The following Fedora 34 Security updates need testing:
Age URL
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bd024d2a7
podman-3.4.4-1.fc34
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-73d63662b0 grub2-2.06-9.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd7960de3c
gnome-shell-40.7-1.fc34 gnome-shell-extensions-40.5-1.fc34 mutter-40.7-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-66d6c484f3 jansi-2.1.1-4.fc34
log4j-2.16.0-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e42fadbcc3
calibre-4.23.0-8.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aa1d373ed0 tang-11-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-255eff1bb5
keepalived-2.2.4-2.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f6e491390b
singularity-3.8.5-2.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-69e96c8f68
xorg-x11-server-Xwayland-21.1.4-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-cd4767e7d5
seamonkey-2.53.10.1-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-664a6554a1
xorg-x11-server-1.20.14-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9f9e7c5c4f
mingw-python-lxml-4.6.5-1.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
255
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
15
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be
annobin-9.79-3.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-daeea91820
libxmlb-0.3.6-1.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-40a861c3e6
glib-networking-2.68.3-1.fc34
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3a529faddd
libguestfs-1.46.1-1.fc34
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9621f51218
libical-3.0.12-1.fc34
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-73d63662b0 grub2-2.06-9.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd7960de3c
gnome-shell-40.7-1.fc34 gnome-shell-extensions-40.5-1.fc34 mutter-40.7-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-02dc2967db
ca-certificates-2021.2.52-1.0.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bf64fd9244
libvirt-7.0.0-8.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d581a6f6e4 fwupd-1.7.3-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-69e96c8f68
xorg-x11-server-Xwayland-21.1.4-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b9db3d5d5b
gnome-control-center-40.7-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-32419016af
pango-1.48.10-2.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5086d5dc1a lorax-34.14-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d74a092c8d
osinfo-db-20211216-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2e5d7b96a5
samba-4.14.11-0.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f64354e5b6
kernel-5.15.10-100.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7847fb3f18
libxcrypt-4.4.27-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-664a6554a1
xorg-x11-server-1.20.14-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f7b4bdb709
alsa-lib-1.2.6.1-3.fc34 alsa-plugins-1.2.6-1.fc34 alsa-utils-1.2.6-1.fc34
python-alsa-1.2.6-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
Zim-0.74.3-1.fc34
apt-2.3.13-1.fc34
dpkg-1.21.1-1.fc34
latte-dock-0.10.6-1.fc34
log4j-2.17.0-1.fc34
mingw-binutils-2.34-10.fc34
papirus-icon-theme-20211201-1.fc34
python-aws-sam-translator-1.42.0-3.fc34
python-pyrpm-0.11-1.fc34
python-pytest-testinfra-6.5.0-1.fc34
python-toposort-1.7-1.fc34
qdirstat-1.8-1.fc34
srain-1.3.1-1.fc34
toxcore-0.2.13-1.fc34
wike-1.6.3-1.fc34
xsnow-3.4.1-1.fc34
Details about builds:
================================================================================
Zim-0.74.3-1.fc34 (FEDORA-2021-4114d1b5ac)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Robin Lee <cheeselee(a)fedoraproject.org> 0.74.3-1
- Update to 0.74.3
--------------------------------------------------------------------------------
================================================================================
apt-2.3.13-1.fc34 (FEDORA-2021-5bfba818cd)
Command-line package manager for Debian packages
--------------------------------------------------------------------------------
Update Information:
Update apt to 2.3.13 (#2024297)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 S��rgio Basto <sergio(a)serjux.com> - 2.3.13-1
- Update apt to 2.3.13 (#2024297)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2024297 - apt-2.3.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2024297
--------------------------------------------------------------------------------
================================================================================
dpkg-1.21.1-1.fc34 (FEDORA-2021-e614c946fb)
Package maintenance system for Debian Linux
--------------------------------------------------------------------------------
Update Information:
Update dpkg to 1.21.1 (#2029230) ---- add %config(noreplace) to avoid clean
up databases on upgrades and to be compliant with silverblue
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 S��rgio Basto <sergio(a)serjux.com> - 1.21.1-1
- Update dpkg to 1.21.1 (#2029230)
* Wed Nov 17 2021 S��rgio Basto <sergio(a)serjux.com> - 1.20.9-4
- add %config(noreplace) to avoid clean up databases on upgrades and to be
compliant with silverblue
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.20.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Sun May 23 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.20.9-2
- Perl 5.34 rebuild
* Fri May 14 2021 S��rgio Basto <sergio(a)serjux.com>
- Drop requirement of perl(MIME::Lite)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2029230 - dpkg-1.21.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2029230
--------------------------------------------------------------------------------
================================================================================
latte-dock-0.10.6-1.fc34 (FEDORA-2021-1fd47ce5bb)
Latte is a dock based on plasma frameworks
--------------------------------------------------------------------------------
Update Information:
Upstream release rhbz#2033869 ---- Upstream release rhbz#2033383
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Gerald Cox <gbcox(a)member.fsf.org> - 0.10.6-1
- Upstream release rhbz#2033869
* Thu Dec 16 2021 Gerald Cox <gbcox(a)member.fsf.org> - 0.10.5-1
- Upstream release rhbz#2033383
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2033383 - latte-dock-0.10.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2033383
[ 2 ] Bug #2033869 - latte-dock-0.10.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2033869
--------------------------------------------------------------------------------
================================================================================
log4j-2.17.0-1.fc34 (FEDORA-2021-5c9d12a93e)
Java logging package
--------------------------------------------------------------------------------
Update Information:
Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Paul Wouters <paul.wouters(a)aiven.io> - 2.17.0-1
- Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
* Mon Dec 13 2021 Adam Williamson <awilliam(a)redhat.com> - 2.16.0-1
- Update to 2.16.0 (fixes critical CVE-2021-44228)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2032580 - CVE-2021-45046 log4j-core: DoS in log4j 2.x with thread context
message pattern and context lookup pattern (incomplete fix for CVE-2021-44228)
https://bugzilla.redhat.com/show_bug.cgi?id=2032580
--------------------------------------------------------------------------------
================================================================================
mingw-binutils-2.34-10.fc34 (FEDORA-2021-f2c6802743)
Cross-compiled version of binutils for Win32 and Win64 environments
--------------------------------------------------------------------------------
Update Information:
Backport fix for CVE-2021-45078
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Sandro Mani <manisandro(a)gmail.com> - 2.34-10
- Backport fix for CVE-2021-45078
--------------------------------------------------------------------------------
================================================================================
papirus-icon-theme-20211201-1.fc34 (FEDORA-2021-8b05ca04ba)
Free and open source SVG icon theme based on Paper Icon Set
--------------------------------------------------------------------------------
Update Information:
Update to 20211201 Close: rhbz#2019292
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 17 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 20211201-1
- Update to 20211201 Close: rhbz#2019292
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2019292 - papirus-icon-theme-20211201 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2019292
--------------------------------------------------------------------------------
================================================================================
python-aws-sam-translator-1.42.0-3.fc34 (FEDORA-2021-46ec5aec88)
Transform SAM templates into AWS CloudFormation templates
--------------------------------------------------------------------------------
Update Information:
Initial package (close RHBZ#2030436)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 17 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.42.0-3
- Patch out pytest-cov build dependency
* Fri Dec 17 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.42.0-2
- Add missing license files in -doc subpackage
* Wed Dec 15 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.42.0-1
- Initial package (close RHBZ#2030436)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2030436 - Review Request: python-aws-sam-translator - Transform SAM templates
into AWS CloudFormation templates
https://bugzilla.redhat.com/show_bug.cgi?id=2030436
--------------------------------------------------------------------------------
================================================================================
python-pyrpm-0.11-1.fc34 (FEDORA-2021-79bcb3e5f7)
Python module for parsing RPM spec files
--------------------------------------------------------------------------------
Update Information:
Update to 0.11 Close: rhbz#1990245
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.11-1
- Update to 0.11 Close: rhbz#1990245
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 0.10-3
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1990245 - python-pyrpm-0.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1990245
--------------------------------------------------------------------------------
================================================================================
python-pytest-testinfra-6.5.0-1.fc34 (FEDORA-2021-1b6fe74486)
Unit testing for config-managed server state
--------------------------------------------------------------------------------
Update Information:
Update to version 6.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Chedi Toueiti <chedi.toueiti(a)gmail.com> - 6.5.0-1
- Update to version 6.5.0 (#2029992)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2029992 - python-pytest-testinfra-6.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2029992
--------------------------------------------------------------------------------
================================================================================
python-toposort-1.7-1.fc34 (FEDORA-2021-35b1193f22)
Implements a topological sort algorithm
--------------------------------------------------------------------------------
Update Information:
* Version update to v1.7 * Updated spec to use pyproject macros
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 15 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.7-1
- Update to 1.7 (close RHBZ#2032681)
- Port to pyproject-rpm-macros (a necessity; upstream drops setup.py)
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2032681 - python-toposort-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2032681
--------------------------------------------------------------------------------
================================================================================
qdirstat-1.8-1.fc34 (FEDORA-2021-5dfe9f6e4c)
Qt-based directory statistics
--------------------------------------------------------------------------------
Update Information:
Update to 1.8 Close: rhbz#1998794
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.8-1
- Update to 1.8 Close: rhbz#1998794
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1998794 - qdirstat-1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1998794
--------------------------------------------------------------------------------
================================================================================
srain-1.3.1-1.fc34 (FEDORA-2021-984464b801)
Modern, beautiful IRC client written in GTK+ 3
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.3.1-1
- chore(update): 1.3.1
--------------------------------------------------------------------------------
================================================================================
toxcore-0.2.13-1.fc34 (FEDORA-2021-8b746a32c5)
Peer to peer instant messenger
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.13 Close: rhbz#2030009, rhbz#2033018, rhbz#2033019 Security fix
for CVE-2021-44847
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.2.13-1
- Update to 0.2.13 Close: rhbz#2030009, rhbz#2030009
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.12-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2033018 - CVE-2021-44847 toxcore: stack-based buffer overflow in
handle_request() in DHT.c
https://bugzilla.redhat.com/show_bug.cgi?id=2033018
--------------------------------------------------------------------------------
================================================================================
wike-1.6.3-1.fc34 (FEDORA-2021-fa5ced6359)
Wikipedia Reader for the GNOME Desktop
--------------------------------------------------------------------------------
Update Information:
Update to 1.6.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 17 2021 Gustavo Costa <xfgusta(a)fedoraproject.org> - 1.6.3-1
- Update to 1.6.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2031086 - wike-1.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2031086
--------------------------------------------------------------------------------
================================================================================
xsnow-3.4.1-1.fc34 (FEDORA-2021-86d4fa1dc9)
Let it snow on your desktop
--------------------------------------------------------------------------------
Update Information:
Minor fixed and improvements
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 18 2021 Andrea Musuruane <musuruan(a)gmail.com> - 3.4.1-1
- Updated to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2031380 - xsnow-3.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2031380
--------------------------------------------------------------------------------