The following Fedora 33 Security updates need testing:
Age URL
137
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-52c89b44a9
c-ares-1.17.2-1.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e9fc035565
rubygem-addressable-2.7.0-5.fc33
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f2c8514f02
krb5-1.18.2-31.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5b74a5a0db
shutter-0.98-5.fc33
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-535596f062
nbdkit-1.24.6-1.fc33
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-17472e18a3
bind-9.11.35-1.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ca8368f328
firefox-91.0.1-2.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9e2e12e5d7
condor-8.8.15-2.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8d0e5b3cd8 apr-1.7.0-7.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-301dfb76b3
grilo-0.3.13-3.fc33
The following Fedora 33 Critical Path updates have yet to be approved:
Age URL
156
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb
PackageKit-1.2.3-1.fc33
91
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33
libreport-2.15.1-1.fc33 satyr-0.37-2.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-127aaf73b9
redhat-rpm-config-176-3.fc33
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b2258fdd54
libwebp-1.2.1-1.fc33 mingw-libwebp-1.2.1-1.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-52c89b44a9
c-ares-1.17.2-1.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1b2b627990
langtable-0.0.56-1.fc33
9
https://bodhi.fedoraproject.org/updates/FEDORA-2021-da17110288
shadow-utils-4.8.1-7.fc33
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4ccf3840ed
gnome-shell-3.38.6-1.fc33 mutter-3.38.6-1.fc33
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bedd78e3b7
linux-firmware-20210818-122.fc33
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-ca8368f328
firefox-91.0.1-2.fc33
The following builds have been pushed to Fedora 33 updates-testing
ansible-pcp-2.2.1-1.fc33
cockpit-composer-31-1.fc33
copr-backend-1.150-1.fc33
copr-cli-1.95-1.fc33
copr-frontend-1.180-1.fc33
goverlay-0.6.2-1.fc33
koji-1.26.0-1.fc33
libopenmpt-0.4.23-1.fc33
pango-1.48.4-2.fc33
php-7.4.23-1.fc33
python-copr-1.112-1.fc33
python-markdown2-2.4.1-1.fc33
python-regex-2021.8.21-1.fc33
retroarch-1.9.8-1.fc33
rust-az-1.1.2-1.fc33
video-downloader-0.8.6-1.fc33
wineglass-1.2.1-1.fc33
Details about builds:
================================================================================
ansible-pcp-2.2.1-1.fc33 (FEDORA-2021-2b65aac5d5)
Ansible Metric collection for Performance Co-Pilot
--------------------------------------------------------------------------------
Update Information:
Latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 26 2021 Nathan Scott <nathans(a)redhat.com> 2.2.1-1
- Latest upstream release
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
cockpit-composer-31-1.fc33 (FEDORA-2021-227de31fb7)
Composer GUI for use with Cockpit
--------------------------------------------------------------------------------
Update Information:
- Add new ostree image types - Improve loading state when waiting for api
responses - Improve notification system - Improve test stability - Update NPM
dependencies - Update translations
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 26 2021 Jacob Kozol <jacobdkozol(a)gmail.com> - 31-1
- Add new ostree image types
- Improve loading state when waiting for api responses
- Improve notification system
- Improve test stability
- Update NPM dependencies
- Update translations
--------------------------------------------------------------------------------
================================================================================
copr-backend-1.150-1.fc33 (FEDORA-2021-eea6b68e26)
Backend for Copr
--------------------------------------------------------------------------------
Update Information:
copr-backend - request arch_noarch resalloc tag for source RPM builds - re-try
/bin/sign call upon connection timeout - drop 'check_consecutive_build_fails'
script copr-frontend - add support for optional namespaces in DistGit
instances - add a "storage statistics" link to footer - fix the copr logo so it
contains updated "fedora" font - index the CoprChroot.deleted field to speedup
API/UI - a new admin command for prolonging unnoticed chroots - properly notify
all not-deleted chroots - storage waste - drop upload temporary directories even
upon source failure - automatically request PR CoprDirs removal using a new
action type - colorize CoprDir-buttons on builds page, notifying users which of
them will be removed soon - fix build-listing for copr-dirs, show all builds by
default again - forked source builds now have forked source_status, too - fixed
the comps file hyperlink in web-UI form - packaging - don't install test files
(not used at runtime) - allow user to disable generating appstream metadata
(admin action is no longer needed) - provide ENVRA build results via APIv3 (for
particular build ID) - review.txt link is now shown only for proper chroots -
add a logo for the OpenMandriva chroots - the default value for
MockChroot.comment should be none - pruner: allow pruning also the finalized
chroots - invent a new FE-BE API version constant, guarding against incompatible
FE/BE installations - a new knob for turning a profiler on (devel setup) - newly
we show two latest blog post articles
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 25 2021 Pavel Raiskup <praiskup(a)redhat.com> 1.150-1
- request arch_noarch resalloc tag for source RPM builds
- re-try /bin/sign call upon connection timeout
- drop 'check_consecutive_build_fails' script
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.95-1.fc33 (FEDORA-2021-61a3221d5f)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
copr-cli: - add parameters for disabling appstream generation - let exceptions
flow to the main function - generate webhook secrets using APIv3 python-copr:
- generate webhook secrets using APIv3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 25 2021 Pavel Raiskup <praiskup(a)redhat.com> 1.95-1
- add parameters for disabling appstream generation
- let exceptions flow to the main function
- generate webhook secrets using APIv3
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.180-1.fc33 (FEDORA-2021-eea6b68e26)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
copr-backend - request arch_noarch resalloc tag for source RPM builds - re-try
/bin/sign call upon connection timeout - drop 'check_consecutive_build_fails'
script copr-frontend - add support for optional namespaces in DistGit
instances - add a "storage statistics" link to footer - fix the copr logo so it
contains updated "fedora" font - index the CoprChroot.deleted field to speedup
API/UI - a new admin command for prolonging unnoticed chroots - properly notify
all not-deleted chroots - storage waste - drop upload temporary directories even
upon source failure - automatically request PR CoprDirs removal using a new
action type - colorize CoprDir-buttons on builds page, notifying users which of
them will be removed soon - fix build-listing for copr-dirs, show all builds by
default again - forked source builds now have forked source_status, too - fixed
the comps file hyperlink in web-UI form - packaging - don't install test files
(not used at runtime) - allow user to disable generating appstream metadata
(admin action is no longer needed) - provide ENVRA build results via APIv3 (for
particular build ID) - review.txt link is now shown only for proper chroots -
add a logo for the OpenMandriva chroots - the default value for
MockChroot.comment should be none - pruner: allow pruning also the finalized
chroots - invent a new FE-BE API version constant, guarding against incompatible
FE/BE installations - a new knob for turning a profiler on (devel setup) - newly
we show two latest blog post articles
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 25 2021 Pavel Raiskup <praiskup(a)redhat.com> 1.180-1
- use the same repofile for all Fedora versions including Rawhide
- don't traceback for "module exists" error
- fixup logging of info messages
- don't depend on python-six, drop __future__ imports
- move package non-denylisted chroots to general information
- show more of general package information on package detail page
- update main.ini and rpkg.conf.j2 for rpkg 3.0 compatibility
- make template caching configurable
- log basic request information for each traceback
- do not cache last build badge
- drop user proxy concept, we don't use it
- generate webhook secrets using APIv3
--------------------------------------------------------------------------------
================================================================================
goverlay-0.6.2-1.fc33 (FEDORA-2021-78d26944d0)
Opensource project that aims to create a Graphical UI to help manage Linux overlays
--------------------------------------------------------------------------------
Update Information:
- build(update): 0.6.2 | Thanks @zawertun for help with this update
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 24 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.6.2-1
- build(update): 0.6.2 | Thanks @zawertun for help with this update
--------------------------------------------------------------------------------
================================================================================
koji-1.26.0-1.fc33 (FEDORA-2021-4d40916a30)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Update to upstream bugfix release 1.26.0.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 25 2021 Kevin Fenzi <kevin(a)scrye.com> - 1.26.0-1
- Update to 1.26.0. Fixes rhbz#1996614
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1954590 - The koji-hub can't connect to an ssl secured pgsql server.
https://bugzilla.redhat.com/show_bug.cgi?id=1954590
--------------------------------------------------------------------------------
================================================================================
libopenmpt-0.4.23-1.fc33 (FEDORA-2021-c6393c7540)
C/C++ library to decode tracker music module (MOD) files
--------------------------------------------------------------------------------
Update Information:
Security release for the 0.4 branch:
https://lib.openmpt.org/libopenmpt/2021/08/22/security-
updates-0.5.11-0.4.23-0.3.32/
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 25 2021 Michael Schwendt <mschwendt(a)fedoraproject.org> - 0.4.23-1
- update to 0.4.23 (security release)
--------------------------------------------------------------------------------
================================================================================
pango-1.48.4-2.fc33 (FEDORA-2021-28fca597fb)
System for layout and rendering of internationalized text
--------------------------------------------------------------------------------
Update Information:
Fixes some crash in pango-view
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 26 2021 Peng Wu <pwu(a)redhat.com> - 1.48.4-2
- Fixes pango-view crash
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1993670 - segfault with pango-view assert in cairo
https://bugzilla.redhat.com/show_bug.cgi?id=1993670
--------------------------------------------------------------------------------
================================================================================
php-7.4.23-1.fc33 (FEDORA-2021-45ba66bd29)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 7.4.23** (26 Aug 2021) **Core:** * Fixed bug php#72595
(php_output_handler_append illegal write access). (cmb) * Fixed bug php#66719
(Weird behaviour when using get_called_class() with call_user_func()). (Nikita)
* Fixed bug php#81305 (Built-in Webserver Drops Requests With "Upgrade"
Header).
(cmb) **BCMath:** * Fixed bug php#78238 (BCMath returns "-0"). (cmb)
**CGI:**
* Fixed bug php#80849 (HTTP Status header truncation). (cmb) **GD:** * Fixed
bug php#51498 (imagefilledellipse does not work for large circles). (cmb)
**MySQLi:** * Fixed bug php#74544 (Integer overflow in
mysqli_real_escape_string()). (cmb, johannes) **OpenSSL:** * Fixed bug
php#81327 (Error build openssl extension on php 7.4.22). (cmb) **PDO_ODBC:** *
Fixed bug php#81252 (PDO_ODBC doesn't account for SQL_NO_TOTAL). (cmb)
**Phar:** * Fixed bug php#81211: Symlinks are followed when creating PHAR
archive.(cmb) **Shmop:** * Fixed bug php#81283 (shmop can't read beyond
2147483647 bytes). (cmb, Nikita) **Standard:** * Fixed bug php#72146 (Integer
overflow on substr_replace). (cmb) * Fixed bug php#81265 (getimagesize returns 0
for 256px ICO images). (George Dietrich) * Fixed bug php#74960 (Heap buffer
overflow via str_repeat). (cmb, Dmitry) **Streams:** * Fixed bug php#81294
(Segfault when removing a filter). (cmb)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 26 2021 Remi Collet <remi(a)remirepo.net> - 7.4.23-1
- Update to 7.4.23 -
http://www.php.net/releases/7_4_23.php
--------------------------------------------------------------------------------
================================================================================
python-copr-1.112-1.fc33 (FEDORA-2021-61a3221d5f)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
copr-cli: - add parameters for disabling appstream generation - let exceptions
flow to the main function - generate webhook secrets using APIv3 python-copr:
- generate webhook secrets using APIv3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 25 2021 Pavel Raiskup <praiskup(a)redhat.com> 1.112-1
- generate webhook secrets using APIv3
--------------------------------------------------------------------------------
================================================================================
python-markdown2-2.4.1-1.fc33 (FEDORA-2021-241f49bb15)
A fast and complete Python implementation of Markdown
--------------------------------------------------------------------------------
Update Information:
### python-markdown2 2.4.1 ### - [pull #389] Tables extra: allow whitespace at
the end of the underline row - [pull #392] Pyshell extra: enable syntax
highlighting if fenced-code-blocks is loaded. - [pull #402] Regex DOS bandaid
fix
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 26 2021 Thomas Moschny <thomas.moschny(a)gmx.de> - 2.4.1-1
- Update to 2.4.1.
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 2.4.0-2
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
================================================================================
python-regex-2021.8.21-1.fc33 (FEDORA-2021-3c98126f0b)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update python-regex to the latest release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 26 2021 Thomas Moschny <thomas.moschny(a)gmx.de> - 2021.8.21-1
- Update to 2021.8.21.
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
2021.7.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
retroarch-1.9.8-1.fc33 (FEDORA-2021-981606fa43)
Cross-platform, sophisticated frontend for the libretro API.
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 26 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.9.8-1
- build(update): 1.9.8
--------------------------------------------------------------------------------
================================================================================
rust-az-1.1.2-1.fc33 (FEDORA-2021-046041decc)
Casts and checked casts
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 25 2021 R��mi Lauzier <remilauzier(a)protonmail.com> 1.1.2-1
- Update to version 1.1.2; Fixes RHBZ#1996843
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> 1.1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
video-downloader-0.8.6-1.fc33 (FEDORA-2021-7836374e27)
Download videos from websites like YouTube and many others
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 26 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.8.6-1
- build(update): 0.8.6
--------------------------------------------------------------------------------
================================================================================
wineglass-1.2.1-1.fc33 (FEDORA-2021-d9ca09d40d)
GUI for Wine
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1996791 - Review Request: wineglass - GUI for Wine
https://bugzilla.redhat.com/show_bug.cgi?id=1996791
--------------------------------------------------------------------------------