The following Fedora 33 Security updates need testing:
Age URL
185
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa0e94198f
openssh-8.4p1-8.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7ddc28a14b rt-4.4.5-4.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4d2e7691ca squid-5.2-1.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0b7a484688 xen-4.14.3-2.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ae829e54ab
httpd-2.4.51-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7ff1c8680d
libopenmpt-0.4.24-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c24b515a72
firefox-93.0-2.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
203
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
138
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
54
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4ccf3840ed
gnome-shell-3.38.6-1.fc33 mutter-3.38.6-1.fc33
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa0e94198f
openssh-8.4p1-8.fc33
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ac6363ae65 gdb-10.2-3.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-66109fb131 audit-3.0.6-1.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-77ae3066b2
gnome-software-3.38.2-4.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b61d7caf9e gjs-1.66.2-10.fc33
mozjs78-78.15.0-1.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1742d200f1
hwdata-0.352-1.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5a3272b373 pungi-4.3.0-2.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4208f76b26 nss-3.71.0-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-50faf017ce bc-1.07.1-14.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c24b515a72
firefox-93.0-2.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b48e0d8cb
tzdata-2021c-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-269ba2a5f1
perl-Encode-3.08-461.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-edc35b2812 koji-1.26.1-1.fc33
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5d0f71681e
btrfs-progs-5.14.2-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b120990b6
kernel-5.14.11-100.fc33
The following builds have been pushed to Fedora 33 updates-testing
fasttrack-5.3.5-1.fc33
gfbgraph-0.2.4-1.fc33
ghostscript-9.55.0-1.fc33
glmark2-2021.02-2.fc33
legendary-0.20.16-1.fc33
lutris-0.5.9-1.fc33
msort-8.53-42.fc33
openblas-0.3.18-1.fc33
perl-Graphics-TIFF-17-1.fc33
python-pip-20.2.2-4.fc33
python-rasterio-1.2.10-1.fc33
retroarch-1.9.11-1.fc33
rust-coreos-installer-0.10.1-2.fc33
tomcat-9.0.54-1.fc33
Details about builds:
================================================================================
fasttrack-5.3.5-1.fc33 (FEDORA-2021-a7f7dd9713)
Multiple objects tracking software, easy to use, and performant.
--------------------------------------------------------------------------------
Update Information:
Update to 5.3.5. Patch FastTrack so that it does not check for new versions on
startup and prompt the user to update; this makes sense for standalone
installations but is mostly an annoyance when FastTrack is part of the
distribution. ---- FastTrack version 5.3.5 comes with several improvements: -
Added system tray integration. - Added system alerts. - Fixed outdated urls.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 12 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 5.3.5-1
- Update to 5.3.5 (close RHBZ#2013075)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2013075 - fasttrack-5.3.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2013075
--------------------------------------------------------------------------------
================================================================================
gfbgraph-0.2.4-1.fc33 (FEDORA-2021-9c737bb848)
GLib/GObject wrapper for the Facebook Graph API
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-39358, and many other memory, assertion, etc. fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 12 2021 Debarshi Ray <rishi(a)fedoraproject.org> - 0.2.4-1
- Update to 0.2.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1997139 - CVE-2021-39358 gfbgraph: missing TLS certificate verification
https://bugzilla.redhat.com/show_bug.cgi?id=1997139
--------------------------------------------------------------------------------
================================================================================
ghostscript-9.55.0-1.fc33 (FEDORA-2021-165572e6c8)
Interpreter for PostScript language & PDF
--------------------------------------------------------------------------------
Update Information:
Rebase to new gs version (#2008146)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 11 2021 Richard Lescak <rlescak(a)redhat.com> - 9.55.0-1
- Rebase to new gs version (#2008146)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2008146 - ghostscript-9.55.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2008146
--------------------------------------------------------------------------------
================================================================================
glmark2-2021.02-2.fc33 (FEDORA-2021-cc41325b54)
Benchmark for OpenGL 2.0
--------------------------------------------------------------------------------
Update Information:
* no longer ship desktop entries for the DRM versions, they work only from the
Linux console (no X or Wayland). * include desktop entries for the Wayland
versions. * include a fix for crashes with nVidia binary drivers due to broken
nVidia shader compiler
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 11 2021 Dominik Mierzejewski <rpm(a)greysector.net> - 2021.02-2
- drop desktop entries for DRM versions, they work without a desktop only
- add desktop entries and icons for Wayland versions
- backport upstream fix for broken nVidia shader compiler (#1943766)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1943766 - [abrt] glmark2: std::__replacement_assert(): glmark2 killed by
SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=1943766
--------------------------------------------------------------------------------
================================================================================
legendary-0.20.16-1.fc33 (FEDORA-2021-4e97b55f6b)
Free and open-source replacement for the Epic Games Launcher
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 10 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.20.16-1
- chore(update): 0.20.16
* Sat Oct 9 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.20.15-1
- chore(update): 0.20.15
* Fri Oct 8 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.20.14-1
- chore(update): 0.20.14
* Tue Oct 5 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.20.13-1
- chore(update): 0.20.13
--------------------------------------------------------------------------------
================================================================================
lutris-0.5.9-1.fc33 (FEDORA-2021-8b8ac0a6a3)
Install and play any video game easily
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 12 2021 Christopher King <bunnyapocalypse(a)protonmail.com> - 0.5.9-1
- New version
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.8.3-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1913057 - lutris-0.5.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1913057
--------------------------------------------------------------------------------
================================================================================
msort-8.53-42.fc33 (FEDORA-2021-5ead8fb9a6)
Sort files in sophisticated ways
--------------------------------------------------------------------------------
Update Information:
Add simple check to verify
https://bugzilla.redhat.com/show_bug.cgi?id=2003359
solves a problem in msort.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 12 2021 Terje Rosten <terje.rosten(a)ntnu.no> - 8.53-42
- Add simple sanity check
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.53-41
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Thu May 20 2021 Pete Walter <pwalter(a)fedoraproject.org> - 8.53-40
- Rebuild for ICU 69
* Wed May 19 2021 Pete Walter <pwalter(a)fedoraproject.org> - 8.53-39
- Rebuild for ICU 69
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.53-38
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openblas-0.3.18-1.fc33 (FEDORA-2021-fdbfd5e7f4)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.18, see changes at
https://github.com/xianyi/OpenBLAS/releases/tag/v0.3.18
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 11 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 0.3.18-1
- Update to 0.3.18.
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.17-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Graphics-TIFF-17-1.fc33 (FEDORA-2021-3b8d7416ae)
Perl extension for the LibTIFF library
--------------------------------------------------------------------------------
Update Information:
This release provides a Perl wrapper for a TIFFReverseBits() function of
libtiff.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 12 2021 Petr Pisar <ppisar(a)redhat.com> - 17-1
- Version 17 bump (bug #2012875)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2012875 - perl-Graphics-TIFF-17 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2012875
--------------------------------------------------------------------------------
================================================================================
python-pip-20.2.2-4.fc33 (FEDORA-2021-93e4d875e1)
A tool for installing and managing Python packages
--------------------------------------------------------------------------------
Update Information:
Remove bundled windows executables
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 6 2021 Charalampos Stratakis <cstratak(a)redhat.com> - 20.2.2-4
- Remove bundled windows executables
- Resolves: rhbz#2005453
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2005453 - pip contains bundled pre-built exe files in
site-packages/pip/_vendor/distlib/
https://bugzilla.redhat.com/show_bug.cgi?id=2005453
--------------------------------------------------------------------------------
================================================================================
python-rasterio-1.2.10-1.fc33 (FEDORA-2021-71dc42d831)
Fast and direct raster I/O for use with Numpy and SciPy
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 11 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 1.2.10-1
- Update to latest version (#2011084)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2011084 - python-rasterio-1.2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2011084
--------------------------------------------------------------------------------
================================================================================
retroarch-1.9.11-1.fc33 (FEDORA-2021-0af4e65bda)
Cross-platform, sophisticated frontend for the libretro API.
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 9 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.9.11-1
- chore(update): 1.9.11
--------------------------------------------------------------------------------
================================================================================
rust-coreos-installer-0.10.1-2.fc33 (FEDORA-2021-449a2bdaf3)
Installer for Fedora CoreOS and RHEL CoreOS
--------------------------------------------------------------------------------
Update Information:
[New upstream
release](https://github.com/coreos/coreos-
installer/releases/tag/v0.10.1) fixing CVE-2021-20319.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 12 2021 Benjamin Gilbert <bgilbert(a)redhat.com> - 0.10.1-2
- Rebuild for F33 bump
* Mon Oct 11 2021 Benjamin Gilbert <bgilbert(a)redhat.com> - 0.10.1-1
- New release
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 0.10.0-3
- Rebuilt with OpenSSL 3.0.0
* Tue Aug 17 2021 Dusty Mabe <dusty(a)dustymabe.com> - 0.10.0-2
- Add F36 signing key
* Wed Aug 4 2021 Jonathan Lebon <jonathan(a)jlebon.com> - 0.10.0-1
- New release
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jul 13 2021 Jonathan Lebon <jonathan(a)jlebon.com> - 0.9.1-2
- Backport "install: restrict access permissions on
/boot/ignition{,/config.ign}"
https://github.com/coreos/coreos-installer/pull/571
* Mon May 17 2021 Sohan Kunkerkar <skunkerk(a)redhat.com> - 0.9.1-1
- New release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2011862 - CVE-2021-20319 coreos-installer: incorrect signature verification
on gzip-compressed install images
https://bugzilla.redhat.com/show_bug.cgi?id=2011862
--------------------------------------------------------------------------------
================================================================================
tomcat-9.0.54-1.fc33 (FEDORA-2021-5090f002aa)
Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API
--------------------------------------------------------------------------------
Update Information:
This update includes a rebase from 9.0.53 up to 9.0.54. * RHBZ#1853928
tomcat-9.0.54 is available
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 12 2021 Hui Wang <huwang(a)redhat.com> - 1:9.0.54-1
- Update to 9.0.54
--------------------------------------------------------------------------------