The following Fedora 33 Security updates need testing:
Age URL
19
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f3ebd7554c
radare2-5.1.1-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aa78f97893
libebml-1.4.2-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5fb8bd8258
privoxy-3.0.32-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-93911302d6
x11vnc-0.9.16-5.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-caf9e04ef1
libtpms-0.7.7-0.20210302gitfd5bd3fb1d.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9747ed7427
suricata-5.0.6-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a760169c3c
nodejs-14.16.0-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-267c08cc40
arm-none-eabi-newlib-4.1.0-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b326fcb83f
python3.10-3.10.0~a6-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a2d3ad5dda
kernel-5.10.20-200.fc33 kernel-headers-5.10.20-200.fc33 kernel-tools-5.10.20-200.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b571fca1b8
rubygem-actionpack-6.0.3.4-2.fc33 rubygem-activerecord-6.0.3.4-2.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1bb399a5af
python-django-3.0.13-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5186d92c1
rdma-core-34.0-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a2d3ad5dda
kernel-5.10.20-200.fc33 kernel-headers-5.10.20-200.fc33 kernel-tools-5.10.20-200.fc33
The following builds have been pushed to Fedora 33 updates-testing
FAudio-21.03.05-1.fc33
R-desc-1.3.0-1.fc33
Rex-1.13.3-1.fc33
erlang-23.2.7-1.fc33
gdb-10.1-3.fc33
golang-github-azure-storage-blob-0.13.0-1.fc33
imaptest-20210305-1.fc33
jc-1.14.4-1.fc33
libspng-0.6.2-1.fc33
luv-icon-theme-0.4.9.31-5.20210305git04d47f13.fc33
mingw-gdk-pixbuf-2.42.2-1.fc33
mingw-glib2-2.66.7-1.fc33
mingw-jasper-2.0.26-1.fc33
mingw-python-jinja2-2.11.3-1.fc33
mingw-python-pillow-7.2.0-5.fc33
mingw-python3-3.9.2-1.fc33
nemo-4.8.6-1.fc33
ntl-11.4.4-1.fc33
opensips-3.1.1-8.fc33
powerline-go-1.21.0-1.fc33
primecount-6.3-1.fc33
python-pillow-7.2.0-5.fc33
python-pvc-0.3.0-12.fc33
python-social-auth-core-4.0.2-2.fc33
python2-pillow-6.2.2-5.fc33
radicale-3.0.6-17.fc33
yad-8.0-1.fc33
Details about builds:
================================================================================
FAudio-21.03.05-1.fc33 (FEDORA-2021-7de1846aae)
FNA is a reimplementation of the Microsoft XNA Game Studio 4.0 Refresh libraries
--------------------------------------------------------------------------------
Update Information:
21.03.05 - Fixes a regression that caused SoundBanks to no longer parse
correctly New Features: XACT: Implemented FACT_FLAG_MANAGEDATA
Implemented the CUEPLAY and CUESTOP notification types Added support for
XACT 3.0 content Added support for WaveBanks with endian-swapped PCM
data
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.03.05-1
- Update to 21.03.05
* Mon Mar 1 2021 Michael Cronenworth <mike(a)cchtml.com> - 21.03-1
- Update to 21.03
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1936058 - FAudio-21.03.05 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1936058
--------------------------------------------------------------------------------
================================================================================
R-desc-1.3.0-1.fc33 (FEDORA-2021-80ce6cd4cf)
Manipulate DESCRIPTION Files
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.3.0-1
- Update to latest version (#1936004)
- Rename check conditional to bootstrap
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1936004 - R-desc-1.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1936004
--------------------------------------------------------------------------------
================================================================================
Rex-1.13.3-1.fc33 (FEDORA-2021-4876531ea4)
The friendly automation framework on basis of Perl
--------------------------------------------------------------------------------
Update Information:
This update brings a the new version 1.13.3 of the friendly automation framework
Rex to a Fedora box near you.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Dominic Hopf <dmaphy(a)fedoraproject.org> - 1.13.3-1
- Update to 1.13.3 (#1936026)
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.13.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1936026 - Rex-1.13.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1936026
--------------------------------------------------------------------------------
================================================================================
erlang-23.2.7-1.fc33 (FEDORA-2021-80331f61fb)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
Erlang ver. 23.2.7
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Peter Lemenkov <lemenkov(a)gmail.com> - 23.2.7-1
- Ver. 23.2.7
--------------------------------------------------------------------------------
================================================================================
gdb-10.1-3.fc33 (FEDORA-2021-6bf5956523)
A stub package for GNU source-level debugger
--------------------------------------------------------------------------------
Update Information:
Backport patches which fix frame_id_p assertion failure (RHBZ 1909902, Pedro
Alves)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Kevin Buettner <kevinb(a)redhat.com> - 10.1-3
- Backport patches which fix frame_id_p assertion failure (RHBZ 1909902,
Pedro Alves).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909902 - Assertion `frame_id_p (*this_id)' failed
https://bugzilla.redhat.com/show_bug.cgi?id=1909902
--------------------------------------------------------------------------------
================================================================================
golang-github-azure-storage-blob-0.13.0-1.fc33 (FEDORA-2021-6de8b0921b)
Microsoft Azure Blob Storage Library for Go
--------------------------------------------------------------------------------
Update Information:
Update to 0.13.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.13.0-1
- Update to 0.13.0
- Close: rhbz#1922037
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1922037 - golang-github-azure-storage-blob-0.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1922037
--------------------------------------------------------------------------------
================================================================================
imaptest-20210305-1.fc33 (FEDORA-2021-486f14eac1)
Generic IMAP server compliancy tester
--------------------------------------------------------------------------------
Update Information:
ImapTest 20210305 ================= * Fix `secs=n` to work with non-busy
profile With profile there often aren't any clients running, so stop
should be done immediately.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Robert Scheck <robert(a)fedoraproject.org> 20210305-1
- Upgrade to 20210305 (#1935535)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
20210116-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1935535 - imaptest-20210305 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1935535
--------------------------------------------------------------------------------
================================================================================
jc-1.14.4-1.fc33 (FEDORA-2021-814b78a47c)
Serialize the output of CLI tools and file-types to structured JSON
--------------------------------------------------------------------------------
Update Information:
Update to v1.14.4
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.14.4-1
- Update to v1.14.4
--------------------------------------------------------------------------------
================================================================================
libspng-0.6.2-1.fc33 (FEDORA-2021-9a7b4a8fc7)
Simple, modern libpng alternative
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.6.2-1
- Update to 0.6.2
- Close: rhbz#1922027
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1922027 - libspng-0.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1922027
--------------------------------------------------------------------------------
================================================================================
luv-icon-theme-0.4.9.31-5.20210305git04d47f13.fc33 (FEDORA-2021-793ea00686)
Flat, but complex, icon theme
--------------------------------------------------------------------------------
Update Information:
Update to latest git snapshot (2021-03-05)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Artur Frenszek-Iwicki <fedora(a)svgames.pl> -
0.4.9.31-5.20210305git04d47f13
- Update to latest git snapshot (2021-03-05)
--------------------------------------------------------------------------------
================================================================================
mingw-gdk-pixbuf-2.42.2-1.fc33 (FEDORA-2021-755ba8968a)
MinGW Windows GDK Pixbuf library
--------------------------------------------------------------------------------
Update Information:
Update to gdk-pixbuf-2.42.2, see
https://gitlab.gnome.org/GNOME/gdk-
pixbuf/-/tags/2.42.2 for details.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Sandro Mani <manisandro(a)gmail.com> - 2.42.2-1
- Update to 2.42.2
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.40.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Aug 12 2020 Sandro Mani <manisandro(a)gmail.com> - 2.40.0-4
- Rebuild (mingw-gettext)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1926790 - CVE-2021-20240 mingw-gdk-pixbuf: gdk-pixbuf: integer wraparound in
the GIF loader of gdk-pixbuf via crafted input leads to segmentation fault [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1926790
[ 2 ] Bug #1928673 - CVE-2020-29385 mingw-gdk-pixbuf: gdk-pixbuf: DoS in lzw.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1928673
--------------------------------------------------------------------------------
================================================================================
mingw-glib2-2.66.7-1.fc33 (FEDORA-2021-7c71cda8da)
MinGW Windows GLib2 library
--------------------------------------------------------------------------------
Update Information:
Update to glib2-2.66.7, see
https://gitlab.gnome.org/GNOME/glib/-/blob/2.66.7/NEWS for details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Sandro Mani <manisandro(a)gmail.com> - 2.66.7-1
- Update to 2.66.7
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.66.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Oct 19 2020 Sandro Mani <manisandro(a)gmail.com> - 2.66.2-1
- Update to 2.66.2
* Mon Oct 5 2020 Sandro Mani <manisandro(a)gmail.com> - 2.66.1-1
- Update to 2.66.1
* Tue Sep 15 2020 Sandro Mani <manisandro(a)gmail.com> - 2.66.0-1
- Update to 2.66.0
* Wed Aug 12 2020 Sandro Mani <manisandro(a)gmail.com> - 2.64.3-3
- Rebuild (mingw-gettext)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1929850 - CVE-2021-27218 mingw-glib2: glib: integer overflow in
g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit
platform [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1929850
[ 2 ] Bug #1929862 - CVE-2021-27219 mingw-glib2: glib: integer overflow in g_bytes_new
function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1929862
--------------------------------------------------------------------------------
================================================================================
mingw-jasper-2.0.26-1.fc33 (FEDORA-2021-7f3323a767)
MinGW Windows Jasper library
--------------------------------------------------------------------------------
Update Information:
Update to jasper-2.0.26, see
https://github.com/jasper-
software/jasper/releases/tag/version-2.0.26 for details.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Sandro Mani <manisandro(a)gmail.com> - 2.0.26-1
- Update to 2.0.26
* Wed Feb 10 2021 Sandro Mani <manisandro(a)gmail.com> - 2.0.25-1
- Update to 2.0.25
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1922319 - CVE-2021-26926 mingw-jasper: jasper: Out of bounds read in
jp2_decode() in jp2_dec.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1922319
[ 2 ] Bug #1922493 - CVE-2021-26927 mingw-jasper: jasper: NULL pointer dereference in
jp2_decode() in jp2_dec.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1922493
--------------------------------------------------------------------------------
================================================================================
mingw-python-jinja2-2.11.3-1.fc33 (FEDORA-2021-2ab8ebcabc)
MinGW Windows Python jinja2 library
--------------------------------------------------------------------------------
Update Information:
Update to jinja2-2.11.3, see
https://github.com/pallets/jinja/releases/tag/2.11.3 for details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 8 2021 Sandro Mani <manisandro(a)gmail.com> - 2.11.3-1
- Update to 2.11.3
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sun Nov 8 2020 Sandro Mani <manisandro(a)gmail.com> - 2.11.2-4
- Switch to py3_build/py3_install macros
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928709 - CVE-2020-28493 mingw-python-jinja2: python-jinja2: ReDOS
vulnerability due to the sub-pattern [fedora-33]
https://bugzilla.redhat.com/show_bug.cgi?id=1928709
--------------------------------------------------------------------------------
================================================================================
mingw-python-pillow-7.2.0-5.fc33 (FEDORA-2021-15845d3abe)
MinGW Windows Python pillow library
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2021-27921, CVE-2021-27922 and CVE-2021-27923. ----
Backport fixes for CVE-2021-25289, CVE-2021-25290, CVE-2021-25291,
CVE-2021-25292, CVE-2021-25293
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Sandro Mani <manisandro(a)gmail.com> - 7.2.0-5
- Backport fix for CVE-2021-2792{1,2,3}
* Fri Mar 5 2021 Sandro Mani <manisandro(a)gmail.com> - 7.2.0-4
- Backport fixes for CVE-2021-25289, CVE-2021-25290, CVE-2021-25291, CVE-2021-25292,
CVE-2021-25293
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933899 - python-pillow-8.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1933899
[ 2 ] Bug #1934681 - CVE-2021-25289 python-pillow: insufficent fix for CVE-2020-35654
due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934681
[ 3 ] Bug #1934682 - CVE-2021-25289 python2-pillow: python-pillow: insufficent fix for
CVE-2020-35654 due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934682
[ 4 ] Bug #1934683 - CVE-2021-25289 mingw-python-pillow: python-pillow: insufficent fix
for CVE-2020-35654 due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934683
[ 5 ] Bug #1934686 - CVE-2021-25290 python-pillow: negative-offset memcpy with an
invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934686
[ 6 ] Bug #1934687 - CVE-2021-25290 python2-pillow: python-pillow: negative-offset
memcpy with an invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934687
[ 7 ] Bug #1934688 - CVE-2021-25290 mingw-python-pillow: python-pillow: negative-offset
memcpy with an invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934688
[ 8 ] Bug #1934693 - CVE-2021-25291 python-pillow: out-of-bounds read in
TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934693
[ 9 ] Bug #1934694 - CVE-2021-25291 python2-pillow: python-pillow: out-of-bounds read in
TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934694
[ 10 ] Bug #1934695 - CVE-2021-25291 mingw-python-pillow: python-pillow: out-of-bounds
read in TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934695
[ 11 ] Bug #1934700 - CVE-2021-25292 python-pillow: backtracking regex in PDF parser
could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934700
[ 12 ] Bug #1934701 - CVE-2021-25292 python2-pillow: python-pillow: backtracking regex
in PDF parser could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934701
[ 13 ] Bug #1934702 - CVE-2021-25292 mingw-python-pillow: python-pillow: backtracking
regex in PDF parser could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934702
[ 14 ] Bug #1934706 - CVE-2021-25293 python-pillow: out-of-bounds read in SGIRleDecode.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934706
[ 15 ] Bug #1934707 - CVE-2021-25293 python2-pillow: python-pillow: out-of-bounds read
in SGIRleDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934707
[ 16 ] Bug #1934708 - CVE-2021-25293 mingw-python-pillow: python-pillow: out-of-bounds
read in SGIRleDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934708
[ 17 ] Bug #1935385 - CVE-2021-27921 python-pillow: reported size of a contained image
is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935385
[ 18 ] Bug #1935386 - CVE-2021-27921 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935386
[ 19 ] Bug #1935388 - CVE-2021-27921 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935388
[ 20 ] Bug #1935397 - CVE-2021-27922 python-pillow: reported size of a contained image
is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935397
[ 21 ] Bug #1935398 - CVE-2021-27922 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935398
[ 22 ] Bug #1935399 - CVE-2021-27922 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935399
[ 23 ] Bug #1935402 - CVE-2021-27923 python-pillow: reported size of a contained image
is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935402
[ 24 ] Bug #1935403 - CVE-2021-27923 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935403
[ 25 ] Bug #1935405 - CVE-2021-27923 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935405
[ 26 ] Bug #1936047 - python-pillow-8.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1936047
--------------------------------------------------------------------------------
================================================================================
mingw-python3-3.9.2-1.fc33 (FEDORA-2021-b76ede8f4d)
MinGW Windows python3
--------------------------------------------------------------------------------
Update Information:
Update to python3-3.9.2, see
https://docs.python.org/3/whatsnew/3.9.html for
details.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 22 2021 Sandro Mani <manisandro(a)gmail.com> - 3.9.2-1
- Update to 3.9.2
* Mon Feb 15 2021 Sandro Mani <manisandro(a)gmail.com> - 3.9.1-4
- MACHDEP=win32
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.9.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928912 - CVE-2021-23336 mingw-python3: python: Web Cache Poisoning via
urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1928912
--------------------------------------------------------------------------------
================================================================================
nemo-4.8.6-1.fc33 (FEDORA-2021-73d05cbbab)
File manager for Cinnamon
--------------------------------------------------------------------------------
Update Information:
- Update ---- - Update
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Leigh Scott <leigh123linux(a)gmail.com> - 4.8.6-1
- Update to 4.8.6 release
* Mon Mar 1 2021 Leigh Scott <leigh123linux(a)gmail.com> - 4.8.5-1
- Update to 4.8.5 release
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ntl-11.4.4-1.fc33 (FEDORA-2021-b50a6680ad)
High-performance algorithms for vectors, matrices, and polynomials
--------------------------------------------------------------------------------
Update Information:
Changes in version 11.4.4: - Improved Karatsuba code for ZZX and GF2EX (as well
as the non-GMP implementation of ZZ). (Thanks to Marco Bodrato)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Jerry James <loganjerry(a)gmail.com> - 11.4.4-1
- ntl-11.4.4
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 11.4.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
opensips-3.1.1-8.fc33 (FEDORA-2021-07dca3f26b)
Open Source SIP Server
--------------------------------------------------------------------------------
Update Information:
Fixed few annoying memleaks
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.1-8
- Fix memleaks
* Mon Feb 8 2021 Pavel Raiskup <praiskup(a)redhat.com> - 3.1.1-7
- rebuild for libpq ABI fix rhbz#1908268
* Tue Feb 2 2021 Honza Horak <hhorak(a)redhat.com> - 3.1.1-6
- Use correct name for the mariadb package
* Wed Jan 27 2021 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.1-5
- Rebuild against couchbase
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sun Dec 27 2020 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.1-3
- Rebuild against couchbase
--------------------------------------------------------------------------------
================================================================================
powerline-go-1.21.0-1.fc33 (FEDORA-2021-76267eca4d)
A beautiful and useful low-latency prompt for your shell, written in go
--------------------------------------------------------------------------------
Update Information:
Update to 1.21.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.21.0-1
- Update to 1.21.0
- Close: rhbz#1930987
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.20.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1930987 - powerline-go-1.21.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1930987
--------------------------------------------------------------------------------
================================================================================
primecount-6.3-1.fc33 (FEDORA-2021-1c265361ce)
Fast prime counting function implementation
--------------------------------------------------------------------------------
Update Information:
Changes in primecount 6.3: This is a minor new release, the API and ABI
(Application binary interface) are backwards compatible. The memory usage of
the PiTable and SegmentedPiTable has been reduced by about 2x, this speeds up
the computation of the easy special leaves (S2_easy & AC formulas) by up to 30%
for large pi(x) computations with x ��� 1e23. Furthermore, the partial sieve
function a.k.a. phi(x, a) has been improved significantly, it now runs 3 to 5x
faster for most input. phi(x, a) is used extensively by many other functions
such as pi_legendre(x) and pi_meissel(x) which now also run up to 5x faster. -
PiTable.cpp: Reduce memory usage by 2x. - SegmentedPiTable.cpp: Reduce memory
usage by 2x. - Sieve.cpp: Reduce memory usage of counters array by 2x. -
phi.cpp: Fixed integer overflow #39. - phi.cpp: Cache 40x more phi(x, a)
results. - phi.cpp: Use pi(x) if a > pi(sqrt(x)). - phi.cpp: Use larger c
constant if phi(x, larger_c) is cached. - generate_phi.hpp: Same optimizations
as phi.cpp. - LoadBalancer.cpp: Tune for new phi(x, a) implementation. -
FactorTable.hpp: Reduce number of branches. - DFactorTable.hpp: Reduce number of
branches.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Jerry James <loganjerry(a)gmail.com> - 6.3-1
- Version 6.3
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-pillow-7.2.0-5.fc33 (FEDORA-2021-15845d3abe)
Python image processing library
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2021-27921, CVE-2021-27922 and CVE-2021-27923. ----
Backport fixes for CVE-2021-25289, CVE-2021-25290, CVE-2021-25291,
CVE-2021-25292, CVE-2021-25293
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Sandro Mani <manisandro(a)gmail.com> - 7.2.0-5
- Backport fix for CVE-2021-2792{1,2,3}
* Fri Mar 5 2021 Sandro Mani <manisandro(a)gmail.com> - 7.2.0-4
- Backport fixes for CVE-2021-25289, CVE-2021-25290, CVE-2021-25291, CVE-2021-25292,
CVE-2021-25293
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933899 - python-pillow-8.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1933899
[ 2 ] Bug #1934681 - CVE-2021-25289 python-pillow: insufficent fix for CVE-2020-35654
due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934681
[ 3 ] Bug #1934682 - CVE-2021-25289 python2-pillow: python-pillow: insufficent fix for
CVE-2020-35654 due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934682
[ 4 ] Bug #1934683 - CVE-2021-25289 mingw-python-pillow: python-pillow: insufficent fix
for CVE-2020-35654 due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934683
[ 5 ] Bug #1934686 - CVE-2021-25290 python-pillow: negative-offset memcpy with an
invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934686
[ 6 ] Bug #1934687 - CVE-2021-25290 python2-pillow: python-pillow: negative-offset
memcpy with an invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934687
[ 7 ] Bug #1934688 - CVE-2021-25290 mingw-python-pillow: python-pillow: negative-offset
memcpy with an invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934688
[ 8 ] Bug #1934693 - CVE-2021-25291 python-pillow: out-of-bounds read in
TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934693
[ 9 ] Bug #1934694 - CVE-2021-25291 python2-pillow: python-pillow: out-of-bounds read in
TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934694
[ 10 ] Bug #1934695 - CVE-2021-25291 mingw-python-pillow: python-pillow: out-of-bounds
read in TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934695
[ 11 ] Bug #1934700 - CVE-2021-25292 python-pillow: backtracking regex in PDF parser
could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934700
[ 12 ] Bug #1934701 - CVE-2021-25292 python2-pillow: python-pillow: backtracking regex
in PDF parser could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934701
[ 13 ] Bug #1934702 - CVE-2021-25292 mingw-python-pillow: python-pillow: backtracking
regex in PDF parser could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934702
[ 14 ] Bug #1934706 - CVE-2021-25293 python-pillow: out-of-bounds read in SGIRleDecode.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934706
[ 15 ] Bug #1934707 - CVE-2021-25293 python2-pillow: python-pillow: out-of-bounds read
in SGIRleDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934707
[ 16 ] Bug #1934708 - CVE-2021-25293 mingw-python-pillow: python-pillow: out-of-bounds
read in SGIRleDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934708
[ 17 ] Bug #1935385 - CVE-2021-27921 python-pillow: reported size of a contained image
is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935385
[ 18 ] Bug #1935386 - CVE-2021-27921 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935386
[ 19 ] Bug #1935388 - CVE-2021-27921 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935388
[ 20 ] Bug #1935397 - CVE-2021-27922 python-pillow: reported size of a contained image
is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935397
[ 21 ] Bug #1935398 - CVE-2021-27922 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935398
[ 22 ] Bug #1935399 - CVE-2021-27922 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935399
[ 23 ] Bug #1935402 - CVE-2021-27923 python-pillow: reported size of a contained image
is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935402
[ 24 ] Bug #1935403 - CVE-2021-27923 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935403
[ 25 ] Bug #1935405 - CVE-2021-27923 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935405
[ 26 ] Bug #1936047 - python-pillow-8.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1936047
--------------------------------------------------------------------------------
================================================================================
python-pvc-0.3.0-12.fc33 (FEDORA-2021-f7c5d087ad)
Python vSphere Client with a dialog interface
--------------------------------------------------------------------------------
Update Information:
add support for VMRC
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Raphael Groner <raphgro(a)fedoraproject.org> - 0.3.0-12
- add patch to support for VMRC, upstream #24
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-social-auth-core-4.0.2-2.fc33 (FEDORA-2021-8cb1111f15)
Python Social Auth is an easy to setup social authentication/registration mechanism with
support for several frameworks and auth providers.
--------------------------------------------------------------------------------
Update Information:
Upgrade to new upstream version 4.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Chenxiong Qi <qcxhome(a)gmail.com> - 4.0.2-2
- Bump release 4.0.2-2
* Sat Mar 6 2021 Chenxiong Qi <qcxhome(a)gmail.com> - 4.0.2-1
- Rebuilt for upstream version 4.0.2
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python2-pillow-6.2.2-5.fc33 (FEDORA-2021-15845d3abe)
Python image processing library
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2021-27921, CVE-2021-27922 and CVE-2021-27923. ----
Backport fixes for CVE-2021-25289, CVE-2021-25290, CVE-2021-25291,
CVE-2021-25292, CVE-2021-25293
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Sandro Mani <manisandro(a)gmail.com> - 6.2.2-5
- Backport patch for CVE-2021-2792{1,2,3}
* Fri Mar 5 2021 Sandro Mani <manisandro(a)gmail.com> - 6.2.2-4
- Backport fixes for CVE-2020-35653, CVE-2020-35654, CVE-2020-35655
- Backport fixes for CVE-2021-25289, CVE-2021-25290, CVE-2021-25291, CVE-2021-25292,
CVE-2021-25293
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933899 - python-pillow-8.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1933899
[ 2 ] Bug #1934681 - CVE-2021-25289 python-pillow: insufficent fix for CVE-2020-35654
due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934681
[ 3 ] Bug #1934682 - CVE-2021-25289 python2-pillow: python-pillow: insufficent fix for
CVE-2020-35654 due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934682
[ 4 ] Bug #1934683 - CVE-2021-25289 mingw-python-pillow: python-pillow: insufficent fix
for CVE-2020-35654 due to incorrect error checking in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934683
[ 5 ] Bug #1934686 - CVE-2021-25290 python-pillow: negative-offset memcpy with an
invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934686
[ 6 ] Bug #1934687 - CVE-2021-25290 python2-pillow: python-pillow: negative-offset
memcpy with an invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934687
[ 7 ] Bug #1934688 - CVE-2021-25290 mingw-python-pillow: python-pillow: negative-offset
memcpy with an invalid size in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934688
[ 8 ] Bug #1934693 - CVE-2021-25291 python-pillow: out-of-bounds read in
TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934693
[ 9 ] Bug #1934694 - CVE-2021-25291 python2-pillow: python-pillow: out-of-bounds read in
TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934694
[ 10 ] Bug #1934695 - CVE-2021-25291 mingw-python-pillow: python-pillow: out-of-bounds
read in TiffReadRGBATile in TiffDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934695
[ 11 ] Bug #1934700 - CVE-2021-25292 python-pillow: backtracking regex in PDF parser
could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934700
[ 12 ] Bug #1934701 - CVE-2021-25292 python2-pillow: python-pillow: backtracking regex
in PDF parser could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934701
[ 13 ] Bug #1934702 - CVE-2021-25292 mingw-python-pillow: python-pillow: backtracking
regex in PDF parser could be used as a DOS attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934702
[ 14 ] Bug #1934706 - CVE-2021-25293 python-pillow: out-of-bounds read in SGIRleDecode.c
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934706
[ 15 ] Bug #1934707 - CVE-2021-25293 python2-pillow: python-pillow: out-of-bounds read
in SGIRleDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934707
[ 16 ] Bug #1934708 - CVE-2021-25293 mingw-python-pillow: python-pillow: out-of-bounds
read in SGIRleDecode.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1934708
[ 17 ] Bug #1935385 - CVE-2021-27921 python-pillow: reported size of a contained image
is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935385
[ 18 ] Bug #1935386 - CVE-2021-27921 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935386
[ 19 ] Bug #1935388 - CVE-2021-27921 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for a BLP container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935388
[ 20 ] Bug #1935397 - CVE-2021-27922 python-pillow: reported size of a contained image
is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935397
[ 21 ] Bug #1935398 - CVE-2021-27922 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935398
[ 22 ] Bug #1935399 - CVE-2021-27922 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for an ICNS container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935399
[ 23 ] Bug #1935402 - CVE-2021-27923 python-pillow: reported size of a contained image
is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935402
[ 24 ] Bug #1935403 - CVE-2021-27923 python2-pillow: python-pillow: reported size of a
contained image is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935403
[ 25 ] Bug #1935405 - CVE-2021-27923 mingw-python-pillow: python-pillow: reported size
of a contained image is not properly checked for an ICO container [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1935405
[ 26 ] Bug #1936047 - python-pillow-8.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1936047
--------------------------------------------------------------------------------
================================================================================
radicale-3.0.6-17.fc33 (FEDORA-2021-b5aad43763)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Move SELinux into dedicated subpackage and add as suggestion to main package
(RHBZ#1934895)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Peter Bieringer <pb(a)bieringer.de> - 3.0.6-17
- Move SELinux into dedicated subpackage and add as suggestion to main package
(RHBZ#1934895)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1934895 - Extra requires: selinux
https://bugzilla.redhat.com/show_bug.cgi?id=1934895
--------------------------------------------------------------------------------
================================================================================
yad-8.0-1.fc33 (FEDORA-2021-7722ab3814)
Display graphical dialogs from shell scripts or command line
--------------------------------------------------------------------------------
Update Information:
Update to 8.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 6 2021 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 8.0-1
- Update to 8.0
* Thu Jan 28 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------