The following Fedora 34 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-cf7585f0ca
varnish-6.5.2-1.fc34 varnish-modules-0.17.1-2.fc34 vmod-uuid-1.8-4.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-440e34200c
buildah-1.21.3-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-8523af7a88
fossil-2.14.2-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d02dad20ba
matrix-synapse-1.38.0-2.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-25c0011e78
golang-1.16.6-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-69de7c7ca4
aspell-0.60.8-7.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-36cdab1f8d
ruby-3.0.2-149.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6cf271948a
php-pear-1.10.12-9.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
106
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
7
https://bodhi.fedoraproject.org/updates/FEDORA-2021-59eb8f096e
rdma-core-36.0-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9f92234e61
libwacom-1.11-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-71bdebb69f
net-snmp-5.9.1-3.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a3bc99fffc
mtools-4.0.33-1.fc34
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d7077131a7
kde-settings-34.7-2.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4ed84eee74
fontconfig-2.13.94-2.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bc56cf7c1f
libidn2-2.3.2-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-91c3800ad7
graphene-1.10.6-2.fc34
The following builds have been pushed to Fedora 34 updates-testing
bemenu-0.6.3-1.fc34
bind-9.16.19-1.fc34
bind-dyndb-ldap-11.9-3.fc34
classpathless-compiler-1.4-1.fc34
composer-2.1.4-1.fc34
erlang-23.3.4.5-1.fc34
gnome-shell-extension-dash-to-dock-69-8.2021706gite4beec8.fc34
gnome-shell-extension-system-monitor-applet-38-14.20210722git9a96c54.fc34
harvey-1.0.2-1.fc34
kdiskmark-2.2.1-1.fc34
libcint-4.4.3-1.fc34
php-justinrainbow-json-schema5-5.2.11-1.fc34
php-nikic-php-parser4-4.12.0-1.fc34
php-pdepend-PHP-Depend-2.10.0-1.fc34
php-phpmd-PHP-PMD-2.10.2-1.fc34
python-pytelegrambotapi-3.8.2-1.fc34
qcint-4.4.3-1.fc34
redis-6.2.5-1.fc34
rubygem-sync-0.5.0-1.fc34
ulauncher-5.11.0-4.fc34
wine-6.13-1.fc34
Details about builds:
================================================================================
bemenu-0.6.3-1.fc34 (FEDORA-2021-bdb28f1459)
Dynamic menu library and client program inspired by dmenu
--------------------------------------------------------------------------------
Update Information:
Upgrade to 0.6.3.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Jan Stan��k <jstanek(a)redhat.com> - 0.6.3-1
- Upgrade to version 0.6.3
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1984782 - bemenu-0.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1984782
--------------------------------------------------------------------------------
================================================================================
bind-9.16.19-1.fc34 (FEDORA-2021-a5f228d10b)
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
--------------------------------------------------------------------------------
Update Information:
- [Upstream release
notes](https://downloads.isc.org/isc/bind9/9.16.19/RELEASE-
NOTES-bind-9.16.19.html)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 21 2021 Petr Men����k <pemensik(a)redhat.com> - 32:9.16.19-1
- Update to 9.16.19 (#1984627)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1984627 - bind-9.16.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1984627
--------------------------------------------------------------------------------
================================================================================
bind-dyndb-ldap-11.9-3.fc34 (FEDORA-2021-a5f228d10b)
LDAP back-end plug-in for BIND
--------------------------------------------------------------------------------
Update Information:
- [Upstream release
notes](https://downloads.isc.org/isc/bind9/9.16.19/RELEASE-
NOTES-bind-9.16.19.html)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 21 2021 Petr Men����k <pemensik(a)redhat.com> - 11.9-3
- Rebuilt for BIND 9.16.19 (#1984627)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1984627 - bind-9.16.19 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1984627
--------------------------------------------------------------------------------
================================================================================
classpathless-compiler-1.4-1.fc34 (FEDORA-2021-e2ae2d06e5)
Tool for recompiling java sources with customizable class providers
--------------------------------------------------------------------------------
Update Information:
Update to upstream version 1.4 ---- Initial release
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1977799 - Review Request: classpathless-compiler - Tool for recompiling java
sources with customizable class providers
https://bugzilla.redhat.com/show_bug.cgi?id=1977799
--------------------------------------------------------------------------------
================================================================================
composer-2.1.4-1.fc34 (FEDORA-2021-18f91c8343)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 2.1.4** - 2021-07-22 * Fixed PHP 8.1 deprecation warnings (#10008)
* Fixed support for working within UNC/WSL paths on Windows (#9993) * Fixed
7-zip support to also be looked up on Linux/macOS as 7z or 7zz (#9951) * Fixed
repositories' `only`/`exclude` properties to avoid matching names as sub-strings
of full package names (#10001) * Fixed open_basedir regression from #9855 *
Fixed schema errors being reported incorrectly in some conditions (#9986) *
Fixed `archive` command not working with async archive extraction * Fixed
`init` command being able to generate an invalid composer.json (#9986)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Remi Collet <remi(a)remirepo.net> - 2.1.4-1
- update to 2.1.4
- raise dependency on justinrainbow/json-schema 5.2.11
--------------------------------------------------------------------------------
================================================================================
erlang-23.3.4.5-1.fc34 (FEDORA-2021-eae58c07eb)
General-purpose programming language and runtime environment
--------------------------------------------------------------------------------
Update Information:
Erlang ver. 23.3.4.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Peter Lemenkov <lemenkov(a)gmail.com> - 23.3.4.5-1
- Ver. 23.3.4.5
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-dash-to-dock-69-8.2021706gite4beec8.fc34 (FEDORA-2021-590b81d0b1)
Dock for the Gnome Shell by micxgx(a)gmail.com
--------------------------------------------------------------------------------
Update Information:
- Upgrade the PR for GNOME 40 to the latest commit. - Add missing BuildRequires.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Bj��rn Esser <besser82(a)fedoraproject.org> -
69-8.2021706gite4beec8
- Add missing BuildRequires
* Thu Jul 22 2021 Artem Vorotnikov <artem(a)vorotnikov.me> - 69-8.2021706gite4beec8
- Upgrade the PR for GNOME 40 to the latest commit
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
69-7.2021503gita2d40e2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Thu May 6 2021 Mike DePaulo <mikedep333(a)gmail.com> - 69-6.2021503gita2d40e2
- Upgrade the PR for GNOME 40 to the latest commit,
"Fix separator in vertical mode."
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1900297 - gnome-shell-extension-dash-to-dock depends on libdbusmenu but
it's not listed as dependency
https://bugzilla.redhat.com/show_bug.cgi?id=1900297
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-system-monitor-applet-38-14.20210722git9a96c54.fc34
(FEDORA-2021-1ea209ed37)
A Gnome shell system monitor extension
--------------------------------------------------------------------------------
Update Information:
Updated to last upstream commits
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Nicolas Vi��ville <nicolas.vieville(a)uphf.fr> -
1:38-14.20210722git9a96c54
- Updated to last upstream commits
- Added GPU stats for AMDGPU
- Added support for displaying GPU memory in the chart
- Add support for display scale factor
- Small fixes to thermal monitoring
- Added support for gnome-shell 40 - Removed Fedora patches (applied upstream)
- Remove clutter dependency on GNOME 40
- Improve graph settings and rendering
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:38-13.20210507gitbc38ccf
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
harvey-1.0.2-1.fc34 (FEDORA-2021-75c0c8d4cf)
The hero that Gotham needs right now
--------------------------------------------------------------------------------
Update Information:
Updated license file and screenshots.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.0.2-1
- Update to 1.0.2 (closes RHBZ#1984911)
* Wed Jul 21 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.0.1-4
- Add GPLv3 license text from upstream development version
* Fri Jul 9 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.0.1-2
- Switch License field to ���effective license��� of GPLv3+
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1984911 - harvey-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1984911
--------------------------------------------------------------------------------
================================================================================
kdiskmark-2.2.1-1.fc34 (FEDORA-2021-29d4c43f91)
Simple open-source disk benchmark tool for Linux distros
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2.2.1-1
- build(update): 2.2.1
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libcint-4.4.3-1.fc34 (FEDORA-2021-3655ef9b97)
General Gaussian-type orbitals integrals for quantum chemistry
--------------------------------------------------------------------------------
Update Information:
Update to 4.4.3, solving a long-standing divide-by-zero error which led to
incorrect results in some cases.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 4.4.3-1
- Update to 4.4.3.
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.4.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1949331 - qcint-4.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1949331
[ 2 ] Bug #1950216 - libcint-4.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1950216
--------------------------------------------------------------------------------
================================================================================
php-justinrainbow-json-schema5-5.2.11-1.fc34 (FEDORA-2021-d5985baa84)
A library to validate a json schema
--------------------------------------------------------------------------------
Update Information:
**Version 5.211** * Backports PHP 8.1 support
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Remi Collet <remi(a)remirepo.net> - 5.2.11-1
- update to 5.2.11
--------------------------------------------------------------------------------
================================================================================
php-nikic-php-parser4-4.12.0-1.fc34 (FEDORA-2021-97da0b61ad)
A PHP parser written in PHP - version 4
--------------------------------------------------------------------------------
Update Information:
**Version 4.12.0** (2021-07-21) Added * [PHP 8.1] Added support for readonly
properties (through a new `MODIFIER_READONLY`). * [PHP 8.1] Added support for
final class constants. Fixed * Fixed compatibility with PHP 8.1. `&` tokens
are now canonicalized to the `T_AMPERSAND_FOLLOWED_BY_VAR_OR_VARARG` and
`T_AMPERSAND_NOT_FOLLOWED_BY_VAR_OR_VARARG` tokens used in PHP 8.1. This
happens unconditionally, regardless of whether the emulative lexer is used.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 21 2021 Remi Collet <remi(a)remirepo.net> - 4.12.0-1
- update to 4.12.0
--------------------------------------------------------------------------------
================================================================================
php-pdepend-PHP-Depend-2.10.0-1.fc34 (FEDORA-2021-d62fa382c5)
PHP_Depend design quality metrics for PHP package
--------------------------------------------------------------------------------
Update Information:
**pdepend-2.10.0** (2021/07/20) - Added
[\#534](https://github.com/pdepend/pdepend/pull/534): Support trailing comma in
parameters list. - Added [\#535](https://github.com/pdepend/pdepend/pull/535):
Support trailing comma in closure list. - Added
[\#538](https://github.com/pdepend/pdepend/pull/538): Add named argument value
as child to make it discoverable. - Added
[\#540](https://github.com/pdepend/pdepend/pull/540): Support throw expression.
- Added [\#543](https://github.com/pdepend/pdepend/pull/543): Support multiple
expressions as match key. - Fixed
[\#530](https://github.com/pdepend/pdepend/pull/530): Automate release
generation for the website. - Fixed
[\#537](https://github.com/pdepend/pdepend/pull/537): Match expression does not
have namespace - Fixed [\#541](https://github.com/pdepend/pdepend/pull/541): Fix
support for union types - Fixed
[\#544](https://github.com/pdepend/pdepend/pull/544): Math throw entry may end
on curly braces - Fixed [\#547](https://github.com/pdepend/pdepend/pull/547):
Add the phar to the website. The new URL is:
https://pdepend.org/static/latest/pdepend.phar - Fixed
[\#550](https://github.com/pdepend/pdepend/pull/550): Allow multiple arguments
in invocation - Fixed [\#551](https://github.com/pdepend/pdepend/pull/551):
Allow null and false in union type for typed properties - Fixed
[\#552](https://github.com/pdepend/pdepend/pull/552): Allow null-safe operator
anywhere object operator is allowed
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Remi Collet <remi(a)remirepo.net> - 2.10.0-1
- update to 2.10.0
--------------------------------------------------------------------------------
================================================================================
php-phpmd-PHP-PMD-2.10.2-1.fc34 (FEDORA-2021-5ace2b4390)
PHPMD - PHP Mess Detector
--------------------------------------------------------------------------------
Update Information:
**Version 2.12.2** Added * Added #898 in #902: Added newline for better
ANSI output Changed * Changed #901 in #903: Improve baseline basepath
calculation Fixed * Fixed #894: Fixed typo in DuplicatedArrayKey title
incl. link * Update PHP Depend to the latest version, this fixed different
PHP 8 options: #889 #893 #896
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Remi Collet <remi(a)remirepo.net> - 2.10.2-1
- update to 2.10.2
- raise dependency on pdepend 2.10
--------------------------------------------------------------------------------
================================================================================
python-pytelegrambotapi-3.8.2-1.fc34 (FEDORA-2021-d917d0e4b2)
Python Telegram Bot API implementation
--------------------------------------------------------------------------------
Update Information:
Updated to version 3.8.2.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.8.2-1
- Updated to version 3.8.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1984847 - python-pytelegrambotapi-3.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1984847
--------------------------------------------------------------------------------
================================================================================
qcint-4.4.3-1.fc34 (FEDORA-2021-3655ef9b97)
An optimized libcint branch for X86 platform with SSE3 intrinsics
--------------------------------------------------------------------------------
Update Information:
Update to 4.4.3, solving a long-standing divide-by-zero error which led to
incorrect results in some cases.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 4.4.3-1
- Update to 4.4.3.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1949331 - qcint-4.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1949331
[ 2 ] Bug #1950216 - libcint-4.4.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1950216
--------------------------------------------------------------------------------
================================================================================
redis-6.2.5-1.fc34 (FEDORA-2021-10d54c261f)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
Upstream 6.2.5 release (RHBZ #1984631). Fix CVE-2021-32761: 32-bit systems
BITFIELD command integer overflow.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Nathan Scott <nathans(a)redhat.com> - 6.2.5-1
- Upstream 6.2.5 release (RHBZ #1984631).
- Fix CVE-2021-32761: 32-bit systems BITFIELD command integer overflow.
--------------------------------------------------------------------------------
================================================================================
rubygem-sync-0.5.0-1.fc34 (FEDORA-2021-7315275292)
A module that provides a two-phase lock with a counter
--------------------------------------------------------------------------------
Update Information:
This package was part of the standard ruby interpreter until Ruby 2.7. Since
then packages depending on it have crashed on importing the sync module. For
example, rubygem-tins.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1969253 - term_display and term_mandel: cannot load such file -- sync
(LoadError)
https://bugzilla.redhat.com/show_bug.cgi?id=1969253
[ 2 ] Bug #1969567 - require "tins" failure: cannot load such file -- sync
https://bugzilla.redhat.com/show_bug.cgi?id=1969567
--------------------------------------------------------------------------------
================================================================================
ulauncher-5.11.0-4.fc34 (FEDORA-2021-4f1065115a)
Linux Application Launcher
--------------------------------------------------------------------------------
Update Information:
- Add patch to resolve errors in extensions when Gtk4 is present. - Install the
systemd service into the user location.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 21 2021 Troy Curtis, Jr <troy(a)troycurtisjr.com> - 5.11.0-4
- Put the systemd file in the right place for user systemd files.
* Tue Jul 20 2021 Troy Curtis, Jr <troy(a)troycurtisjr.com> - 5.11.0-3
- Add patch to resolve errors in extensions when Gtk4 is present.
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 5.11.0-2
- Rebuilt for Python 3.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1936182 - Ulauncher extensions crash with Gdk error
https://bugzilla.redhat.com/show_bug.cgi?id=1936182
--------------------------------------------------------------------------------
================================================================================
wine-6.13-1.fc34 (FEDORA-2021-e17e922804)
A compatibility layer for windows applications
--------------------------------------------------------------------------------
Update Information:
- Proper scrollbar theming. - More work towards WinSock PE conversion. -
Preparation work for the GDI syscall interface. - Some progress on the
IPHLPAPI PE conversion. - Various bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1982937 - wine breaks
battle.net
https://bugzilla.redhat.com/show_bug.cgi?id=1982937
--------------------------------------------------------------------------------