The following Fedora 33 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-848fd34b0b
opensmtpd-6.8.0p2-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ced31f3f0c
mingw-python3-3.9.1-2.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2b151590d9
jasper-2.0.24-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4a91649cf3
tcmu-runner-1.5.2-7.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e84e1aaa2c
libebml-1.4.1-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-df9ede6a02
netpbm-10.93.00-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e435a8bb88
golang-1.15.7-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5f7da70bfe
monitorix-3.13.1-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
22
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d1074696ac
libguestfs-1.44.0-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0ecd4abda7 pungi-4.2.7-2.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8656548c9b
vte291-0.62.2-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-68a037f915
libpwquality-1.4.4-2.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5a778daa6d
libmaxminddb-1.5.0-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d5d94f6b05
tzdata-2021a-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e04cde3ff0
kernel-5.10.11-200.fc33 kernel-headers-5.10.11-200.fc33 kernel-tools-5.10.11-200.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-039b93d5e4
dnsmasq-2.84-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ee43bfb344
libbytesize-2.5-1.fc33
The following builds have been pushed to Fedora 33 updates-testing
VirtualGL-2.6.5-1.fc33
awscli-1.18.221-1.fc33
composer-2.0.9-1.fc33
dl-fedora-0.7.6-1.fc33
firefox-85.0-4.fc33
gap-pkg-digraphs-1.4.0-1.fc33
golang-github-linkedin-goavro-2.10.0-3.fc33
golang-gvisor-20201216.0-3.20210114git6cc587a.fc33
iptables-1.8.5-5.fc33
koji-1.23.1-1.fc33
libabigail-1.8.1-1.fc33
libplacebo-2.72.2-1.fc33
libreoffice-7.0.4.2-7.fc33
lua-filesystem-1.8.0-2.fc33
lua-readline-2.9-3.fc33
luarocks-3.5.0-1.fc33
magic-8.3.122-1.fc33
mingw-SDL2-2.0.12-3.fc33
mingw-binutils-2.34-7.fc33
mutt-2.0.2-2.fc33
nftables-0.9.3-8.fc33
nss-pem-1.0.7-1.fc33
osbuild-24-1.fc33
p11-kit-0.23.22-2.fc33
polymake-4.3-2.fc33
python-amqp-5.0.5-1.fc33
python-boto3-1.16.61-1.fc33
python-botocore-1.19.61-1.fc33
sddm-0.19.0-5.fc33
thunderbird-78.7.0-1.fc33
udiskie-2.3.2-1.fc33
vdr-graphlcd-1.0.3-1.fc33
zabbix-5.0.7-3.fc33
Details about builds:
================================================================================
VirtualGL-2.6.5-1.fc33 (FEDORA-2021-a813abeddd)
A toolkit for displaying OpenGL applications to thin clients
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Gary Gatling <gsgatlin(a)ncsu.edu> - 2.6.5-1
- Update to 2.6.5
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1920833 - Version 2.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1920833
--------------------------------------------------------------------------------
================================================================================
awscli-1.18.221-1.fc33 (FEDORA-2021-27d0ea1045)
Universal Command Line Environment for AWS
--------------------------------------------------------------------------------
Update Information:
Latest update.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1.18.221-1
- 1.18.221
* Wed Jan 27 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1.18.220-1
- 1.18.220
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.18.219-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1921527 - python-boto3-1.16.61 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1921527
[ 2 ] Bug #1921528 - python-botocore-1.19.61 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1921528
--------------------------------------------------------------------------------
================================================================================
composer-2.0.9-1.fc33 (FEDORA-2021-8e42732611)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.9** - 2021-01-27 * Added warning if the curl extension is not
enabled as it significantly degrades performance * Fixed InstalledVersions to
report all packages when several vendor dirs are present in the same runtime *
Fixed download speed when downloading large files * Fixed `archive` and path
repo copies mishandling some .gitignore paths * Fixed root package classes not
being available to the plugins/scripts during the initial install * Fixed
cache writes to be atomic and better support multiple Composer processes running
in parallel * Fixed preg jit issues when `config` or `require` modifies large
composer.json files * Fixed compatibility with envs having open_basedir
restrictions * Fixed exclude-from-classmap causing regex issues when having
too many paths * Fixed compatibility issue with Symfony 4/5 * Several small
performance and debug output improvements
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Remi Collet <remi(a)remirepo.net> - 2.0.9-1
- update to 2.0.9
- switch to Symfony 4
- switch to phpunit9
--------------------------------------------------------------------------------
================================================================================
dl-fedora-0.7.6-1.fc33 (FEDORA-2021-f9e1492ae5)
Fedora image download tool
--------------------------------------------------------------------------------
Update Information:
- improve help text for releases related for Beta and RCs (#1) - if
~/Downloads/iso/ exists then download to it otherwise ~/Downloads/ - support ELN
boot.iso
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 27 2021 Jens Petersen <petersen(a)redhat.com> - 0.7.6-1
- improve help text for releases related for Beta and RCs (#1)
- if ~/Downloads/iso/ exists then download to it otherwise ~/Downloads/
- support ELN boot.iso
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1 - test bug
https://bugzilla.redhat.com/show_bug.cgi?id=1
--------------------------------------------------------------------------------
================================================================================
firefox-85.0-4.fc33 (FEDORA-2021-750c85601a)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
Fixes startup crash.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 26 2021 Martin Stransky <stransky(a)redhat.com> - 85.0-4
- Added fix for mozbz#1679933 - startup crash
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 85.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gap-pkg-digraphs-1.4.0-1.fc33 (FEDORA-2021-047d14356e)
GAP package for digraphs and multidigraphs
--------------------------------------------------------------------------------
Update Information:
See
https://github.com/digraphs/Digraphs/releases/tag/v1.4.0 for the changes in
this release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Jerry James <loganjerry(a)gmail.com> - 1.4.0-1
- Version 1.4.0
- Disable tests on 32-bit ARM due to memory exhaustion
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1921360 - gap-pkg-digraphs-1.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1921360
--------------------------------------------------------------------------------
================================================================================
golang-github-linkedin-goavro-2.10.0-3.fc33 (FEDORA-2021-575c096c44)
Library that encodes and decodes Avro data
--------------------------------------------------------------------------------
Update Information:
Add alternate import path
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.10.0-3
- Add alternate import path
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-gvisor-20201216.0-3.20210114git6cc587a.fc33 (FEDORA-2021-6464ba32c3)
A container sandbox runtime focused on security, efficiency, and ease of use
--------------------------------------------------------------------------------
Update Information:
Fix the vendoring of
github.com/bazelbuild/rules_go
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 20201216.0-3
- Fix the vendoring of
github.com/bazelbuild/rules_go
- Close: rhbz#1917351
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
20201216.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917351 - F34FailsToInstall: golang-gvisor-devel
https://bugzilla.redhat.com/show_bug.cgi?id=1917351
--------------------------------------------------------------------------------
================================================================================
iptables-1.8.5-5.fc33 (FEDORA-2021-d754572f0c)
Tools for managing Linux kernel packet filtering capabilities
--------------------------------------------------------------------------------
Update Information:
ebtables: Exit gracefully on invalid table names
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Phil Sutter <psutter(a)redhat.com> - 1.8.5-5
- ebtables: Exit gracefully on invalid table names
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1908259 - ebtables: nft-cache.c:389: fetch_chain_cache: Assertion `t'
failed. (core dumped)
https://bugzilla.redhat.com/show_bug.cgi?id=1908259
--------------------------------------------------------------------------------
================================================================================
koji-1.23.1-1.fc33 (FEDORA-2021-e270e2ae88)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Update to bugfix release 1.23.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Kevin Fenzi <kevin(a)scrye.com> - 1.23.1-1
- Update to 1.23.1. Fixes rhbz#1917340
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.23.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sun Jan 17 2021 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 1.23.0-3
- Fixup compatibility of kojid with koji-hub 1.21
--------------------------------------------------------------------------------
================================================================================
libabigail-1.8.1-1.fc33 (FEDORA-2021-5fbee5fad3)
Set of ABI analysis tools
--------------------------------------------------------------------------------
Update Information:
Update to upstream fixes up to libabigail-1.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 27 2021 Dodji Seketeli <dodji(a)redhat.com> - 1.8.1-1
- Update to upstream fixes up to libabigail-1.8.1
This encompasses this fixes, compared to the last 1.8 release:
ir: Add better comments to types_have_similar_structure
mainpage: Update web page for 1.8 release
Bug 26992 - Try harder to resolve declaration-only classes
Bug 27204 - potential loss of some aliased ELF function symbols
Ignore duplicated functions and those not associated with ELF symbols
Bug 27236 - Pointer comparison wrongly fails because of typedef change
Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
dwarf-reader: Support fast DW_FORM_line_strp string comparison
gen-changelog.py: Update call to subprocess.Popen & cleanup
Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
abidiff: support --dump-diff-tree with --leaf-changes-only
ir: Arrays are indirect types for type structure similarity purposes
Add qualifier / typedef / array / pointer test
abg-ir: Optimize calls to std::string::find() for a single char.
abipkgdiff: Address operator precedence warning
--------------------------------------------------------------------------------
================================================================================
libplacebo-2.72.2-1.fc33 (FEDORA-2021-d8be7b4057)
Reusable library for GPU-accelerated video/image rendering primitives
--------------------------------------------------------------------------------
Update Information:
- Update
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Leigh Scott <leigh123linux(a)gmail.com> - 2.72.2-1
- Update to 2.72.2
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.72.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libreoffice-7.0.4.2-7.fc33 (FEDORA-2021-84936d80cd)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
- text not line wrapped in help browser
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 27 2021 Caol��n McNamara <caolanm(a)redhat.com> - 1:7.0.4.2-7
- Resolves: rhbz#1916539 text not wrapping in right hand help brower pane
* Mon Jan 25 2021 Caol��n McNamara <caolanm(a)redhat.com> - 1:7.0.4.2-6
- really rebuild for Boost 1.75
* Fri Jan 22 2021 Jonathan Wakely <jwakely(a)redhat.com> - 1:7.0.4.2-5
- Rebuilt for Boost 1.75
* Fri Jan 15 2021 Caol��n McNamara <caolanm(a)redhat.com> - 1:7.0.4.2-4
- rebuild for poppler
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1916539 - LibreOffice Help, if customized for Fedora, in right-hand panel
lacks scrolling
https://bugzilla.redhat.com/show_bug.cgi?id=1916539
--------------------------------------------------------------------------------
================================================================================
lua-filesystem-1.8.0-2.fc33 (FEDORA-2021-01aeb6cf2b)
File System Library for the Lua Programming Language
--------------------------------------------------------------------------------
Update Information:
## Version 1.8.0 [22/Apr/2020] - Lua 5.4 support - Fallback to _POSIX_PATH_MAX
when MAXPATHLEN is not avaliable - Fixed memory leak in case of realloc failure
## Version 1.7.0 [15/Sep/2017] - symlinkattributes function now provides
'target' field, containing name of the file that the symlink points to. -
attributes, symlinkattributes, touch, mkdir, and rmdir functions now return
system-dependent error code as the third value on error. - Fixed detection of
closed files for Lua 5.2+ in setmode, lock, and unlock functions. - Fixed
various compiler warnings.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 27 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 1.8.0-2
- compat: Add Requires on lua(abi) for older releases
* Wed Jan 27 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 1.8.0-1
- Update to 1.8.0
- Simplify spec to use new Lua macros (thanks robert(a)fp.o)
- Use standard make macros (thanks tbaeder(a)fp.o)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.3-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1914685 - lua-filesystem-1.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1914685
--------------------------------------------------------------------------------
================================================================================
lua-readline-2.9-3.fc33 (FEDORA-2021-f353e6a60a)
Lua interface to the readline and history libraries
--------------------------------------------------------------------------------
Update Information:
Upstream reissued 2.8 with fixed version number. Fixed packaging so on Fedora <
33 and RHEL < 9 it correctly requires `lua(abi)` ---- - Update to 2.8 - Fix
the reported version, it was not bumped for 2.8 - Use Fedora-specific linker
flags (thanks to Robert Scheck <robert(a)fedoraproject.org>) - Add basic
loadability checks (Robert) - Pull in lua-rpm-macros explicitly on EL <= 7
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 27 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 2.9-3
- Fix lua(abi) logic
* Wed Jan 27 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 2.9-2
- Add Requires on lua(abi) for older releases
* Wed Jan 27 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 2.9-1
- Update to 2.9
* Tue Jan 26 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 2.8-1
- Update to 2.8
- Fix the reported version, it was not bumped for 2.8
- Use Fedora-specific linker flags (thanks to Robert Scheck
<robert(a)fedoraproject.org>)
- Add basic loadability checks (Robert)
- Pull in lua-rpm-macros explicitly on EL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1914667 - Lack of Fedora-specific linker flags
https://bugzilla.redhat.com/show_bug.cgi?id=1914667
[ 2 ] Bug #1914686 - lua-readline-2.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1914686
[ 3 ] Bug #1920958 - lua-readline-2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1920958
--------------------------------------------------------------------------------
================================================================================
luarocks-3.5.0-1.fc33 (FEDORA-2021-0b6c08cf57)
A deployment and management system for Lua modules
--------------------------------------------------------------------------------
Update Information:
## Packaging change This package is now `noarch`, obsoleting the previous arched
package so it can be upgraded. `/usr/lib` vs `/usr/lib64` detection is done
dynamically at runtime; manifests go to `/usr/lib/luarocks`. ## What's new in
LuaRocks 3.5.0 This is a small release: * Added support for MSYS2 and
Mingw-w64 * Reverted the change in MSVC environment variable set up script *
Fixes a bug where `--verbose` raised an exception with a nil argument * Added
proper error messages when lua.h is invalid ## What's new in LuaRocks 3.4.0
### Features * `luarocks make` now supports `--only-deps` * `luarocks make` new
flag: `--no-install`, which only performs the compilation step * `--deps-only`
is now an alias for `--only-deps` (useful in case you always kept getting it
wrong, like me!) * `luarocks build` and `luarocks make` now support using
`--pin` and `--only-deps` at the same time, to produce a lock file of
dependencies in use without installing the main package. * `luarocks show` can
now accept a substring of the rock's name, like `list`. * `luarocks config`:
when running without system-wide permissions, try storing the config locally
by default. Also, if setting both lua_dir and --lua-version explicitly,
auto-switch the default Lua version. * `luarocks` with no arguments now prints
more info about the location of the Lua interpreter which is being used *
`luarocks new_version` now keeps the old URL if the MD5 doesn't change. *
`DEPS_DIR` is now accepted as a generic variable for dependency directories
(e.g. `luarocks install foo DEPS_DIR=/usr/local`) * Handle quoting of arguments
at the application level, for improved Windows support * All-in-one binary
bundles `dkjson`, so it runs `luarocks upload` without requiring any
additional dependencies. * Tweaks for Terra compatibility ### Fixes * win32:
generate proper temp filename * No longer assume that Lua 5.3 is built with
compat libraries and bundles `bit32` * `luarocks show`: do not crash when
rockspec description is empty * When detecting the location of `lua.h`, check
that its version matches the version of Lua being used * Fail gracefully when
a third-party tool (wget, etc.) is missing * Fix logic for disabling mirrors
that return network errors * Fix detection of Lua path based on arg variable *
Fix regression on dependency matching of luarocks.loader
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 27 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 3.5.0-1
- Update to 3.5.0
- This package is now noarch, tested on x86_64 and i386
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1882822 - luarocks-3.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1882822
--------------------------------------------------------------------------------
================================================================================
magic-8.3.122-1.fc33 (FEDORA-2021-51507a8cef)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.3.122 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.3.122-1
- 8.3.122
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.3.117-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mingw-SDL2-2.0.12-3.fc33 (FEDORA-2021-9d65b22041)
MinGW Windows port of SDL2 cross-platform multimedia library
--------------------------------------------------------------------------------
Update Information:
Backport patches for CVE-2020-14409, CVE-2020-14410.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Sandro Mani <manisandro(a)gmail.com> - 2.0.12-3
- Backport patch for CVE-2020-14409
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1921357 - CVE-2020-14409 mingw-SDL2: SDL: Integer overflow in SDL_BlitCopy in
video/SDL_blit_copy.c via a crafted .BMP file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1921357
[ 2 ] Bug #1921874 - CVE-2020-14410 mingw-SDL2: SDL: Heap-based buffer over-read in
Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1921874
--------------------------------------------------------------------------------
================================================================================
mingw-binutils-2.34-7.fc33 (FEDORA-2021-354441fcdd)
Cross-compiled version of binutils for Win32 and Win64 environments
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-20197
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Richard W.M. Jones <rjones(a)redhat.com> - 2.34-7
- Backport fixes for CVE-2021-20197.
- Bump and rebuild for s390.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.34-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913743 - CVE-2021-20197 binutils: race window allows users to own arbitrary
files
https://bugzilla.redhat.com/show_bug.cgi?id=1913743
--------------------------------------------------------------------------------
================================================================================
mutt-2.0.2-2.fc33 (FEDORA-2021-3dc8843509)
A text mode mail user agent
--------------------------------------------------------------------------------
Update Information:
update mutt onto 2.0.2, by default is ssl_force_tls switched off
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
nftables-0.9.3-8.fc33 (FEDORA-2021-f0585fb82a)
Netfilter Tables userspace utillites
--------------------------------------------------------------------------------
Update Information:
Fixes for 'include' statement
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Phil Sutter <psutter(a)redhat.com> - 1:0.9.3-8
- scanner: use list_is_first() from scanner_pop_indesc()
- scanner: remove parser_state->indesc_idx
- scanner: fix indesc_list stack to be in the correct order
- Inclusion depth was computed incorrectly for glob includes.
- scanner: remove parser_state->indescs static array
- scanner: move indesc list append in scanner_push_indesc
- scanner: move the file descriptor to be in the input_descriptor structure
- scanner: incorrect error reporting after file inclusion
- tests: monitor: use correct $nft value in EXIT trap
--------------------------------------------------------------------------------
================================================================================
nss-pem-1.0.7-1.fc33 (FEDORA-2021-09f3a0a89e)
PEM file reader for Network Security Services (NSS)
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Kamil Dudka <kdudka(a)redhat.com> 1.0.7-1
- update to latest upstream bugfix release
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
osbuild-24-1.fc33 (FEDORA-2021-1f070f8684)
A build system for OS images
--------------------------------------------------------------------------------
Update Information:
Upstream release 24
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Christian Kellner <ckellner(a)redhat.com> - 24-1
- Upstream release 24
- Turn on dependency generator for everything but runners
- Include new 'input' binaries
--------------------------------------------------------------------------------
================================================================================
p11-kit-0.23.22-2.fc33 (FEDORA-2021-b848e92d08)
Library for loading and sharing PKCS#11 modules
--------------------------------------------------------------------------------
Update Information:
Suppress intentional memleak in getprogname emulation
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 26 2021 Daiki Ueno <dueno(a)redhat.com> - 0.23.22-2
- Suppress intentional memleak in getprogname emulation (#1905581)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1905581 - Memory leak reported by 389-ds cmocka tests
https://bugzilla.redhat.com/show_bug.cgi?id=1905581
--------------------------------------------------------------------------------
================================================================================
polymake-4.3-2.fc33 (FEDORA-2021-2812f7602a)
Algorithms on convex polytopes and polyhedra
--------------------------------------------------------------------------------
Update Information:
This is a simple rebuild for perl 5.32.1.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 25 2021 Jerry James <loganjerry(a)gmail.com> - 4.3-2
- Rebuild for perl 5.32.1
--------------------------------------------------------------------------------
================================================================================
python-amqp-5.0.5-1.fc33 (FEDORA-2021-904397f5c4)
Low-level AMQP client for Python (fork of amqplib)
--------------------------------------------------------------------------------
Update Information:
python-amqp-5.0.5 ---- python-amqp 5.0.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 5.0.5-1
- python-amqp 5.0.5
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Thu Jan 21 2021 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 5.0.3-1
- python-amqp 5.0.3
--------------------------------------------------------------------------------
================================================================================
python-boto3-1.16.61-1.fc33 (FEDORA-2021-27d0ea1045)
The AWS SDK for Python
--------------------------------------------------------------------------------
Update Information:
Latest update.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1.16.61-1
- 1.16.61
* Wed Jan 27 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1.16.60-1
- 1.16.60
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.16.59-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1921527 - python-boto3-1.16.61 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1921527
[ 2 ] Bug #1921528 - python-botocore-1.19.61 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1921528
--------------------------------------------------------------------------------
================================================================================
python-botocore-1.19.61-1.fc33 (FEDORA-2021-27d0ea1045)
Low-level, data-driven core of boto 3
--------------------------------------------------------------------------------
Update Information:
Latest update.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1.19.61-1
- 1.19.61
* Wed Jan 27 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1.19.60-1
- 1.19.60
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.19.59-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1921527 - python-boto3-1.16.61 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1921527
[ 2 ] Bug #1921528 - python-botocore-1.19.61 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1921528
--------------------------------------------------------------------------------
================================================================================
sddm-0.19.0-5.fc33 (FEDORA-2021-b71b8a85c8)
QML based X11 desktop manager
--------------------------------------------------------------------------------
Update Information:
Sync latest upstream work on autologin fixes and Xauth improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Rex Dieter <rdieter(a)fedoraproject.org> - 0.19.0-5
- pull in upstream fix for autologin (sddm issue #1348)
* Tue Jan 26 2021 Rex Dieter <rdieter(a)fedoraproject.org> - 0.19.0-4
- Refresh Xauth patch from upstream PR
- minor .spec cosmetics
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1919696 - Fedora Kde Plasma spin won't boot anymore after latest sddm
update
https://bugzilla.redhat.com/show_bug.cgi?id=1919696
--------------------------------------------------------------------------------
================================================================================
thunderbird-78.7.0-1.fc33 (FEDORA-2021-67a539137d)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 27 2021 Jan Horak <jhorak(a)redhat.com> - 78.7.0-1
- Update to 78.7.0 build2
* Wed Jan 20 2021 Orion Poplawski <orion(a)nwra.com> - 78.6.1-2
- Own /usr/lib*/thunderbird/gtk2 directory
- Provide /etc/thunderbird/pref (bug #1525709)
- Filter package provides and requires
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1920563 - thunderbird-78.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1920563
--------------------------------------------------------------------------------
================================================================================
udiskie-2.3.2-1.fc33 (FEDORA-2021-427bd1d575)
Removable disk auto-mounter
--------------------------------------------------------------------------------
Update Information:
Update to version 2.3.2:
https://github.com/coldfix/udiskie/blob/master/CHANGES.rst#232 ---- Upgrade to
version 2.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Jan Stan��k <jstanek(a)redhat.com> - 2.3.2-1
- Upgrade to version 2.3.2
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Fri Jan 22 2021 Jan Stan��k <jstanek(a)redhat.com> - 2.3.0-1
- Upgrade to version 2.3.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1919035 - udiskie-2.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1919035
[ 2 ] Bug #1921308 - udiskie-2.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1921308
--------------------------------------------------------------------------------
================================================================================
vdr-graphlcd-1.0.3-1.fc33 (FEDORA-2021-ac17996aef)
VDR plugin: Output to graphic LCD
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.3-1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1.0.3-1
- Update to 1.0.3
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1921834 - vdr-graphcld 1.0.3 released
https://bugzilla.redhat.com/show_bug.cgi?id=1921834
--------------------------------------------------------------------------------
================================================================================
zabbix-5.0.7-3.fc33 (FEDORA-2021-a2aa96ff78)
Open-source monitoring solution for your IT infrastructure
--------------------------------------------------------------------------------
Update Information:
Fix DejaVuSans.ttf symlink ---- Update to 5.0.7
https://www.zabbix.com/rn/rn5.0.7
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 28 2021 Orion Poplawski <orion(a)nwra.com> - 1:5.0.7-3
- Handle new dejavu-sans-fonts directory (bz#1921010)
* Thu Jan 28 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:5.0.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sun Jan 24 2021 Orion Poplawski <orion(a)nwra.com> - 1:5.0.7-1
- Update to 5.0.7
* Sun Dec 13 2020 Orion Poplawski <orion(a)nwra.com> - 1:5.0.6-1
- Update to 5.0.6
* Tue Sep 15 2020 Volker Froehlich <volker27(a)gmx.at> - 1:5.0.3-2
- Rebuild for libevent soname bump
* Tue Sep 1 2020 Orion Poplawski <orion(a)nwra.com> - 1:5.0.3-1
- Update to 5.0.3
* Tue Sep 1 2020 Orion Poplawski <orion(a)nwra.com> - 1:5.0.2-1
- Update to 5.0.2
- Enforce Fedora crypto policy
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1921010 - zabbix-web 5.0.7 - wrong font symlink
https://bugzilla.redhat.com/show_bug.cgi?id=1921010
--------------------------------------------------------------------------------