The following Fedora 33 Security updates need testing:
Age URL
93
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-01f851ab8d
seamonkey-2.53.8-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6422a16aed
mingw-djvulibre-3.5.28-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a5b584004c
linuxptp-3.1.1-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ca58c57bdf
chromium-91.0.4472.114-2.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0c98725795
opendmarc-1.4.1.1-3.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
111
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
46
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-31b3bb27dc
mtools-4.0.31-1.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0f36063660
appstream-data-33-3.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3b341e9e71
selinux-policy-3.14.6-39.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-25b3e62f7d koji-1.25.1-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e0aedafbc9
coreutils-8.32-21.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-47368106b3
hwdata-0.349-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fe782f6705
libbytesize-2.6-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-de131565a6
ethtool-5.13-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c09b022e8f dracut-055-3.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-abcaa79b71
libmodulemd-2.13.0-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a3a4b02149
kernel-5.12.15-200.fc33
The following builds have been pushed to Fedora 33 updates-testing
endless-sky-0.9.14-1.fc33
firefox-90.0-1.fc33
freeipa-4.9.6-1.fc33
gauche-0.9.10-1.fc33
glibc-2.32-9.fc33
golang-github-aliyun-alibaba-cloud-sdk-1.61.1181-1.fc33
golang-github-aliyun-oss-sdk-2.1.9-1.fc33
golang-github-aliyun-ossutil-1.7.5-1.fc33
krb5-1.18.2-30.fc33
moodle-3.9.8-1.fc33
openblas-0.3.16-1.fc33
packit-0.34.0-1.fc33
perl-Dist-Zilla-Plugin-Git-2.048-1.fc33
perl-GooCanvas2-CairoTypes-0.001-5.fc33
perl-Test2-Suite-0.000140-1.fc33
perl-libwww-perl-6.55-1.fc33
php-laminas-code4-4.4.2-1.fc33
python-dask-2021.7.0-1.fc33~bootstrap
python-tblib-1.7.0-1.fc33
python-yfinance-0.1.63-1.fc33
python3.10-3.10.0~b4-1.fc33
vim-8.2.3154-1.fc33
xarchiver-0.5.4.17-1.fc33
xeus-1.0.3-1.fc33
Details about builds:
================================================================================
endless-sky-0.9.14-1.fc33 (FEDORA-2021-5573d567ab)
Space exploration, trading, and combat game
--------------------------------------------------------------------------------
Update Information:
0.9.14
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 0.9.14-1
- 0.9.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1981463 - endless-sky-0.9.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1981463
--------------------------------------------------------------------------------
================================================================================
firefox-90.0-1.fc33 (FEDORA-2021-e0adbf04a9)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream (90.0)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Martin Stransky <stransky(a)redhat.com> - 90.0-1
- Updated to 90.0
* Mon Jul 12 2021 Daiki Ueno <dueno(a)redhat.com> - 89.0.2-3
- flatpak: Enable loading system trust store on the host (rhbz#1766340)
--------------------------------------------------------------------------------
================================================================================
freeipa-4.9.6-1.fc33 (FEDORA-2021-9dc3f24fd6)
The Identity, Policy and Audit system
--------------------------------------------------------------------------------
Update Information:
Upstream release FreeIPA 4.9.6
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 29 2021 Fran��ois Cami <fcami(a)redhat.com> - 4.9.6-1
- Upstream release FreeIPA 4.9.6
--------------------------------------------------------------------------------
================================================================================
gauche-0.9.10-1.fc33 (FEDORA-2021-4674b014f9)
Scheme script interpreter with multibyte character handling
--------------------------------------------------------------------------------
Update Information:
Major feature enhancements, see
https://practical-
scheme.net/gauche/gmemo/?Release%200.9.10
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 10 2021 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.9.10-1
- Update to 0.9.10
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1907011 - gauche-0.9.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1907011
--------------------------------------------------------------------------------
================================================================================
glibc-2.32-9.fc33 (FEDORA-2021-3f4132bb56)
The GNU libc libraries
--------------------------------------------------------------------------------
Update Information:
Auto-sync with upstream branch release/2.32/master Upstream commit:
27e892f6608e9d0da71884bb1422a735f6062850 - wordexp: handle overflow in
positional parameter number (swbz#28011, CVE-2021-35942)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 7 2021 Patsy Griffin <patsy(a)redhat.com> - 2.32-9
- Auto-sync with upstream branch release/2.32/master,
commit 27e892f6608e9d0da71884bb1422a735f6062850.
- wordexp: handle overflow in positional parameter number (bug 28011)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1977976 - CVE-2021-35942 glibc: Arbitrary read in wordexp() [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1977976
--------------------------------------------------------------------------------
================================================================================
golang-github-aliyun-alibaba-cloud-sdk-1.61.1181-1.fc33 (FEDORA-2021-f8eba832fe)
Alibaba Cloud SDK for Go
--------------------------------------------------------------------------------
Update Information:
Update to 1.61.1181
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Brandon Perkins <bperkins(a)redhat.com> - 1.61.1181-1
- Update to 1.61.1181
- Close: rhbz#1966276
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1966276 - golang-github-aliyun-alibaba-cloud-sdk-1.61.1181 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1966276
--------------------------------------------------------------------------------
================================================================================
golang-github-aliyun-oss-sdk-2.1.9-1.fc33 (FEDORA-2021-27024d5167)
Alibaba Cloud OSS SDK for Go
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.9
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Brandon Perkins <bperkins(a)redhat.com> - 2.1.9-1
- Update to 2.1.9
- Close: rhbz#1980940
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1980940 - golang-github-aliyun-oss-sdk-2.1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1980940
--------------------------------------------------------------------------------
================================================================================
golang-github-aliyun-ossutil-1.7.5-1.fc33 (FEDORA-2021-ebe214fcbc)
Alibaba Cloud (Aliyun) Object Storage Service (OSS) CLI
--------------------------------------------------------------------------------
Update Information:
Update to version 1.7.5 (Fixes rhbz#1980939)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Brandon Perkins <bperkins(a)redhat.com> - 1.7.5-1
- Update to version 1.7.5 (Fixes rhbz#1980939)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1980939 - golang-github-aliyun-ossutil-1.7.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1980939
--------------------------------------------------------------------------------
================================================================================
krb5-1.18.2-30.fc33 (FEDORA-2021-2bae525fd3)
The Kerberos network authentication system
--------------------------------------------------------------------------------
Update Information:
- Fix KDC null deref on bad encrypted challenge - CVE-2021-36222 - Denial-
of-service only - (f34 only): pull-up to rawhide
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Robbie Harwood <rharwood(a)redhat.com> - 1.18.2-30
- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
--------------------------------------------------------------------------------
================================================================================
moodle-3.9.8-1.fc33 (FEDORA-2021-e4e1d50dc3)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Latest updates.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 3.9.8-1
- 3.9.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1981190 - moodle-3.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1981190
--------------------------------------------------------------------------------
================================================================================
openblas-0.3.16-1.fc33 (FEDORA-2021-d969cd10b8)
An optimized BLAS library based on GotoBLAS2
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.16, see changes at
https://github.com/xianyi/OpenBLAS/releases/tag/v0.3.16
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 0.3.16-1
- Update to 0.3.16.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1981183 - openblas-0.3.16 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1981183
--------------------------------------------------------------------------------
================================================================================
packit-0.34.0-1.fc33 (FEDORA-2021-153c615e99)
A tool for integrating upstream projects with Fedora operating system
--------------------------------------------------------------------------------
Update Information:
New upstream release: 0.34.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 8 2021 Packit Service <user-cont-team+packit-service(a)redhat.com> -
0.34.0-1
- Source-git: `source-git init` was refactored, which also changed and simplified the
CLI.
--------------------------------------------------------------------------------
================================================================================
perl-Dist-Zilla-Plugin-Git-2.048-1.fc33 (FEDORA-2021-57ef3b719e)
Update your git repository after release
--------------------------------------------------------------------------------
Update Information:
Thi release enables to set a push URI. It also provides the upstream tests
packaged in a dedicated perl-Dist-Zilla-Plugin-Git-tests RPM package.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Petr Pisar <ppisar(a)redhat.com> - 2.048-1
- 2.048 bump
- Package the tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1980942 - perl-Dist-Zilla-Plugin-Git-2.048 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1980942
--------------------------------------------------------------------------------
================================================================================
perl-GooCanvas2-CairoTypes-0.001-5.fc33 (FEDORA-2021-8c9daf8c91)
Bridge between GooCanvas2 and Cairo types
--------------------------------------------------------------------------------
Update Information:
Update to 0.001-5
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1970460 - Review Request: perl-GooCanvas2-CairoTypes - Bridge between
GooCanvas2 and Cairo types
https://bugzilla.redhat.com/show_bug.cgi?id=1970460
--------------------------------------------------------------------------------
================================================================================
perl-Test2-Suite-0.000140-1.fc33 (FEDORA-2021-895a697ddf)
Set of tools built upon the Test2 framework
--------------------------------------------------------------------------------
Update Information:
* 0.000140 bump * package tests
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 16 2021 Michal Josef ��pa��ek <mspacek(a)redhat.com> - 0.000140-1
- 0.000140 bump
- Package tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1959929 - perl-Test2-Suite-0.000140 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1959929
--------------------------------------------------------------------------------
================================================================================
perl-libwww-perl-6.55-1.fc33 (FEDORA-2021-14def5cae0)
A Perl interface to the World-Wide Web
--------------------------------------------------------------------------------
Update Information:
* Attempt to avoid rare fails in redirect.t * Be explicit in the prerequisite of
HTTP::Status
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 18 2021 Michal Josef ��pa��ek <mspacek(a)redhat.com> - 6.55-1
- 6.55 bump
* Thu May 6 2021 Michal Josef ��pa��ek <mspacek(a)redhat.com> - 6.54-1
- 6.54 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1973319 - perl-libwww-perl-6.55 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1973319
--------------------------------------------------------------------------------
================================================================================
php-laminas-code4-4.4.2-1.fc33 (FEDORA-2021-6c5712eaf1)
Laminas Framework Code component
--------------------------------------------------------------------------------
Update Information:
**Version 4.4.2** Bug * 92: Make MethodGenerator parameter sorting preserve
array keys thanks to @willjones-stratagem ---- **Version 4.4.1** Bug *
90: Fix MethodGenerator parameter sorting, when an explicit sorting is provided
thanks to @willjones-stratagem
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Remi Collet <remi(a)remirepo.net> - 4.4.2-1
- update to 4.4.2
* Fri Jul 9 2021 Remi Collet <remi(a)remirepo.net> - 4.4.1-1
- update to 4.4.1
--------------------------------------------------------------------------------
================================================================================
python-dask-2021.7.0-1.fc33~bootstrap (FEDORA-2021-cfdfe11062)
Parallel PyData with Task Scheduling
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 11 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2021.7.0-1
- Update to latest version (#1980906)
* Sun Jul 4 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2021.6.2-1
- Update to latest version (#1974872)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1980906 - python-dask-2021.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1980906
--------------------------------------------------------------------------------
================================================================================
python-tblib-1.7.0-1.fc33 (FEDORA-2021-85fdb8fc09)
Traceback serialization library
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.7.0-1
- Update to latest version
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.6.0-6
- Rebuilt for Python 3.10
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860191 - python-tblib-1.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1860191
--------------------------------------------------------------------------------
================================================================================
python-yfinance-0.1.63-1.fc33 (FEDORA-2021-66fbf71910)
Yahoo! Finance market data downloader
--------------------------------------------------------------------------------
Update Information:
New release 0.1.63 ���� ---- Updating to 0.1.62 ---- Update to 0.1.61 ----
Update to 0.1.60
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Major Hayden <major(a)mhtx.net> - 0.1.63-1
- Update to 0.1.63
* Fri Jul 9 2021 Major Hayden <major(a)mhtx.net> - 0.1.62-1
- Update to 0.1.62
* Thu Jul 8 2021 Major Hayden <major(a)mhtx.net> - 0.1.61-1
- Update to 0.1.61
* Sat Jul 3 2021 Major Hayden <major(a)mhtx.net> - 0.1.60-1
- Update to 0.1.60
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1978943 - python-yfinance-0.1.60 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1978943
[ 2 ] Bug #1980266 - python-yfinance-0.1.61 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1980266
[ 3 ] Bug #1980896 - python-yfinance-0.1.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1980896
[ 4 ] Bug #1981044 - python-yfinance-0.1.63 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1981044
--------------------------------------------------------------------------------
================================================================================
python3.10-3.10.0~b4-1.fc33 (FEDORA-2021-1525c6b552)
Version 3.10 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
## Python 3.10.0b4 Python 3.10.0b4 is the fourth and last of the Python 3.10
beta release previews. Beta release previews are intended to give the wider
community the opportunity to test new features and bug fixes and to prepare
their projects to support the new feature release. We **strongly encourage**
maintainers of third-party Python projects to **test with 3.10** during the beta
phase and report issues found to the Python bug tracker as soon as possible.
While the release is planned to be feature complete entering the beta phase, it
is possible that features may be modified or, in rare cases, deleted up until
the start of the release candidate phase. Our goal is to have no ABI changes
after beta 4 and as few code changes as possible after 3.10.0rc1, the first
release candidate. To achieve that, it will be extremely important to get as
much exposure for 3.10 as possible during the beta phase. Please keep in mind
that this is a pre-release and its use is **not recommended for production
environments**. *
[
Changelog](https://docs.python.org/3.10/whatsnew/changelog.html#changelog)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 11 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 3.10.0~b4-1
- Update to 3.10.0b4
--------------------------------------------------------------------------------
================================================================================
vim-8.2.3154-1.fc33 (FEDORA-2021-aad01efa5c)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
The newest upstream commit
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.2.3154-1
- patchlevel 3154
* Mon Jun 28 2021 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.2.3070-1
- patchlevel 3070
--------------------------------------------------------------------------------
================================================================================
xarchiver-0.5.4.17-1.fc33 (FEDORA-2021-f1d7bec882)
Archive manager for Xfce
--------------------------------------------------------------------------------
Update Information:
- update to 0.5.4.17 - fix handling rar archives - switch UI to gtk3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 12 2021 Dan Hor��k <dan[at]danny.cz> - 0.5.4.17-1
- Update to 0.5.4.17 (#1963756, #1943121, #1943121)
- Switch to gtk3 (#1790918)
- Drop obsolete distro support
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.5.4.14-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1790918 - Switch to GTK3
https://bugzilla.redhat.com/show_bug.cgi?id=1790918
[ 2 ] Bug #1943121 - xarchiver: FTBFS with upcoming autoconf-2.71
https://bugzilla.redhat.com/show_bug.cgi?id=1943121
[ 3 ] Bug #1963756 - Please update xarchiver to a more recent version
https://bugzilla.redhat.com/show_bug.cgi?id=1963756
--------------------------------------------------------------------------------
================================================================================
xeus-1.0.3-1.fc33 (FEDORA-2021-66915390ff)
C++ implementation of the Jupyter kernel protocol
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 11 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.3-1
- Update to latest version (#1965198)
- Fix build with Sphinx 4 (#1977665)
- Remove unnecessary RPATH directories
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965198 - xeus-1.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1965198
--------------------------------------------------------------------------------