The following Fedora 33 Security updates need testing:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d0cc9a393f
perl-Net-CIDR-Lite-0.22-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-da3784629e
mosquitto-1.6.14-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1bf4f2f13a
libtiff-4.1.0-8.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-067c9deff1
python3-docs-3.9.4-1.fc33 python3.9-3.9.4-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2ab6f060d9
python3.8-3.8.9-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-67cbea4608
libpano13-2.9.20-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-33a1b73e48 batik-1.14-2.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-62a5062b2d
dnsmasq-2.85-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2c714d311f
gnuchess-6.2.7-5.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-601ee898f7
singularity-3.7.3-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6385a09efc
ruby-2.7.3-136.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
18
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f0e6810501
libkcapi-1.2.1-1.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c51adcf0c0
wpebackend-fdo-1.8.3-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ae83f20d82
appstream-data-33-2.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bf249a95a9
usbredir-0.9.0-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1eee2b3970
libguestfs-1.44.1-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f6b07f88e6 bluez-5.58-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1bf4f2f13a
libtiff-4.1.0-8.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-70b24b94e2
graphene-1.10.6-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f05e75f3b8
qt5-qtwayland-5.15.2-5.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8d4429eb47
libwacom-1.9-2.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5f581ba2f5
createrepo_c-0.17.1-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8bcfa50520
kernel-5.11.12-200.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e91e930c15
pipewire-0.3.25-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-62a5062b2d
dnsmasq-2.85-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e4685c22d1
libtirpc-1.2.6-3.rc4.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e8f2b4555f
libbluray-1.3.0-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-475e825db2
libxcrypt-4.4.19-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
CImg-2.9.7-1.fc33
We10X-icon-theme-0-12.20210409git89d8aa7b.fc33
butane-0.11.0-1.fc33
fluidsynth-2.1.8-1.fc33
fstrm-0.6.1-2.fc33
gmic-2.9.7-1.fc33
gns3-gui-2.2.20-1.fc33
gns3-server-2.2.20-1.fc33
gnucash-4.5-1.fc33
gnucash-docs-4.5-1.fc33
guayadeque-0.4.7-0.28.20210409gitdfc6b42.fc33
icewm-2.3.1-1.fc33
libburn-1.5.4-2.fc33
libisoburn-1.5.4-2.fc33
librsync-2.3.2-1.fc33
librtprocess-0.12.0-1.20210318gitbc2f53b.fc33
modulemd-tools-0.9-1.fc33
mtr-0.94-3.fc33
nodejs-14.16.1-1.fc33
protontricks-1.5.0-1.fc33
python-google-auth-1.28.1-1.fc33
rust-afterburn-5.0.0-1.fc33
shim-15.4-1
srain-1.2.1-1.fc33
Details about builds:
================================================================================
CImg-2.9.7-1.fc33 (FEDORA-2021-ca1151e997)
C++ Template Image Processing Toolkit
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 josef radinger <cheese(a)nosuchhost.net> - 1:2.9.7-1
- bump version
* Wed Feb 10 2021 josef radinger <cheese(a)nosuchhost.net> - 1:2.9.6-1
- bump version
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.9.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1893378 - CVE-2020-25693 CImg: multiple integer overflows leading to
heap-based buffer-overflows [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1893378
[ 2 ] Bug #1898107 - gmic-2.9.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1898107
--------------------------------------------------------------------------------
================================================================================
We10X-icon-theme-0-12.20210409git89d8aa7b.fc33 (FEDORA-2021-17ee4e0042)
Colorful icon theme inspired by Microsoft Windows 10 aesthetic
--------------------------------------------------------------------------------
Update Information:
Update to latest git snapshot (2021-04-09)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Artur Frenszek-Iwicki <fedora(a)svgames.pl> -
0-12.20210409git89d8aa7b
- Update to latest upstream git snapshot
- Fix paths in package trigger scripts
--------------------------------------------------------------------------------
================================================================================
butane-0.11.0-1.fc33 (FEDORA-2021-99f1d6e499)
Butane config transpiler
--------------------------------------------------------------------------------
Update Information:
Fedora CoreOS Config Transpiler is now Butane. New upstream release; details
[
here](https://github.com/coreos/butane/blob/v0.11.0/NEWS).
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
fluidsynth-2.1.8-1.fc33 (FEDORA-2021-33d6ae70db)
Real-time software synthesizer
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.8
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 10 2021 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.1.8-1
- Update to 2.1.8
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fstrm-0.6.1-2.fc33 (FEDORA-2021-81ae48dc25)
Frame Streams implementation in C
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.1 (#1946415)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Petr Men����k <pemensik(a)redhat.com> - 0.6.1-2
- Apply coverity fixes also to bundled libmy
* Thu Apr 8 2021 Petr Men����k <pemensik(a)redhat.com> - 0.6.1-1
- Update to 0.6.1 (#1946415)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1946415 - fstrm-0.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1946415
--------------------------------------------------------------------------------
================================================================================
gmic-2.9.7-1.fc33 (FEDORA-2021-ca1151e997)
GREYC's Magic for Image Computing
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 josef radinger <cheese(a)nosuchhost.net> - 2.9.7-1
- bump version
* Thu Feb 11 2021 josef radinger <cheese(a)nosuchhost.net> - 2.9.6-1
- bump version
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.9.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jan 12 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.9.4-5
- Again try to build on all archs
* Tue Jan 12 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.9.4-4
- Once make this package available on buildable arch
* Mon Jan 4 2021 josef radinger <cheese(a)nosuchhost.net> - 2.9.4-3
- remove stray stash file
* Fri Jan 1 2021 Richard Shaw <hobbes1069(a)gmail.com> - 2.9.4-2
- Rebuild for OpenEXR 2.5.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1893378 - CVE-2020-25693 CImg: multiple integer overflows leading to
heap-based buffer-overflows [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1893378
[ 2 ] Bug #1898107 - gmic-2.9.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1898107
--------------------------------------------------------------------------------
================================================================================
gns3-gui-2.2.20-1.fc33 (FEDORA-2021-fbf04ff376)
GNS3 graphical user interface
--------------------------------------------------------------------------------
Update Information:
Update gns3 2.2.20
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Nicolas Chauvet <kwizart(a)gmail.com> - 2.2.20-1
- Update to 2.2.20
--------------------------------------------------------------------------------
================================================================================
gns3-server-2.2.20-1.fc33 (FEDORA-2021-fbf04ff376)
Graphical Network Simulator 3
--------------------------------------------------------------------------------
Update Information:
Update gns3 2.2.20
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Nicolas Chauvet <kwizart(a)gmail.com> - 2.2.20-1
- Update to 2.2.20
--------------------------------------------------------------------------------
================================================================================
gnucash-4.5-1.fc33 (FEDORA-2021-5dd2e23ebc)
Finance management application
--------------------------------------------------------------------------------
Update Information:
4.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 4.5-1
- 4.5
* Sat Feb 13 2021 Bill Nottingham <notting(a)splat.cc> - 4.4-2
- fix build with glib 2.67.3+ (#1927622)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1943882 - gnucash-4.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1943882
--------------------------------------------------------------------------------
================================================================================
gnucash-docs-4.5-1.fc33 (FEDORA-2021-5dd2e23ebc)
Help files and documentation for the GnuCash personal finance manager
--------------------------------------------------------------------------------
Update Information:
4.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 4.5-1
- 4.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1943882 - gnucash-4.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1943882
--------------------------------------------------------------------------------
================================================================================
guayadeque-0.4.7-0.28.20210409gitdfc6b42.fc33 (FEDORA-2021-25ef3f81ca)
Music player
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.7-0.28.20210409gitdfc6b42
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 10 2021 Martin Gansser <martinkg(a)fedoraproject.org> -
0.4.7-0.28.20210409gitdfc6b42
- Update to 0.4.7-0.28.20210409gitdfc6b42
--------------------------------------------------------------------------------
================================================================================
icewm-2.3.1-1.fc33 (FEDORA-2021-e0bc348a91)
Window manager designed for speed, usability, and consistency
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 4 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.3.1-1
- build(update): 2.3.1
--------------------------------------------------------------------------------
================================================================================
libburn-1.5.4-2.fc33 (FEDORA-2021-3c4ba0f6d4)
Library for reading, mastering and writing optical discs
--------------------------------------------------------------------------------
Update Information:
* Correct alternatives handling for cdrecord man page
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Robert Scheck <robert(a)fedoraproject.org> 1.5.4-2
- Correct alternatives handling for cdrecord man page
--------------------------------------------------------------------------------
================================================================================
libisoburn-1.5.4-2.fc33 (FEDORA-2021-cd076fd3f3)
Library to enable creation and expansion of ISO-9660 filesystems
--------------------------------------------------------------------------------
Update Information:
* Make `xorrecord` a `cdrecord` alternative
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Robert Scheck <robert(a)fedoraproject.org> 1.5.4-2
- Make xorrecord a cdrecord alternative (thanks to Jiri Kucera)
--------------------------------------------------------------------------------
================================================================================
librsync-2.3.2-1.fc33 (FEDORA-2021-3360f320fb)
Rsync remote-delta algorithm library
--------------------------------------------------------------------------------
Update Information:
librsync 2.3.2 ============== * Fix heap corruption for too small `kbloom`.
This could have crashed delta operations for very small files/signatures.
Strangely it didn't seem to cause problems for most compilers/platforms, but did
trigger errors for new versions of MSVC. * Fix and add Travis Windows checks
and improve compatibility. Turn on `-Wconversion -Wno-sign-conversion` warnings
for `clang`. Add MSVC compiler flags to turn off posix warnings. Make all code
compile clean with no warnings on all Travis platforms. Added `cmake` config
checking for windows `io.h` and improve `fileutil.c` for MSVC. Fix broken error
handling in `rs_file_copy_cb()`. Improved trace output, making it less spamy and
more consistent. Add patch checking for invalid literal lengths. Improve
internal variable and argument types. Add explicit type conversions. * Fix a
bug so patch will now fail returning `RS_CORRUPT` on encountering a zero length
copy command instead of hanging. Make `copy_cb()` copying more data than
requested an assert-fail on debug builds, and a log-warning for release builds.
Make trace output a little less spammy about `copy_cb()` return values.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 10 2021 Robert Scheck <robert(a)fedoraproject.org> 2.3.2-1
- Upgrade to 2.3.2 (#1948216)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1948216 - librsync-2.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1948216
--------------------------------------------------------------------------------
================================================================================
librtprocess-0.12.0-1.20210318gitbc2f53b.fc33 (FEDORA-2021-7ed1c74c3a)
RawTherapee's processing algorithms
--------------------------------------------------------------------------------
Update Information:
Initial packaging
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1947495 - Please build librtprocess for Fedora 33 and 32
https://bugzilla.redhat.com/show_bug.cgi?id=1947495
--------------------------------------------------------------------------------
================================================================================
modulemd-tools-0.9-1.fc33 (FEDORA-2021-e36e786bcc)
Collection of tools for parsing and generating modulemd YAML files
--------------------------------------------------------------------------------
Update Information:
Yet another maintenance release with no end-user enhancements. ### repo2module
- Dropped dependency on python3-click ---- This is a maintenance release with
no end-user enhancements. - New tests suites for `modulemd-merge` and
`createrepo_mod` commands and for `modulemd_tools` library - Dropped dependency
on `python3-parameterized`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Jakub Kadlcik <frostyx(a)email.cz> 0.9-1
- repo2module: drop python-click dependency (frostyx(a)email.cz)
* Tue Apr 6 2021 Jakub Kadlcik <frostyx(a)email.cz> 0.8-1
- modulemd_tools: drop python3-parameterized dependency (frostyx(a)email.cz)
- Package modulemd_tools helper lib (fvalder(a)redhat.com)
- Add modulemd-merge tests (fvalder(a)redhat.com)
- Add createrepo_mod tests (fvalder(a)redhat.com)
- Replace master in fedora releaser to rawhide (frostyx(a)email.cz)
--------------------------------------------------------------------------------
================================================================================
mtr-0.94-3.fc33 (FEDORA-2021-b4e751a26f)
Network diagnostic tool combining 'traceroute' and 'ping'
--------------------------------------------------------------------------------
Update Information:
- Add upstream patches to fix various `xmtr` issues (#1488417)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 10 2021 Robert Scheck <robert(a)fedoraproject.org> - 2:0.94-3
- Add upstream patches to fix various xmtr issues (#1488417)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2:0.94-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1488417 - xmtr doesn't actually work
https://bugzilla.redhat.com/show_bug.cgi?id=1488417
--------------------------------------------------------------------------------
================================================================================
nodejs-14.16.1-1.fc33 (FEDORA-2021-c11da301be)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
https://nodejs.org/en/blog/vulnerability/april-2021-security-releases/
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 8 2021 Stephen Gallagher <sgallagh(a)redhat.com> - 1:14.16.1-1
- Update to 14.16.1
* Tue Mar 9 2021 Zuzana Svetlikova <zsvetlik(a)redhat.com - 1:14.16.0-3
- Only require nodejs-packaging on Fedora
- remove --debug-nghttp2 (#1930775)
- always build with systemtap
--------------------------------------------------------------------------------
================================================================================
protontricks-1.5.0-1.fc33 (FEDORA-2021-0c8e708df7)
Simple wrapper that does winetricks things for Proton enabled games
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 10 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.5.0-1
- build(update): 1.5.0
--------------------------------------------------------------------------------
================================================================================
python-google-auth-1.28.1-1.fc33 (FEDORA-2021-2853fcb7ff)
Google Auth Python Library
--------------------------------------------------------------------------------
Update Information:
Update to 1.28.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1:1.28.1-1
- Update to 1.28.1 (#1933900)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933900 - python-google-auth-1.28.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1933900
--------------------------------------------------------------------------------
================================================================================
rust-afterburn-5.0.0-1.fc33 (FEDORA-2021-fb2a204001)
Simple cloud provider agent
--------------------------------------------------------------------------------
Update Information:
New upstream release. See release notes at
[
News](https://github.com/coreos/afterburn/releases/tag/v5.0.0)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 9 2021 Sohan Kunkerkar <skunkerk(a)redhat.com> - 5.0.0-1
- Update to 5.0.0
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.6.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Dec 28 2020 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 4.6.0-3
- Rebuild
--------------------------------------------------------------------------------
================================================================================
shim-15.4-1 (FEDORA-2021-c3d587d52c)
First-stage UEFI bootloader
--------------------------------------------------------------------------------
Update Information:
- Update to shim 15.4 - Support for revocations via the ".sbat" section and
SBAT EFI variable - A new unit test framework and a bunch of unit tests - No
external gnu-efi dependency - Better CI Resolves: CVE-2020-14372 Resolves:
CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves:
CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 - Mark
signed shim packages as protected in dnf. Resolves: #1874541 - Conflict with
older fwupd, but don't require it. Resolves: #1877751
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 6 2021 Peter Jones <pjones(a)redhat.com> - 15.4-1
- Update to shim 15.4
- Support for revocations via the ".sbat" section and SBAT EFI variable
- A new unit test framework and a bunch of unit tests
- No external gnu-efi dependency
- Better CI
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
--------------------------------------------------------------------------------
================================================================================
srain-1.2.1-1.fc33 (FEDORA-2021-2018f413f6)
Modern, beautiful IRC client written in GTK+ 3
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 10 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.2.1-1
- build(update): 1.2.1
--------------------------------------------------------------------------------