The following Fedora 34 Security updates need testing:
Age URL
61
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bce7f9b98c
libvirt-7.0.0-7.fc34
42
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0113144f35
grafana-7.5.9-4.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b30ea7dbd3
squashfs-tools-4.5-3.20210913gite048580.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-68d0f3043a
python2.7-2.7.18-15.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-72176a63a8
ckeditor-4.16.2-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-eef0654c0b
mingw-python3-3.9.4-3.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0739f45529
python-flask-restx-0.3.0-2.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f26cdf180b
mono-tools-4.2-24.fc34 sharpziplib-1.3.3-0.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-994751581f
libspf2-1.2.11-1.20210922git4915c308.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2323f998a6
kernel-5.14.7-200.fc34 kernel-headers-5.14.7-200.fc34 kernel-tools-5.14.7-200.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b1bb3d3b20
cifs-utils-6.13-3.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-5f1e30aa56
cobbler-3.2.2-2.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-359a715688
libjpeg-turbo-2.0.90-3.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1805eacb48
rust-addr2line-0.16.0-1.fc34 rust-backtrace-0.3.61-1.fc34
rust-cranelift-bforest-0.77.0-1.fc34 rust-cranelift-codegen-0.77.0-1.fc34
rust-cranelift-codegen-meta-0.77.0-1.fc34 rust-cranelift-codegen-shared-0.77.0-1.fc34
rust-cranelift-entity-0.77.0-1.fc34 rust-cranelift-frontend-0.77.0-1.fc34
rust-cranelift-native-0.77.0-1.fc34 rust-cranelift-wasm-0.77.0-1.fc34
rust-gimli-0.25.0-1.fc34 rust-object-0.26.2-1.fc34 rust-wasmparser-0.80.1-1.fc34
rust-wasmtime-cache-0.30.0-1.fc34 rust-wasmtime-environ-0.30.0-1.fc34
rust-wasmtime-fiber-0.30.0-1.fc34 rust-wasmtime-types-0.30.0-2.fc34
rust-wast-38.0.0-2.fc34 rust-wat-1.0.40-1.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
173
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
42
https://bodhi.fedoraproject.org/updates/FEDORA-2021-10b1f23f5e
iio-sensor-proxy-3.3-1.fc34 libgudev-237-1.fc34
20
https://bodhi.fedoraproject.org/updates/FEDORA-2021-91081360ab
libtirpc-1.3.2-0.rc1.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a6296b55b2
pinentry-1.2.0-1.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b30ea7dbd3
squashfs-tools-4.5-3.20210913gite048580.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-cfe085084c pungi-4.3.0-1.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f010ab5758
createrepo_c-0.17.5-1.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6c2c811a05
gnome-remote-desktop-40.2-1.fc34
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-61cabbfbbd
appstream-data-34-3.fc34
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-566b3f3e1b
binutils-2.35.2-6.fc34
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-84b7628675
libxfce4ui-4.16.1-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f0b3b90a0e
libdb-5.3.28-49.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-169fa1346a
flatpak-1.10.3-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f8f82bc868
glslang-11.6.0-1.20210825.git2fb89a0.fc34 spirv-headers-1.5.4-7.20210728.git449bc98.fc34
spirv-tools-2021.3-1.20210825.git1fbed83.fc34 vulkan-headers-1.2.189.0-1.fc34
vulkan-loader-1.2.189.0-1.fc34 vulkan-tools-1.2.189.0-1.fc34
vulkan-validation-layers-1.2.189.0-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-03b9f525f0
dnsmasq-2.86-2.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2323f998a6
kernel-5.14.7-200.fc34 kernel-headers-5.14.7-200.fc34 kernel-tools-5.14.7-200.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a15b7e7314
selinux-policy-34.21-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3c562281be fwupd-1.6.4-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-23a3e5e5eb
libguestfs-1.46.0-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-359a715688
libjpeg-turbo-2.0.90-3.fc34
The following builds have been pushed to Fedora 34 updates-testing
SDL2-2.0.16-3.fc34
arbor-0.5.2-4.fc34
cairomm-1.14.2-11.fc34
cryptopp-8.6.0-1.fc34
golang-github-tdewolff-parse-2.5.21-1.fc34
mingw-json-glib-1.6.6-1.fc34
mmapper-21.09.0-1.fc34
python-EvoPreprocess-0.4.2-5.fc34
rdma-core-37.0-1.fc34
tzdata-2021b-1.fc34
Details about builds:
================================================================================
SDL2-2.0.16-3.fc34 (FEDORA-2021-d890080041)
Cross-platform multimedia library
--------------------------------------------------------------------------------
Update Information:
Backport fixes for Wayland support
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 26 2021 Neal Gompa <ngompa(a)fedoraproject.org> - 2.0.16-3
- Backport select fixes from upstream
+ Support legacy 'pulse' alias for PulseAudio driver
+ Fix handling of Ctrl key on Wayland
+ Add support for HiDPI cursors on Wayland
+ Fix keymap support on Wayland (rhbz#2007969)
+ Use EGL_EXT_present_opaque when available on Wayland
+ Expose xdg_toplevel to SysWM on Wayland
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2007969 - Update to 2.0.16 broke select keyboard keys under Wayland
https://bugzilla.redhat.com/show_bug.cgi?id=2007969
--------------------------------------------------------------------------------
================================================================================
arbor-0.5.2-4.fc34 (FEDORA-2021-afabaa7b16)
Multi-compartment neural network simulation library
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 25 2021 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 0.5.2-4
- chore: remove second unneeded patch
* Sat Sep 25 2021 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 0.5.2-3
- feat: correct flags for s390 builds
* Sat Sep 25 2021 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 0.5.2-2
- chore: remove unused patch
* Sat Sep 25 2021 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 0.5.2-1
- feat: update to 0.5.2
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> 0.3-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> 0.3-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> 0.3-11
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1806306 - arbor requires Random123 which does not support s390x
https://bugzilla.redhat.com/show_bug.cgi?id=1806306
[ 2 ] Bug #1974843 - arbor-0.5.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1974843
[ 3 ] Bug #1977305 - arbor fails to build with Sphinx 4.0.2
https://bugzilla.redhat.com/show_bug.cgi?id=1977305
--------------------------------------------------------------------------------
================================================================================
cairomm-1.14.2-11.fc34 (FEDORA-2021-d45f0ae0a9)
C++ API for the cairo graphics library
--------------------------------------------------------------------------------
Update Information:
Improve documentation packaging
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 26 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.14.2-11
- In -doc, unbundle js-jquery and fix License
* Sun Sep 26 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.14.2-10
- Reduce macro indirection in spec file
--------------------------------------------------------------------------------
================================================================================
cryptopp-8.6.0-1.fc34 (FEDORA-2021-6788250ea4)
C++ class library of cryptographic schemes
--------------------------------------------------------------------------------
Update Information:
Update to 8.6.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 26 2021 Vasiliy N. Glazov <vascom2(a)gmail.com> 8.6.0-1
- Update to 8.6.0
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2002831 - CVE-2021-40530 cryptopp: ElGamal implementation allows plaintext
recovery [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2002831
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-parse-2.5.21-1.fc34 (FEDORA-2021-0c8db71f61)
Go parsers for web formats
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 12 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 2.5.21-1
- Update to latest version (#2003317)
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.19-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2003317 - golang-github-tdewolff-parse-2.5.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2003317
--------------------------------------------------------------------------------
================================================================================
mingw-json-glib-1.6.6-1.fc34 (FEDORA-2021-a6ff948164)
MinGW compiled library for JavaScript Object Notation format
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 26 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 1.6.6-1
- Update to latest version (#1996889)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1996889 - mingw-json-glib-1.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1996889
--------------------------------------------------------------------------------
================================================================================
mmapper-21.09.0-1.fc34 (FEDORA-2021-3c23df5118)
Graphical MUME mapper
--------------------------------------------------------------------------------
Update Information:
mmapper 21.09.0 release. For details, see
https://github.com/MUME/MMapper/releases/tag/v21.09.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 26 2021 Kalev Lember <klember(a)redhat.com> - 21.09.0-1
- Update to 21.09.0
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 21.08.0-2
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
================================================================================
python-EvoPreprocess-0.4.2-5.fc34 (FEDORA-2021-382f615156)
A Python Toolkit for Data Preprocessing
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 26 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.4.2-5
- Remove patch
* Sat Sep 25 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.4.2-4
- Use python rpm macros
--------------------------------------------------------------------------------
================================================================================
rdma-core-37.0-1.fc34 (FEDORA-2021-fa73464e97)
RDMA core userspace libraries and daemons
--------------------------------------------------------------------------------
Update Information:
Rebase to upstream release rdma-core-37.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 26 2021 Honggang Li <honli(a)redhat.com> - 37.0-1
- Rebase to upstream release v37.0
--------------------------------------------------------------------------------
================================================================================
tzdata-2021b-1.fc34 (FEDORA-2021-b3ed285115)
Timezone data
--------------------------------------------------------------------------------
Update Information:
Rebase to tzdata-2021b - Jordan now starts DST on February's last
Thursday. - Samoa no longer observes DST. - Merge more location-based
Zones whose timestamps agree since 1970. - Move some backward-compatibility
links to 'backward'. - Rename Pacific/Enderbury to Pacific/Kanton. -
Correct many pre-1993 transitions in Malawi, Portugal, etc. - zic now
creates each output file or link atomically. - zic -L no longer omits the
POSIX TZ string in its output. - zic fixes for truncation and leap second
table expiration. - zic now follows POSIX for TZ strings using all-year DST.
- Fix some localtime crashes and bugs in obscure cases. - zdump -v now
outputs more-useful boundary cases. - tzfile.5 better matches a draft
successor to RFC 8536.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Sep 25 2021 Patsy Griffin <patsy(a)redhat.com> - 2021b-1
- Rebase to tzdata-2021b
- Jordan now starts DST on February's last Thursday.
- Samoa no longer observes DST.
- Merge more location-based Zones whose timestamps agree since 1970.
- Move some backward-compatibility links to 'backward'.
- Rename Pacific/Enderbury to Pacific/Kanton.
- Correct many pre-1993 transitions in Malawi, Portugal, etc.
- zic now creates each output file or link atomically.
- zic -L no longer omits the POSIX TZ string in its output.
- zic fixes for truncation and leap second table expiration.
- zic now follows POSIX for TZ strings using all-year DST.
- Fix some localtime crashes and bugs in obscure cases.
- zdump -v now outputs more-useful boundary cases.
- tzfile.5 better matches a draft successor to RFC 8536.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2007807 - tzdata-2021b is available
https://bugzilla.redhat.com/show_bug.cgi?id=2007807
--------------------------------------------------------------------------------