The following Fedora 33 Security updates need testing: Age URL 63 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c3d587d52c shim-15.4-1 13 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b libxml2-2.9.12-4.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f8d6016c9 polkit-0.117-2.fc33.1 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3cf08ffe38 dino-0.1.2-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-598dbab9a9 microcode_ctl-2.1-43.2.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-754af4d52b isync-1.4.2-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-993693c914 xen-4.14.2-2.fc33 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-99ca984f32 dogtag-pki-10.10.6-1.fc33 pki-core-10.10.6-1.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-db2bb87f35 kernel-5.12.10-200.fc33 kernel-tools-5.12.10-200.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2ab613b45b mosquitto-1.6.15-1.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4b3fc547fe dotnet5.0-5.0.204-1.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bf2458347f glibc-2.32-7.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e9c84e6d26 dotnet3.1-3.1.116-1.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3d770d7179 mingw-ilmbase-2.4.1-3.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-051639aad4 mod_http2-1.15.19-1.fc33 The following Fedora 33 Critical Path updates have yet to be approved: Age URL 81 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2961f34ccb PackageKit-1.2.3-1.fc33 16 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4797e362b3 abrt-2.14.6-1.fc33 libreport-2.15.1-1.fc33 satyr-0.37-2.fc33 13 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b950000d2b libxml2-2.9.12-4.fc33 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e2de9e9e55 selinux-policy-3.14.6-38.fc33 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bd6d71d113 osinfo-db-20210531-1.fc33 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-38972822f4 elfutils-0.185-2.fc33 10 https://bodhi.fedoraproject.org/updates/FEDORA-2021-0efb251919 mtools-4.0.29-1.fc33 10 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4bf6df75a0 net-snmp-5.9.1-2.fc33 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-65c3388877 gjs-1.66.2-6.fc33 mozjs78-78.11.0-1.fc33 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-d9ea48fdbb lorax-33.11-1.fc33 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6ed512f48f adwaita-qt-1.3.1-1.fc33 qgnomeplatform-0.8.0-1.fc33 qt5-qtwayland-5.15.2-7.fc33 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5095433f1e hwdata-0.348-1.fc33 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fa2ef886a2 mariadb-connector-c-3.1.13-1.fc33 8 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3f8d6016c9 polkit-0.117-2.fc33.1 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3ddd31eb34 abrt-2.14.6-3.fc33 abrt-java-connector-1.2.0-7.fc33 gnome-abrt-1.3.6-7.fc33 libreport-2.15.2-2.fc33 reportd-0.7.4-10.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-8155341fed thunderbird-78.11.0-1.fc33 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-01c16188fe coreutils-8.32-19.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-db2bb87f35 kernel-5.12.10-200.fc33 kernel-tools-5.12.10-200.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-498d277506 audit-3.0.2-1.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b02a75816e dracut-055-2.fc33 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fed63bd217 libxcrypt-4.4.22-2.fc33 pam-1.4.0-11.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1e6c5c95dc gnome-shell-3.38.5-1.fc33 mutter-3.38.5-1.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-bf2458347f glibc-2.32-7.fc33 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-5a73bda4a8 redhat-rpm-config-176-1.fc33 The following builds have been pushed to Fedora 33 updates-testing golang-github-alecthomas-kong-0.2.17-1.fc33 golang-github-briandowns-spinner-1.15.0-1.fc33 golang-github-mattn-shellwords-1.0.12-2.fc33 golang-github-tdewolff-minify-2.9.17-1.fc33 golang-github-tdewolff-parse-2.5.17-1.fc33 google-benchmark-1.5.5-1.fc33 gsequencer-3.8.13-1.fc33 iaito-5.2.2-3.fc33 kitty-0.21.0-1.fc33 mangohud-0.6.3-1.fc33 mintlocale-1.4.7-9.fc33 notcurses-2.3.4-1.fc33 python-rasterio-1.2.4-1.fc33 radare2-5.3.1-1.fc33 virt-lightning-2.1.0-1.fc33 Details about builds: ================================================================================ golang-github-alecthomas-kong-0.2.17-1.fc33 (FEDORA-2021-3c33265e59) Command-line parser for Go -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> - 0.2.17-1 - Update to latest version (#1968221) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1968221 - golang-github-alecthomas-kong-0.2.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1968221 -------------------------------------------------------------------------------- ================================================================================ golang-github-briandowns-spinner-1.15.0-1.fc33 (FEDORA-2021-de26309d46) Go package providing a terminal spinner/progress indicator -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> - 1.15.0-1 - Update to latest version (#1967810) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1967810 - golang-github-briandowns-spinner-1.15.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1967810 -------------------------------------------------------------------------------- ================================================================================ golang-github-mattn-shellwords-1.0.12-2.fc33 (FEDORA-2021-97f45d2407) Parse line as shell words -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> - 1.0.12-2 - Update to latest version (#1968097) * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.0.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #1968097 - golang-github-mattn-shellwords-1.0.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=1968097 -------------------------------------------------------------------------------- ================================================================================ golang-github-tdewolff-minify-2.9.17-1.fc33 (FEDORA-2021-2a364be358) Go minifiers for web formats -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> - 2.9.17-1 - Update to latest version (#1965022) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1965022 - golang-github-tdewolff-minify-2.9.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1965022 [ 2 ] Bug #1966808 - golang-github-tdewolff-parse-2.5.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1966808 -------------------------------------------------------------------------------- ================================================================================ golang-github-tdewolff-parse-2.5.17-1.fc33 (FEDORA-2021-2a364be358) Go parsers for web formats -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> - 2.5.17-1 - Update to latest version (#1966808) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1965022 - golang-github-tdewolff-minify-2.9.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1965022 [ 2 ] Bug #1966808 - golang-github-tdewolff-parse-2.5.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1966808 -------------------------------------------------------------------------------- ================================================================================ google-benchmark-1.5.5-1.fc33 (FEDORA-2021-8d8de4b32a) A microbenchmark support library -------------------------------------------------------------------------------- Update Information: Updated to version 1.5.5. -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Vitaly Zaitsev <vitaly@xxxxxxxxxxxxxx> - 1.5.5-1 - Updated to version 1.5.5. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1971126 - google-benchmark-1.5.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=1971126 -------------------------------------------------------------------------------- ================================================================================ gsequencer-3.8.13-1.fc33 (FEDORA-2021-b1b12dcdb7) Audio processing engine -------------------------------------------------------------------------------- Update Information: Rebuild for libinstpatch 1.1.6 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 16 2021 Benjamin A. Beasley <code@xxxxxxxxxxxxxxxxxx> - 3.8.10-1 - Rebuild for libinstpatch 1.1.6 -------------------------------------------------------------------------------- ================================================================================ iaito-5.2.2-3.fc33 (FEDORA-2021-ca59eb65a9) GUI for radare2 reverse engineering framework -------------------------------------------------------------------------------- Update Information: Update radare2 to 5.3.1 Also fixes CVS-2021-32613 ---- bump to radare2 5.3.0 fixes CVE-2021-32613 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 11 2021 Michal Ambroz <rebus _AT seznam.cz> - 5.2.2-3 - rebuild with radare2 5.3.1 * Wed Jun 9 2021 Michal Ambroz <rebus _AT seznam.cz> - 5.2.2-2 - rebuild with radare2 5.3.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1959940 - CVE-2021-32613 radare2: double free in pyc parse via creafted file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1959940 [ 2 ] Bug #1966400 - radare2-5.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1966400 [ 3 ] Bug #1970793 - radare2-5.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1970793 [ 4 ] Bug #1970800 - F34FailsToInstall: iaito https://bugzilla.redhat.com/show_bug.cgi?id=1970800 -------------------------------------------------------------------------------- ================================================================================ kitty-0.21.0-1.fc33 (FEDORA-2021-40d1031c69) Cross-platform, fast, feature full, GPU based terminal emulator -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 0.21.0-1 - build(update): 0.21.0 * Fri Jun 4 2021 Python Maint <python-maint@xxxxxxxxxx> - 0.20.3-2 - Rebuilt for Python 3.10 -------------------------------------------------------------------------------- ================================================================================ mangohud-0.6.3-1.fc33 (FEDORA-2021-d635d0e872) Vulkan overlay layer for monitoring FPS, temperatures, CPU/GPU load and more -------------------------------------------------------------------------------- Update Information: Update to 0.6.3 -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 0.6.3-1 - build(update): 0.6.3 * Fri Jun 11 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 0.6.2-1 - build(update): 0.6.2 -------------------------------------------------------------------------------- ================================================================================ mintlocale-1.4.7-9.fc33 (FEDORA-2021-e52dabbfe6) Language selection tool -------------------------------------------------------------------------------- Update Information: - Fix issue -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Leigh Scott <leigh123linux@xxxxxxxxx> - 1.4.7-9 - Fix (rhbz#1971037) * Tue Jan 26 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.4.7-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ notcurses-2.3.4-1.fc33 (FEDORA-2021-7a93fdb59c) Character graphics and TUI library -------------------------------------------------------------------------------- Update Information: New upstream 2.3.4, upgraded from 2.3.1: * https://github.com/dankamongmen/notcurses/releases/tag/v2.3.4 * https://github.com/dankamongmen/notcurses/releases/tag/v2.3.2 including new binary "notcurses-info". ---- New upstream: https://github.com/dankamongmen/notcurses/releases/tag/v2.3.2 -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 12 2021 Python Maint <python-maint@xxxxxxxxxx> - 2.3.4-1 - New upstream release, new notcurses-info binary * Mon Jun 7 2021 Python Maint <python-maint@xxxxxxxxxx> - 2.3.2-2 - Rebuilt for Python 3.10 * Sun Jun 6 2021 Nick Black <dankamongmen@xxxxxxxxx> - 2.3.2-1 - New upstream release -------------------------------------------------------------------------------- ================================================================================ python-rasterio-1.2.4-1.fc33 (FEDORA-2021-2b375005fe) Fast and direct raster I/O for use with Numpy and SciPy -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 4 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> - 1.2.4-1 - Update to latest version (#1966349) * Fri Jun 4 2021 Python Maint <python-maint@xxxxxxxxxx> - 1.2.3-3 - Rebuilt for Python 3.10 * Fri May 7 2021 Sandro Mani <manisandro@xxxxxxxxx> - 1.2.3-2 - Rebuild (gdal) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1966349 - python-rasterio-1.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1966349 -------------------------------------------------------------------------------- ================================================================================ radare2-5.3.1-1.fc33 (FEDORA-2021-ca59eb65a9) The reverse engineering framework -------------------------------------------------------------------------------- Update Information: Update radare2 to 5.3.1 Also fixes CVS-2021-32613 ---- bump to radare2 5.3.0 fixes CVE-2021-32613 -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 11 2021 Michal Ambroz <rebus at, seznam.cz> 5.3.1-1 - bump to 5.3.1 * Wed Jun 9 2021 Michal Ambroz <rebus at, seznam.cz> 5.3.0-1 - re-enable build for s390x on EPEL8 (libuv should be available for 8.4) - bump to 5.3.0 - remove radare2-5.2.1-meson_rhel8.patch - accepted upstream - remove radare2-5.2.1-xxhash.patch - accepted upstream * Sat May 15 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.1-3 - adding the global plugins directory - for example /usr/lib64/radare2/5.2.1 * Tue May 11 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.1-2 - patch for older version of meson used on EPEL8 - use pkgconfig where possible for BR - use ldconfig_scriptlets only on older platforms - add ExcludeArch for s390x on EPEL8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1959940 - CVE-2021-32613 radare2: double free in pyc parse via creafted file [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1959940 [ 2 ] Bug #1966400 - radare2-5.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1966400 [ 3 ] Bug #1970793 - radare2-5.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1970793 [ 4 ] Bug #1970800 - F34FailsToInstall: iaito https://bugzilla.redhat.com/show_bug.cgi?id=1970800 -------------------------------------------------------------------------------- ================================================================================ virt-lightning-2.1.0-1.fc33 (FEDORA-2021-18732d0105) Deploy your testing VM in a couple of seconds -------------------------------------------------------------------------------- Update Information: Initial package. -------------------------------------------------------------------------------- ChangeLog: -------------------------------------------------------------------------------- References: [ 1 ] Bug #1965791 - Review Request: virt-lightning - Deploy your testing VM in a couple of seconds https://bugzilla.redhat.com/show_bug.cgi?id=1965791 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/test@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
