The following Fedora 33 Security updates need testing:
Age URL
114
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5d21b90a30
curl-7.71.1-10.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3de956ceee
webkit2gtk3-2.32.3-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd8990b3b4 bluez-5.60-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-17f5cedf66
mod_auth_openidc-2.4.9-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
132
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
68
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-49d6a73d5b
libidn2-2.3.2-1.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5d21b90a30
curl-7.71.1-10.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3de956ceee
webkit2gtk3-2.32.3-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9018e4684b
mtools-4.0.34-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd8990b3b4 bluez-5.60-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a394082d01
btrfs-progs-5.13.1-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-72e9c8074e
net-snmp-5.9.1-4.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-63a2641b13
kernel-5.13.7-100.fc33
The following builds have been pushed to Fedora 33 updates-testing
CFR-0.151-3.fc33
OpenIPMI-2.0.31-7.fc33
buildah-1.21.4-5.fc33
containernetworking-plugins-1.0.0-0.3.rc1.fc33
fedora-review-plugin-java-4.6.1-10.fc33
golang-github-google-pprof-0-14.20210802gitc50bf4f.fc33
hivex-1.3.21-1.fc33
hwdata-0.350-1.fc33
klee-2.2-1.fc33
mame-0.234-1.fc33
monocypher-3.1.2-1.fc33
perl-CPAN-Perl-Releases-5.20210722-1.fc33
perl-Module-CoreList-5.20210723-1.fc33
perl-experimental-0.025-1.fc33
php-composer-xdebug-handler2-2.0.2-1.fc33
php-sebastian-diff3-3.0.3-4.fc33
phpunit8-8.5.19-1.fc33
phpunit9-9.5.8-1.fc33
podman-3.2.3-2.fc33
python-scikit-uplift-0.3.2-1.fc33
python-tqdm-4.62.0-1.fc33
qsstv-9.5.7-1.fc33
redhat-rpm-config-176-2.fc33
sylpheed-3.7.0-10.fc33
vim-8.2.3273-1.fc33
Details about builds:
================================================================================
CFR-0.151-3.fc33 (FEDORA-2021-995774146d)
CFR - Another Java Decompiler
--------------------------------------------------------------------------------
Update Information:
Initial release
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
OpenIPMI-2.0.31-7.fc33 (FEDORA-2021-3957b5ef7a)
IPMI (Intelligent Platform Management Interface) library and tools
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS and collectd-ipmi crash
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Josef Ridky <jrikdy(a)redhat.com> - 2.0.31-7
- replace distutils and fix FTBFS (#1948437)
- fix collectd-ipmi crash (#1927022)
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.31-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 2.0.31-5
- Rebuilt for Python 3.10
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.0.31-4
- Perl 5.34 rebuild
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 2.0.31-3
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1927022 - collectd-ipmi causes core dump
https://bugzilla.redhat.com/show_bug.cgi?id=1927022
[ 2 ] Bug #1948437 - OpenIPMI fails to build with Python 3.10: configure: error: cannot
import Python module "distutils".
https://bugzilla.redhat.com/show_bug.cgi?id=1948437
[ 3 ] Bug #1977589 - OpenIPMI-2.0.31-4.fc35 FTBFS: configure: error: cannot import
Python module "distutils"
https://bugzilla.redhat.com/show_bug.cgi?id=1977589
--------------------------------------------------------------------------------
================================================================================
buildah-1.21.4-5.fc33 (FEDORA-2021-ffa749f7f7)
A command line tool used for creating OCI Images
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-34558
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.21.4-5
- Resolves: #1983596, #1987738 - Security fix for CVE-2021-34558
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1983596 - CVE-2021-34558 golang: crypto/tls: certificate of wrong type is
causing TLS client to panic
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
--------------------------------------------------------------------------------
================================================================================
containernetworking-plugins-1.0.0-0.3.rc1.fc33 (FEDORA-2021-54f88bebd4)
Libraries for writing CNI plugin
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-34558
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.0.0-0.3.rc1
- Resolves: #1983596, #1987737 - Security fix for CVE-2021-34558
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1983596 - CVE-2021-34558 golang: crypto/tls: certificate of wrong type is
causing TLS client to panic
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
--------------------------------------------------------------------------------
================================================================================
fedora-review-plugin-java-4.6.1-10.fc33 (FEDORA-2021-d47d4d04df)
Java plugin for FedoraReview
--------------------------------------------------------------------------------
Update Information:
Bring back fedora-review-plugin-java
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1217904 - pep8/pylint fixes
https://bugzilla.redhat.com/show_bug.cgi?id=1217904
[ 2 ] Bug #1256390 - Complaint about jpackage-utils is out of date
https://bugzilla.redhat.com/show_bug.cgi?id=1256390
--------------------------------------------------------------------------------
================================================================================
golang-github-google-pprof-0-14.20210802gitc50bf4f.fc33 (FEDORA-2021-5558e07441)
Tool for visualization and analysis of profiling data
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS Close: rhbz#1987525
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-14
- Fix FTBFS Close: rhbz#1987525
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1987525 - golang-github-google-pprof: FTBFS in Fedora rawhide/f35
https://bugzilla.redhat.com/show_bug.cgi?id=1987525
--------------------------------------------------------------------------------
================================================================================
hivex-1.3.21-1.fc33 (FEDORA-2021-775b170f95)
Read and write Windows Registry binary hive files
--------------------------------------------------------------------------------
Update Information:
New upstream version 1.3.21. Fixes CVE-2021-3622 limit recursion in ri-records.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Richard W.M. Jones <rjones(a)redhat.com> - 1.3.21-1
- New upstream version 1.3.21.
- Fixes CVE-2021-3622 limit recursion in ri-records.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1975489 - CVE-2021-3622 hivex: stack overflow due to recursive call of
_get_children()
https://bugzilla.redhat.com/show_bug.cgi?id=1975489
--------------------------------------------------------------------------------
================================================================================
hwdata-0.350-1.fc33 (FEDORA-2021-9dc8abdee1)
Hardware identification and configuration data
--------------------------------------------------------------------------------
Update Information:
Update pci, usb and vendor ids
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 0.350-1
- Update pci, usb and vendor ids
--------------------------------------------------------------------------------
================================================================================
klee-2.2-1.fc33 (FEDORA-2021-691ccd4fa8)
Symbolic Execution Engine
--------------------------------------------------------------------------------
Update Information:
Initial import (#1981739)
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
mame-0.234-1.fc33 (FEDORA-2021-182bd93e1a)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest upstream release: *
https://www.mamedev.org/?p=502
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
monocypher-3.1.2-1.fc33 (FEDORA-2021-7981dfa5a3)
Boring crypto that simply works
--------------------------------------------------------------------------------
Update Information:
Initial package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-CPAN-Perl-Releases-5.20210722-1.fc33 (FEDORA-2021-878dadd90d)
Mapping Perl releases on CPAN to the location of the tarballs
--------------------------------------------------------------------------------
Update Information:
Updated for v5.35.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5.20210722-1
- 5.20210722 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1985399 - perl-CPAN-Perl-Releases-5.20210722 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1985399
--------------------------------------------------------------------------------
================================================================================
perl-Module-CoreList-5.20210723-1.fc33 (FEDORA-2021-a289b57cd0)
What modules are shipped with versions of perl
--------------------------------------------------------------------------------
Update Information:
Updated for v5.35.2
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1:5.20210723-1
- 5.20210723 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1985448 - perl-Module-CoreList-5.20210723 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1985448
--------------------------------------------------------------------------------
================================================================================
perl-experimental-0.025-1.fc33 (FEDORA-2021-14b73e38cb)
Experimental features made easy
--------------------------------------------------------------------------------
Update Information:
Add missing documentation for try
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 0.025-1
- 0.025 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1988415 - perl-experimental-0.025 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1988415
--------------------------------------------------------------------------------
================================================================================
php-composer-xdebug-handler2-2.0.2-1.fc33 (FEDORA-2021-b2bf9c5665)
Restarts a process without Xdebug, version 2
--------------------------------------------------------------------------------
Update Information:
**Version [2.0.2** - 2021-07-31 * Added: support for `xdebug_info('mode')` in
Xdebug 3.1. * Added: support for Psr\Log versions 2 and 3. * Fixed: remove
ini directives from non-cli HOST/PATH sections.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Remi Collet <remi(a)remirepo.net> - 2.0.2-1
- update to 2.0.2
--------------------------------------------------------------------------------
================================================================================
php-sebastian-diff3-3.0.3-4.fc33 (FEDORA-2021-bdbe2e8bc7)
Diff implementation
--------------------------------------------------------------------------------
Update Information:
**Version 8.5.19** - 2021-07-31 Fixed *
[#4740](https://github.com/sebastianbergmann/phpunit/issues/4740):
`phpunit.phar` does not work with PHP 8.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Remi Collet <remi(a)remirepo.net> - 3.0.3-4
- fix symfony autoloader usage
- switch to phpunit8
--------------------------------------------------------------------------------
================================================================================
phpunit8-8.5.19-1.fc33 (FEDORA-2021-bdbe2e8bc7)
The PHP Unit Testing framework version 8
--------------------------------------------------------------------------------
Update Information:
**Version 8.5.19** - 2021-07-31 Fixed *
[#4740](https://github.com/sebastianbergmann/phpunit/issues/4740):
`phpunit.phar` does not work with PHP 8.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Remi Collet <remi(a)remirepo.net> - 8.5.19-1
- update to 8.5.19
- raise dependency on phar-io/manifest 2.0.3
- raise dependency on phpunit/php-file-iterator 2.0.4
--------------------------------------------------------------------------------
================================================================================
phpunit9-9.5.8-1.fc33 (FEDORA-2021-2b686e17bc)
The PHP Unit Testing framework version 9
--------------------------------------------------------------------------------
Update Information:
**Version 9.5.8** - 2021-07-31 Fixed *
[#4740](https://github.com/sebastianbergmann/phpunit/issues/4740):
`phpunit.phar` does not work with PHP 8.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Remi Collet <remi(a)remirepo.net> - 9.5.8-1
- update to 9.5.8
- raise dependency on phar-io/manifest 2.0.3
--------------------------------------------------------------------------------
================================================================================
podman-3.2.3-2.fc33 (FEDORA-2021-6ac9b98f9e)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-34558
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.3-2
- Resolves: #1983596, #1987739 - Security fix for CVE-2021-34558
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1983596 - CVE-2021-34558 golang: crypto/tls: certificate of wrong type is
causing TLS client to panic
https://bugzilla.redhat.com/show_bug.cgi?id=1983596
--------------------------------------------------------------------------------
================================================================================
python-scikit-uplift-0.3.2-1.fc33 (FEDORA-2021-f624e2f2c7)
Uplift modeling in scikit-learn style in python
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
python-tqdm-4.62.0-1.fc33 (FEDORA-2021-988a4600f3)
Fast, Extensible Progress Meter
--------------------------------------------------------------------------------
Update Information:
Update to 4.62.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Stephen Gallagher <sgallagh(a)redhat.com> - 4.62.0-1
- Update to 4.62.0
* Tue Jul 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.61.1-2
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1979627 - python-tqdm-4.62.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1979627
--------------------------------------------------------------------------------
================================================================================
qsstv-9.5.7-1.fc33 (FEDORA-2021-b18c94e64c)
Qt-based slow-scan TV and fax
--------------------------------------------------------------------------------
Update Information:
Upgrade to 9.5.7.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Richard Shaw <hobbes1069(a)gmail.com> - 9.5.7-1
- Update to 9.5.7.
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.5.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Sun May 30 2021 Richard Shaw <hobbes1069(a)gmail.com> - 9.5.3-2
- Rebuild for hamlib 4.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1984056 - qsstv-9.5.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1984056
--------------------------------------------------------------------------------
================================================================================
redhat-rpm-config-176-2.fc33 (FEDORA-2021-a5cd9680ba)
Red Hat specific rpm configuration files
--------------------------------------------------------------------------------
Update Information:
Add macros.build-constraints
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 24 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 176-2
- Add macros.build-constraints
- Keep the misc macros in alphabetical order
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1988902 - Add macros.build-constraints
https://bugzilla.redhat.com/show_bug.cgi?id=1988902
--------------------------------------------------------------------------------
================================================================================
sylpheed-3.7.0-10.fc33 (FEDORA-2021-a4e9c45f9e)
GTK+ based, lightweight, and fast email client
--------------------------------------------------------------------------------
Update Information:
security fix for CVE-2021-37746
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Dan Hor��k <dan[at]danny.cz> - 3.7.0-10
- harden link checker (#1988552)
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1988550 - CVE-2021-37746 claws-mail: insufficient link checks before
accepting a click in textview_uri_security_check() in textview.c
https://bugzilla.redhat.com/show_bug.cgi?id=1988550
--------------------------------------------------------------------------------
================================================================================
vim-8.2.3273-1.fc33 (FEDORA-2021-50c324d952)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 2 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.2.3273-1
- patchlevel 3273
* Mon Jul 26 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.2.3223-1
- patchlevel 3223
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
2:8.2.3182-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------