Fixes #3021. * MKVToolNix GUI: multiplexer: fixed the removal of
appended source files if the "delete source files" end-of-job action is
enabled.
Fixes #3029. * MKVToolNix GUI: chapter editor: when importing chapters from DVDs
the IETF BCP 47 language elements will be set, too, not just the legacy language
elements. ## Build system changes * libEBML v1.4.2 and libMatroska v1.6.3 are
now required. The optional, bundled copies of both libraries have been updated
to those versions. This bump in requirements fixes several heap overflow bugs in
libEBML. * MKVToolNix is now using the C++17 library feature "file system
library" instead of Boost's "file system" and "system"
libraries. For the GNU
Compiler Collection (gcc) libstdc++ this means v8 or newer is required; for
clang's libc++ it means v7 or newer. For macOS this means that provided disk
image will only run on 10.15 "Catalina" or newer.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 25 2021 Dominik Mierzejewski <rpm(a)greysector.net> - 57.0.0-1
- update to 57.0.0 (#1963333)
- build dependency clean-up
* Wed May 19 2021 Dominik Mierzejewski <rpm(a)greysector.net> - 56.1.0-1
- update to 56.1.0 (#1933359)
- requires libebml 1.4.2 and libmatroska 1.6.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933359 - mkvtoolnix-56.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1933359
[ 2 ] Bug #1963333 - mkvtoolnix-57.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1963333
--------------------------------------------------------------------------------
================================================================================
net-snmp-5.9.1-1.fc33 (FEDORA-2021-a6e57e54a5)
A collection of SNMP protocol tools and libraries
--------------------------------------------------------------------------------
Update Information:
New upstream release 5.9.1 DES support is disabled from now on
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Josef Ridky <jridky(a)redhat.com> - 1:5.9.1-1
- New upstream release 5.9.1 (#1946399)
- remove DES support
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:5.9-10
- Perl 5.34 rebuild
* Mon Mar 15 2021 Josef Ridky <jridky(a)redhat.com> - 1:5.9-9
- fix issue with parsing IPv4 address twice
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1:5.9-8
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Thu Feb 4 2021 Josef Ridky <jridky(a)redhat.com> - 1:5.9-7
- remove file with unsupported license
- use make and make install macros
* Thu Jan 28 2021 Josef Ridky <jridky(a)redhat.com> - 1:5.9-6
- add support for digests detected from ECC certificates
- add support for intermediate certificates
- fix crash caused by small buffer size
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:5.9-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1946399 - net-snmp-5.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1946399
--------------------------------------------------------------------------------
================================================================================
oval-graph-1.2.7-1.fc33 (FEDORA-2021-3bdb7b9cd2)
Tool for visualization of SCAP rule evaluation results
--------------------------------------------------------------------------------
Update Information:
1.2.7 (Jan Rodak)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
1.2.7-1
- 1.2.7 (Jan Rodak)
- Adds tag template to packit config (Jan Rodak)
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-5.20210521-1.fc33 (FEDORA-2021-66a33e03bb)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated for v5.35.0 ---- Updated for v5.34.0 ---- Updated for v5.34.0-RC2
---- Updated for v5.34.0-RC1
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 25 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20210521-1
- 5.20210521 bump
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20210520-1
- 5.20210520 bump
* Mon May 17 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20210515-1
- 5.20210515 bump
* Tue May 11 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20210505-1
- 5.20210505 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1957176 - perl-CPAN-Perl-Releases-5.20210505 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1957176
[ 2 ] Bug #1960857 - perl-CPAN-Perl-Releases-5.20210515 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1960857
[ 3 ] Bug #1962958 - perl-CPAN-Perl-Releases-5.20210520 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1962958
[ 4 ] Bug #1963113 - perl-CPAN-Perl-Releases-5.20210521 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1963113
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20210521-1.fc33 (FEDORA-2021-beedf43562)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
Updated for v5.35.0 ---- Updated for v5.34.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 25 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:5.20210521-1
- 5.20210521 bump
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:5.20210520-1
- 5.20210520 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1962952 - perl-Module-CoreList-5.20210520 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1962952
[ 2 ] Bug #1963116 - perl-Module-CoreList-5.20210521 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1963116
--------------------------------------------------------------------------------
================================================================================
podman-3.2.0-0.2.rc3.fc33 (FEDORA-2021-cef8974de5)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Autobuilt v3.2.0-rc3 ---- autobuilt v3.2.0-rc2
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> -
3:3.2.0-0.2.rc3
- autobuilt v3.2.0-rc3
* Fri May 21 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> -
3:3.2.0-0.1.rc2
- autobuilt v3.2.0-rc2
* Wed May 12 2021 Dusty Mabe <dusty(a)dustymabe.com> - 3:3.1.2-3
- Backport upstream bugfix:
https://github.com/containers/podman/pull/10253
--------------------------------------------------------------------------------
================================================================================
postgresql-12.7-1.fc33 (FEDORA-2021-14f4c8e9c8)
PostgreSQL client programs
--------------------------------------------------------------------------------
Update Information:
update to 12.7
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Filip Janu�� <fjanus(a)redhat.com> - 12.7-1
- Update to 12.7
--------------------------------------------------------------------------------
================================================================================
pypy-7.3.1-4.fc33 (FEDORA-2021-0f2fc2f29c)
Python implementation with a Just-In-Time compiler
--------------------------------------------------------------------------------
Update Information:
Provide missing bundled library information.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 25 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 7.3.1-4
- Provide missing bundled library information
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.3.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
pypy3-7.3.1-6.fc33 (FEDORA-2021-0f2fc2f29c)
Python 3 implementation with a Just-In-Time compiler
--------------------------------------------------------------------------------
Update Information:
Provide missing bundled library information.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 25 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 7.3.1-6
- Provide missing bundled library information
* Wed May 19 2021 Charalampos Stratakis <cstratak(a)redhat.com> - 7.3.1-5
- Add virtual provides for the bundled libmpdec (rhbz#1943359)
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.3.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-lxml-4.5.1-4.fc33 (FEDORA-2021-4cdb0f68c7)
XML processing library combining libxml2/libxslt with the ElementTree API
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2021-28957: missing input sanitization for formaction HTML5 attributes
may lead to XSS
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 21 2021 Charalampos Stratakis <cstratak(a)redhat.com> - 4.5.1-4
- Fix CVE-2021-28957: missing input sanitization for formaction HTML5 attributes may lead
to XSS
- Resolves: rhbz#1941535
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1941534 - CVE-2021-28957 python-lxml: missing input sanitization for
formaction HTML5 attributes may lead to XSS
https://bugzilla.redhat.com/show_bug.cgi?id=1941534
--------------------------------------------------------------------------------
================================================================================
python-smart_open-5.0.0-1.fc33 (FEDORA-2021-d55b0dbc47)
Utils for streaming large files (S3, HDFS, gzip, bz2, and more)
--------------------------------------------------------------------------------
Update Information:
smart_open is a Python 3 library for efficient streaming of very large files
from/to storages such as S3, GCS, Azure Blob Storage, HDFS, WebHDFS, HTTP,
HTTPS, SFTP, or local filesystem. It supports transparent, on-the-fly
(de-)compression for a variety of different formats. smart_open is a drop-in
replacement for Python's built-in open(): it can do anything open can (100%
compatible, falls back to native open wherever possible), plus lots of nifty
extra stuff on top.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961149 - Review Request: python-smart_open - Utils for streaming large
files (S3, HDFS, gzip, bz2, and more)
https://bugzilla.redhat.com/show_bug.cgi?id=1961149
--------------------------------------------------------------------------------
================================================================================
python3.10-3.10.0~b1-2.fc33 (FEDORA-2021-66690837c0)
Version 3.10 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Use the system installed mpdecimal instead of the bundled copy.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 14 2021 Charalampos Stratakis <cstratak(a)redhat.com> - 3.10.0~b1-2
- Use the system installed mpdecimal instead of the bundled copy (#1943359)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1943359 - Unbundle libmpdec/mpdecimal (or at least provide
bundled(libmpdec)/bundled(mpdecimal))
https://bugzilla.redhat.com/show_bug.cgi?id=1943359
--------------------------------------------------------------------------------
================================================================================
rubygem-mercenary-0.4.0-1.fc33 (FEDORA-2021-099d090c37)
An easier way to build your command-line scripts in Ruby
--------------------------------------------------------------------------------
Update Information:
* Update to 0.4.0 * Bug fix: Remove parent command's flags from subcommand usage
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Otto Urpelainen <oturpe(a)iki.fi> - 0.4.0-1
- Update to 0.4.0
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.6-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1792666 - rubygem-mercenary-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1792666
--------------------------------------------------------------------------------
================================================================================
satyr-0.37-2.fc33 (FEDORA-2021-4797e362b3)
Tools to create anonymous, machine-friendly problem reports
--------------------------------------------------------------------------------
Update Information:
* Wed May 26 2021 Michal Fabik <mfabik(a)redhat.com> satyr-0.37-2: -
sr_distances_cluster_objects: Check arg safety - spec: Drop trailing comment
libreport-2.15.1-1 - gui-wizard-gtk: Improve docs - cli: Address of local
auto-variable assigned to a function parameter - Add support for excluding
whole elements from search for sensitive words - ignored_words: add more
"key"
variations - Various memory management and other fixes abrt-2.14.6-1: -
Add support of master + subkeys gpg - hooks: Remove stale workaround for a
fixed bug - cli: Gracefully handle disappearance of problem directory -
libs: Add version info script - retrace-client: Output task ID to console in
batch mode - retrace-client: Separate commands by commas - Doc: Improve man
page for abrt-action-analyze-vulnerability - Various memory management and
other fixes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 2 2021 Michal Fabik <mfabik(a)redhat.com> 0.37-1
- sr_distances_cluster_objects: Check arg safety
- spec: Drop trailing comment
* Tue Jan 12 2021 Michal Fabik <mfabik(a)redhat.com> 0.36-1
- New upstream version
- Fix builds with python3.10
* Tue Jan 12 2021 Michal Fabik <mfabik(a)redhat.com> 0.36-1
- spec: Use autoreconf in %build
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1.56-1.fc33 (FEDORA-2021-44176de7a7)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream SCAP-Security-Guide-0.1.56 release:
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Vojtech Polasek <vpolasek(a)redhat.com> - 0.1.56-1
- Update to latest upstream SCAP-Security-Guide-0.1.56 release:
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.56
--------------------------------------------------------------------------------
================================================================================
singularity-3.7.4-1.fc33 (FEDORA-2021-ac3ef133e8)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream security release 3.7.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Dave Dykstra <dwd(a)fedoraproject.org> - 3.7.4-1
- Upgrade to upstream security release 3.7.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965066 - singularity-3.7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1965066
--------------------------------------------------------------------------------
================================================================================
tcmu-runner-1.5.4-1.fc33 (FEDORA-2021-679df8705d)
A daemon that supports LIO userspace backends
--------------------------------------------------------------------------------
Update Information:
Update to upstream version v1.5.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Maurizio Lombardi <mlombard(a)redhat.com> - 1.5.4-1
- Update to the latest upstream version
--------------------------------------------------------------------------------
================================================================================
vokoscreenNG-3.0.9-1.fc33 (FEDORA-2021-cba67547cf)
User friendly Open Source screencaster
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 3.0.9-1
- build(update): 3.0.9
--------------------------------------------------------------------------------