The following Fedora 33 Security updates need testing:
Age URL
47
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-98720f3785
python2.7-2.7.18-11.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bfbc1088b6
java-1.8.0-openjdk-aarch32-1.8.0.292.b10-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b
libxml2-2.9.12-2.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a4c0a91884
rxvt-unicode-9.26-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8b85b2de05
eterm-0.9.6-26.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1ec3c5ed63
opendmarc-1.4.1-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e8cab459ab cflow-1.6-8.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-454a0f6f76
gnutls-3.6.16-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-faab70f09a
mapserver-7.4.5-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8917c5d9d2
exiv2-0.27.3-7.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7190a83164
chromium-90.0.4430.212-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bf77566c9
nginx-1.20.1-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-77756994ba
mingw-python-pillow-7.2.0-6.fc33 python-pillow-7.2.0-6.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ac3ef133e8
singularity-3.7.4-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4cdb0f68c7
python-lxml-4.5.1-4.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bdba47348c
mingw-exiv2-0.27.3-6.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3193a4c13f
mingw-djvulibre-3.5.27-12.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
65
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b331c0278
wpebackend-fdo-1.8.4-1.fc33
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-efdc2e7167 chrony-4.1-1.fc33
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e7f17262ce
libidn2-2.3.1-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ae71327f68
libtirpc-1.2.6-4.rc4.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5cc6457b38
rpcbind-1.2.6-0.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-55fc591f26
tpm2-tss-3.0.4-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aca3c7bb56 koji-1.25.0-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b
libxml2-2.9.12-2.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-cd029398ef mpfr-4.1.0-7.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b2b5636c1a
livecd-tools-28.1-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-35759ad8d3
openssh-8.4p1-6.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-454a0f6f76
gnutls-3.6.16-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa3657ac97 kmod-29-2.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8917c5d9d2
exiv2-0.27.3-7.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a6e57e54a5
net-snmp-5.9.1-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
The following builds have been pushed to Fedora 33 updates-testing
cbmc-5.29.0-1.fc33
ceph-15.2.13-1.fc33
conmon-2.0.28-2.fc33
dhcp-4.4.2-9.b1.fc33
dracut-055-1.fc33
fedora-chromium-config-1.1-11.fc33
fillets-ng-1.0.1-26.fc33
libxcrypt-4.4.22-1.fc33
mingw-openjpeg2-2.3.1-12.fc33
netdata-1.31.0-1.fc33
openjpeg2-2.3.1-11.fc33
pcm-202105-1.fc33
perl-DateTime-Format-Flexible-0.33-1.fc33
perl-Graphics-TIFF-13-1.fc33
python-rpmautospec-0.2.1-1.fc33
realtime-setup-2.2-3.fc33
rpi-imager-1.6.2-1.fc33
usbredir-0.10.0-1.fc33
wireshark-3.4.5-1.fc33
Details about builds:
================================================================================
cbmc-5.29.0-1.fc33 (FEDORA-2021-bf0c45e9d0)
Bounded Model Checker for ANSI-C and C++ programs
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 12 2021 Vincent Mihalkovic <vmihalko(a)redhat.com> - 5.29.0-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
ceph-15.2.13-1.fc33 (FEDORA-2021-50feaa6484)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
Ceph 15.2.13 GA
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:15.2.13-1
- ceph 15.2.13 GA
--------------------------------------------------------------------------------
================================================================================
conmon-2.0.28-2.fc33 (FEDORA-2021-f03a9e08da)
OCI container runtime monitor
--------------------------------------------------------------------------------
Update Information:
rhbz#1965231: add /usr/libexec/crio to tracked files ---- Autobuilt v2.0.28
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Peter Hunt <pehunt(a)redhat.com> - 2:2.0.28-2
- rhbz#1965231: add /usr/libexec/crio to tracked files
* Fri May 14 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.0.28-1
- autobuilt v2.0.28
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965231 - conmon: unowned directory
https://bugzilla.redhat.com/show_bug.cgi?id=1965231
--------------------------------------------------------------------------------
================================================================================
dhcp-4.4.2-9.b1.fc33 (FEDORA-2021-8ca8263bde)
Dynamic host configuration protocol software
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2021-25217
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Pavel Zhukov <pzhukov(a)redhat.com> - 12:4.4.2-9.b1
- Fix for CVE-2021-25217
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1963258 - CVE-2021-25217 dhcp: stack-based buffer overflow when parsing
statements with colon-separated hex digits in config or lease files in dhcpd and dhclient
https://bugzilla.redhat.com/show_bug.cgi?id=1963258
--------------------------------------------------------------------------------
================================================================================
dracut-055-1.fc33 (FEDORA-2021-b02a75816e)
Initramfs generator using udev
--------------------------------------------------------------------------------
Update Information:
- version 055 - install the missing fsck utils ---- - fix `get_maj_min` for
kdump - suppress hardlink output - sane default --kerneldir for dracut-install -
squash: don't mount the mount points if already mounted ---- fix `dracut-dev-
lib.sh: line 92: str_replace: command not found` ---- * version 054 -
https://github.com/dracutdevs/dracut/releases/tag/054
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Harald Hoyer <harald(a)redhat.com> - 055-1
- version 055
- install the missing fsck utils
* Fri May 21 2021 Harald Hoyer <harald(a)redhat.com> - 054-12.git20210521
- fix `get_maj_min` for kdump
- suppress hardlink output
- sane default --kerneldir for dracut-install
- squash: don't mount the mount points if already mounted
* Tue May 18 2021 Harald Hoyer <harald(a)redhat.com> - 054-6.git20210518
- fix for `str_replace: command not found`
* Mon May 17 2021 Harald Hoyer <harald(a)redhat.com> - 054-4.git20210517
- version 054
* Thu Apr 22 2021 Peter Robinson <pbrobinson(a)fedoraproject.org> - 053-5
- Backport: fix(90kernel-modules): add watchdog drivers for generic initrd (rhbz 1592148)
* Mon Apr 19 2021 Dusty Mabe <dusty(a)dustymabe.com> - 053-4
- Backport: fix(dracut-logger.sh): double dash trigger unknown logger warnings during run
- Backport: fix(network-manager): nm-run.service: don't kill forked processes
- Backport: fix(network-manager): only run NetworkManager if rd.neednet=1
- Backport: fix(network-manager): use /run/NetworkManager/initrd/neednet in initqueue
* Mon Apr 19 2021 Adam Williamson <awilliam(a)redhat.com> - 053-3
- Fix removal of key system files when kdump enabled (thanks kasong) (#1936781)
* Thu Apr 8 2021 Adam Williamson <awilliam(a)redhat.com> - 053-2
- Backport upstream change reported to fix boot on some encrypted LVM setups (#1946074)
* Tue Feb 23 2021 Harald Hoyer <harald(a)redhat.com> - 053-1
- version 053
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 051-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Dec 15 2020 Harald Hoyer <harald(a)redhat.com> - 051-1
- version 051
--------------------------------------------------------------------------------
================================================================================
fedora-chromium-config-1.1-11.fc33 (FEDORA-2021-ac55c73042)
Fedora customizations for Chromium/Chrome
--------------------------------------------------------------------------------
Update Information:
Fix the typo in the name that was preventing the policy to work properly.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Tomas Popela <tpopela(a)redhat.com> - 1.1-11
- Fix the AuthServerAllowlist policy name - see rhbz#1965130
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965130 - Incorrect policy name in 00_gssapi.json
https://bugzilla.redhat.com/show_bug.cgi?id=1965130
--------------------------------------------------------------------------------
================================================================================
fillets-ng-1.0.1-26.fc33 (FEDORA-2021-720cff7596)
Fish Fillets Next Generation, a puzzle game with 70 levels
--------------------------------------------------------------------------------
Update Information:
Rebuilt
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 19 2021 Nikolay Nikolov <nickysn(a)gmail.com> - 1.0.1-26
- Documented the patches
- Replaced make %{?_smp_mflags} with %make_build
- Replaced make install DESTDIR=%{buildroot} with %make_install
- Replaced %{__mkdir_p} with mkdir -p
- Replaced %{__install} with install
* Thu Apr 29 2021 Nikolay Nikolov <nickysn(a)gmail.com> - 1.0.1-25
- Added BuildRequires: make
- Don't use macro for invoking make
- Replaced BuildRequires: /usr/bin/appstream-util with libappstream-glib
- Replaced $RPM_BUILD_ROOT with %{buildroot} for consistency
- Use %{_metainfodir} instead of %{_datadir}/appdata
- Source URL switched to https
* Thu Apr 29 2021 Nikolay Nikolov <nickysn(a)gmail.com> - 1.0.1-24
- Fixed compilation with lua 5.4
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-23
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1863555 - fillets-ng: FTBFS in Fedora rawhide/f33
https://bugzilla.redhat.com/show_bug.cgi?id=1863555
--------------------------------------------------------------------------------
================================================================================
libxcrypt-4.4.22-1.fc33 (FEDORA-2021-fed63bd217)
Extended crypt library for descrypt, md5crypt, bcrypt, and others
--------------------------------------------------------------------------------
Update Information:
- New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.22-1
- New upstream release
* Wed May 26 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.21-1
- New upstream release
* Wed May 19 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 4.4.20-3
- Run test for glibc compatibility symbols
- Run a build with all possible tests enabled
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965149 - Live images built with libxcrypt 4.4.21 fail to reach login screen
https://bugzilla.redhat.com/show_bug.cgi?id=1965149
--------------------------------------------------------------------------------
================================================================================
mingw-openjpeg2-2.3.1-12.fc33 (FEDORA-2021-e145f477df)
MinGW Windows openjpeg2 library
--------------------------------------------------------------------------------
Update Information:
Add proposed patches for CVE-2021-29338 and a heap buffer overflow.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-12
- Apply proposed patches for CVE-2021-29338 and a heap buffer overflow (#1957616)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950103 - CVE-2021-29338 mingw-openjpeg2: openjpeg2: out-of-bounds write due
to an integer overflow in opj_compress.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1950103
[ 2 ] Bug #1950105 - CVE-2021-29338 openjpeg2: out-of-bounds write due to an integer
overflow in opj_compress.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1950105
[ 3 ] Bug #1957618 - openjpeg2: openjpeg: heap-buffer-overflow in color.c may lead to
DoS or arbitrary code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1957618
--------------------------------------------------------------------------------
================================================================================
netdata-1.31.0-1.fc33 (FEDORA-2021-daefe738c3)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 19 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.31.0-1
- Update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1962419 - netdata-1.31.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1962419
--------------------------------------------------------------------------------
================================================================================
openjpeg2-2.3.1-11.fc33 (FEDORA-2021-e145f477df)
C-Library for JPEG 2000
--------------------------------------------------------------------------------
Update Information:
Add proposed patches for CVE-2021-29338 and a heap buffer overflow.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Sandro Mani <manisandro(a)gmail.com> - 2.3.1-11
- Apply proposed patches for CVE-2021-29338 and a heap buffer overflow (#1957616)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950103 - CVE-2021-29338 mingw-openjpeg2: openjpeg2: out-of-bounds write due
to an integer overflow in opj_compress.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1950103
[ 2 ] Bug #1950105 - CVE-2021-29338 openjpeg2: out-of-bounds write due to an integer
overflow in opj_compress.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1950105
[ 3 ] Bug #1957618 - openjpeg2: openjpeg: heap-buffer-overflow in color.c may lead to
DoS or arbitrary code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1957618
--------------------------------------------------------------------------------
================================================================================
pcm-202105-1.fc33 (FEDORA-2021-317a06a3a4)
Processor Counter Monitor
--------------------------------------------------------------------------------
Update Information:
new package Processor Counter Monitor (PCM)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1949058 - Review Request: pcm - Processor Counter Monitor
https://bugzilla.redhat.com/show_bug.cgi?id=1949058
--------------------------------------------------------------------------------
================================================================================
perl-DateTime-Format-Flexible-0.33-1.fc33 (FEDORA-2021-b614ac8587)
Flexibly parse strings and turn them into DateTime objects
--------------------------------------------------------------------------------
Update Information:
This release fixes a memory leak.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Petr Pisar <ppisar(a)redhat.com> - 0.33-1
- 0.33 bump
- Package the tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965188 - perl-DateTime-Format-Flexible-0.33 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1965188
--------------------------------------------------------------------------------
================================================================================
perl-Graphics-TIFF-13-1.fc33 (FEDORA-2021-04ba9ae6f8)
Perl extension for the LibTIFF library
--------------------------------------------------------------------------------
Update Information:
This release improvices tests and fixes a build script for non-Linux platforms.
We deliver it mainly to provide an up-to-date version string.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Petr Pisar <ppisar(a)redhat.com> - 13-1
- 13 version bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965222 - perl-Graphics-TIFF-13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1965222
--------------------------------------------------------------------------------
================================================================================
python-rpmautospec-0.2.1-1.fc33 (FEDORA-2021-ba8a702f6e)
Package and CLI tool to generate release fields and changelogs
--------------------------------------------------------------------------------
Update Information:
Version 0.2.1 with new release and changelog algorithm.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Nils Philippsen <nils(a)redhat.com> - 0.2.1-1
- Update to 0.2.1
* Thu May 27 2021 Stephen Coady <scoady(a)redhat.com> - 0.2.0-1
- Update to 0.2.0
* Thu May 27 2021 Nils Philippsen <nils(a)redhat.com>
- don't ship obsolete Koji configuration snippet
* Wed May 19 2021 Nils Philippsen <nils(a)redhat.com>
- remove git-core, fix RPM related dependencies
* Wed May 12 2021 Nils Philippsen <nils(a)redhat.com>
- depend on python3-pygit2
* Thu Apr 22 2021 Nils Philippsen <nils(a)redhat.com>
- remove the hub plugin
--------------------------------------------------------------------------------
================================================================================
realtime-setup-2.2-3.fc33 (FEDORA-2021-4c146bfa1b)
Setup RT/low-latency environment details
--------------------------------------------------------------------------------
Update Information:
Fix pidfile naming error due to package rename ---- Fix service file using
wrong filename for realtime-entsk task
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 26 2021 Clark Williams <williams(a)redhat.com> - 2.2-3
- pidfile error from renaming. Resolves rhbz##1891048
* Thu May 20 2021 Clark Williams <williams(a)redhat.com> - 2.2-2
- Cgroupv2 fix. Resolves rhbz#1891048
* Wed May 19 2021 Clark Williams <williams(a)redhat.com> - 2.2-1
- Fix realtime-entsk.service using wrong image. Resolves rhbz#1891048
* Fri May 14 2021 Clark Williams <williams(a)redhat.com> - 2.1-4
- Sync RHEL 9 and Fedora versions
* Fri Apr 16 2021 Mohan Boddu <mboddu(a)redhat.com> - 2.1-3
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rpi-imager-1.6.2-1.fc33 (FEDORA-2021-b8cbd4838e)
Graphical user-interface to write disk images and format SD cards
--------------------------------------------------------------------------------
Update Information:
New upstream release ---- Updated runtime dependencies
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 K. de Jong <keesdejong(a)fedoraproject.org> - 1.6.2-1
- New upstream release
* Mon May 24 2021 K. de Jong <keesdejong(a)fedoraproject.org> - 1.6.1-2
- Updated runtime dependencies
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1964130 - Runtime dependencies are missing
https://bugzilla.redhat.com/show_bug.cgi?id=1964130
[ 2 ] Bug #1965131 - rpi-imager-1.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1965131
--------------------------------------------------------------------------------
================================================================================
usbredir-0.10.0-1.fc33 (FEDORA-2021-24dd0fa996)
USB network redirection protocol libraries
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Victor Toso <victortoso(a)redhat.com> - 0.10.0-1
- Update to 0.10.0
- Now uses meson to build
--------------------------------------------------------------------------------
================================================================================
wireshark-3.4.5-1.fc33 (FEDORA-2021-67691ad99d)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
New version 3.4.5, Fix for CVE-2021-22207.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 27 2021 Michal Ruprich <mruprich(a)redhat.com> - 1:3.4.5-1
- New version 3.4.5
- Fix for CVE-2021-22207
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1952215 - wireshark-3.4.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1952215
[ 2 ] Bug #1952965 - CVE-2021-22207 wireshark: MS-WSP dissector excessive memory
consumption [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1952965
--------------------------------------------------------------------------------