The following Fedora 34 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f039fccfc2
libsndfile-1.0.31-6.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b0ac29efb1
vim-8.2.3755-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-28b495e9e0
libmysofa-1.2.1-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2b2dd1b5a7
golang-1.16.11-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c2dc9abd76
dr_libs-0-0.7.20211208git49de65c.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bb6f4df303 ldns-1.8.1-3.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bd024d2a7
podman-3.4.4-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3d78d81491
rust-libsqlite3-sys-0.23.2-1.fc34 rust-rusqlite-0.26.3-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aec9d01057
lapack-3.9.0-7.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-73d63662b0 grub2-2.06-9.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd7960de3c
gnome-shell-40.7-1.fc34 gnome-shell-extensions-40.5-1.fc34 mutter-40.7-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b514c8ea72
libolm-3.2.8-1.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
250
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6ac83612a5
shadow-utils-4.8.1-10.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-495b3b1518
cups-2.3.3op2-11.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-24a21cd83c
libdrm-2.4.109-1.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0a94ef5769
rust-fasteval-0.2.4-4.fc34 rust-zram-generator-1.1.1-2.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f039fccfc2
libsndfile-1.0.31-6.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c27532fbd8
xxhash-0.8.1-1.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be
annobin-9.79-3.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c5f01e0121
perl-Mozilla-CA-20211001-1.fc34
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-186e0ff8ef
hwdata-0.354-1.fc34
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-daeea91820
libxmlb-0.3.6-1.fc34
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-40a861c3e6
glib-networking-2.68.3-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b0ac29efb1
vim-8.2.3755-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9b0f737e4a
kernel-5.15.7-100.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3a529faddd
libguestfs-1.46.1-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9621f51218
libical-3.0.12-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-73d63662b0 grub2-2.06-9.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f7b4bdb709
alsa-lib-1.2.6.1-2.fc34 alsa-plugins-1.2.6-1.fc34 alsa-utils-1.2.6-1.fc34
python-alsa-1.2.6-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd7960de3c
gnome-shell-40.7-1.fc34 gnome-shell-extensions-40.5-1.fc34 mutter-40.7-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-02dc2967db
ca-certificates-2021.2.52-1.0.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bf64fd9244
libvirt-7.0.0-8.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d581a6f6e4 fwupd-1.7.3-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bff4366d9
pipewire-0.3.41-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
calibre-4.23.0-8.fc34
ddnet-15.7-1.fc34
fetchmail-6.4.25-1.fc34
jansi-2.1.1-4.fc34
log4j-2.16.0-1.fc34
mod_auth_token-1.0.5-27.fc34
php-pecl-ds-1.4.0-1.fc34
rust-cxx-1.0.60-2.fc34
rust-cxx-build-1.0.60-1.fc34
rust-cxx-gen-0.7.60-1.fc34
rust-cxxbridge-flags-1.0.60-1.fc34
rust-cxxbridge-macro-1.0.60-2.fc34
umockdev-0.17.1-1.fc34
vid.stab-1.1.0-18.20201110gitf9166e9.fc34
Details about builds:
================================================================================
calibre-4.23.0-8.fc34 (FEDORA-2021-e42fadbcc3)
E-book converter and library manager
--------------------------------------------------------------------------------
Update Information:
Bugfix release for a runaway regexp.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> 4.23.0-8
- Apply patch for CVE-2021-44686. Fixes rhbz#2031838
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2031838 - CVE-2021-44686 calibre: ReDoS vulnerability in
html_preprocess_rules in ebooks/conversion/preprocess.py [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2031838
--------------------------------------------------------------------------------
================================================================================
ddnet-15.7-1.fc34 (FEDORA-2021-cff0bade95)
DDraceNetwork, a cooperative racing mod of Teeworlds
--------------------------------------------------------------------------------
Update Information:
Update ddnet to 15.7 (#2025117)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 S��rgio Basto <sergio(a)serjux.com> - 15.7-1
- Update ddnet to 15.7 (#2025117)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2025117 - ddnet-15.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2025117
--------------------------------------------------------------------------------
================================================================================
fetchmail-6.4.25-1.fc34 (FEDORA-2021-149ced37dd)
A remote mail retrieval and forwarding utility
--------------------------------------------------------------------------------
Update Information:
Update to fetchmail-6.4.25
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Vitezslav Crhonek <vcrhonek(a)redhat.com> - 6.4.25-1
- Update to fetchmail-6.4.25
--------------------------------------------------------------------------------
================================================================================
jansi-2.1.1-4.fc34 (FEDORA-2021-66d6c484f3)
Generate and interpret ANSI escape sequences in Java
--------------------------------------------------------------------------------
Update Information:
This update provides log4j 2.16.0, to address the critical vulnerability
CVE-2021-44228 ("Log4Shell"). Note with 2.16.0, JNDI is entirely disabled by
default; to use it, you must set `log4j2.enableJndi` (please carefully consider
potential security issues before doing so). The updated jansi adds (back) a
feature, `AnsiRenderer`, which the newer log4j requires; this is the only change
to jansi. For other changes in log4j 2.16.0, see the [upstream
changelog](https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0).
Most changes are compatible enhancements or bug fixes, but there may be some
behaviour changes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Adam Williamson <awilliam(a)redhat.com> - 2.1.1-4
- Backport patch to bring back AnsiRenderer
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2030945 - CVE-2021-44228 log4j: log4j-core: Remote code execution in Log4j
2.x when logs contain an attacker-controlled string value [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2030945
--------------------------------------------------------------------------------
================================================================================
log4j-2.16.0-1.fc34 (FEDORA-2021-66d6c484f3)
Java logging package
--------------------------------------------------------------------------------
Update Information:
This update provides log4j 2.16.0, to address the critical vulnerability
CVE-2021-44228 ("Log4Shell"). Note with 2.16.0, JNDI is entirely disabled by
default; to use it, you must set `log4j2.enableJndi` (please carefully consider
potential security issues before doing so). The updated jansi adds (back) a
feature, `AnsiRenderer`, which the newer log4j requires; this is the only change
to jansi. For other changes in log4j 2.16.0, see the [upstream
changelog](https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0).
Most changes are compatible enhancements or bug fixes, but there may be some
behaviour changes.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Adam Williamson <awilliam(a)redhat.com> - 2.16.0-1
- Update to 2.16.0 (fixes critical CVE-2021-44228)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2030945 - CVE-2021-44228 log4j: log4j-core: Remote code execution in Log4j
2.x when logs contain an attacker-controlled string value [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2030945
--------------------------------------------------------------------------------
================================================================================
mod_auth_token-1.0.5-27.fc34 (FEDORA-2021-5074635879)
Token based URI access module for Apache
--------------------------------------------------------------------------------
Update Information:
- Add autoconf, automake, and gcc as explicit BuildRequires.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 1.0.5-27
- Add autoconf, automake, and gcc as explicit BuildRequires
--------------------------------------------------------------------------------
================================================================================
php-pecl-ds-1.4.0-1.fc34 (FEDORA-2021-de37d40ea8)
Data Structures for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.4.0** * compatibility with PHP 8.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Remi Collet <remi(a)remirepo.net> - 1.4.0-1
- update to 1.4.0
- raise dependency on PHP 7.3
- drop all patches merged upstream
- switch to phpunit8, disable tests on EL
--------------------------------------------------------------------------------
================================================================================
rust-cxx-1.0.60-2.fc34 (FEDORA-2021-606a1d8ec5)
Safe interop between Rust and C++
--------------------------------------------------------------------------------
Update Information:
Update the cxx crates to their latest versions (1.0.60, cxx-gen 0.7.60).
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 1.0.60-2
- Regenerate with rust2rpm to add missing feature subpackages
* Mon Dec 13 2021 Jan Stan��k <jstanek(a)redhat.com> 1.0.60-1
- Update to version 1.0.60
--------------------------------------------------------------------------------
================================================================================
rust-cxx-build-1.0.60-1.fc34 (FEDORA-2021-606a1d8ec5)
C++ code generator for integrating cxx crate into a Cargo build
--------------------------------------------------------------------------------
Update Information:
Update the cxx crates to their latest versions (1.0.60, cxx-gen 0.7.60).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Jan Stan��k <jstanek(a)redhat.com> 1.0.60-1
- Update to version 1.0.60
--------------------------------------------------------------------------------
================================================================================
rust-cxx-gen-0.7.60-1.fc34 (FEDORA-2021-606a1d8ec5)
C++ code generator for integrating cxx crate into higher level tools
--------------------------------------------------------------------------------
Update Information:
Update the cxx crates to their latest versions (1.0.60, cxx-gen 0.7.60).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Jan Stan��k <jstanek(a)redhat.com> 0.7.60-1
- Update to version 0.7.60
--------------------------------------------------------------------------------
================================================================================
rust-cxxbridge-flags-1.0.60-1.fc34 (FEDORA-2021-606a1d8ec5)
Compiler configuration of the cxx crate
--------------------------------------------------------------------------------
Update Information:
Update the cxx crates to their latest versions (1.0.60, cxx-gen 0.7.60).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Jan Stan��k <jstanek(a)redhat.com> 1.0.60-1
- Update to version 1.0.60
--------------------------------------------------------------------------------
================================================================================
rust-cxxbridge-macro-1.0.60-2.fc34 (FEDORA-2021-606a1d8ec5)
Implementation detail of the cxx crate
--------------------------------------------------------------------------------
Update Information:
Update the cxx crates to their latest versions (1.0.60, cxx-gen 0.7.60).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Jan Stan��k <jstanek(a)redhat.com> 1.0.60-2
- Disable check by default
* Mon Dec 13 2021 Jan Stan��k <jstanek(a)redhat.com> 1.0.60-1
- Update to version 1.0.60
--------------------------------------------------------------------------------
================================================================================
umockdev-0.17.1-1.fc34 (FEDORA-2021-79c27ba4a1)
Mock hardware devices
--------------------------------------------------------------------------------
Update Information:
- Fix /sys/dev/* symlinks; regression from 0.15.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
0.17.1-1
- Fix /sys/dev/* symlinks; regression from 0.15.3 (#155)
--------------------------------------------------------------------------------
================================================================================
vid.stab-1.1.0-18.20201110gitf9166e9.fc34 (FEDORA-2021-6b1ff5bb81)
Video stabilize library for fmpeg, mlt or transcode
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.0-18.20201110gitf9166e9
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Martin Gansser <martinkg(a)fedoraproject.org> -
1.1.0-18.20201110gitf9166e9
- Update to 1.1.0-18.20201110gitf9166e9
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.1.0-17.20190213gitaeabc8d
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------