The following Fedora 33 Security updates need testing:
Age URL
94
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-01f851ab8d
seamonkey-2.53.8-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a5b584004c
linuxptp-3.1.1-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ca58c57bdf
chromium-91.0.4472.114-2.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0c98725795
opendmarc-1.4.1.1-3.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2bae525fd3
krb5-1.18.2-30.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e0adbf04a9
firefox-90.0-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
112
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
47
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0f36063660
appstream-data-33-3.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b341e9e71
selinux-policy-3.14.6-39.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-25b3e62f7d koji-1.25.1-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e0aedafbc9
coreutils-8.32-21.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-47368106b3
hwdata-0.349-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fe782f6705
libbytesize-2.6-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-de131565a6
ethtool-5.13-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c09b022e8f dracut-055-3.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-abcaa79b71
libmodulemd-2.13.0-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a3a4b02149
kernel-5.12.15-200.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e0adbf04a9
firefox-90.0-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
acpica-tools-20210604-1.fc33
ansible-collection-microsoft-sql-1.0.12-1.fc33
exaile-4.1.1-3.fc33
gjs-1.66.2-7.fc33
glibc-2.32-10.fc33
libcint-4.4.2-2.fc33
libmongocrypt-1.2.1-1.fc33
mozjs78-78.12.0-1.fc33
nextcloud-19.0.13-1.fc33
perl-ExtUtils-CChecker-0.11-1.fc33
php-pecl-mongodb-1.9.2-1.fc33
php-pecl-var-representation-0.1.0-1.fc33
python-fqdn-1.5.1-2.fc33
python-platformdirs-2.0.0-1.fc33
qcint-4.4.2-2.fc33
webkit2gtk3-2.32.2-1.fc33
xrdp-0.9.16-2.fc33
Details about builds:
================================================================================
acpica-tools-20210604-1.fc33 (FEDORA-2021-d99e5ebe12)
ACPICA tools for the development and debug of ACPI tables
--------------------------------------------------------------------------------
Update Information:
Update to 20210604 upstream source; refresh and improve big-endian support; full
support for rhe ACPI 6.4 release of the specification is now available.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 11 2021 Al Stone <ahs3(a)redhat.com> - 20210604-1
- Update to 20210604 source tree (please note that tarballs for versions
between 20200925 and 20210604 have been uploaded for archival reasons
but no packaged version of these has been commited to the Fedora project)
- Bring the big-endian patches up-to-date with what has been submitted
upstream (not accepted currently).
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
20200925-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ansible-collection-microsoft-sql-1.0.12-1.fc33 (FEDORA-2021-4aca29b5ad)
The Ansible collection for Microsoft SQL Server management
--------------------------------------------------------------------------------
Update Information:
This update fixes the following GitHub issues: #24 Fix the role expectedly
failing when configuring tuned #25 Fix the role failing when changing the
tcp_port to the default 1433 #26 Clarify optional parameters in README #27 Add
more descriptive playbook examples to README #28 Fix the role on Fedora > 34
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Sergei Petrosian <spetrosi(a)redhat.com> - 1.0.12-1
- Add the meta-runtime option from the latest auto-maintenance
- Use the latest mssql that ships fixes for issues #24,#25,#26,#27,#28,35
* Tue Jun 29 2021 Sergei Petrosian <spetrosi(a)redhat.com> - 1.0.11-3
- Add a missing slash at the {ansible_collection_files} definition for rhel 7
--------------------------------------------------------------------------------
================================================================================
exaile-4.1.1-3.fc33 (FEDORA-2021-230656804f)
Simple but powerful Amarok-style music player for GTK users
--------------------------------------------------------------------------------
Update Information:
Bringing back Exaile music player. Update to 4.1.1. Python 3 compatibility.
Responding to package review (BZ #1980282)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1980282 - Review Request: exaile - music player
https://bugzilla.redhat.com/show_bug.cgi?id=1980282
--------------------------------------------------------------------------------
================================================================================
gjs-1.66.2-7.fc33 (FEDORA-2021-1fe1b325f5)
Javascript Bindings for GNOME
--------------------------------------------------------------------------------
Update Information:
- update to mozjs78-78.12.0:
https://www.mozilla.org/en-
US/firefox/78.12.0/releasenotes/ - gjs rebuild against new mozjs78
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 1.66.2-7
- Rebuild against mozjs78-78.12.0-1
--------------------------------------------------------------------------------
================================================================================
glibc-2.32-10.fc33 (FEDORA-2021-3f4132bb56)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
Auto-sync with upstream branch release/2.32/master Upstream commit:
27e892f6608e9d0da71884bb1422a735f6062850 - wordexp: handle overflow in
positional parameter number (swbz#28011, CVE-2021-35942) - Preserve .symtab
in libc.so.6 and the main shared objects (#1975895)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Florian Weimer <fweimer(a)redhat.com> - 2.32-10
- Preserve .symtab in libc.so.6 and the main shared objects (#1975859)
* Wed Jul 7 2021 Patsy Griffin <patsy(a)redhat.com> - 2.32-9
- Auto-sync with upstream branch release/2.32/master,
commit 27e892f6608e9d0da71884bb1422a735f6062850.
- wordexp: handle overflow in positional parameter number (bug 28011)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1975895 - glibc: Preserve symtab in libc.so.6 and other critical shared
objects
https://bugzilla.redhat.com/show_bug.cgi?id=1975895
[ 2 ] Bug #1977976 - CVE-2021-35942 glibc: Arbitrary read in wordexp() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1977976
--------------------------------------------------------------------------------
================================================================================
libcint-4.4.2-2.fc33 (FEDORA-2021-de652a0d13)
General Gaussian-type orbitals integrals for quantum chemistry
--------------------------------------------------------------------------------
Update Information:
Update to 4.4.2, improving the accuracy of the short-range Rys roots.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-2
- Properly set BLA_VENDOR to FlexiBLAS for cmake >= 3.19
* Mon Jul 12 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 4.4.2-1
- Update to 4.4.2.
--------------------------------------------------------------------------------
================================================================================
libmongocrypt-1.2.1-1.fc33 (FEDORA-2021-06cd846890)
The companion C library for client side encryption in drivers
--------------------------------------------------------------------------------
Update Information:
**Version 1.2.1** Fixed - Fix possible crash when oauth credentials expire.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Remi Collet <remi(a)remirepo.net> - 1.2.1-1
- update to 1.2.1
--------------------------------------------------------------------------------
================================================================================
mozjs78-78.12.0-1.fc33 (FEDORA-2021-1fe1b325f5)
SpiderMonkey JavaScript library
--------------------------------------------------------------------------------
Update Information:
- update to mozjs78-78.12.0:
https://www.mozilla.org/en-
US/firefox/78.12.0/releasenotes/ - gjs rebuild against new mozjs78
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 78.12.0-1
- Update to 78.12.0
--------------------------------------------------------------------------------
================================================================================
nextcloud-19.0.13-1.fc33 (FEDORA-2021-6f327296fe)
Private file sync and share server
--------------------------------------------------------------------------------
Update Information:
Update to 19.0.13; Fixes one high severity and multiple low severity CVEs
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Christopher Engelhard <ce(a)lcts.de> 19.0.13-1
- Update to 19.0.13; Fixes RHBZ#1981503; Fixes RHBZ#1981505
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1981503 - CVE-2021-32688 nextcloud: Improper permission check permits tokens
to change their own permissions [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1981503
[ 2 ] Bug #1981505 - CVE-2021-32680 nextcloud: Improper audit logging for expiration
date events [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1981505
[ 3 ] Bug #1981817 - CVE-2021-32678 nextcloud: ratelimit not applied on OCS API
responses [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1981817
[ 4 ] Bug #1981819 - CVE-2021-32679 nextcloud: filenames not escaped by default in
controllers using DownloadResponse [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1981819
[ 5 ] Bug #1981821 - CVE-2021-32703 nextcloud: lack of ratelimit on shareinfo endpoint
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1981821
[ 6 ] Bug #1981824 - CVE-2021-32705 nextcloud: lack of ratelimit on public DAV endpoint
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1981824
--------------------------------------------------------------------------------
================================================================================
perl-ExtUtils-CChecker-0.11-1.fc33 (FEDORA-2021-f9126345dc)
Configure-time utilities for using C headers, libraries, or OS features
--------------------------------------------------------------------------------
Update Information:
This release adds try_find_cflags_for and extend_module_build methods. It also
improves a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Petr Pisar <ppisar(a)redhat.com> - 0.11-1
- 0.11 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1981476 - perl-ExtUtils-CChecker-0.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1981476
--------------------------------------------------------------------------------
================================================================================
php-pecl-mongodb-1.9.2-1.fc33 (FEDORA-2021-68de1d07fb)
MongoDB driver for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.9.2** Bug * [PHPC-1839] - MongoDB\BSON\toPHP() is rewriting
$typeMap argument * [PHPC-1869] - Redact sensitive commands from command
monitoring
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Remi Collet <remi(a)remirepo.net> - 1.9.2-1
- update to 1.9.2
--------------------------------------------------------------------------------
================================================================================
php-pecl-var-representation-0.1.0-1.fc33 (FEDORA-2021-191b03f87d)
var_representation extension
--------------------------------------------------------------------------------
Update Information:
var_representation is a compact alternative to var_export that properly escapes
control characters.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1976785 - Review Request: php-pecl-var-representation - var_representation
extension
https://bugzilla.redhat.com/show_bug.cgi?id=1976785
--------------------------------------------------------------------------------
================================================================================
python-fqdn-1.5.1-2.fc33 (FEDORA-2021-eec6706150)
Validates fully-qualified domain names against RFC 1123
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1976336 - Review Request: python-fqdn - Validates fully-qualified domain
names against RFC 1123
https://bugzilla.redhat.com/show_bug.cgi?id=1976336
--------------------------------------------------------------------------------
================================================================================
python-platformdirs-2.0.0-1.fc33 (FEDORA-2021-3446b99717)
Python module for determining appropriate platform-specific dirs
--------------------------------------------------------------------------------
Update Information:
Initial Fedora package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1981607 - Review Request: python-platformdirs - Python module for determining
appropriate platform-specific dirs
https://bugzilla.redhat.com/show_bug.cgi?id=1981607
--------------------------------------------------------------------------------
================================================================================
qcint-4.4.2-2.fc33 (FEDORA-2021-de652a0d13)
An optimized libcint branch for X86 platform with SSE3 intrinsics
--------------------------------------------------------------------------------
Update Information:
Update to 4.4.2, improving the accuracy of the short-range Rys roots.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.2-2
- Properly set BLA_VENDOR to FlexiBLAS for cmake >= 3.19
* Mon Jul 12 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 4.4.2-1
- Update to 4.4.2.
--------------------------------------------------------------------------------
================================================================================
webkit2gtk3-2.32.2-1.fc33 (FEDORA-2021-e57bbe4837)
GTK Web content engine library
--------------------------------------------------------------------------------
Update Information:
* Improve calculation of initial WebKitWebView size. * Fix kinetic scrolling
on touchpad with async scrolling off. * Fix a crash on empty drag operation in
X11. * Fix rendering on HiDPI 4k screen and scaling. * Handle null native
surface for surfaceless rendering. * Fix several crashes and rendering issues.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 13 2021 Michael Catanzaro <mcatanzaro(a)redhat.com> - 2.32.2-1
- Update to 2.32.2
--------------------------------------------------------------------------------
================================================================================
xrdp-0.9.16-2.fc33 (FEDORA-2021-16b96ff81f)
Open source remote desktop protocol (RDP) server
--------------------------------------------------------------------------------
Update Information:
Fix bug #1977175.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 14 2021 Bojan Smojver <bojan(a)rexurive.com> - 1:0.9.16-2
- Bring logrotate file in line with defaults (BZ #1977175).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1977175 - Default log rotation too fast
https://bugzilla.redhat.com/show_bug.cgi?id=1977175
--------------------------------------------------------------------------------