The following Fedora 33 Security updates need testing:
Age URL
97
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0c98725795
opendmarc-1.4.1.1-3.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2bae525fd3
krb5-1.18.2-30.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6f327296fe
nextcloud-19.0.13-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f4132bb56 glibc-2.32-10.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
115
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
50
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e0aedafbc9
coreutils-8.32-21.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-47368106b3
hwdata-0.349-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fe782f6705
libbytesize-2.6-1.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-de131565a6
ethtool-5.13-1.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c09b022e8f dracut-055-3.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-abcaa79b71
libmodulemd-2.13.0-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e57bbe4837
webkit2gtk3-2.32.2-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1fe1b325f5 gjs-1.66.2-7.fc33
mozjs78-78.12.0-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f4132bb56 glibc-2.32-10.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bcea139c5d audit-3.0.3-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5e6e793ad5
libedit-3.1-38.20210714cvs.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c62d0025fe
mtools-4.0.32-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6b0a829d13
kernel-5.12.17-200.fc33 kernel-headers-5.12.17-200.fc33 kernel-tools-5.12.17-200.fc33
The following builds have been pushed to Fedora 33 updates-testing
armadillo-10.6.0-2.fc33
buildah-1.21.3-1.fc33
containernetworking-plugins-1.0.0-0.2.rc1.fc33
containers-common-1-20.fc33
crun-0.20.1-1.fc33
gnucash-4.6-2.fc33
ibus-m17n-1.4.6-1.fc33
liquidctl-1.7.1-1.fc33
lua-unbound-1.0.0-1.fc33
picocli-4.6.1-3.fc33
podman-3.2.3-1.fc33
python-asyncpg-0.23.0-6.fc33
python3.9-3.9.6-2.fc33
qpid-dispatch-1.16.1-1.fc33
qpid-proton-0.35.0-1.fc33
sayonara-1.7.0-3.stable3.fc33
skopeo-1.3.1-1.fc33
varnish-6.4.0-5.fc33
wireshark-3.4.7-1.fc33
Details about builds:
================================================================================
armadillo-10.6.0-2.fc33 (FEDORA-2021-b8f3f54b8b)
Fast C++ matrix library with syntax similar to MATLAB and Octave
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. The main changes since the last version
are: * expanded `chol()` to optionally use pivoted decomposition; * expanded
`vector`, `matrix` and `cube` constructors to allow element initialisation via
`fill::value(scalar)`, eg. `mat X(4,5,fill::value(123))`; * faster loading of
CSV files when using OpenMP; * added `csv_opts::semicolon` option to allow
saving/loading of CSV files with semicolon (`;`) instead of comma (`,`) as the
separator.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 15 2021 Jos�� Matos <jamatos(a)fedoraproject.org> - 10.6.0-1
- update to 10.6.0
- BR flexiblas for Fedora and lapack, openblas and atlas for EPEL
- adapt armadillo-devel accordingly
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950741 - Sanitize armadillo-devel requires
https://bugzilla.redhat.com/show_bug.cgi?id=1950741
[ 2 ] Bug #1982490 - armadillo-10.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1982490
--------------------------------------------------------------------------------
================================================================================
buildah-1.21.3-1.fc33 (FEDORA-2021-112557d2c5)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-3602
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.21.3-1
- Resolves: #1969264, #1982880 - Security fix for CVE-2021-3602
- bump to v1.21.3
* Wed Jun 30 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.21.2-1
- bump to v1.21.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build
container when using chroot isolation
https://bugzilla.redhat.com/show_bug.cgi?id=1969264
--------------------------------------------------------------------------------
================================================================================
containernetworking-plugins-1.0.0-0.2.rc1.fc33 (FEDORA-2021-0c53d8738d)
Libraries for writing CNI plugin
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine-
cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets`
definition in /usr/share/containers/containers.conf
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 7 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.0.0-0.2.rc1
- Resolves: #1962008 - use correct plugin path in unitfile
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build
container when using chroot isolation
https://bugzilla.redhat.com/show_bug.cgi?id=1969264
--------------------------------------------------------------------------------
================================================================================
containers-common-1-20.fc33 (FEDORA-2021-0c53d8738d)
Common configuration and documentation for containers
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine-
cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets`
definition in /usr/share/containers/containers.conf
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 4:1-20
- rebuild to add it to podman CVE errata
* Thu Jul 15 2021 Dan Walsh <dwalsh(a)fedoraproject.org> - 4:1-19
- Update containers.conf to the correct version
* Wed Jun 23 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 4:1-18
- Resolves: #1958474 - allow futex_time64 in seccomp.json
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 4:1-17
- use configs from latest upstream tags
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build
container when using chroot isolation
https://bugzilla.redhat.com/show_bug.cgi?id=1969264
--------------------------------------------------------------------------------
================================================================================
crun-0.20.1-1.fc33 (FEDORA-2021-0c53d8738d)
OCI runtime written in C
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine-
cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets`
definition in /usr/share/containers/containers.conf
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.20.1-1
- Fixes:
https://github.com/containers/crun/issues/687
* Wed Jun 2 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.20-1
- bump to 0.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build
container when using chroot isolation
https://bugzilla.redhat.com/show_bug.cgi?id=1969264
--------------------------------------------------------------------------------
================================================================================
gnucash-4.6-2.fc33 (FEDORA-2021-ed8aa33ea9)
Finance management application
--------------------------------------------------------------------------------
Update Information:
Two bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Paul Howarth <paul(a)city-fan.org> - 4.6-2
- Add fix for crash in transfers between accounts with different currencies
https://bugs.gnucash.org/show_bug.cgi?id=798221
https://bugs.gnucash.org/show_bug.cgi?id=798243
- Add fix for truncation of fund/currency prices
https://bugs.gnucash.org/show_bug.cgi?id=798219
--------------------------------------------------------------------------------
================================================================================
ibus-m17n-1.4.6-1.fc33 (FEDORA-2021-eef794b811)
The M17N engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.6; Make inscript2 engines rank higher than inscript engines
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 15 2021 Mike FABIAN <mfabian(a)redhat.com> - 1.4.6-1
- Update to 1.4.6
- Make inscript2 engines rank higher than inscript engines
- Resolves: rhbz#1982546
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1982546 - Make inscript2 engines rank higher than inscript engines
https://bugzilla.redhat.com/show_bug.cgi?id=1982546
--------------------------------------------------------------------------------
================================================================================
liquidctl-1.7.1-1.fc33 (FEDORA-2021-2c1aac6eeb)
Tool for controlling liquid coolers, case fans and RGB LED strips
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release ---- Update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.7.1-1
- Update to latest upstream release
* Wed Jul 14 2021 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.7.0-1
- Update to latest upstream release
- Add the "udev" subpackage
--------------------------------------------------------------------------------
================================================================================
lua-unbound-1.0.0-1.fc33 (FEDORA-2021-abdb555f56)
Binding to libunbound for Lua
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 1.0.0 (#1982222)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Robert Scheck <robert(a)fedoraproject.org> 1.0.0-1
- Upgrade to 1.0.0 (#1982222)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1982222 - lua-unbound-1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1982222
--------------------------------------------------------------------------------
================================================================================
picocli-4.6.1-3.fc33 (FEDORA-2021-3d367fb192)
Java command line parser with both an annotations API and a programmatic API
--------------------------------------------------------------------------------
Update Information:
Add picocli-shell-jline2 ---- Add picocli-parent and picocli-codegen ----
First picocli package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1980117 - Review Request: picocli - Java command line parser with both an
annotations API and a programmatic API
https://bugzilla.redhat.com/show_bug.cgi?id=1980117
--------------------------------------------------------------------------------
================================================================================
podman-3.2.3-1.fc33 (FEDORA-2021-0c53d8738d)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine-
cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets`
definition in /usr/share/containers/containers.conf
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.3-1
- Resolves: #1969264, #1982881 - Security fix for CVE-2021-3602
- bump to v3.2.3
* Fri Jun 25 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.2-1
- bump to v3.2.2
* Mon Jun 14 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 3:3.2.1-1
- autobuilt v3.2.1
* Thu Jun 10 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-5
- fix crun dependency issue
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-4
- use latest containers-common
* Tue Jun 8 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-3
- keep crun on 0.19.1-3
* Tue Jun 8 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-2
- include podman-machine-cni in podman-plugins subpackage
* Fri Jun 4 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 3:3.2.0-1
- autobuilt v3.2.0
* Wed May 26 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> -
3:3.2.0-0.2.rc3
- autobuilt v3.2.0-rc3
* Fri May 21 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> -
3:3.2.0-0.1.rc2
- autobuilt v3.2.0-rc2
* Wed May 12 2021 Dusty Mabe <dusty(a)dustymabe.com> - 3:3.1.2-3
- Backport upstream bugfix:
https://github.com/containers/podman/pull/10253
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build
container when using chroot isolation
https://bugzilla.redhat.com/show_bug.cgi?id=1969264
--------------------------------------------------------------------------------
================================================================================
python-asyncpg-0.23.0-6.fc33 (FEDORA-2021-afa4571bbf)
A fast PostgreSQL Database Client Library for Python/asyncio
--------------------------------------------------------------------------------
Update Information:
The `python-asyncpg-doc` package now depends on `python3-docs`, and the
`python3-asyncpg` package now does not.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.23.0-6
- Dependency on python3-docs should have been in -doc subpackage
* Fri Jul 2 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.23.0-5
- Allow later versions of test dependencies pycodestyle and uvloop
--------------------------------------------------------------------------------
================================================================================
python3.9-3.9.6-2.fc33 (FEDORA-2021-5194033b8b)
Version 3.9 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
- Require pyproject-rpm-macros from python3-debug, to enable packaging according
to new guidelines See:
https://fedoraproject.org/wiki/Changes/PythonPackagingGuidelines202x - Add
"python-turtle" provide to python3-tkinter
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Petr Viktorin <pviktori(a)redhat.com> - 3.9.6-2
- Provide python3-turtle from python3-tkinter
- Require pyproject-rpm-macros from python3-devel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1952565 - Add %py_provides for optional stdlib modules
https://bugzilla.redhat.com/show_bug.cgi?id=1952565
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-1.16.1-1.fc33 (FEDORA-2021-c5b36f394d)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Rebased to 1.16.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Kim van der Riet <kvanderr(a)redhat.com> - 1.16.1-1
- Rebased to 1.16.1
--------------------------------------------------------------------------------
================================================================================
qpid-proton-0.35.0-1.fc33 (FEDORA-2021-055b191c6c)
A high performance, lightweight messaging library
--------------------------------------------------------------------------------
Update Information:
Rebased to qpid-proton 0.35.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Kim van der Riet <kvanderr(a)redhat.com> - 0.35.0-1
- Rebased to 0.35.0
--------------------------------------------------------------------------------
================================================================================
sayonara-1.7.0-3.stable3.fc33 (FEDORA-2021-7551ea44b3)
A lightweight Qt Audio player
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.0-3.stable3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 16 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1.7.0-3
- Update to 1.7.0 stable3
--------------------------------------------------------------------------------
================================================================================
skopeo-1.3.1-1.fc33 (FEDORA-2021-0c53d8738d)
Inspect container images and repositories on registries
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-3602 bump podman to v3.2.3 include podman-machine-
cni in podman-plugins subpackage bump crun to 0.20.1 ---- Fix `secrets`
definition in /usr/share/containers/containers.conf
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1:1.3.1-1
- bump to v1.3.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969264 - CVE-2021-3602 buildah: Host environment variables leaked in build
container when using chroot isolation
https://bugzilla.redhat.com/show_bug.cgi?id=1969264
--------------------------------------------------------------------------------
================================================================================
varnish-6.4.0-5.fc33 (FEDORA-2021-36e10d3f9f)
High-performance HTTP accelerator
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-36740
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
wireshark-3.4.7-1.fc33 (FEDORA-2021-df26b4e7e8)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
New version 3.4.7 Fix for CVE-2021-22235
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 15 2021 Michal Ruprich <mruprich(a)redhat.com> - 1:3.4.7-1
- New version 3.4.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1982495 - wireshark-3.4.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1982495
--------------------------------------------------------------------------------