The following Fedora 33 Security updates need testing:
Age URL
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1a8e93a285 libldb-2.2.1-1.fc33
samba-4.13.7-0.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-90e915cc4f
spamassassin-3.4.5-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-864dc37032
webkit2gtk3-2.32.0-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b67623d93
libmediainfo-21.03-1.fc33 libzen-0.4.39-1.fc33 mediaconch-18.03.2-17.fc33
mediainfo-21.03-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-be62be8c7c
perl-Net-Netmask-2.0001-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6993c96e1b
libgee-0.20.4-1.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1a8e93a285 libldb-2.2.1-1.fc33
samba-4.13.7-0.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-864dc37032
webkit2gtk3-2.32.0-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c51adcf0c0
wpebackend-fdo-1.8.3-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f0e6810501
libkcapi-1.2.1-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b854921cd9 taglib-1.12-4.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f16b6e66dd
authselect-1.2.3-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
appstream-data-33-2.fc33
composer-2.0.12-1.fc33
crun-0.18-5.fc33
curl-7.71.1-9.fc33
fapolicyd-1.0.3-1.fc33
foliate-2.6.3-1.fc33
golang-github-aliyun-ossutil-1.7.2-1.fc33
group-service-1.3.0-1.fc33
knot-resolver-5.3.1-1.fc33
mate-user-admin-1.6.0-1.fc33
mesa-20.3.5-2.fc33
mozilla-noscript-11.2.4-1.fc33
mozilla-ublock-origin-1.34.0-1.fc33
netdata-1.30.0-1.fc33
openqa-4.6-62.20210401git0e542b6.fc33
openttd-1.11.0-1.fc33
openttd-opengfx-0.6.1-1.fc33
os-autoinst-4.6-34.20210326git24ec8f9.fc33
packit-0.28.0-1.fc33
paternoster-3.3.0-2.fc33
perl-Mojolicious-8.73-1.fc33
perl-Mojolicious-Plugin-AssetPack-2.10-1.fc33
php-phpmailer6-6.4.0-1.fc33
psi4-1.3.2-10.fc33
python-pikepdf-1.19.4-2.fc33
python-pyfastnoisesimd-0.4.2-1.fc33
rsms-inter-fonts-3.18-1.fc33
squid-4.14-1.fc33
vdr-osdteletext-1.1.1-1.fc33
youtube-dl-2021.04.01-1.fc33
Details about builds:
================================================================================
appstream-data-33-2.fc33 (FEDORA-2021-ae83f20d82)
Fedora AppStream metadata
--------------------------------------------------------------------------------
Update Information:
New metadata version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 31 2021 Richard Hughes <richard(a)hughsie.com> 33-2
- New metadata version
--------------------------------------------------------------------------------
================================================================================
composer-2.0.12-1.fc33 (FEDORA-2021-1d31ac8d62)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.12** 2021-04-01 * Fixed support for new GitHub OAuth token
format (#9757) * Fixed support for Vagrant/VirtualBox filesystem slowness by
adding short sleeps in some places (#9627) * Fixed unclear error reporting
when a package is in the lock file but not in the remote repositories (#9750)
* Fixed processes silently ignoring the CWD when it does not exist * Fixed new
Windows bin handling to avoid proxying phar files (#9742) * Fixed issue
extracting archives into paths that already exist, fixing problems with some
custom installers (composer/installers#479) * Fixed support for branch names
starting with master/trunk/default (#9739) * Fixed self-update to preserve
phar file permissions on Windows (#9733) * Fixed detection of hg version when
localized (#9753) * Fixed git execution failures to also include the stdout
output (#9720)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Remi Collet <remi(a)remirepo.net> - 2.0.12-1
- update to 2.0.12
--------------------------------------------------------------------------------
================================================================================
crun-0.18-5.fc33 (FEDORA-2021-5b5387a0eb)
OCI runtime written in C
--------------------------------------------------------------------------------
Update Information:
linux: always remount bind mounts ghpr#640
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 31 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.18-5
- linux: always remount bind mounts ghpr#640
--------------------------------------------------------------------------------
================================================================================
curl-7.71.1-9.fc33 (FEDORA-2021-cab5c9befb)
A utility for getting files from remote servers (FTP, HTTP, and others)
--------------------------------------------------------------------------------
Update Information:
- fix TLS 1.3 session ticket proxy host mixup (CVE-2021-22890) - prevent
automatic referer from leaking credentials (CVE-2021-22876)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 31 2021 Kamil Dudka <kdudka(a)redhat.com> - 7.71.1-9
- fix TLS 1.3 session ticket proxy host mixup (CVE-2021-22890)
- prevent automatic referer from leaking credentials (CVE-2021-22876)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945058 - CVE-2021-22876 curl: Leak of authentication credentials in URL via
automatic Referer [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1945058
[ 2 ] Bug #1945059 - CVE-2021-22890 curl: TLS 1.3 session ticket mix-up with HTTPS proxy
host [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1945059
--------------------------------------------------------------------------------
================================================================================
fapolicyd-1.0.3-1.fc33 (FEDORA-2021-d014411e82)
Application Whitelisting Daemon
--------------------------------------------------------------------------------
Update Information:
rebase to 1.0.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Radovan Sroka <rsroka(a)redhat.com> - 1.0.3-1
- rebase to 1.0.3
- sync fedora with rhel
--------------------------------------------------------------------------------
================================================================================
foliate-2.6.3-1.fc33 (FEDORA-2021-7ff5222614)
Simple and modern GTK eBook reader
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.6.3-1
- build(update): 2.6.3
* Fri Mar 26 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.6.2-1
- build(update): 2.6.2
--------------------------------------------------------------------------------
================================================================================
golang-github-aliyun-ossutil-1.7.2-1.fc33 (FEDORA-2021-03dec85d1c)
Alibaba Cloud (Aliyun) Object Storage Service (OSS) CLI
--------------------------------------------------------------------------------
Update Information:
Update to version 1.7.2 (Fixes rhbz#1942623)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 24 2021 Brandon Perkins <bperkins(a)redhat.com> - 1.7.2-1
- Update to version 1.7.2 (Fixes rhbz#1942623)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1942623 - golang-github-aliyun-ossutil-1.7.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1942623
--------------------------------------------------------------------------------
================================================================================
group-service-1.3.0-1.fc33 (FEDORA-2021-eec471fe40)
Dbus Group management CLI tool
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.3.0-1
- update to 1.3.0
--------------------------------------------------------------------------------
================================================================================
knot-resolver-5.3.1-1.fc33 (FEDORA-2021-967132b492)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
update to upstream version 5.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.3.1-1
- update to upstream version 5.3.1
--------------------------------------------------------------------------------
================================================================================
mate-user-admin-1.6.0-1.fc33 (FEDORA-2021-eec471fe40)
User management tool
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream releases
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.6.0-1
- update to 1.6.0
--------------------------------------------------------------------------------
================================================================================
mesa-20.3.5-2.fc33 (FEDORA-2021-d4e1d2c820)
Mesa graphics libraries
--------------------------------------------------------------------------------
Update Information:
Backport CPU affinity fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Dave Airlie <airlied(a)redhat.com> - 20.3.5-2
- Backport CPU affinity fixes.
--------------------------------------------------------------------------------
================================================================================
mozilla-noscript-11.2.4-1.fc33 (FEDORA-2021-7b1ab9ef3f)
JavaScript white list extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
* CSS resources prefetching as a mitigation against CSS PP0
(
https://github.com/Yossioren/pp0) * [L10n] Updated bn, br, ca, da, de, el, es,
fr, he, is, it, ja, lt, mk, ms, nb, nl, pl, pt_BR, ru, sq, sv_SE, tr, zh_CN,
zh_TW. * [nscl] Inteception of webgl context creation in OffscreenCanvas too *
Fixed configuration upgrades not applied on manual updates (thanks Nan for
reporting) * Mitigation for misbehaving pages repeating failed requests in a
tight loop * [UI] More understandable label for the cascading restrictions
option * [nscl] More refactoring out in NoScript Commons Library * [nscl]
patchWindow improvements * [L10n] Purged non-inclusive terms from obsolete
messages * Added red halo feedback in CUSTOM preset for noscript element
capability * Fixed missing red halo feedback in CUSTOM preset for inline scripts
and other capabilities sometimes * Fixed race condition causing noscript
elements not to be rendered sometimes * Fixed typo in version checked on
noscript capability update. * Configurable capability to show noscript elements
on script-disabled pages * [UI] Minor CSS Chromium compatibility fix * [nscl]
Refactoring to use Policy and its dependencies from the NoScript Commons Library
* Switch to faster and easier to maintain tld.js from nscl * [UI] Fix punycode
inconsistencies * [UI] improve preset and site controls alignment * Provide
feedback in the CUSTOM tab for WebGL usage attempts even if the canvas element
is not attached to the DOM * Updated HTML events * Prevent double script on
trusted file:// pages in some edge cases * Prevent detection of wrapped
functions (e.g. in WebGL interception) on Chromium
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Dominik Mierzejewski <rpm(a)greysector.net> - 11.2.4-1
- update to 11.2.4 (#1928639)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928639 - mozilla-noscript-11.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1928639
--------------------------------------------------------------------------------
================================================================================
mozilla-ublock-origin-1.34.0-1.fc33 (FEDORA-2021-3e6d9d7d65)
An efficient blocker for Firefox
--------------------------------------------------------------------------------
Update Information:
* Picker glitch with elements with special characters in their tag name * Expose
CNAME-uncloaking as a Privacy option in the Settings pane * Impossible to add
explicit exception for implicit strict blocking * Invalid network filters
suggested in element picker * Use +/- in the popup to indicate whether 3-p
frames were blocked * Fix no-scripting switch not working for SVG-based
documents * Fix 'adsbygoogle' neutered script * Inject procedural cosmetic
filterer's code only when needed
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Dominik Mierzejewski <rpm(a)greysector.net> - 1.34.0-1
- update to 1.34.0 (#1925264)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1925264 - mozilla-ublock-origin-1.34.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1925264
--------------------------------------------------------------------------------
================================================================================
netdata-1.30.0-1.fc33 (FEDORA-2021-68d80f1e4c)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.30.0-1
- Update from upstream
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.29.3-2
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945409 - netdata-1.30.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1945409
--------------------------------------------------------------------------------
================================================================================
openqa-4.6-62.20210401git0e542b6.fc33 (FEDORA-2021-49c70973a4)
OS-level automated testing framework
--------------------------------------------------------------------------------
Update Information:
This update provides recent upstream git snapshots of openQA and os-autoinst,
and updated versions of Mojolicious and Mojolicious-Plugin-AssetPack because a
test fails without them. Those updates should not contain any incompatibilities
compared to the current stable versions. This update will not be pushed stable
until it has been tested on the Fedora staging instance of openQA for a while.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Adam Williamson <awilliam(a)redhat.com> - 4.6-62.20210401git0e542b6
- Bump to latest git, re-sync spec with upstream
- Backport PR #3816: compatibility with Mojolicious 9.11+
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
4.6-61.20201103git91baf79
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
4.6-60.20201103git91baf79
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openttd-1.11.0-1.fc33 (FEDORA-2021-684c196af6)
Transport system simulation game
--------------------------------------------------------------------------------
Update Information:
With 1.11 we bring you a lot of new features which you hopefully enjoy as much
as we did creating them: - Performance improvements - Fast-Forward is now so
fast, there is a setting to rate limit it (on by default). - Improved World
Generation GUI - 100% rainforest maps are now available if you so request. -
Towns can now grow with tunnels too - finally they can escape the hills! -
Filter on name in many more windows - for those that enjoy playing with one too
many NewGRFs. - Plant trees with a brush in Scenario Editor - it is like
painting, but with trees. - A new titlegame for this release by Chrnan6710, who
won this year���s competition.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Felix Kaechele <felix(a)kaechele.ca> - 1.11.0-1
- update to 1.11.0 final
* Mon Mar 15 2021 Felix Kaechele <felix(a)kaechele.ca> - 1.11.0-0.2.RC1
- update to 1.11.0-RC1
- replace timidity with fluidsynth to allow for ingame sound control
* Mon Mar 8 2021 Felix Kaechele <felix(a)kaechele.ca> - 1.11.0-0.1.beta2
- update to 1.11.0-beta2
- switch to cmake build system
- remove BR on ccache, libtimidity, unzip; no longer needed
- update screenshots and indentation in appdata.xml
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openttd-opengfx-0.6.1-1.fc33 (FEDORA-2021-85d299cf8c)
OpenGFX replacement graphics for OpenTTD
--------------------------------------------------------------------------------
Update Information:
- Add: GUI sprites for OpenTTD 1.11 - Change: New Arctic hotel design (supermop)
- Fix: Correct offsets for toy factory
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Felix Kaechele <felix(a)kaechele.ca> - 0.6.1-1
- update to 0.6.1
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
os-autoinst-4.6-34.20210326git24ec8f9.fc33 (FEDORA-2021-49c70973a4)
OS-level test automation
--------------------------------------------------------------------------------
Update Information:
This update provides recent upstream git snapshots of openQA and os-autoinst,
and updated versions of Mojolicious and Mojolicious-Plugin-AssetPack because a
test fails without them. Those updates should not contain any incompatibilities
compared to the current stable versions. This update will not be pushed stable
until it has been tested on the Fedora staging instance of openQA for a while.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 30 2021 Adam Williamson <awilliam(a)redhat.com> - 4.6-34.20210326git24ec8f9
- Bump to latest git, resync spec
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> -
4.6-33.20210210git496edb5
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Wed Feb 10 2021 Adam Williamson <awilliam(a)redhat.com> - 4.6-32.20210210git496edb5
- Bump to latest git again (inc. correct fix for a test issue)
* Tue Feb 9 2021 Adam Williamson <awilliam(a)redhat.com> - 4.6-31.20210209git2e2b378
- Bump to latest git, resync spec
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
4.6-30.20201023gitf54bdea
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
packit-0.28.0-1.fc33 (FEDORA-2021-5d6df025e6)
A tool for integrating upstream projects with Fedora operating system
--------------------------------------------------------------------------------
Update Information:
new upstream release 0.28.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 31 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
0.28.0-1
- Remove the no-op `--dry-run` option.
- Handle `centos-stream` targets as `centos-stream-8`, in order to help with the name
change in Copr.
- `fmf_url` and `fmf_ref` can be used in a job's `metadata` to specify an external
repository and reference to be used to test the package.
- Introduce a `fedora-latest` alias for the latest _branched_ version of Fedora Linux.
- Add a top-level option `-c, --config` to specify a custom path for the package
configuration (aka `packit.yaml`).
- Source-git: enable using CentOS Stream 9 dist-git as a source.
- Source-git: rename the subdirectory to store downstream packaging files from `fedora` to
the more general `.distro`.
- Source-git: fix creating source-git repositories when Git is configured to call the
default branch something other then `master`.
--------------------------------------------------------------------------------
================================================================================
paternoster-3.3.0-2.fc33 (FEDORA-2021-668fa6fa0f)
Allows to run ansible playbooks like ordinary python or bash scripts
--------------------------------------------------------------------------------
Update Information:
Fix minor details from package review.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1941638 - Review Request: paternoster - Allows to run ansible playbooks like
ordinary scripts
https://bugzilla.redhat.com/show_bug.cgi?id=1941638
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-8.73-1.fc33 (FEDORA-2021-49c70973a4)
A next generation web framework for Perl
--------------------------------------------------------------------------------
Update Information:
This update provides recent upstream git snapshots of openQA and os-autoinst,
and updated versions of Mojolicious and Mojolicious-Plugin-AssetPack because a
test fails without them. Those updates should not contain any incompatibilities
compared to the current stable versions. This update will not be pushed stable
until it has been tested on the Fedora staging instance of openQA for a while.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 7 2021 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.73-1
- Update to 8.73
* Sun Jan 31 2021 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.72-1
- Update to 8.72
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.71-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sun Jan 17 2021 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.71-1
- Update to 8.71
* Sun Jan 3 2021 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.70-1
- Update to 8.70
* Sun Dec 6 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.67-1
- Update to 8.67
* Sun Nov 15 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.65-1
- Update to 8.65
* Sun Nov 8 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.64-1
- Update to 8.64
* Sun Oct 18 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.63-1
- Update to 8.63
* Sun Oct 4 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.61-1
- Update to 8.61
* Sun Sep 27 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.60-1
- Update to 8.60
* Sun Sep 13 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.59-1
- Update to 8.59
* Sun Aug 16 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 8.58-1
- Update to 8.58
--------------------------------------------------------------------------------
================================================================================
perl-Mojolicious-Plugin-AssetPack-2.10-1.fc33 (FEDORA-2021-49c70973a4)
Compress and convert CSS, Less, Sass, JavaScript and CoffeeScript files
--------------------------------------------------------------------------------
Update Information:
This update provides recent upstream git snapshots of openQA and os-autoinst,
and updated versions of Mojolicious and Mojolicious-Plugin-AssetPack because a
test fails without them. Those updates should not contain any incompatibilities
compared to the current stable versions. This update will not be pushed stable
until it has been tested on the Fedora staging instance of openQA for a while.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 13 2020 Emmanuel Seyman <emmanuel(a)seyman.fr> - 2.10-1
- Update to 2.10
- Replace %{__perl} with /usr/bin/perl
- Use %{make_install} instead of "make pure_install"
- Use %{make_build} instead of make
- Pass NO_PERLLOCAL to Makefile.PL
--------------------------------------------------------------------------------
================================================================================
php-phpmailer6-6.4.0-1.fc33 (FEDORA-2021-ef57ae5ecd)
Full-featured email creation and transfer class for PHP
--------------------------------------------------------------------------------
Update Information:
**PHPMailer 6.4.0** This is a maintenance release. The changes introduced in
6.3.0 for setting an envelope sender automatically when using mail() caused
problems, especially in WordPress, so this change has been reverted. It gets a
minor version bump as it's a change in behaviour, but only back to what 6.2.0
did. Other changes: * Check for the mbstring extension before decoding
addresss in parseAddress, so it won't fail if you don't have it installed *
Add Serbian Latin translation (sr_latn) * Enrol PHPMailer in Tidelift,
because supporting open-source is important!
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Remi Collet <remi(a)remirepo.net> - 6.4.0-1
- update to 6.4.0
- php-imap is optional
--------------------------------------------------------------------------------
================================================================================
psi4-1.3.2-10.fc33 (FEDORA-2021-a5caa44bb7)
An ab initio quantum chemistry package
--------------------------------------------------------------------------------
Update Information:
psi4 can now be imported as a Python module.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 31 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 1:1.3.2-10
- Make the psi4 Python module importable.
- Remove rpath.
--------------------------------------------------------------------------------
================================================================================
python-pikepdf-1.19.4-2.fc33 (FEDORA-2021-4bf9909a76)
Read and write PDFs with Python, powered by qpdf
--------------------------------------------------------------------------------
Update Information:
Security fix for XXE vulnerability
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.19.4-2
- Backport fix for qpdf 10.1.0
- Backport fix for XXE vulnerability (#1945365)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1945364 - python-pikepdf: XML External Entity processing vulnerability in PDF
XMP metadata parsing
https://bugzilla.redhat.com/show_bug.cgi?id=1945364
--------------------------------------------------------------------------------
================================================================================
python-pyfastnoisesimd-0.4.2-1.fc33 (FEDORA-2021-d4ce5e27eb)
Python Fast Noise with SIMD
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 31 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.4.2-1
- Update to latest version (#1944953)
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.1-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1944953 - python-pyfastnoisesimd-0.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1944953
--------------------------------------------------------------------------------
================================================================================
rsms-inter-fonts-3.18-1.fc33 (FEDORA-2021-d8a56d9c2a)
The Inter font family
--------------------------------------------------------------------------------
Update Information:
Changes since v3.17: * Adjusts vertical metrics metadata to that of v3.15 and
older. This should fix any vertical alignment issues that might have occurred
with v3.17. [#361](https://github.com/rsms/inter/issues/361) * Fixes several
issues with italics introduced by Glyphs 3 upgrade: * Fixes an issue with
backslash in Italic masters. [#362](https://github.com/rsms/inter/issues/362)
* Fixes issues with afii10026 and uni0376 in italic masters * Fixes issue
with italic q U+0071 by inlining the shape instead of using components.
[#360](https://github.com/rsms/inter/issues/360) * Fixes issue with U+035E
COMBINING DOUBLE MACRON and U+20F0 COMBINING ASTERISK ABOVE in Thin Italic.
[#363](https://github.com/rsms/inter/issues/363) * Fixes positioning issue with
U+0358 COMBINING DOT ABOVE RIGHT * Improvements to U+20DC COMBINING FOUR DOTS
ABOVE and U+20DB COMBINING THREE DOTS ABOVE * Improvements to U+204E LOW
ASTERISK * Improved positioning via mark anchors of combining glyphs U+20F0,
U+035E and U+035F. [#363](https://github.com/rsms/inter/issues/363) * Changes
glyph shape of Latin upper-case iota.
[#359](https://github.com/rsms/inter/issues/359) * Improved glyph composition
via ccmp for enclosed glyphs like U+0041,U+20DD.
[#335](https://github.com/rsms/inter/issues/335) ---- Addresses a major
regression in v3.16 where several italic glyphs got messed up due to a Glyphs 3
version upgrade of the source file. This only affected users of v3.16 which was
only released for about 12 hours before being replaced with this release v3.17.
[#360](https://github.com/rsms/inter/issues/360) ---- * Fixes issues with
appearance in Microsoft Word. [#352](https://github.com/rsms/inter/issues/352)
(note that [#156](https://github.com/rsms/inter/issues/156) is still unresolved
although we have made some progress in v3.16 toward developing workarounds for
certain printers.) * Fixes double grave interpolation issue.
[#317](https://github.com/rsms/inter/issues/317) * Fixes design issue with
glyphs acutedblnosp, dblgravecmb, uni02F6 and uni02F5.
[#339](https://github.com/rsms/inter/issues/339) * Fixes missing or incorrect
mark anchors in several turn* glyphs.
[#336](https://github.com/rsms/inter/issues/336) * Adds Baht currency glyph
U+0E3F. [#323](https://github.com/rsms/inter/issues/323) * Improvement to
Latin iota (lower and upper case) glyphs.
[#340](https://github.com/rsms/inter/issues/340) * Improvement to some
numerical fraction glyphs * Adds a dummy DSIG table to address issues with
Microsoft Office 2003 and older * Improvements when using Inter with certain
older Microsoft products by decomposing any nested components which some of that
software has issues with
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.18-1
- Update to 3.18
* Tue Mar 30 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.17-1
- Update to 3.17
* Mon Mar 29 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 3.16-1
- Update to 3.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1944063 - rsms-inter-fonts-3.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1944063
[ 2 ] Bug #1944479 - rsms-inter-fonts-3.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1944479
[ 3 ] Bug #1945591 - rsms-inter-fonts-3.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1945591
--------------------------------------------------------------------------------
================================================================================
squid-4.14-1.fc33 (FEDORA-2021-7d86bec29e)
The Squid proxy caching server
--------------------------------------------------------------------------------
Update Information:
- Version update to 4.14 - CVE-2020-25097 fix
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 31 2021 Lubos Uhliarik <luhliari(a)redhat.com> - 7:4.14-1
- new version 4.14
- Resolves: #1939927 - CVE-2020-25097 squid: improper input validation may allow
a trusted client to perform HTTP Request Smuggling
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7:4.13-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sat Oct 17 2020 Jeff Law <law(a)redhat.com> - 7:4.13-2
- Fix missing #includes for gcc-11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1939927 - CVE-2020-25097 squid: improper input validation may allow a trusted
client to perform HTTP Request Smuggling [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1939927
--------------------------------------------------------------------------------
================================================================================
vdr-osdteletext-1.1.1-1.fc33 (FEDORA-2021-ee099f87ee)
OSD teletext plugin for VDR
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1-1 ---- Update to 1.1.0-1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1.1.1-1
- Update to 1.1.1
* Fri Mar 26 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1.1.0-1
- Update to 1.1.0
--------------------------------------------------------------------------------
================================================================================
youtube-dl-2021.04.01-1.fc33 (FEDORA-2021-70e66ef00c)
A small command-line program to download online videos
--------------------------------------------------------------------------------
Update Information:
Update to version 2021.04.01
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 1 2021 David Schw��rer <davidsch(a)fedoraproject.org> - 2021.04.01-1
- Update to 2021.04.01
* Wed Mar 31 2021 David Schw��rer <davidsch(a)fedoraproject.org> - 2021.03.31-1
- Update to 2021.03.31
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1942756 - youtube-dl-2021.04.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1942756
--------------------------------------------------------------------------------