The following Fedora 34 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-93bb56ad9b qt-4.8.7-61.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-f213fea441 python-django-filter-21.1-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9f68f5f752 php-7.4.25-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-7701833090 java-1.8.0-openjdk-1.8.0.312.b07-1.fc34 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-0b37146973 strongswan-5.9.4-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-27ba6780e5 java-latest-openjdk-17.0.1.0.12-1.rolling.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-082bea5b34 stb-0-0.7.20211022gitaf1a5bc.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-483d896d1d webkit2gtk3-2.34.1-1.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-3fc69d203c sdrpp-1.0.4-3.fc34 The following Fedora 34 Critical Path updates have yet to be approved: Age URL 200 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34 ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34 sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34 69 https://bodhi.fedoraproject.org/updates/FEDORA-2021-10b1f23f5e iio-sensor-proxy-3.3-1.fc34 libgudev-237-1.fc34 18 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6c2c811a05 gnome-remote-desktop-40.2-1.fc34 17 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6ebbda1d9f fwupd-1.7.0-1.fc34 13 https://bodhi.fedoraproject.org/updates/FEDORA-2021-b711f60c72 libical-3.0.11-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2021-93bb56ad9b qt-4.8.7-61.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2021-8b068e370a osinfo-db-20211013-1.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2021-7e153429af bluez-5.62-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-757db45bc5 gnome-online-accounts-3.40.1-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2021-00891047cf selinux-policy-34.22-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-9f1f3732e0 gdb-11.1-2.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2021-e4843341ca dracut-055-5.fc34 3 https://bodhi.fedoraproject.org/updates/FEDORA-2021-d046c4fde0 kernel-5.14.14-200.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-483d896d1d webkit2gtk3-2.34.1-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-2f9a4cab2c xorg-x11-server-Xwayland-21.1.2.901-1.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1d1d99af0e pycairo-1.20.1-1.fc34 The following builds have been pushed to Fedora 34 updates-testing CuraEngine-4.11.0-2.fc34 fcft-2.4.6-1.fc34 menulibre-2.2.3-2.fc34 perl-CBOR-XS-1.85-1.fc34 perl-CPAN-Perl-Releases-5.20211020-1.fc34 perl-DateTime-TimeZone-2.51-1.fc34 perl-Locale-SubCountry-2.07-1.fc34 perl-Module-CoreList-5.20211020-1.fc34 php-composer-semver3-3.2.6-1.fc34 php-doctrine-inflector2-2.0.4-1.fc34 pipewire-0.3.39-1.fc34 qcoro-0.3.0-1.fc34 xtl-0.7.3-1.fc34 Details about builds: ================================================================================ CuraEngine-4.11.0-2.fc34 (FEDORA-2021-8ea648186c) Engine for processing 3D models into G-code instructions for 3D printers -------------------------------------------------------------------------------- Update Information: Rebuild with updated stb_image to patch CVE-2021-28021, CVE-2021-42715, and CVE-2021-42716 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 23 2021 Benjamin A. Beasley <code@xxxxxxxxxxxxxxxxxx> - 1:4.11.0-2 - Rebuild with updated stb_image to patch CVE-2021-28021, CVE-2021-42715, and CVE-2021-42716 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2015229 - CVE-2021-28021 stb: buffer overflow in stbi__extend_receive() in stb_image.h via a crafted JPEG file https://bugzilla.redhat.com/show_bug.cgi?id=2015229 -------------------------------------------------------------------------------- ================================================================================ fcft-2.4.6-1.fc34 (FEDORA-2021-37f7bdd4ef) Simple library for font loading and glyph rasterization -------------------------------------------------------------------------------- Update Information: Update to 2.4.6 (#2016766) -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 24 2021 Aleksei Bavshin <alebastr@xxxxxxxxxxxxxxxxx> - 2.4.6-1 - Update to 2.4.6 (#2016766) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016766 - fcft-2.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016766 -------------------------------------------------------------------------------- ================================================================================ menulibre-2.2.3-2.fc34 (FEDORA-2021-174c259478) FreeDesktop.org compliant menu editor -------------------------------------------------------------------------------- Update Information: Updating to 2.2.3 -------------------------------------------------------------------------------- ChangeLog: * Sun Oct 24 2021 Lyes Saadi <mail@xxxxxxx> 2.2.3-2 - Resolving build dependency issues * Thu Jul 22 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.2.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jun 4 2021 Python Maint <python-maint@xxxxxxxxxx> - 2.2.1-7 - Rebuilt for Python 3.10 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2007924 - menulibre-2.2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2007924 -------------------------------------------------------------------------------- ================================================================================ perl-CBOR-XS-1.85-1.fc34 (FEDORA-2021-19d258aad2) Concise Binary Object Representation (CBOR) -------------------------------------------------------------------------------- Update Information: This release fixes a UTF-8 check for empty strings. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Petr Pisar <ppisar@xxxxxxxxxx> - 1.85-1 - 1.85 bump * Thu Oct 21 2021 Petr Pisar <ppisar@xxxxxxxxxx> - 1.84-1 - 1.84 bump - Package the tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016223 - perl-CBOR-XS-1.84 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016223 [ 2 ] Bug #2016731 - perl-CBOR-XS-1.85 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016731 -------------------------------------------------------------------------------- ================================================================================ perl-CPAN-Perl-Releases-5.20211020-1.fc34 (FEDORA-2021-0eff4801ec) Mapping Perl releases on CPAN to the location of the tarballs -------------------------------------------------------------------------------- Update Information: Updated for v5.35.5 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 5.20211020-1 - 5.20211020 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016542 - perl-CPAN-Perl-Releases-5.20211020 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016542 -------------------------------------------------------------------------------- ================================================================================ perl-DateTime-TimeZone-2.51-1.fc34 (FEDORA-2021-3dabf27f9e) Time zone object base class and factory -------------------------------------------------------------------------------- Update Information: This release is based on version 2021e of the Olson database. This release includes contemporary changes for Palestine. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 2.51-1 - 2.51 bump (2021e Olson database) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016582 - perl-DateTime-TimeZone-2.51 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016582 -------------------------------------------------------------------------------- ================================================================================ perl-Locale-SubCountry-2.07-1.fc34 (FEDORA-2021-306d1d3920) ISO 3166-2 two letter subcountry codes -------------------------------------------------------------------------------- Update Information: This release updates a codes database and adds a KX code for Kosovo. This update also package the tests in a dedicated subpackage. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Petr Pisar <ppisar@xxxxxxxxxx> - 2.07-1 - 2.07 bump - Package the tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016725 - perl-Locale-SubCountry-2.07 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016725 -------------------------------------------------------------------------------- ================================================================================ perl-Module-CoreList-5.20211020-1.fc34 (FEDORA-2021-af8d377abe) What modules are shipped with versions of perl -------------------------------------------------------------------------------- Update Information: Updated for v5.35.5 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1:5.20211020-1 - 5.20211020 bump -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016538 - perl-Module-CoreList-5.20211020 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016538 -------------------------------------------------------------------------------- ================================================================================ php-composer-semver3-3.2.6-1.fc34 (FEDORA-2021-ed66540f18) Semver library version 3 -------------------------------------------------------------------------------- Update Information: **Version 3.2.6** - 2021-10-25 * Fixed: type improvements to parseStability -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Remi Collet <remi@xxxxxxxxxxxx> - 3.2.6-1 - update to 3.2.6 -------------------------------------------------------------------------------- ================================================================================ php-doctrine-inflector2-2.0.4-1.fc34 (FEDORA-2021-40a0b8b9f8) Common string manipulations with regard to casing and singular/plural rules -------------------------------------------------------------------------------- Update Information: **Version 2.0.4** Bug * 189: Supports french pluralization of -al exceptions thanks to @gquemener -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Remi Collet <remi@xxxxxxxxxxxx> - 2.0.4-1 - update to 2.0.4 - switch to phpunit9 -------------------------------------------------------------------------------- ================================================================================ pipewire-0.3.39-1.fc34 (FEDORA-2021-49a33e790f) Media Sharing Server -------------------------------------------------------------------------------- Update Information: Update version to 0.3.39 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Wim Taymans <wtaymans@xxxxxxxxxx> - 0.3.39-1 - Update version to 0.3.39 -------------------------------------------------------------------------------- ================================================================================ qcoro-0.3.0-1.fc34 (FEDORA-2021-b6b20e4c6e) C++ Coroutines for Qt -------------------------------------------------------------------------------- Update Information: Updated to version 0.3.0. -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Vitaly Zaitsev <vitaly@xxxxxxxxxxxxxx> - 0.3.0-1 - Updated to version 0.3.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016954 - qcoro-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016954 -------------------------------------------------------------------------------- ================================================================================ xtl-0.7.3-1.fc34 (FEDORA-2021-d8192dd881) QuantStack tools library -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 25 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> 0.7.3-1 - Update to latest version (#2016608) * Fri Jul 23 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.7.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Sun Jul 11 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> - 0.7.2-2 - Fix build with Sphinx 4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2016608 - xtl-0.7.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2016608 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/test@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure