The following Fedora 33 Security updates need testing:
Age URL
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f3ebd7554c
radare2-5.1.1-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-28f97e232d
bind-9.11.28-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4e92349087
nagios-4.4.6-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-20b9876f11
rygel-0.40.1-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e9478617ae
ansible-2.9.18-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b1843407ca
python3.9-3.9.2-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7143aca8cb
kernel-5.10.18-200.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9107eeb95c
screen-4.8.0-5.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aa764a8531
chromium-88.0.4324.182-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fba11d37ee dpdk-20.11-1.fc33
openvswitch-2.15.0-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ef8c2acfce isync-1.4.1-1.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
28
https://bodhi.fedoraproject.org/updates/FEDORA-2021-039b93d5e4
dnsmasq-2.84-1.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-06e61a3c53
osinfo-db-20210215-1.fc33
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d0cf00b5aa pungi-4.2.8-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-20b9876f11
rygel-0.40.1-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7143aca8cb
kernel-5.10.18-200.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-458541fd0f gjs-1.66.2-3.fc33
mozjs78-78.8.0-2.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1240eb977c
gtk3-3.24.26-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a058872d1d fwupd-1.5.7-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7bf9501bb9
nfs-utils-2.5.3-0.fc33
The following builds have been pushed to Fedora 33 updates-testing
ceph-15.2.9-1.fc33
composer-2.0.11-1.fc33
dblatex-0.3.12-2.fc33
emacs-dockerfile-mode-1.4-1.fc33
erlang-23.2.6-1.fc33
grammalecte-2.1.1-1.fc33
growlight-1.2.31-2.fc33
hplip-3.21.2-1.fc33
icecat-78.8.0-2.rh1.fc33
kata-agent-1.12.1-1.fc33
kata-osbuilder-1.12.1-1.fc33
kata-proxy-1.12.1-1.fc33
kata-runtime-1.12.1-2.fc33
kata-shim-1.12.1-1.fc33
libabigail-1.8.2-1.fc33
libsndfile-1.0.31-3.fc33
magic-8.3.132-1.fc33
mame-0.229-1.fc33
midori-9.0-7.fc33
mupdf-1.18.0-5.fc33
nordugrid-arc-6.10.2-1.fc33
nss-3.62.0-1.fc33
odhcp6c-0-0.11.20210224git53f07e9.fc33
openscad-2019.05-13.fc33
pcsc-lite-1.9.1-1.fc33
perl-Future-AsyncAwait-0.49-1.fc33
php-laminas-mime-2.8.0-1.fc33
php-laminas-progressbar-2.8.0-1.fc33
php-laminas-serializer-2.10.1-1.fc33
php-laminas-soap-2.9.0-1.fc33
php-laminas-xml2json-3.2.0-1.fc33
pipewire-0.3.22-4.fc33
python-PyMuPDF-1.18.8-2.fc33
python-typeshed-0.1-0.20191011git2.fc33
python3.5-3.5.10-5.fc33
qelectrotech-0.80-1.fc33
rpminspect-1.3.1-1.fc33
rpminspect-data-fedora-1.3-1.fc33
rubygem-rmagick-4.2.2-1.fc33
s3fs-fuse-1.89-1.fc33
stress-ng-0.12.03-2.fc33
tmt-1.3.1-1.fc33
vdr-osdteletext-1.0.0-1.fc33
xrootd-5.1.0-1.fc33
zathura-pdf-mupdf-0.3.6-6.fc33
Details about builds:
================================================================================
ceph-15.2.9-1.fc33 (FEDORA-2021-93ff9e9103)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
notes=Security fix for CVE-2020-27839, CVE-2020-25678 ceph 15.2.9 GA
bugs=1892109,1900681,1901330,1906954 Note: Bodhi does not allow me to find/enter
1892109 or 1901330 in the Bugs section.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:15.2.9-1
- ceph 15.2.9 GA
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1900681 - CVE-2020-25678 ceph: mgr modules' passwords are in clear text
in mgr logs [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1900681
[ 2 ] Bug #1906954 - CVE-2020-27839 ceph: ceph-dashboard: Don't use Browser's
LocalStorage for storing JWT but Secure Cookies with proper HTTP Headers [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1906954
--------------------------------------------------------------------------------
================================================================================
composer-2.0.11-1.fc33 (FEDORA-2021-8733c56daf)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.11** - 2021-02-24 * Reverted "Fixed runtime autoloader
registration (for plugins and script handlers) to prefer the project
dependencies over the bundled Composer ones" as it caused more problems than
expected ---- **Version 2.0.10** - 2021-02-23 * Added
COMPOSER_MAX_PARALLEL_HTTP to let people set a lower amount of parallel requests
if needed * Fixed autoloader registration when plugins are loaded, which may
impact plugins relying on this bug (if you use `symfony/flex` make sure you
upgrade it to 1.12.2+ to fix `dump-env` issues) * Fixed `exec` command
suppressing output in some circumstances * Fixed Windows/cmd.exe support for
script handlers defined as `path/to/foo`, which are now rewritten internally to
`path\to\foo` when needed * Fixed bin handling on Windows for PHP scripts, to
more closely match symlinks and allow `@php vendor/bin/foo` to work cross-
platform * Fixed Git for Windows/Git Bash not being detected correctly as an
interactive shell (regression since 2.0.7) * Fixed regression handling some
private Bitbucket repository clones * Fixed Ctrl-C/SIGINT handling during
downloads to correctly abort as soon as possible * Fixed runtime autoloader
registration (for plugins and script handlers) to prefer the project
dependencies over the bundled Composer ones * Fixed numeric default branches
being aliased as 9999999-dev internally. This alias now only applies to default
branches being non-numeric (e.g. `dev-main`) * Fixed support for older lib-
sodium versions * Fixed various minor issues
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Remi Collet <remi(a)remirepo.net> - 2.0.11-1
- update to 2.0.11
* Tue Feb 23 2021 Remi Collet <remi(a)remirepo.net> - 2.0.10-1
- update to 2.0.10
--------------------------------------------------------------------------------
================================================================================
dblatex-0.3.12-2.fc33 (FEDORA-2021-5a6ed5d7ea)
DocBook to LaTeX/ConTeXt Publishing
--------------------------------------------------------------------------------
Update Information:
replace inkscape by rsvg (#bz 1833047)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 18 2021 Michael J Gruber <mjg(a)fedoraproject.org> - 0.3.12-2
- replace inkscape by rsvg (#bz 1833047)
* Thu Feb 18 2021 Michael J Gruber <mjg(a)fedoraproject.org> - 0.3.12-1
- rebase to 0.3.12
- follow yet another package/tree renaming
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.11-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1833047 - dblatex cannot convert png to pdf using inkscape 1.x
https://bugzilla.redhat.com/show_bug.cgi?id=1833047
[ 2 ] Bug #1833095 - dblatex: TypeError: can't concat str to bytes
https://bugzilla.redhat.com/show_bug.cgi?id=1833095
--------------------------------------------------------------------------------
================================================================================
emacs-dockerfile-mode-1.4-1.fc33 (FEDORA-2021-222ddd0f46)
An emacs mode for handling Dockerfiles
--------------------------------------------------------------------------------
Update Information:
The old pattern would match the following filenames: - `*Dockerfile` -
`*Dockerfile.*` This is because the pattern does not start with a slash
indicating the beginning of the basename. Personally this led to a few false
positives, like for example "siren-dockerfile.el" that sets up and configures
dockerfile-mode in my Emacs configuration. This change restricts the patterns
to: - `Dockerfile` - `Dockerfile.*` - `*.dockerfile` I believe this is still
wide enough to capture all common naming conventions for Dockerfiles.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.4-1
- Update to 1.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1930584 - emacs-dockerfile-mode-1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1930584
--------------------------------------------------------------------------------
================================================================================
erlang-23.2.6-1.fc33 (FEDORA-2021-78d2fb6d5c)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
Erlang ver. 23.2.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Peter Lemenkov <lemenkov(a)gmail.com> - 23.2.6-1
- Ver. 23.2.6
--------------------------------------------------------------------------------
================================================================================
grammalecte-2.1.1-1.fc33 (FEDORA-2021-fbbb742dd1)
French grammar checker
--------------------------------------------------------------------------------
Update Information:
- New rules. - Clean many false positives. - [Graphspell] spelling suggestion
engine improvements
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 2.1.1-1
- Update to 2.1.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1931486 - grammalecte-2.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1931486
--------------------------------------------------------------------------------
================================================================================
growlight-1.2.31-2.fc33 (FEDORA-2021-24e5f78a14)
Disk manipulation and system setup tool
--------------------------------------------------------------------------------
Update Information:
New upstream 1.2.31.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 16 2021 Nick Black <dankamongmen(a)gmail.com> - 1.2.31-1
- New upstream release, fixes terminalless case for growlight-readline
* Mon Feb 15 2021 Nick Black <dankamongmen(a)gmail.com> - 1.2.30-1
- New upstream release
* Sun Feb 14 2021 Nick Black <dankamongmen(a)gmail.com> - 1.2.28-1
- New upstream release
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.27-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
hplip-3.21.2-1.fc33 (FEDORA-2021-566f59fdf0)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
1929977 - hplip-3.21.2 is available get out of hp-setup if the device is a
standalone scanner remove the old search algorithm
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 19 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.21.2-1
- 1929977 - hplip-3.21.2 is available
* Fri Feb 19 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.20.11-6
- get out of hp-setup if the device is a standalone scanner
* Thu Feb 18 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.20.11-6
- remove the old search algorithm
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1929977 - hplip-3.21.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1929977
--------------------------------------------------------------------------------
================================================================================
icecat-78.8.0-2.rh1.fc33 (FEDORA-2021-6f199a83e5)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Release 78.8.0-rh1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 23 2021 Antonio Trande <sagitter(a)fedoraproject.org> - 78.8.0-2.rh1
- Exclude Power64
- Fix build option for s390x
* Tue Feb 23 2021 Antonio Trande <sagitter(a)fedoraproject.org> - 78.8.0-1.rh1
- Mozilla Release 78.8.0ESR
--------------------------------------------------------------------------------
================================================================================
kata-agent-1.12.1-1.fc33 (FEDORA-2021-a9f1d937d6)
Kata guest agent
--------------------------------------------------------------------------------
Update Information:
Update to version 1.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Eduardo Lima (Etrunko) <etrunko(a)redhat.com> - 1.12.1-1
- Update to version 1.12.1
--------------------------------------------------------------------------------
================================================================================
kata-osbuilder-1.12.1-1.fc33 (FEDORA-2021-db94159303)
Kata guest initrd and image build scripts
--------------------------------------------------------------------------------
Update Information:
Update to version 1.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Eduardo Lima (Etrunko) <etrunko(a)redhat.com> - 1.12.1-1
- Update to version 1.12.1
--------------------------------------------------------------------------------
================================================================================
kata-proxy-1.12.1-1.fc33 (FEDORA-2021-24ad0cb033)
Proxy for Kata Containers
--------------------------------------------------------------------------------
Update Information:
Update to version 1.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Eduardo Lima (Etrunko) <etrunko(a)redhat.com> - 1.12.1-1
- Update to version 1.12.1
--------------------------------------------------------------------------------
================================================================================
kata-runtime-1.12.1-2.fc33 (FEDORA-2021-500c1f44aa)
Kata runtime to run containers in virtual machines
--------------------------------------------------------------------------------
Update Information:
Update to version 1.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Eduardo Lima (Etrunko) <etrunko(a)redhat.com> - 1.12.1-1
- Update to version 1.12.1
--------------------------------------------------------------------------------
================================================================================
kata-shim-1.12.1-1.fc33 (FEDORA-2021-39df4ae93a)
A shim running in the host for teh Kata Containers project
--------------------------------------------------------------------------------
Update Information:
Update to version 1.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Eduardo Lima (Etrunko) <etrunko(a)redhat.com> - 1.12.1-1
- Update to version 1.12.1
--------------------------------------------------------------------------------
================================================================================
libabigail-1.8.2-1.fc33 (FEDORA-2021-763e12ce98)
Set of ABI analysis tools
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.8.2 point release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Dodji Seketeli <dodji(a)redhat.com> - 1.8.2-1
- Update to upstream 1.8.2 point release
--------------------------------------------------------------------------------
================================================================================
libsndfile-1.0.31-3.fc33 (FEDORA-2021-e071fdf850)
Library for reading and writing sound files
--------------------------------------------------------------------------------
Update Information:
Add back missing support for flac, ogg and vorbis ---- updated to new upstream
release 1.0.31
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 22 2021 Michal Hlavinka <mhlavink(a)redhat.com> - 1.0.31-3
- add opus-devel BR to satisfy configure requirements check (#1931251)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1931251 - libsndfile-1.0.31-1.fc32.x86_64 has shipped without support for
flac, ogg or vorbis.
https://bugzilla.redhat.com/show_bug.cgi?id=1931251
--------------------------------------------------------------------------------
================================================================================
magic-8.3.132-1.fc33 (FEDORA-2021-59514ed67b)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.3.132 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.3.132-1
- 8.3.132
* Sun Feb 21 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.3.130-1
- 8.3.130
--------------------------------------------------------------------------------
================================================================================
mame-0.229-1.fc33 (FEDORA-2021-bfb33c1f6d)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest upstream release: *
https://www.mamedev.org/?p=496
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.229-1
- Update to 0.229
--------------------------------------------------------------------------------
================================================================================
midori-9.0-7.fc33 (FEDORA-2021-ca5879b437)
a lightweight, fast and free web browser
--------------------------------------------------------------------------------
Update Information:
Bugfix for / not working correctly in url bar.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Kevin Fenzi <kevin(a)scrye.com> - 9.0-7
- Add patch to fix / and urlbar issue. rhbz#1933198
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1933198 - '/'-keyboard shortcut (find) is blocking entering manual
URL
https://bugzilla.redhat.com/show_bug.cgi?id=1933198
--------------------------------------------------------------------------------
================================================================================
mupdf-1.18.0-5.fc33 (FEDORA-2021-572bb0f886)
A lightweight PDF viewer and toolkit
--------------------------------------------------------------------------------
Update Information:
CVE-2021-3407
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 23 2021 Michael J Gruber <mjg(a)fedoraproject.org> - 1.18.0-5
- CVE-2021-3407 (bz #1931964, bz#1931965)
* Tue Jan 26 2021 Michael J Gruber <mjg(a)fedoraproject.org> - 1.18.0-4
- (original date: Thu Oct 29 2020)
- remove obsolete patch
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.18.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1931964 - CVE-2021-3407 mupdf: Double free of object during linearization
https://bugzilla.redhat.com/show_bug.cgi?id=1931964
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-6.10.2-1.fc33 (FEDORA-2021-370c07d6f8)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
ARC 6.10.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.10.2-1
- Update to version 6.10.2
--------------------------------------------------------------------------------
================================================================================
nss-3.62.0-1.fc33 (FEDORA-2021-2c3da66ad5)
Network Security Services
--------------------------------------------------------------------------------
Update Information:
Update NSS to 3.62 for the next release of Firefox
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 23 2021 Bob Relyea <rrelyea(a)redhat.com> - 3.62.0-1
- Update to NSS 3.62.0
--------------------------------------------------------------------------------
================================================================================
odhcp6c-0-0.11.20210224git53f07e9.fc33 (FEDORA-2021-25391668e9)
Embedded DHCPv6 and RA client
--------------------------------------------------------------------------------
Update Information:
Update to commit 53f07e9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Juan Orti Alcaine <jortialc(a)redhat.com> -
0-0.11.20210224git53f07e9
- Update to commit 53f07e9
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.10.20201203gita7b2221
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openscad-2019.05-13.fc33 (FEDORA-2021-8349f28cb9)
The Programmers Solid 3D CAD Modeller
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-28599.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 2019.05-13
- Security fix for CVE-2020-28599
- Fixes: rhbz#1932557
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1932554 - CVE-2020-28599 openscad: Stack-based buffer overflow in
import_stl.cc:import_stl
https://bugzilla.redhat.com/show_bug.cgi?id=1932554
--------------------------------------------------------------------------------
================================================================================
pcsc-lite-1.9.1-1.fc33 (FEDORA-2021-87f057a79a)
PC/SC Lite smart card framework and applications
--------------------------------------------------------------------------------
Update Information:
New upstream release (#1932519)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Jakub Jelen <jjelen(a)redhat.com> - 1.9.1-1
- New upstream release (#1932519)
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1932519 - Update pcsc-lite to 1.9.1
https://bugzilla.redhat.com/show_bug.cgi?id=1932519
--------------------------------------------------------------------------------
================================================================================
perl-Future-AsyncAwait-0.49-1.fc33 (FEDORA-2021-57236eff45)
Deferred subroutine syntax for futures
--------------------------------------------------------------------------------
Update Information:
This release restores compatibility with a developmental perl. It also delivers
upstream tests in a dedicated subpackage.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Petr Pisar <ppisar(a)redhat.com> - 0.49-1
- 0.49 bump
- Package tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1932321 - perl-Future-AsyncAwait-0.49 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1932321
--------------------------------------------------------------------------------
================================================================================
php-laminas-mime-2.8.0-1.fc33 (FEDORA-2021-08345476e3)
Laminas Framework Mime component
--------------------------------------------------------------------------------
Update Information:
**Version 2.8.0** Added * Adds support for PHP 8.0. Removed * Removes
support for PHP versions prior to 7.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Remi Collet <remi(a)remirepo.net> - 2.8.0-1
- update to 2.8.0
- raise dependency on PHP 7.3
- switch to phpunit9
--------------------------------------------------------------------------------
================================================================================
php-laminas-progressbar-2.8.0-1.fc33 (FEDORA-2021-9fcbbc3102)
Laminas Framework ProgressBar component
--------------------------------------------------------------------------------
Update Information:
**Version 2.8.0** Added * Adds support for PHP 8.0. Removed * Removes
support for PHP versions prior to 7.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Remi Collet <remi(a)remirepo.net> - 2.8.0-1
- update to 2.8.0
- raise dependency on PHP 7.3
- switch to phpunit9
--------------------------------------------------------------------------------
================================================================================
php-laminas-serializer-2.10.1-1.fc33 (FEDORA-2021-127232af73)
Laminas Framework Serializer component
--------------------------------------------------------------------------------
Update Information:
**Version 2.10.1** Added * Adds support for PHP 8.0. * Adds the ability
to specify a "serializers" key in your application configuration that contains
service manager-style configuration for populating the serializer adapter plugin
manager; see the documentation for details. Removed * Drops support for PHP
versions earlier than 7.3 * Drops support for laminas/laminas-json versions
earlier than 3.1 * Drops support for laminas/laminas-stdlib versions earlier
than 3.2 * Drops support for lamians/laminas-math versions earlier than 3.3 *
Drops support for laminas/laminas-servicemanager versions earlier than 3.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Remi Collet <remi(a)remirepo.net> - 2.10.1-1
- update to 2.10.1
- raise dependency on PHP 7.3
- raise dependency on laminas-json 3.1
- raise dependency on laminas-stdlib 3.2
- switch to phpunit9
--------------------------------------------------------------------------------
================================================================================
php-laminas-soap-2.9.0-1.fc33 (FEDORA-2021-bbb777fd5a)
Laminas Framework Soap component
--------------------------------------------------------------------------------
Update Information:
**Version 2.9.0** Added * Adds support for PHP 8.0. Changed * The
package now explicitly requires the SOAP and DOM extensions, and suggests the
cURL extension when using with .NET SOAP implementations. Removed * Removes
support for PHP versions prior to 7.3. * Removes support for laminas-config
versions prior to 3.4. * Removes support for laminas-http versions prior to
2.14. * Removes support for laminas-stdlib versions prior to 3.3. *
Removes support for laminas-uri versions prior to 2.8.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Remi Collet <remi(a)remirepo.net> - 2.9.0-1
- update to 2.9.0
- raise dependency on PHP 7.3
- raise dependency on laminas-server 2.9
- raise dependency on laminas-stdlib 3.2
- raise dependency on laminas-uri 2.8
- raise dependency on laminas-zendframework-bridge 1.1
- switch to phpunit9
--------------------------------------------------------------------------------
================================================================================
php-laminas-xml2json-3.2.0-1.fc33 (FEDORA-2021-7beed12663)
Provides functionality for converting XML to JSON
--------------------------------------------------------------------------------
Update Information:
**Release Notes for 3.2.0** Added * Adds support for PHP 8.0. Removed *
Removes support for PHP versions prior to 7.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Remi Collet <remi(a)remirepo.net> - 3.2.0-1
- update to 3.2.0
- add dependency on simplexml extension
- raise dependency on PHP 7.3
- raise dependency on laminas-json 3.1
- raise dependency on laminas-xml 1.3
- switch to phpunit9
--------------------------------------------------------------------------------
================================================================================
pipewire-0.3.22-4.fc33 (FEDORA-2021-4d273f94b1)
Media Sharing Server
--------------------------------------------------------------------------------
Update Information:
Add patch to sample destroy use after free ---- Add some critical patches
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Wim Taymans <wtaymans(a)redhat.com> - 0.3.22-4
- Add patch to sample destroy use after free
* Wed Feb 24 2021 Wim Taymans <wtaymans(a)redhat.com> - 0.3.22-3
- Add patch for jack names
* Mon Feb 22 2021 Wim Taymans <wtaymans(a)redhat.com> - 0.3.22-2
- Add some critical patches
* Thu Feb 18 2021 Wim Taymans <wtaymans(a)redhat.com> - 0.3.22-1
- Update to 0.3.22
- disable sdl2 examples
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1925778 - pw-cli dump shows odd info on stderr
https://bugzilla.redhat.com/show_bug.cgi?id=1925778
[ 2 ] Bug #1931043 - [abrt] pipewire: refresh_auto_default_nodes():
pipewire-media-session killed by SIGSEGV
https://bugzilla.redhat.com/show_bug.cgi?id=1931043
--------------------------------------------------------------------------------
================================================================================
python-PyMuPDF-1.18.8-2.fc33 (FEDORA-2021-572bb0f886)
Python binding for MuPDF - a lightweight PDF and XPS viewer
--------------------------------------------------------------------------------
Update Information:
CVE-2021-3407
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Michael J Gruber <mjg(a)fedoraproject.org> - 1.18.8-2
- rebuild for mupdf CVE-2021-3407
* Sat Feb 6 2021 Scott Talbert <swt(a)techie.net> - 1.18.8-1
- Update to new upstream release 1.18.8 (#1924379)
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.18.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sat Jan 9 2021 Scott Talbert <swt(a)techie.net> - 1.18.6-1
- Update to new upstream release 1.18.6 (#1913766)
* Sun Dec 20 2020 Scott Talbert <swt(a)techie.net> - 1.18.5-1
- Update to new upstream release 1.18.5 (#1908813)
* Sat Nov 21 2020 Scott Talbert <swt(a)techie.net> - 1.18.4-1
- Update to new upstream release 1.18.4 (#1900148)
* Tue Nov 10 2020 Scott Talbert <swt(a)techie.net> - 1.18.3-1
- Update to new upstream release 1.18.3 (#1896141)
* Sun Nov 8 2020 Scott Talbert <swt(a)techie.net> - 1.18.2-1
- Update to new upstream release 1.18.2 (#1892160)
* Mon Oct 26 2020 Scott Talbert <swt(a)techie.net> - 1.18.1-1
- Update to new upstream release 1.18.1 (#1889179)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1931964 - CVE-2021-3407 mupdf: Double free of object during linearization
https://bugzilla.redhat.com/show_bug.cgi?id=1931964
--------------------------------------------------------------------------------
================================================================================
python-typeshed-0.1-0.20191011git2.fc33 (FEDORA-2021-3048b821bb)
Static type information for python modules
--------------------------------------------------------------------------------
Update Information:
Revert to last known good.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1:0.1-0.20191011git2
- Release bump.
* Thu Feb 25 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1:0.1-0.20191011git
- Epoch bump, revert to last known good.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1929522 - python3-mypy-0.782-2.fc33 has outdated typeshed vendored
https://bugzilla.redhat.com/show_bug.cgi?id=1929522
[ 2 ] Bug #1932920 - mypy complains that typeshed is broken
https://bugzilla.redhat.com/show_bug.cgi?id=1932920
--------------------------------------------------------------------------------
================================================================================
python3.5-3.5.10-5.fc33 (FEDORA-2021-30cb16d5ee)
Version 3.5 of the Python programming language
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS on ppc64le
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 19 2021 Petr Viktorin <pviktori(a)redhat.com> - 3.5.10-5
- Fix FTBFS on ppc64le and x86-64
Resolves:
https://bugzilla.redhat.com/show_bug.cgi?id=1923654
Resolves:
https://bugzilla.redhat.com/show_bug.cgi?id=1923658
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.10-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Thu Oct 22 2020 Lum��r Balhar <lbalhar(a)redhat.com> - 3.5.10-3
- Use bundled wheels because the latest pip no longer supports Python 3.5
* Mon Oct 5 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.5.10-2
- Use upstream architecture names on Fedora 34+
-
https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1923654 - python3.5: FTBFS in Fedora rawhide/f34: test_dbm_gnu fails on
ppc64le, %check segfaults on x86_64 since GCC 11
https://bugzilla.redhat.com/show_bug.cgi?id=1923654
--------------------------------------------------------------------------------
================================================================================
qelectrotech-0.80-1.fc33 (FEDORA-2021-29a9538754)
An electric diagrams editor
--------------------------------------------------------------------------------
Update Information:
Upstream announcement: [QElectroTech version 0.8
released](https://qelectrotech.org/forum/viewtopic.php?id=1953)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Remi Collet <remi(a)remirepo.net> - 0.80-1
- update to 0.80
--------------------------------------------------------------------------------
================================================================================
rpminspect-1.3.1-1.fc33 (FEDORA-2021-7757f5f46f)
Build deviation compliance tool
--------------------------------------------------------------------------------
Update Information:
Remove duplicate elf_end() call in init_elf_data() (#303)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 David Cantrell <dcantrell(a)redhat.com> - 1.3.1-1
- Remove duplicate elf_end() call in init_elf_data() (#303)
- Update translation template
* Thu Feb 25 2021 David Cantrell <dcantrell(a)redhat.com> - 1.3-2
- Small change to the way Koji builds are submitted
- Move the master branch to version 1.3
- Drop DEBUG_PRINT in process_table()
- Add doc/git.md to explain source control conventions
- Change Suggests to Recommends in the spec file
- Add kmidiff and politics to the inspections section of generic.yaml
- Update TODO list
- Use warn() for non-fatal errors in mkdirp()
- Require libabigail >= 1.8 in rpminspect.spec.in
- Enable multiple --headers-dir1 and --headers-dir2 args in abidiff
- Swap out some more fprintf()/fflush() reporting with warn()
- #include <err.h> in peers.c and rmtree.c
- On fedora-rawhide CI jobs, install gcc-c++ and gcc-plugin-devel
- Disable fedora-rawhide GitHub Action for now
- Correctly handle the -w option on rpminspect(1) (#256)
- Drop the relative path handling for the -w option
- Build and install rc from source on opensuse-leap
- Update doc/git.md on how to track upstream
- Add .github/ and osdeps/ directories to extra-ci.yml
- Build and install rc from source on opensuse-tumbleweed
- Adjust curl(1) command line used for rc in opensuse CI jobs
- Trying to figure out why the opensuse jobs produce curl errors
- Another slight change to post.sh for the opensuse-leap CI job
- s/PowerTools/powertools/g in the centos8 PKG_CMD definition
- The output of html2text on opensuse systems is different
- Rename HEADER_MAN to HEADER_MANPAGE (#264)
- Add inspection_header_to_desc() to librpminspect (#264)
- Add xunit output format support (#264)
- Support the new output function call syntax (#264)
- Move init_elf_data() to readelf.c, move data to struct rpminspect
- Update inspect_elf.c unit tests for librpminspect changes
- Remove check_ipv6() from inspect_elf.c
- Create the badfuncs inspection
- Update po/ translation files.
- Add badfuncs test cases
- Forgot to commit test_badfuncs.py.
- Fix flake8 and black errors with test_badfuncs.py
- Skip debug packages in filesize, display changes correctly
- Fix spurious execstack failure
- Fix YAML config file reading for BLOCK_INSPECTIONS
- Expand dump_config() to cover all config file settings
- Minor spelling fixes in strfuncs.c and making code explicit
- Simplify list_to_string() so it handles 1-elements lists right
- Add abspath() to canonicalize path strings
- In the doc inspection, only show diff(1) output for text files (#254)
- Add strxmlescape() to strfuncs.c in librpminspect (#264)
- Output the system-out xunit portion as CDATA (#264)
- Slightly change how strxmlescape() works
- Add the runpath inspection to librpminspect
- Rename test/data/lto.c to test/data/mathlib.c
- Handle the empty string case in abspath()
- Expand dump_cfg() to show runpath settings
- Fix block handling problems in the YAML config reader
- Note single builds cannot be rebases in is_rebase()
- Hook up the driver for the runpath inspection
- Install patchelf for tests on fedora and centos
- Update TODO and README.md files
- Pass -D to rpminspect in the test suite
- Add integration tests for the runpath inspection
- Python flake8 and black fixes in test_runpath.py
- Fixes for GitHub Actions on Debian and Ubuntu
- Disable Rust support in pip modules, more extra-ci fixes
- Update pip and setuptools on debian and ubuntu CI jobs
- Make sure pip is updated on debian, centos7, and centos8
- Fixes for extra-ci on arch, centos7, centos8, and debian
- Adjust docker image names for opensuse and arch
- Add Gentoo Linux to the Extra CI set
- extra-ci.yml typo fix for the gentoo job
- Use gentoo/stage3 as the container for the gentoo CI job
- Disable opensuse-tumbleweed and archlinux CI jobs
- Make sure util/determine-os.sh picks up Gentoo Linux
- In the runpath inspection, fail if DT_RPATH and DT_RUNPATH exist
- Use pip install for PIP_CMD on gentoo
- Set PIP_CMD to pip install -user for gentoo
- Handle a NULL from list_to_string() in abspath()
- Do not match path prefixes in the runpath inspection
- Python black fixes for test_runpath.py
- Stop doing an emerge --sync on the gentoo CI job
- Replace emerge --sync with a manual portage sync
- Use emerge-webrsync to update portage on gentoo
- Add uthash and move the file matching code to it.
- Typo fix in README.md
- Fix some memory leaks found by valgrind
- Create mkannounce.sh to help make release announcements easier
- shellcheck fixes for mkannounce.sh
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org>
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rpminspect-data-fedora-1.3-1.fc33 (FEDORA-2021-4c5fab71b9)
Build deviation compliance tool data files
--------------------------------------------------------------------------------
Update Information:
Small change to the way Koji builds are submitted
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 8 2021 David Cantrell <dcantrell(a)redhat.com> - 1.3-1
- Small change to the way Koji builds are submitted
- Ignore build/ in .gitignore
- Update fedora.yaml from generic.yaml, disable 'patches' inspection
- Eliminate duplicate entries in licenses/fedora.json
- Simplify test() definition in meson.build
--------------------------------------------------------------------------------
================================================================================
rubygem-rmagick-4.2.2-1.fc33 (FEDORA-2021-ad851d04aa)
Ruby binding to ImageMagick
--------------------------------------------------------------------------------
Update Information:
New version 4.2.2 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 4.2.2-1
- 4.2.2
--------------------------------------------------------------------------------
================================================================================
s3fs-fuse-1.89-1.fc33 (FEDORA-2021-5d697ddf8d)
FUSE-based file system backed by Amazon S3
--------------------------------------------------------------------------------
Update Information:
Update to 1.89 from
https://github.com/s3fs-fuse/s3fs-fuse (#1932107) Full
changelog:
https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.89
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Julio Gonz��lez Gil <packages(a)juliogonzalez.es> - 1.89-1
- Update to 1.89 from
https://github.com/s3fs-fuse/s3fs-fuse (#1932107)
Full changelog:
https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.89
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.88-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1932107 - s3fs-fuse-1.89 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1932107
--------------------------------------------------------------------------------
================================================================================
stress-ng-0.12.03-2.fc33 (FEDORA-2021-22fb082df6)
Stress test a computer system in various ways
--------------------------------------------------------------------------------
Update Information:
Enable ppc64le
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Yaakov Selkowitz <yselkowi(a)redhat.com> - 0.12.03-2
- Enable ppc64le
--------------------------------------------------------------------------------
================================================================================
tmt-1.3.1-1.fc33 (FEDORA-2021-036834ed24)
Test Management Tool
--------------------------------------------------------------------------------
Update Information:
Default branches, filtering, status, link... ---- Default branches, improved
filtering, tmt status...
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 1.3.1-1
- Add test for prepare freeze
- Make file descriptors non-blocking
- Update the specification and stories to use link
- Implement the new core attribute 'link'
* Tue Feb 23 2021 Petr ��pl��chal <psplicha(a)redhat.com> - 1.3.0-1
- Set timeout on select calls in utils._run()
- Show the current tmt version in the debug log
- Revert support for the 'el' distro shortcut
- Strip whitespace before relevancy comment
- Ensure rsync is installed on the guest if needed
- Use the default branch in the discover fmf plugin
- Suport the 'el' shortcut for the distro context
- Implement the 'tmt --version' option [fix #445]
- Adjust test create test, fix missing dots
- Support creating tests in the current directory
- Rename container images, update install docs
- Fixup Dockerfiles to build in quay.io.
- Support building mini and full tmt container image
- Add a Dockerfile for container with tmt
- Fix dependency error messages
- Use a better trigger name for source code changes
- Add a new 'Check Report' section to examples
- Add the --force explanation in the documentation
- Extend the test coverage to check for active runs
- Add basic test coverage for tmt status
- Restore context after processing each run
- Correctly handle an undefined step status
- Load default plan when no root is present
- Implement tmt status command
- Define command-line interface for status command
- Print library in error message during ref conflict
- Adjust the default branch handling for libraries
- Handle default branch in Library
- Adjust test duration, clean up old test metadata
- Improve timeout handling (fix an infinite loop)
- Adjust default timeout in the testcloud provision
- Remove obsolete unit test coverage for steps
- Adjust the filtering support, fix docs building
- Allow filtering using custom L1 metadata
- Allow filtering with lowercase bool names
- Handle exceptions when applying filters and conditions
- Share code for filters & conditions, test coverage
- Apply filters after applying defaults and conversions
- Fix IPv4 parsing when booting minute machine
- Remove all hacks for the old cruncher executor
- Remove the whole rhts-lint line during test import
- Remove the old convert test from unit tests
- Adjust contact handling to work with manual tests
- Fix contacts without name during tmt test import
- Finalize the specification of the 'link' attribute
- Add specification of the new core attribute 'link'
- Enough of dreaming, let's go to the forest! :)
- Update the overview of core classes, minor cleanup
- Add missing required packages for pip install
- Implement tmt run --follow option for checking log
- Extra check for required packages when using yum
- Clean up obsolete names in examples and templates
- Update the test checking for relevancy conversion
- Adjust storing test case id for new nitrate cases
- Append nitrate id when exporting instead of rewrite
- Skip prereserve check if custom flavor requested
- Use special compare operators only if minor given
- Adjust support for selecting modified tests
- Allow selecting only tests that have changed in git
- Remove the duplicate build job from packit config
- Verify the old beakerlib functions using Makefile
- Enable debug output using the TMT_DEBUG variable
--------------------------------------------------------------------------------
================================================================================
vdr-osdteletext-1.0.0-1.fc33 (FEDORA-2021-ae1f3cf6f6)
OSD teletext plugin for VDR
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.0-1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 25 2021 Martin Gansser <martinkg(a)fedoraproject.org> - 1.0.0-1
- Update to 1.0.0
--------------------------------------------------------------------------------
================================================================================
xrootd-5.1.0-1.fc33 (FEDORA-2021-be83633b18)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
XRootD 5.1.0-
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 23 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.1.0-1
- Update to version 5.1.0
- Add scitokens plugin package
- Packages xrootd-ceph and xrdcl-http are now built as part of xrootd
replacing the packages built from separate source rpms
- Drop patches (accepted upstream or previously backported)
- Fix broken library dependency in XrdCeph cmake file
- Fix format error on 32 bit architectures
* Sat Feb 13 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-5
- Drop workaround for false positive warning from gcc 11
* Tue Jan 26 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-4
- Workaround false positive warning from gcc 11 (Fedora 34+)
* Tue Dec 8 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-3
- Fix array length calculation (gcc 11 error)
- Fix uninitialized variable error
--------------------------------------------------------------------------------
================================================================================
zathura-pdf-mupdf-0.3.6-6.fc33 (FEDORA-2021-572bb0f886)
PDF support for zathura via mupdf
--------------------------------------------------------------------------------
Update Information:
CVE-2021-3407
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 24 2021 Michael J Gruber <mjg(a)fedoraproject.org> - 0.3.6-6
- rebuild for mupdf CVE-2021-3407
* Thu Jan 28 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.6-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1931964 - CVE-2021-3407 mupdf: Double free of object during linearization
https://bugzilla.redhat.com/show_bug.cgi?id=1931964
--------------------------------------------------------------------------------