The following Fedora 33 Security updates need testing:
Age URL
87
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-01f851ab8d
seamonkey-2.53.8-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9c5f3b8aae
python-urllib3-1.25.8-5.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-172c8bd11d php-7.4.21-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-afa7968aeb
nextcloud-19.0.12-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-eee91f69df
perl-Mojolicious-8.73-2.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-689d9fd1dc
chromium-91.0.4472.114-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-95f2f1cfc7
kernel-5.12.14-200.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-acb6b48101
suricata-5.0.7-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fd6f2727c8
djvulibre-3.5.27-28.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
105
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
40
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-16d24ae1c1 gdb-10.2-1.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-71a6c4fbe4
libxcrypt-4.4.23-1.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6875ea999b gdisk-1.0.8-1.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-31b3bb27dc
mtools-4.0.31-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-95f2f1cfc7
kernel-5.12.14-200.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f7adf72a57
coreutils-8.32-20.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0f36063660
appstream-data-33-3.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b341e9e71
selinux-policy-3.14.6-39.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-25b3e62f7d koji-1.25.1-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
CGAL-5.1.5-1.fc33
cockpit-ostree-186-1.fc33
containernetworking-plugins-1.0.0-0.2.rc1.fc33
containers-common-1-18.fc33
cppcheck-2.5-1.fc33
crun-0.20.1-1.fc33
darktable-3.6.0-2.fc33
mingw-djvulibre-3.5.28-1.fc33
notcurses-2.3.8-1.fc33
pacemaker-2.1.0-6.fc33
podman-3.2.2-1.fc33
python-adal-1.2.7-3.fc33
python-msal-1.12.0-4.fc33
python-msrest-0.6.21-3.fc33
python-nikola-8.1.3-3.fc33
python-regex-2021.7.6-1.fc33
rust-safe_arch-0.6.0-2.fc33
rust-takeable-option-0.5.0-1.fc33
skopeo-1.3.1-1.fc33
tellico-3.4.1-1.fc33
Details about builds:
================================================================================
CGAL-5.1.5-1.fc33 (FEDORA-2021-e173d9ce92)
Computational Geometry Algorithms Library
--------------------------------------------------------------------------------
Update Information:
[New upstream
release](https://github.com/CGAL/cgal/releases/tag/v5.1.5)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Laurent Rineau <laurent.rineau(a)cgal.org> - 5.1.5-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
cockpit-ostree-186-1.fc33 (FEDORA-2021-fad996bbc4)
Cockpit user interface for rpm-ostree
--------------------------------------------------------------------------------
Update Information:
- ockpit-ostree 186
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Allison Karlitskaya <allison.karlitskaya(a)redhat.com> - 186-1
- ockpit-ostree 186
- move to webpack 5 and Dart Sass
- various node modules updates
- set an RPM version epoch (to 1)
--------------------------------------------------------------------------------
================================================================================
containernetworking-plugins-1.0.0-0.2.rc1.fc33 (FEDORA-2021-0c53d8738d)
Libraries for writing CNI plugin
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 7 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1.0.0-0.2.rc1
- Resolves: #1962008 - use correct plugin path in unitfile
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
--------------------------------------------------------------------------------
================================================================================
containers-common-1-18.fc33 (FEDORA-2021-0c53d8738d)
Common configuration and documentation for containers
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 23 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 4:1-18
- Resolves: #1958474 - allow futex_time64 in seccomp.json
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 4:1-17
- use configs from latest upstream tags
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
--------------------------------------------------------------------------------
================================================================================
cppcheck-2.5-1.fc33 (FEDORA-2021-c108603400)
Tool for static C/C++ code analysis
--------------------------------------------------------------------------------
Update Information:
Update to 2.5.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 4 2021 Wolfgang St��ggl <c72578(a)yahoo.de> - 2.5-1
- Update to 2.5.
--------------------------------------------------------------------------------
================================================================================
crun-0.20.1-1.fc33 (FEDORA-2021-0c53d8738d)
OCI runtime written in C
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.20.1-1
- Fixes:
https://github.com/containers/crun/issues/687
* Wed Jun 2 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 0.20-1
- bump to 0.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
--------------------------------------------------------------------------------
================================================================================
darktable-3.6.0-2.fc33 (FEDORA-2021-1b38834c3f)
Utility to organize and develop raw images
--------------------------------------------------------------------------------
Update Information:
3.6.0 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Germano Massullo <germano.massullo(a)gmail.com> - 3.6.0-2
- Added appdata.patch
* Sun Jul 4 2021 Germano Massullo <germano.massullo(a)gmail.com> - 3.6.0-1
- 3.6.0 release
- Restored BuildRequires: OpenEXR-devel for EPEL 8. Read
https://bugzilla.redhat.com/show_bug.cgi?id=1979059
* Sun May 23 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.4.1-3
- Rebuild for libavif soname bump
* Mon Mar 29 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.4.1-2
- Rebuild for libavif soname bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1975634 - darktable-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1975634
[ 2 ] Bug #1978964 - [abrt] darktable: vsnprintf(): darktable killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1978964
--------------------------------------------------------------------------------
================================================================================
mingw-djvulibre-3.5.28-1.fc33 (FEDORA-2021-6422a16aed)
MinGW Windows djvulibre library
--------------------------------------------------------------------------------
Update Information:
Update to djvulibre-3.5.28, see
https://sourceforge.net/p/djvu/djvulibre-
git/ci/release.3.5.28/tree/NEWS for details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Sandro Mani <manisandro(a)gmail.com> - 3.5.28-1
- Update to 3.5.28
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1977429 - CVE-2021-3630 mingw-djvulibre: djvulibre: out-of-bounds write in
DJVU::DjVuTXT::decode() in DjVuText.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1977429
--------------------------------------------------------------------------------
================================================================================
notcurses-2.3.8-1.fc33 (FEDORA-2021-203b1a3607)
Character graphics and TUI library
--------------------------------------------------------------------------------
Update Information:
new upstream release
https://github.com/dankamongmen/notcurses/releases/tag/v2.3.8 ---- New
upstream release.
https://github.com/dankamongmen/notcurses/releases/tag/v2.3.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 4 2021 Nick Black <dankamongmen(a)gmail.com> - 2.3.8-1
- New upstream release, bugfix-oriented
* Tue Jun 29 2021 Nick Black <dankamongmen(a)gmail.com> - 2.3.7-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
pacemaker-2.1.0-6.fc33 (FEDORA-2021-4c7a63d0cd)
Scalable High-Availability cluster resource manager
--------------------------------------------------------------------------------
Update Information:
* Mon Jul 5 2021 Klaus Wenninger <kwenning(a)redhat.com> - 2.1.0-6 -
synced/merged with CS9 spec-file for current 2.1.0-release build
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 5 2021 Klaus Wenninger <kwenning(a)redhat.com> - 2.1.0-6
- synced/merged with CS9 spec-file for current 2.1.0-release build
* Tue Jun 8 2021 Klaus Wenninger <kwenning(a)redhat.com> - 2.1.0-0.5.rc3
- silence f33 s390x build complaining about possible format-trucation
* Mon Jun 7 2021 Python Maint <python-maint(a)redhat.com> - 2.1.0-0.4.rc3.1
- Rebuilt for Python 3.10
* Mon Jun 7 2021 Klaus Wenninger <kwenning(a)redhat.com> - 2.1.0-0.4.rc3
- Update for new upstream tarball for release candidate: Pacemaker-2.1.0-rc3,
for full details, see included ChangeLog file or
https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.0-rc3
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 2.1.0-0.3.rc2.1
- Rebuilt for Python 3.10
* Mon May 31 2021 Klaus Wenninger <kwenning(a)redhat.com> - 2.1.0-0.3.rc2
- Update for new upstream tarball for release candidate: Pacemaker-2.1.0-rc2,
for full details, see included ChangeLog file or
https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.0-rc2
- merge changes in upstream specfile sind Pacemaker-2.1.0-rc1
add configurable ocf_root
enable cibsecrets for > f33
require libqb >= 0.17.0 instead of 0.13.0
default to syncing with sbd
conflict all sbd < 1.4.3 to enforce sbd-build has the same default
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1962431 - pacemaker-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1962431
--------------------------------------------------------------------------------
================================================================================
podman-3.2.2-1.fc33 (FEDORA-2021-0c53d8738d)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 25 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.2-1
- bump to v3.2.2
* Mon Jun 14 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 3:3.2.1-1
- autobuilt v3.2.1
* Thu Jun 10 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-5
- fix crun dependency issue
* Wed Jun 9 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-4
- use latest containers-common
* Tue Jun 8 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-3
- keep crun on 0.19.1-3
* Tue Jun 8 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 3:3.2.0-2
- include podman-machine-cni in podman-plugins subpackage
* Fri Jun 4 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 3:3.2.0-1
- autobuilt v3.2.0
* Wed May 26 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> -
3:3.2.0-0.2.rc3
- autobuilt v3.2.0-rc3
* Fri May 21 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> -
3:3.2.0-0.1.rc2
- autobuilt v3.2.0-rc2
* Wed May 12 2021 Dusty Mabe <dusty(a)dustymabe.com> - 3:3.1.2-3
- Backport upstream bugfix:
https://github.com/containers/podman/pull/10253
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
--------------------------------------------------------------------------------
================================================================================
python-adal-1.2.7-3.fc33 (FEDORA-2021-b25ff8b242)
ADAL for Python
--------------------------------------------------------------------------------
Update Information:
Fixing lato-fonts requirement.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Major Hayden <major(a)mhtx.net> - 1.2.7-3
- Fixed lato font build requirement.
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.2.7-2
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1979149 - doc subpackge fails to install: nothing provides lato-font
https://bugzilla.redhat.com/show_bug.cgi?id=1979149
--------------------------------------------------------------------------------
================================================================================
python-msal-1.12.0-4.fc33 (FEDORA-2021-f52e5b3c20)
Microsoft Authentication Library (MSAL) for Python
--------------------------------------------------------------------------------
Update Information:
Fix lato font requirement
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Major Hayden <major(a)mhtx.net> - 1.12.0-4
- Fix lato font requirement.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1979149 - doc subpackge fails to install: nothing provides lato-font
https://bugzilla.redhat.com/show_bug.cgi?id=1979149
--------------------------------------------------------------------------------
================================================================================
python-msrest-0.6.21-3.fc33 (FEDORA-2021-2714b85907)
The runtime library "msrest" for AutoRest generated Python clients
--------------------------------------------------------------------------------
Update Information:
Fixed lato font requirement
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Major Hayden <major(a)mhtx.net> - 0.6.21-3
- Fixing lato font requirement.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1979149 - doc subpackge fails to install: nothing provides lato-font
https://bugzilla.redhat.com/show_bug.cgi?id=1979149
--------------------------------------------------------------------------------
================================================================================
python-nikola-8.1.3-3.fc33 (FEDORA-2021-1be3b3497d)
A modular, fast, simple, static website and blog generator
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release. Features: * Provide the full
``GLOBAL_CONTEXT`` to the post list shortcode plugin (Issue #3481) * Add
``BasePlugin.register_auto_watched_folder()`` * Allow different
``PANDOC_OPTIONS`` values based on input extensions by specifying a dict of
``{".extension": [options]}`` (Issue #3492) * Allow boolean/integer
``pretty_url`` post meta values in YAML/TOML (Issue #3503) Bugfixes: * Fix
an ``UnboundLocalError`` crash in ``nikola deploy`` (Issue #3479)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Jos�� Matos <jamatos(a)fedoraproject.org> - 8.1.3-3
- off by one type (larger than 34 and not larger or equal to 34)
* Tue Jul 6 2021 Jos�� Matos <jamatos(a)fedoraproject.org> - 8.1.3-2
- make pygments-2.8 patch conditional on the Fedora versions where it is needed
* Tue Jun 29 2021 Jos�� Matos <jamatos(a)fedoraproject.org> - 8.1.3-1
- update to 8.1.3
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 8.1.2-3
- Rebuilt for Python 3.10
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.1.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928395 - python-nikola-8.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1928395
--------------------------------------------------------------------------------
================================================================================
python-regex-2021.7.6-1.fc33 (FEDORA-2021-4fe3c5a233)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update python-regex to the latest release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Thomas Moschny <thomas.moschny(a)gmx.de> - 2021.7.6-1
- Update to 2021.7.6.
* Mon Jul 5 2021 Thomas Moschny <thomas.moschny(a)gmx.de> - 2021.7.1-1
- Update to 2021.7.1.
* Thu Jun 3 2021 Python Maint <python-maint(a)redhat.com> - 2021.4.4-2
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
================================================================================
rust-safe_arch-0.6.0-2.fc33 (FEDORA-2021-1aa194ad0a)
Crate that exposes `core::arch` safely via `#[cfg()]`
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1975463 - Review Request: rust-safe_arch - exposes `core::arch` safely via
`#[cfg()]`
https://bugzilla.redhat.com/show_bug.cgi?id=1975463
--------------------------------------------------------------------------------
================================================================================
rust-takeable-option-0.5.0-1.fc33 (FEDORA-2021-8feff17a80)
Small wrapper around option
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1975590 - Review Request: rust-takeable-option - A small wrapper around
option
https://bugzilla.redhat.com/show_bug.cgi?id=1975590
--------------------------------------------------------------------------------
================================================================================
skopeo-1.3.1-1.fc33 (FEDORA-2021-0c53d8738d)
Inspect container images and repositories on registries
--------------------------------------------------------------------------------
Update Information:
bump podman to v3.2.2 include podman-machine-cni in podman-plugins subpackage
bump crun to 0.20.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 30 2021 Lokesh Mandvekar <lsm5(a)fedoraproject.org> - 1:1.3.1-1
- bump to v1.3.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958474 - dnf update causes error: The futex facility returned an unexpect
https://bugzilla.redhat.com/show_bug.cgi?id=1958474
[ 2 ] Bug #1962008 - [podman][systemd] /usr/lib/systemd/system/cni-dhcp.service wrong
executable
https://bugzilla.redhat.com/show_bug.cgi?id=1962008
--------------------------------------------------------------------------------
================================================================================
tellico-3.4.1-1.fc33 (FEDORA-2021-13fdff77cd)
A collection manager
--------------------------------------------------------------------------------
Update Information:
Update to the latest stable release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 6 2021 Jos�� Matos <jamatos(a)fedoraproject.org> - 3.4.1-1
- update to 3.4.1
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1932130 - tellico-3.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1932130
--------------------------------------------------------------------------------