The following Fedora 33 Security updates need testing:
Age URL
17
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f3ebd7554c
radare2-5.1.1-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-673b10ed77
python-aiohttp-3.7.4-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5689072a7e
nagios-4.4.6-3.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aa78f97893
libebml-1.4.2-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-93911302d6
x11vnc-0.9.16-5.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-caf9e04ef1
libtpms-0.7.7-0.20210302gitfd5bd3fb1d.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9747ed7427
suricata-5.0.6-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a760169c3c
nodejs-14.16.0-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-267c08cc40
arm-none-eabi-newlib-4.1.0-1.fc33
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b326fcb83f
python3.10-3.10.0~a6-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f5186d92c1
rdma-core-34.0-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
Carla-2.2.0-2.fc33
R-gargle-1.0.0-1.fc33
R-tinytex-0.30-1.fc33
alexandria-0.7.8-3.fc33
alsa-sof-firmware-1.6.1-2.fc33
atari800-4.2.0-2.fc33
cinnamon-4.8.6-4.fc33
container-selinux-2.158.0-1.fc33
elisa-player-20.12.3-1.fc33
goodvibes-0.6.3-1.fc33
ibus-table-1.12.5-1.fc33
kernel-5.10.20-200.fc33
kernel-headers-5.10.20-200.fc33
kernel-tools-5.10.20-200.fc33
kirc-0.2.4-1.fc33
lollypop-1.4.17-1.fc33
lttng-tools-2.12.2-3.fc33
nova-agent-2.1.23-1.fc33
osbuild-composer-29-1.fc33
papirus-icon-theme-20210302-1.fc33
perl-5.32.1-468.fc33
perl-LWP-ConsoleLogger-0.000043-1.fc33
php-swiftmailer6-6.2.6-1.fc33
python-django-3.0.13-1.fc33
rssguard-3.9.0-1.fc33
rubygem-actionpack-6.0.3.4-2.fc33
rubygem-activerecord-6.0.3.4-2.fc33
slirp4netns-1.1.9-1.fc33
trelby-2.4.2-1.fc33
wsdd-0.6.4-1.fc33
zabbix-5.0.9-1.fc33
zstd-1.4.9-1.fc33
Details about builds:
================================================================================
Carla-2.2.0-2.fc33 (FEDORA-2021-27cbc91efd)
Audio plugin host
--------------------------------------------------------------------------------
Update Information:
Drop explicit dep on jack-audio-connection-kit
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1:2.2.0-2
- Drop explicit dep on jack-audio-connection-kit
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1920970 - Lower dependency requirement on jack-audio-connection-kit to allow
installation with pipewire
https://bugzilla.redhat.com/show_bug.cgi?id=1920970
--------------------------------------------------------------------------------
================================================================================
R-gargle-1.0.0-1.fc33 (FEDORA-2021-33416a64b4)
Utilities for Working with Google APIs
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.0-1
- Update to latest version (#1934743)
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1934743 - R-gargle-1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1934743
--------------------------------------------------------------------------------
================================================================================
R-tinytex-0.30-1.fc33 (FEDORA-2021-d22db7ec59)
Helper Functions to Install and Maintain TeX Live, and Compile LaTeX Documents
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.30-1
- Update to latest version (#1935009)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1935009 - R-tinytex-0.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1935009
--------------------------------------------------------------------------------
================================================================================
alexandria-0.7.8-3.fc33 (FEDORA-2021-7cab47f3fc)
Book collection manager
--------------------------------------------------------------------------------
Update Information:
Current alexandria may crash when adding a new book with search text left
undeleted. This new rpm is supposed to fix this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.7.8-3
- Once reset search text when adding new book (bug 1909500)
- Enable test, fix Fedora specific patch (errors detected with the test)
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.8-2.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Thu Jan 7 2021 V��t Ondruch <vondruch(a)redhat.com> - 0.7.8-2
- Add ReXML dependency needed for Ruby 3.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909500 - Crashes when adding/changing books
https://bugzilla.redhat.com/show_bug.cgi?id=1909500
--------------------------------------------------------------------------------
================================================================================
alsa-sof-firmware-1.6.1-2.fc33 (FEDORA-2021-0e9796e6e4)
Firmware and topology files for Sound Open Firmware project
--------------------------------------------------------------------------------
Update Information:
Add Intel TigerLake-H firmware files.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-2
- Add TGL-H firmware files
--------------------------------------------------------------------------------
================================================================================
atari800-4.2.0-2.fc33 (FEDORA-2021-2cbcf38c7a)
An emulator of 8-bit Atari personal computers
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1924660 - Review Request: atari800 - An emulator of 8-bit Atari personal
computers
https://bugzilla.redhat.com/show_bug.cgi?id=1924660
--------------------------------------------------------------------------------
================================================================================
cinnamon-4.8.6-4.fc33 (FEDORA-2021-83b31586ad)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
- GWL fixes
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 Leigh Scott <leigh123linux(a)gmail.com> - 4.8.6-4
- More GWL fixes
* Thu Mar 4 2021 Leigh Scott <leigh123linux(a)gmail.com> - 4.8.6-3
- Add upstream GWL fixes
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.8.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1914907 - grouped window list: Entries are re-ordered when you close a
window
https://bugzilla.redhat.com/show_bug.cgi?id=1914907
--------------------------------------------------------------------------------
================================================================================
container-selinux-2.158.0-1.fc33 (FEDORA-2021-6ec60bcfab)
SELinux policies for container runtimes
--------------------------------------------------------------------------------
Update Information:
Autobuilt v2.158.0 ---- Autobuilt v2.156.0 ---- Autobuilt v2.155.0 ----
Autobuilt v2.154.0 ---- Autobuilt v2.153.0 ---- Autobuilt v2.152.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.158.0-1
- autobuilt v2.158.0
* Mon Jan 25 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.156.0-1
- autobuilt v2.156.0
* Wed Jan 6 2021 Dan Walsh <dwalsh(a)fedoraproject.org> - 2:2.155.0-2
- Fix build
* Tue Jan 5 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.155.0-1
- autobuilt v2.155.0
* Mon Jan 4 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.154.0-1
- autobuilt v2.154.0
* Mon Jan 4 2021 Dan Walsh <dwalsh(a)fedoraproject.org> - 2:2.154.1-1
- Fix build
* Wed Dec 30 2020 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.154.0-1
- autobuilt v2.154.0
* Sat Dec 26 2020 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.153.0-1
- autobuilt v2.153.0
* Tue Dec 22 2020 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 2:2.152.0-1
- autobuilt v2.152.0
--------------------------------------------------------------------------------
================================================================================
elisa-player-20.12.3-1.fc33 (FEDORA-2021-e9f7a5d356)
Elisa music player
--------------------------------------------------------------------------------
Update Information:
Update to 20.12.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 20.12.3-1
- Update to 20.12.3
- Close: rhbz#1935395
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1935395 - elisa-player-20.12.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1935395
--------------------------------------------------------------------------------
================================================================================
goodvibes-0.6.3-1.fc33 (FEDORA-2021-3c99080107)
Lightweight Radio Player
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.6.3-1
- Update to 0.6.3
- Close: rhbz#1916560
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1916560 - goodvibes-0.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1916560
--------------------------------------------------------------------------------
================================================================================
ibus-table-1.12.5-1.fc33 (FEDORA-2021-46ce4f03a1)
The Table engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
Update to 1.12.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Mike FABIAN <mfabian(a)redhat.com> - 1.12.5-1
- Update to 1.12.5
- Return False in _execute_command_commit_candidate_number(self, number)
if number out of range
- Resolves:
https://github.com/moebiuscurve/ibus-table-others/issues/21
- remove Use-from-unittest-import-mock-instead-of-just-import.patch
(included upstream)
- Update translations from Weblate (New translation for Sinhala (si) started)
--------------------------------------------------------------------------------
================================================================================
kernel-5.10.20-200.fc33 (FEDORA-2021-a2d3ad5dda)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.10.20 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.10.20-200
- Linux v5.10.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1876995 - CVE-2020-25639 kernel: NULL pointer dereference via nouveau ioctl
can lead to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1876995
--------------------------------------------------------------------------------
================================================================================
kernel-headers-5.10.20-200.fc33 (FEDORA-2021-a2d3ad5dda)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 5.10.20 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.10.20-200
- Linux v5.10.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1876995 - CVE-2020-25639 kernel: NULL pointer dereference via nouveau ioctl
can lead to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1876995
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.10.20-200.fc33 (FEDORA-2021-a2d3ad5dda)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.10.20 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> - 5.10.20-200
- Linux v5.10.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1876995 - CVE-2020-25639 kernel: NULL pointer dereference via nouveau ioctl
can lead to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1876995
--------------------------------------------------------------------------------
================================================================================
kirc-0.2.4-1.fc33 (FEDORA-2021-06b8b3d64b)
Tiny IRC client written in POSIX C99
--------------------------------------------------------------------------------
Update Information:
New upstream release ---- Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1919704 - Review Request: kirc - Tiny IRC client written in POSIX C99
https://bugzilla.redhat.com/show_bug.cgi?id=1919704
[ 2 ] Bug #1935559 - kirc-0.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1935559
--------------------------------------------------------------------------------
================================================================================
lollypop-1.4.17-1.fc33 (FEDORA-2021-e7b7aae845)
Music player for GNOME
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.17-1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1.4.17-1
- Update to 1.4.17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1935359 - lollypop-1.4.17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1935359
--------------------------------------------------------------------------------
================================================================================
lttng-tools-2.12.2-3.fc33 (FEDORA-2021-7c596bef7a)
LTTng control and utility programs
--------------------------------------------------------------------------------
Update Information:
Install correct lttng-sessiond.service unit file.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 Michael Jeanson <mjeanson(a)efficios.com> - 2.12.2-3
- Install correct lttng-sessiond.service unit file (#1935426)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1935426 - /usr/lib/systemd/system/lttng-session.service is a PGP key, not a
systemd .service unit
https://bugzilla.redhat.com/show_bug.cgi?id=1935426
--------------------------------------------------------------------------------
================================================================================
nova-agent-2.1.23-1.fc33 (FEDORA-2021-474f96b47a)
Agent for setting up clean servers on Xen
--------------------------------------------------------------------------------
Update Information:
Latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 Sam P <survient(a)fedoraproject.org> - 2.1.23-1
- Updated to latest upstream release
- Changed crypto depedency to match upstream
- Removed now-irrelevant patch and added versionfix.patch
See
https://github.com/Rackspace-DOT/nova-agent/issues/100.
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 2.1.21-6
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.21-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
osbuild-composer-29-1.fc33 (FEDORA-2021-3c0fd7e41a)
An image building service based on osbuild
--------------------------------------------------------------------------------
Update Information:
New upstream release of osbuild-composer
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Martin Sehnoutka <msehnout(a)redhat.com> - 29-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
papirus-icon-theme-20210302-1.fc33 (FEDORA-2021-0c70fbe12e)
Free and open source SVG icon theme based on Paper Icon Set
--------------------------------------------------------------------------------
Update Information:
Update to 20210302
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 20210302-1
- Update to 20210302
- Close: rhbz#1923829
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
20210101-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1923829 - papirus-icon-theme-20210302 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1923829
--------------------------------------------------------------------------------
================================================================================
perl-5.32.1-468.fc33 (FEDORA-2021-8eea9bd7ad)
Practical Extraction and Report Language
--------------------------------------------------------------------------------
Update Information:
This release fixes a memory leak when compiling a regular expression, prevents
the number of buckets in a hash from getting too large, and protects locale
tests from LANGUAGE environment variable.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 Petr Pisar <ppisar(a)redhat.com> - 4:5.32.1-468
- Protect locale tests from LANGUAGE environment variable
- Prevent the number of buckets in a hash from getting too large
- Fix a memory leak when compiling a regular expression (GH#18604)
--------------------------------------------------------------------------------
================================================================================
perl-LWP-ConsoleLogger-0.000043-1.fc33 (FEDORA-2021-6712a6949d)
LWP tracing and debugging
--------------------------------------------------------------------------------
Update Information:
This release fixes silenting a logger.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Petr Pisar <ppisar(a)redhat.com> - 0.000043-1
- 0.000043 bump
- Package tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1935412 - perl-LWP-ConsoleLogger-0.000043 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1935412
--------------------------------------------------------------------------------
================================================================================
php-swiftmailer6-6.2.6-1.fc33 (FEDORA-2021-83c22bbe89)
Free Feature-rich PHP Mailer
--------------------------------------------------------------------------------
Update Information:
**Version 6.2.6** (2021-03-05) * Fix Bcc support ---- **Version 6.2.5**
(2021-01-12) * Don't trust properties at destruct time * Remove invalid
PHPDocs param in EventDispatcher interface * Bump license year * Removes PHP
version from README
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Remi Collet <remi(a)remirepo.net> - 6.2.6-1
- update to 6.2.6
--------------------------------------------------------------------------------
================================================================================
python-django-3.0.13-1.fc33 (FEDORA-2021-1bb399a5af)
A high-level Python Web framework
--------------------------------------------------------------------------------
Update Information:
update to 3.0.13, fix CVE-2021-23336 (rhbz#1931542)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Matthias Runge <mrunge(a)redhat.com> - 3.0.13-1
- update to 3.0.13, fix CVE-2021-23336 (rhbz#1931542)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928904 - CVE-2021-23336 python: Web Cache Poisoning via
urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters
https://bugzilla.redhat.com/show_bug.cgi?id=1928904
--------------------------------------------------------------------------------
================================================================================
rssguard-3.9.0-1.fc33 (FEDORA-2021-6f69739fca)
Simple yet powerful feed reader
--------------------------------------------------------------------------------
Update Information:
Update to 3.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.9.0-1
- Update to 3.9.0
- Close: rhbz#1932738
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.8.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1932738 - rssguard-3.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1932738
--------------------------------------------------------------------------------
================================================================================
rubygem-actionpack-6.0.3.4-2.fc33 (FEDORA-2021-b571fca1b8)
Web-flow and rendering framework putting the VC in MVC (part of Rails)
--------------------------------------------------------------------------------
Update Information:
* Fix open redirect vulnerability which may lead to confidentiality and
integrity compromise. * Fix crafted input which may cause a regular expression
DoS.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 V��t Ondruch <vondruch(a)redhat.com> - 1:6.0.3.4-2
- Fix open redirect vulnerability which may lead to confidentiality and integrity
compromise.
Resolves: CVE-2021-22881
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1930102 - CVE-2021-22880 rubygem-activerecord: crafted input may cause a
regular expression DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1930102
[ 2 ] Bug #1930211 - CVE-2021-22881 rubygem-actionpack: open redirect vulnerability may
lead to confidentiality and integrity compromise
https://bugzilla.redhat.com/show_bug.cgi?id=1930211
--------------------------------------------------------------------------------
================================================================================
rubygem-activerecord-6.0.3.4-2.fc33 (FEDORA-2021-b571fca1b8)
Object-relational mapper framework (part of Rails)
--------------------------------------------------------------------------------
Update Information:
* Fix open redirect vulnerability which may lead to confidentiality and
integrity compromise. * Fix crafted input which may cause a regular expression
DoS.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 V��t Ondruch <vondruch(a)redhat.com> - 1:6.0.3.4-2
- Fix crafted input which may cause a regular expression DoS.
Resolves: CVE-2021-22880
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1930102 - CVE-2021-22880 rubygem-activerecord: crafted input may cause a
regular expression DoS
https://bugzilla.redhat.com/show_bug.cgi?id=1930102
[ 2 ] Bug #1930211 - CVE-2021-22881 rubygem-actionpack: open redirect vulnerability may
lead to confidentiality and integrity compromise
https://bugzilla.redhat.com/show_bug.cgi?id=1930211
--------------------------------------------------------------------------------
================================================================================
slirp4netns-1.1.9-1.fc33 (FEDORA-2021-51865ada0c)
slirp for network namespaces
--------------------------------------------------------------------------------
Update Information:
Autobuilt v1.1.9
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 1.1.9-1
- autobuilt v1.1.9
* Thu Feb 25 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.1.8-4
- bump for centos
* Fri Feb 12 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.1.8-3
- bump for centos
* Thu Feb 11 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.1.8-2
- rebuild with deprecated changelog format
--------------------------------------------------------------------------------
================================================================================
trelby-2.4.2-1.fc33 (FEDORA-2021-6af36057a8)
The free, multiplatform, feature-rich screenwriting program
--------------------------------------------------------------------------------
Update Information:
Initial release.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1931696 - Review Request: trelby - The free, multiplatform, feature-rich
screenwriting program
https://bugzilla.redhat.com/show_bug.cgi?id=1931696
--------------------------------------------------------------------------------
================================================================================
wsdd-0.6.4-1.fc33 (FEDORA-2021-4b47e02806)
Web Services Dynamic Discovery host daemon
--------------------------------------------------------------------------------
Update Information:
Latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 4 2021 Sam P <survient(a)fedoraproject.org> - 0.6.4-1
- Updated to latest upstream release.
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.6.3-2
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
================================================================================
zabbix-5.0.9-1.fc33 (FEDORA-2021-22f0e3e45d)
Open-source monitoring solution for your IT infrastructure
--------------------------------------------------------------------------------
Update Information:
Update to 5.0.9 Release notes:
https://www.zabbix.com/rn/rn5.0.9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 Orion Poplawski <orion(a)nwra.com> - 1:5.0.9-1
- Update to 5.0.9
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1:5.0.8-2
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
================================================================================
zstd-1.4.9-1.fc33 (FEDORA-2021-1909f471c3)
Zstd compression library
--------------------------------------------------------------------------------
Update Information:
Latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 5 2021 P��draig Brady <P(a)draigBrady.com> - 1.4.9-1
- Latest upstream
* Thu Jan 28 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------