The following Fedora 34 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bd024d2a7
podman-3.4.4-1.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-73d63662b0 grub2-2.06-9.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd7960de3c
gnome-shell-40.7-1.fc34 gnome-shell-extensions-40.5-1.fc34 mutter-40.7-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f6e491390b
singularity-3.8.5-2.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-69e96c8f68
xorg-x11-server-Xwayland-21.1.4-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-cd4767e7d5
seamonkey-2.53.10.1-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-664a6554a1
xorg-x11-server-1.20.14-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9f9e7c5c4f
mingw-python-lxml-4.6.5-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f2c6802743
mingw-binutils-2.34-10.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5c9d12a93e
log4j-2.17.0-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8b746a32c5
toxcore-0.2.13-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6fdc5ea304
golang-1.16.12-1.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
259
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
19
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be
annobin-9.79-3.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3a529faddd
libguestfs-1.46.1-1.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9621f51218
libical-3.0.12-1.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-73d63662b0 grub2-2.06-9.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd7960de3c
gnome-shell-40.7-1.fc34 gnome-shell-extensions-40.5-1.fc34 mutter-40.7-1.fc34
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-02dc2967db
ca-certificates-2021.2.52-1.0.fc34
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bf64fd9244
libvirt-7.0.0-8.fc34
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d581a6f6e4 fwupd-1.7.3-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-69e96c8f68
xorg-x11-server-Xwayland-21.1.4-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b9db3d5d5b
gnome-control-center-40.7-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-32419016af
pango-1.48.10-2.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5086d5dc1a lorax-34.14-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d74a092c8d
osinfo-db-20211216-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2e5d7b96a5
samba-4.14.11-0.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-7847fb3f18
libxcrypt-4.4.27-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-664a6554a1
xorg-x11-server-1.20.14-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f7b4bdb709
alsa-lib-1.2.6.1-3.fc34 alsa-plugins-1.2.6-1.fc34 alsa-utils-1.2.6-1.fc34
python-alsa-1.2.6-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1cac46d416
linux-firmware-20211216-127.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2b0f395e22 ndctl-72-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-47848e40a9
firefox-95.0.2-2.fc34
The following builds have been pushed to Fedora 34 updates-testing
accel-config-3.4.4-1.fc34
chromium-96.0.4664.110-2.fc34
composer-2.2.0-1.fc34
crest-2.11.2-1.fc34
crun-1.4-1.fc34
dnsperf-2.9.0-1.fc34
dr_libs-0-0.9.20211222gitc5e5355.fc34
flat-remix-icon-theme-0.0.20211214-1.fc34
golang-x-tools-0.1.8-0.1.fc34
icewm-2.9.3-1.fc34
julia-1.6.5-1.fc34
kernel-5.15.11-100.fc34
lexertl14-0.1.0-4.20211222git2ea71b8.fc34
libgda-5.2.10-4.fc34
llhttp-6.0.6-3.fc34
matrix-synapse-1.49.2-1.fc34
nginx-1.20.2-1.fc34
osbuild-composer-41-1.fc34
python-glad-0.1.35-2.fc34
rclone-1.57.0-1.fc34
scitokens-cpp-0.6.2-4.fc34
urlscan-0.9.8-1.fc34
wingpanel-3.0.2-1.fc34
Details about builds:
================================================================================
accel-config-3.4.4-1.fc34 (FEDORA-2021-8b2a8aea72)
Configure accelerator subsystem devices
--------------------------------------------------------------------------------
Update Information:
Updated to 3.4.4 release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Yunying Sun <yunying.sun(a)intel.com> - 3.4.4-1
- Updated to 3.4.4 release
- Added several config example files to package under contrib/configs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1968229 - Update accel-config to latest upstream version for supported Fedora
releases
https://bugzilla.redhat.com/show_bug.cgi?id=1968229
--------------------------------------------------------------------------------
================================================================================
chromium-96.0.4664.110-2.fc34 (FEDORA-2021-411e9aef77)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 96.0.4664.110. You know the drill, lots of security bugs fixed, update
if you like security, hit that like and subscribe button. CVE-2021-4052
CVE-2021-4053 CVE-2021-4054 CVE-2021-4055 CVE-2021-4056 CVE-2021-4057
CVE-2021-4058 CVE-2021-4059 CVE-2021-4061 CVE-2021-4062 CVE-2021-4063
CVE-2021-4064 CVE-2021-4065 CVE-2021-4066 CVE-2021-4067 CVE-2021-4068
CVE-2021-4079 CVE-2021-4078 CVE-2021-4098 CVE-2021-4099 CVE-2021-4100
CVE-2021-4101 CVE-2021-4102 CVE-2021-37997 CVE-2021-37998 CVE-2021-37999
CVE-2021-38000 CVE-2021-38001 CVE-2021-38002 CVE-2021-38003 CVE-2021-38004
CVE-2021-38008 CVE-2021-38009 CVE-2021-38006 CVE-2021-38007 CVE-2021-38005
CVE-2021-38010 CVE-2021-38011 CVE-2021-38012 CVE-2021-38013 CVE-2021-38014
CVE-2021-38015 CVE-2021-38016 CVE-2021-38017 CVE-2021-38018 CVE-2021-38019
CVE-2021-38020 CVE-2021-38021 CVE-2021-38022
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 20 2021 Tom Callaway <spot(a)fedoraproject.org> - 96.0.4664.110-2
- enable WebRTCPipeWireCapturer by default
* Thu Dec 16 2021 Tom Callaway <spot(a)fedoraproject.org> - 96.0.4664.110-1
- update to 96.0.4664.110
* Fri Nov 19 2021 Tom Callaway <spot(a)fedoraproject.org> - 96.0.4664.45-1
- update to 96.0.4664.45
* Fri Nov 12 2021 Tom Callaway <spot(a)fedoraproject.org> - 95.0.4638.69-1
- update to 95.0.4638.69
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2018561 - CVE-2021-37997 chromium-browser: Use after free in Sign-In
https://bugzilla.redhat.com/show_bug.cgi?id=2018561
[ 2 ] Bug #2018562 - CVE-2021-37998 chromium-browser: Use after free in Garbage
Collection
https://bugzilla.redhat.com/show_bug.cgi?id=2018562
[ 3 ] Bug #2018563 - CVE-2021-37999 chromium-browser: Insufficient data validation in
New Tab Page
https://bugzilla.redhat.com/show_bug.cgi?id=2018563
[ 4 ] Bug #2018564 - CVE-2021-38000 chromium-browser: Insufficient validation of
untrusted input in Intents
https://bugzilla.redhat.com/show_bug.cgi?id=2018564
[ 5 ] Bug #2018565 - CVE-2021-38001 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=2018565
[ 6 ] Bug #2018566 - CVE-2021-38002 chromium-browser: Use after free in Web Transport
https://bugzilla.redhat.com/show_bug.cgi?id=2018566
[ 7 ] Bug #2018567 - CVE-2021-38003 chromium-browser: Inappropriate implementation in
V8
https://bugzilla.redhat.com/show_bug.cgi?id=2018567
[ 8 ] Bug #2024272 - CVE-2021-38008 chromium-browser: Use after free in media
https://bugzilla.redhat.com/show_bug.cgi?id=2024272
[ 9 ] Bug #2024273 - CVE-2021-38009 chromium-browser: Inappropriate implementation in
cache
https://bugzilla.redhat.com/show_bug.cgi?id=2024273
[ 10 ] Bug #2024274 - CVE-2021-38006 chromium-browser: Use after free in storage
foundation
https://bugzilla.redhat.com/show_bug.cgi?id=2024274
[ 11 ] Bug #2024275 - CVE-2021-38007 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=2024275
[ 12 ] Bug #2024276 - CVE-2021-38005 chromium-browser: Use after free in loader
https://bugzilla.redhat.com/show_bug.cgi?id=2024276
[ 13 ] Bug #2024277 - CVE-2021-38010 chromium-browser: Inappropriate implementation in
service workers
https://bugzilla.redhat.com/show_bug.cgi?id=2024277
[ 14 ] Bug #2024278 - CVE-2021-38011 chromium-browser: Use after free in storage
foundation
https://bugzilla.redhat.com/show_bug.cgi?id=2024278
[ 15 ] Bug #2024279 - CVE-2021-38012 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=2024279
[ 16 ] Bug #2024280 - CVE-2021-38013 chromium-browser: Heap buffer overflow in
fingerprint recognition
https://bugzilla.redhat.com/show_bug.cgi?id=2024280
[ 17 ] Bug #2024281 - CVE-2021-38014 chromium-browser: Out of bounds write in
Swiftshader
https://bugzilla.redhat.com/show_bug.cgi?id=2024281
[ 18 ] Bug #2024282 - CVE-2021-38015 chromium-browser: Inappropriate implementation in
input
https://bugzilla.redhat.com/show_bug.cgi?id=2024282
[ 19 ] Bug #2024283 - CVE-2021-38016 chromium-browser: Insufficient policy enforcement
in background fetch
https://bugzilla.redhat.com/show_bug.cgi?id=2024283
[ 20 ] Bug #2024284 - CVE-2021-38017 chromium-browser: Insufficient policy enforcement
in iframe sandbox
https://bugzilla.redhat.com/show_bug.cgi?id=2024284
[ 21 ] Bug #2024285 - CVE-2021-38018 chromium-browser: Inappropriate implementation in
navigation
https://bugzilla.redhat.com/show_bug.cgi?id=2024285
[ 22 ] Bug #2024286 - CVE-2021-38019 chromium-browser: Insufficient policy enforcement
in CORS
https://bugzilla.redhat.com/show_bug.cgi?id=2024286
[ 23 ] Bug #2024287 - CVE-2021-38020 chromium-browser: Insufficient policy enforcement
in contacts picker
https://bugzilla.redhat.com/show_bug.cgi?id=2024287
[ 24 ] Bug #2024288 - CVE-2021-38021 chromium-browser: Inappropriate implementation in
referrer
https://bugzilla.redhat.com/show_bug.cgi?id=2024288
[ 25 ] Bug #2024289 - CVE-2021-38022 chromium-browser: Inappropriate implementation in
WebAuthentication
https://bugzilla.redhat.com/show_bug.cgi?id=2024289
[ 26 ] Bug #2029881 - CVE-2021-4052 chromium-browser: Use after free in web apps
https://bugzilla.redhat.com/show_bug.cgi?id=2029881
[ 27 ] Bug #2029882 - CVE-2021-4053 chromium-browser: Use after free in UI
https://bugzilla.redhat.com/show_bug.cgi?id=2029882
[ 28 ] Bug #2029883 - CVE-2021-4054 chromium-browser: Incorrect security UI in autofill
https://bugzilla.redhat.com/show_bug.cgi?id=2029883
[ 29 ] Bug #2029884 - CVE-2021-4055 chromium-browser: Heap buffer overflow in
extensions
https://bugzilla.redhat.com/show_bug.cgi?id=2029884
[ 30 ] Bug #2029885 - CVE-2021-4056 chromium-browser: Type Confusion in loader
https://bugzilla.redhat.com/show_bug.cgi?id=2029885
[ 31 ] Bug #2029886 - CVE-2021-4057 chromium-browser: Use after free in file API
https://bugzilla.redhat.com/show_bug.cgi?id=2029886
[ 32 ] Bug #2029887 - CVE-2021-4058 chromium-browser: Heap buffer overflow in ANGLE
https://bugzilla.redhat.com/show_bug.cgi?id=2029887
[ 33 ] Bug #2029888 - CVE-2021-4059 chromium-browser: Insufficient data validation in
loader
https://bugzilla.redhat.com/show_bug.cgi?id=2029888
[ 34 ] Bug #2029889 - CVE-2021-4061 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=2029889
[ 35 ] Bug #2029890 - CVE-2021-4062 chromium-browser: Heap buffer overflow in BFCache
https://bugzilla.redhat.com/show_bug.cgi?id=2029890
[ 36 ] Bug #2029892 - CVE-2021-4063 chromium-browser: Use after free in developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=2029892
[ 37 ] Bug #2029893 - CVE-2021-4064 chromium-browser: Use after free in screen capture
https://bugzilla.redhat.com/show_bug.cgi?id=2029893
[ 38 ] Bug #2029894 - CVE-2021-4065 chromium-browser: Use after free in autofill
https://bugzilla.redhat.com/show_bug.cgi?id=2029894
[ 39 ] Bug #2029895 - CVE-2021-4066 chromium-browser: Integer underflow in ANGLE
https://bugzilla.redhat.com/show_bug.cgi?id=2029895
[ 40 ] Bug #2029896 - CVE-2021-4067 chromium-browser: Use after free in window manager
https://bugzilla.redhat.com/show_bug.cgi?id=2029896
[ 41 ] Bug #2029897 - CVE-2021-4068 chromium-browser: Insufficient validation of
untrusted input in new tab page
https://bugzilla.redhat.com/show_bug.cgi?id=2029897
[ 42 ] Bug #2032168 - CVE-2021-4098 chromium-browser: Insufficient data validation in
Mojo
https://bugzilla.redhat.com/show_bug.cgi?id=2032168
[ 43 ] Bug #2032169 - CVE-2021-4099 chromium-browser: Use after free in Swiftshader
https://bugzilla.redhat.com/show_bug.cgi?id=2032169
[ 44 ] Bug #2032170 - CVE-2021-4100 chromium-browser: Object lifecycle issue in ANGLE
https://bugzilla.redhat.com/show_bug.cgi?id=2032170
[ 45 ] Bug #2032171 - CVE-2021-4101 chromium-browser: Heap buffer overflow in
Swiftshader
https://bugzilla.redhat.com/show_bug.cgi?id=2032171
[ 46 ] Bug #2032172 - CVE-2021-4102 chromium-browser: Use after free in V8
https://bugzilla.redhat.com/show_bug.cgi?id=2032172
--------------------------------------------------------------------------------
================================================================================
composer-2.2.0-1.fc34 (FEDORA-2021-66e6a122a1)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 2.2.0** - 2021-12-22 * Added support for using `dev-main` as the
default path repo package version if no VCS info is available (#10372) * Added
--no-scripts as a globally supported flag to all Composer commands to disable
scripts execution (#10371) * Fixed self-update failing in some edge cases due
to loading plugins (#10371) * Fixed display of conflicts showing the wrong
package name in some conditions (#10355) ---- **Version 2.2.0-RC1** -
2021-12-08 * Bumped `composer-runtime-api` and `composer-plugin-api` to
`2.2.0` * UX Change: Added [`allow-
plugins`](https://getcomposer.org/doc/06-config.md#allow-plugins) config value
to enhance security against runtime execution, this will prompt you the first
time you use a plugin and may hang pipelines if they aren't using --no-
interaction (-n) as they should (#10314) * Added an optimization pass to
reduce the amount of redundant inspected during resolution, drastically
improving memory and CPU usage (#9261, #9620) * Added a [global
$_composer_autoload_path
variable](https://getcomposer.org/doc/articles/vendor-
binaries.md#finding-the-composer-autoloader-from-a-binary) containing the path
to autoload.php for binaries (#10137) * Added wildcard support to --ignore-
platform-req (e.g. `ext-*`) (#10083) * Added support for ignoring the upper
bound of platform requirements using "name+" notation e.g. using `--ignore-
platform-req=php+` would allow installing a package requiring `php: 8.0.*` on
PHP 8.1, but not on PHP 7.4. Useful for CI builds of upcoming PHP versions
(#10318) * Added support for setting platform packages to false in
config.platform to disable/hide them (#10308) * Added [`use-parent-
dir`](https://getcomposer.org/doc/06-config.md#use-parent-dir) option to
configure the prompt for using composer.json in upper directory when none is
present in current dir (#10307) * Added [`composer` platform
package](https://getcomposer.org/doc/articles/composer-platform-dependenc...
which is always the exact version of Composer running unlike `composer-*-api`
packages (#10313) * Added a --source flag to `config` command to show where
config values are loaded from (#10129) * Added support for `files` autoloaders
in the runtime scripts/plugins contexts (#10065) * Added retry behavior on
certain http status and curl error codes (#10162) * Added abandoned flag
display in search command output * Added support for --ignore-platform-reqs in
`outdated` command (#10293) * Added --only-vendor (-O) flag to `search`
command to search (and return) vendor names (#10336) * Added COMPOSER_NO_DEV
environment variable to set the --no-dev flag (#10262) * Fixed `archive`
command to behave more like git archive, gitignore/hgignore are not taken into
account anymore, and gitattributes support was improved (#10309) * Fixed
unlocking of replacers when a replaced package is unlocked (#10280) * Fixed
auto-unlocked path repo packages also unlocking their transitive deps when -w/-W
is used (#10157) * Fixed handling of recursive package links (e.g. requiring
or replacing oneself) * Fixed env var reads to check $_SERVER and $_ENV before
getenv for broader ecosystem compatibility (#10218) * Fixed `archive` command
to produce archives with files sorted by name (#10274) * Fixed VcsRepository
issues where server failure could cause missing tags/branches (#10319) * Fixed
some error reporting issues (#10283, #10339)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Remi Collet <remi(a)remirepo.net> - 2.2.0-1
- update to 2.2.0
- add dependency on composer/pcre
--------------------------------------------------------------------------------
================================================================================
crest-2.11.2-1.fc34 (FEDORA-2021-df95db5c3e)
Conformer-Rotamer Ensemble Sampling Tool: a driver for the xtb program
--------------------------------------------------------------------------------
Update Information:
Bugfix update to 2.11.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 2.11.2-1
- Update to 2.11.2.
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1994216 - crest-2.11.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1994216
--------------------------------------------------------------------------------
================================================================================
crun-1.4-1.fc34 (FEDORA-2021-7615916742)
OCI runtime written in C
--------------------------------------------------------------------------------
Update Information:
autobuilt 1.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 1.4-1
- autobuilt 1.4
--------------------------------------------------------------------------------
================================================================================
dnsperf-2.9.0-1.fc34 (FEDORA-2021-f5c982b3d4)
Benchmarking authorative and recursing DNS servers
--------------------------------------------------------------------------------
Update Information:
- Upstream [
release](https://github.com/DNS-OARC/dnsperf/releases/tag/v2.9.0)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Petr Men����k <pemensik(a)redhat.com> - 2.9.0-1
- Update to 2.9.0
- Add tests during build
--------------------------------------------------------------------------------
================================================================================
dr_libs-0-0.9.20211222gitc5e5355.fc34 (FEDORA-2021-d85f3e7c2b)
Single-file audio decoding libraries for C/C++
--------------------------------------------------------------------------------
Update Information:
Update to [
c5e5355](https://github.com/mackron/dr_libs/commit/c5e53558165585ae62
4a7d6c7908e698609093c8): `dr_mp3 - v0.6.32 - 2021-12-11`, `dr_flac - v0.12.33 -
2021-12-22`. ---- **`dr_mp3 - v0.6.32 - 2021-12-11`** - Fix a warning with
Clang. ---- **`dr_flac - v0.12.32 - 2021-12-11`** - Fix a warning with
Clang. ---- **`dr_flac - v0.12.33 - 2021-12-22`** - Fix a bug with seeking
when the seek table does not start at PCM frame 0.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 0-0.9
- Update to c5e5355 (dr_mp3 0.6.32, dr_flac 0.12.33)
* Wed Dec 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 0-0.8
- Let the -devel packages be noarch
--------------------------------------------------------------------------------
================================================================================
flat-remix-icon-theme-0.0.20211214-1.fc34 (FEDORA-2021-82e881bfce)
Icon theme inspired on material design
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.0.20211214-1
- Update to 20211214
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.0.20201112-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-x-tools-0.1.8-0.1.fc34 (FEDORA-2021-25b98ef3f3)
Various packages and tools that support the Go programming language
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.8. Fixes rhbz#2005488. Use autogenerated BRs.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Maxwell G <gotmax(a)e.email> 0.1.8-0.1
- Update to 0.1.8. Fixes rhbz#2005488. Use autogenerated BRs.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2005488 - golang-x-tools-0.1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2005488
--------------------------------------------------------------------------------
================================================================================
icewm-2.9.3-1.fc34 (FEDORA-2021-6e0d7b74fe)
Window manager designed for speed, usability, and consistency
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.9.3-1
- chore(update): 2.9.3
* Fri Dec 10 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.9.2-1
- chore(update): 2.9.2
* Wed Dec 8 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.9.2-1
- chore(update): 1.9.2
--------------------------------------------------------------------------------
================================================================================
julia-1.6.5-1.fc34 (FEDORA-2021-4d5996d21a)
High-level, high-performance dynamic language for technical computing
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Milan Bouchet-Valat <nalimilan(a)club.fr> - 1.6.5-1
- New upstream release.
--------------------------------------------------------------------------------
================================================================================
kernel-5.15.11-100.fc34 (FEDORA-2021-e6cbca1e9e)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.15.11 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.15.11-0]
- Fix up Changelog (Justin M. Forbes)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2031199 - CVE-2021-28714 CVE-2021-28715 xen: guest can force Linux netback
driver to hog large amounts of kernel memory
https://bugzilla.redhat.com/show_bug.cgi?id=2031199
[ 2 ] Bug #2034940 - CVE-2021-28711 CVE-2021-28712 CVE-2021-28713 xen: rogue backends
can cause DoS of guests via high frequency events
https://bugzilla.redhat.com/show_bug.cgi?id=2034940
--------------------------------------------------------------------------------
================================================================================
lexertl14-0.1.0-4.20211222git2ea71b8.fc34 (FEDORA-2021-db997c5f60)
C++14 version of lexertl
--------------------------------------------------------------------------------
Update Information:
Update to 2ea71b8: added a function, fixed static analysis findings
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.1.0-4
- Update to 2ea71b8
* Tue Dec 14 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.1.0-3
- Dep. on cmake-filesystem is now auto-generated
* Fri Nov 19 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.1.0-2
- Update to commit 488602f
--------------------------------------------------------------------------------
================================================================================
libgda-5.2.10-4.fc34 (FEDORA-2021-084f819da6)
Library for writing gnome database programs
--------------------------------------------------------------------------------
Update Information:
Patch for CVE-2021-39359. ---- Update to 5.2.10
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 1:5.2.10-4
- Patch CVE-2021-39359.
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1:5.2.10-3
- Rebuilt with OpenSSL 3.0.0
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:5.2.10-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Sat Jul 10 2021 Hans de Goede <hdegoede(a)redhat.com> - 1:5.2.10-1
- New upstream bugfix release 5.2.10
- gda_trml2html/2pdf scripts have been ported to python3, restore them
- Rebuild against new mdbtools-libs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1997146 - CVE-2021-39359 libgda: missing TLS certificate verification
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1997146
--------------------------------------------------------------------------------
================================================================================
llhttp-6.0.6-3.fc34 (FEDORA-2021-cff127cd16)
Port of http_parser to llparse
--------------------------------------------------------------------------------
Update Information:
Build with LLHTTP_STRICT_MODE enabled
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 6.0.6-3
- Build with LLHTTP_STRICT_MODE enabled
* Tue Dec 14 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 6.0.6-2
- Dep. on cmake-filesystem is now auto-generated
--------------------------------------------------------------------------------
================================================================================
matrix-synapse-1.49.2-1.fc34 (FEDORA-2021-085bbd8bf5)
A Matrix reference homeserver written in Python using Twisted
--------------------------------------------------------------------------------
Update Information:
Update to v1.49.2 ---- Update to v1.49.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2021 Kai A. Hiller <V02460(a)gmail.com> - 1.49.2-1
- Update to v1.49.2
* Tue Dec 14 2021 Kai A. Hiller <V02460(a)gmail.com> - 1.49.0-1
- Update to v1.49.0
--------------------------------------------------------------------------------
================================================================================
nginx-1.20.2-1.fc34 (FEDORA-2021-854d766bed)
A high performance web server and reverse proxy server
--------------------------------------------------------------------------------
Update Information:
* Feature: OpenSSL 3.0 compatibility. * Bugfix: SSL variables might be empty
when used in logs; the bug had appeared in 1.19.5. * Bugfix: keepalive
connections with gRPC backends might not be closed after receiving a GOAWAY
frame. * Bugfix: backend SSL connections in the stream module might hang after
an SSL handshake. * Bugfix: SSL connections with gRPC backends might hang if
select, poll, or /dev/poll methods were used. * Bugfix: in the $content_length
variable when using chunked transfer encoding. * Bugfix: requests might hang
when using HTTP/2 and the "aio_write" directive.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 17 2021 Felix Kaechele <heffer(a)fedoraproject.org> - 1:1.20.2-1
- update to 1.20.2
--------------------------------------------------------------------------------
================================================================================
osbuild-composer-41-1.fc34 (FEDORA-2021-b8d6737977)
An image building service based on osbuild
--------------------------------------------------------------------------------
Update Information:
Update osbuild-composer to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> - 41-1
CHANGES WITH 41:
----------------
* build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (#2007)
* build(deps): bump
github.com/aws/aws-sdk-go from 1.40.49 to 1.42.25 (#2150)
* osbuild2: fix typo in tar stage option value (#2151)
* osbuild2: support 'format' and 'root-node' Tar stage options (#2146)
* Tools: add 'no-image-info' option to image test case requests (#2143)
* generate-all-test-cases: use `make scratch` for building RPMs (#2138)
* osbuild-auth-tests: add a build constraint also to certificates.go (#2097)
* dbjobqueue: fix FinishJob not returning an error if already finished (#2133)
* osbuild2: Expand dnf_config stage (#2113)
* test: make test more resilient (#2132)
* worker: Treat a non echo.HTTPError like a regular error (#2140)
* osbuild2: ensure that empty sysconfig options members are omitted (#2134)
* Add support for new osbuild stages needed for GCE image (#2126)
* tools: use image_type_tags in repos used for image test cases (#2135)
* composer: Only set queue and artifact dir for fsqueue (#2095)
* cloudapi: improve logging for errors (#2088)
* Tracing: measure IO during each job (#2106)
* Tests: trim dependencies for test generation (#2128)
* metrics: add additional buckets (#2130)
* distro/depsolve/cloudapi: Add 3rd-party repository support. (#2101)
* templates: add worker dashboard (#2127)
* dnf json as a service (#2062)
* Extend scheduled cloud cleaner to GCP (#2115)
* openstack: use rhos-01 (#2120)
* RHEL-9.0: unify the default partitioning scheme used by all non-EDGE images (#2019)
* ci: CC QE in notification message (#2118)
* enable gosec tool (#2073)
* release-action: Send notification to our Slack channel (#2117)
Contributions from: Alexander Todorov, Diaa Sami, Djebran Lezzoum, Gianluca Zuccarelli,
Juan Abia, Ond��ej Budai, Sanne Raymaekers, Simon Steinbeiss, Thomas Lavocat, Tomas Hozza,
dependabot[bot]
��� Liberec, 2021-12-22
--------------------------------------------------------------------------------
================================================================================
python-glad-0.1.35-2.fc34 (FEDORA-2021-97a3858585)
Multi-Language GL/GLES/EGL/GLX/WGL Loader-Generator
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 0.1.35-1
- Update to latest version (#2034714)
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.34-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 0.1.34-3
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2034714 - python-glad-0.1.35 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2034714
--------------------------------------------------------------------------------
================================================================================
rclone-1.57.0-1.fc34 (FEDORA-2021-0e22c335d5)
Rsync for cloud storage
--------------------------------------------------------------------------------
Update Information:
Update to commit 1.57.0 Close: rhbz#1953788
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.57.0-1
- Update to commit 1.57.0 Close: rhbz#1953788
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.55.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1953788 - rclone-1.57.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1953788
--------------------------------------------------------------------------------
================================================================================
scitokens-cpp-0.6.2-4.fc34 (FEDORA-2021-b849ab983e)
C++ Implementation of the SciTokens Library
--------------------------------------------------------------------------------
Update Information:
Update to el9 build version.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 21 2021 Derek Weitzel <djw8605(a)gmail.com> - 0.6.2-4
- Remove -Werror for depreciated OpenSSL 3 functions
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 0.6.2-3
- Rebuilt with OpenSSL 3.0.0
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2021907 - scitokens-cpp: FTBFS with OpenSSL 3.0.0
https://bugzilla.redhat.com/show_bug.cgi?id=2021907
[ 2 ] Bug #2033821 - Branch and build scitokens-cpp in epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2033821
--------------------------------------------------------------------------------
================================================================================
urlscan-0.9.8-1.fc34 (FEDORA-2021-fab2a9d6e7)
Extract and browse the URLs contained in an email (urlview replacement)
--------------------------------------------------------------------------------
Update Information:
* Update to new patch release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.9.8-1
- Update to latest patch release
- Use pyproject macros
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 0.9.6-2
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2011651 - urlscan-0.9.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2011651
--------------------------------------------------------------------------------
================================================================================
wingpanel-3.0.2-1.fc34 (FEDORA-2021-b4774253f0)
Stylish top panel
--------------------------------------------------------------------------------
Update Information:
Update to version 3.0.2. Release notes:
https://github.com/elementary/wingpanel/releases/tag/3.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Fabio Valentini <decathorpe(a)gmail.com> 3.0.2-1
- Update to version 3.0.2; Fixes RHBZ#2034028
--------------------------------------------------------------------------------