The following Fedora 34 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f039fccfc2
libsndfile-1.0.31-6.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b0ac29efb1
vim-8.2.3755-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-28b495e9e0
libmysofa-1.2.1-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2b2dd1b5a7
golang-1.16.11-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c2dc9abd76
dr_libs-0-0.7.20211208git49de65c.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bb6f4df303 ldns-1.8.1-3.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bd024d2a7
podman-3.4.4-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3d78d81491
rust-libsqlite3-sys-0.23.2-1.fc34 rust-rusqlite-0.26.3-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-aec9d01057
lapack-3.9.0-7.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-73d63662b0 grub2-2.06-9.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd7960de3c
gnome-shell-40.7-1.fc34 gnome-shell-extensions-40.5-1.fc34 mutter-40.7-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b514c8ea72
libolm-3.2.8-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-66d6c484f3 jansi-2.1.1-4.fc34
log4j-2.16.0-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-e42fadbcc3
calibre-4.23.0-8.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
251
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0a94ef5769
rust-fasteval-0.2.4-4.fc34 rust-zram-generator-1.1.1-2.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f039fccfc2
libsndfile-1.0.31-6.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c27532fbd8
xxhash-0.8.1-1.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6ac83612a5
shadow-utils-4.8.1-10.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-495b3b1518
cups-2.3.3op2-11.fc34
13
https://bodhi.fedoraproject.org/updates/FEDORA-2021-24a21cd83c
libdrm-2.4.109-1.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be
annobin-9.79-3.fc34
11
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c5f01e0121
perl-Mozilla-CA-20211001-1.fc34
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-186e0ff8ef
hwdata-0.354-1.fc34
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-daeea91820
libxmlb-0.3.6-1.fc34
8
https://bodhi.fedoraproject.org/updates/FEDORA-2021-40a861c3e6
glib-networking-2.68.3-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-b0ac29efb1
vim-8.2.3755-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-3a529faddd
libguestfs-1.46.1-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-9621f51218
libical-3.0.12-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-73d63662b0 grub2-2.06-9.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f7b4bdb709
alsa-lib-1.2.6.1-2.fc34 alsa-plugins-1.2.6-1.fc34 alsa-utils-1.2.6-1.fc34
python-alsa-1.2.6-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-dd7960de3c
gnome-shell-40.7-1.fc34 gnome-shell-extensions-40.5-1.fc34 mutter-40.7-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-02dc2967db
ca-certificates-2021.2.52-1.0.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-bf64fd9244
libvirt-7.0.0-8.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-d581a6f6e4 fwupd-1.7.3-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
ansible-collection-community-general-3.8.3-1.fc34
bottles-2021.12.14-1.fc34
elementary-calculator-1.7.2-1.fc34
elementary-camera-6.0.3-1.fc34
elementary-files-6.1.0-1.fc34
elementary-screenshot-tool-6.0.2-1.fc34
elementary-terminal-6.0.1-1.fc34
gupnp-tools-0.10.2-1.fc34
keepalived-2.2.4-2.fc34
kernel-5.15.8-100.fc34
nwg-panel-0.5.2-1.fc34
phan-5.3.1-1.fc34
php-pear-PHP-CodeSniffer-3.6.2-1.fc34
pyatspi-2.38.2-1.fc34
python-dotmap-1.3.26-1.fc34
rust-ignition-config-0.2.0-1.fc34
rust-systemd-0.10.0-1.fc34
secvarctl-0.3-1.fc34
tang-11-1.fc34
Details about builds:
================================================================================
ansible-collection-community-general-3.8.3-1.fc34 (FEDORA-2021-0f7cec5b90)
Modules and plugins supported by Ansible community
--------------------------------------------------------------------------------
Update Information:
Changelog:
https://github.com/ansible-
collections/community.general/blob/stable-3/CHANGELOG.rst#v3-8-3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Maxwell G <gotmax(a)e.email> - 3.8.3-1
- Update to 3.8.3.
--------------------------------------------------------------------------------
================================================================================
bottles-2021.12.14-1.fc34 (FEDORA-2021-56294fd6bc)
Easily manage Wine prefix in a new way
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2021.12.14-1
- chore(update): 2021.12.14
--------------------------------------------------------------------------------
================================================================================
elementary-calculator-1.7.2-1.fc34 (FEDORA-2021-d37495d0b3)
Calculator app designed for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 1.7.2. Release notes:
https://github.com/elementary/calculator/releases/tag/1.7.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 1.7.2-1
- Update to version 1.7.2
--------------------------------------------------------------------------------
================================================================================
elementary-camera-6.0.3-1.fc34 (FEDORA-2021-e7ea5a4974)
Camera app designed for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 6.0.3. Release notes:
https://github.com/elementary/camera/releases/tag/6.0.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 6.0.3-1
- Update to version 6.0.3
--------------------------------------------------------------------------------
================================================================================
elementary-files-6.1.0-1.fc34 (FEDORA-2021-142ea2a991)
File manager from elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 6.1.0. Release notes:
https://github.com/elementary/files/releases/tag/6.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 6.1.0-1
- Update to version 6.1.0; Fixes RHBZ#2027565
--------------------------------------------------------------------------------
================================================================================
elementary-screenshot-tool-6.0.2-1.fc34 (FEDORA-2021-bc3243455f)
Screenshot tool designed for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 6.0.2. Release notes:
https://github.com/elementary/screenshot/releases/tag/6.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 6.0.2-1
- Update to version 6.0.2
--------------------------------------------------------------------------------
================================================================================
elementary-terminal-6.0.1-1.fc34 (FEDORA-2021-9fa82d52b7)
The terminal of the 21st century
--------------------------------------------------------------------------------
Update Information:
Update to version 6.0.1. Release notes:
https://github.com/elementary/terminal/releases/tag/6.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 6.0.1-1
- Update to version 6.0.1
--------------------------------------------------------------------------------
================================================================================
gupnp-tools-0.10.2-1.fc34 (FEDORA-2021-98046a3b33)
A collection of dev tools utilising GUPnP and GTK+
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 David King <amigadave(a)amigadave.com> - 0.10.2-1
- Update to 0.10.2
--------------------------------------------------------------------------------
================================================================================
keepalived-2.2.4-2.fc34 (FEDORA-2021-255eff1bb5)
High Availability monitor built upon LVS, VRRP and service pollers
--------------------------------------------------------------------------------
Update Information:
Fix dbus policy (#2027158, CVE-2021-442255)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Ryan O'Hara <rohara(a)redhat.com> - 2.2.4-2
- Fix dbus policy (#2027158, CVE-2021-442255)
* Tue Dec 14 2021 Ryan O'Hara <rohara(a)redhat.com> - 2.2.4-1
- Update to 2.2.4 (#1996274)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1996274 - keepalived-2.2.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1996274
[ 2 ] Bug #2027158 - CVE-2021-44225 keepalived: dbus access control bypass [fedora-34]
https://bugzilla.redhat.com/show_bug.cgi?id=2027158
--------------------------------------------------------------------------------
================================================================================
kernel-5.15.8-100.fc34 (FEDORA-2021-d316bb7a64)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.15.8 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.15-0]
- Enable CONFIG_VFIO_NOIOMMU for Fedora (Justin M. Forbes)
--------------------------------------------------------------------------------
================================================================================
nwg-panel-0.5.2-1.fc34 (FEDORA-2021-7cd7377e5b)
GTK3-based panel for sway window manager
--------------------------------------------------------------------------------
Update Information:
Update to latest version ---- Update to 0.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.5.2-1
- chore(update): 0.5.2
* Mon Dec 13 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.5.1-1
- chore(update): 0.5.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2023544 - nwg-panel-0.5.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2023544
--------------------------------------------------------------------------------
================================================================================
phan-5.3.1-1.fc34 (FEDORA-2021-2055b68a0e)
A static analyzer for PHP
--------------------------------------------------------------------------------
Update Information:
Dec 14 2021, **Phan 5.3.1** New Features(Analysis): - Emit
`PhanDeprecatedPartiallySupportedCallable` for functions that work with
`call_user_func($expr)` but not `$expr()`. The literal strings `'self'`,
`'parent'`, and `'static'` in `'self::methodName'` or
`['self', 'methodName']`
in callables were deprecated in PHP 8.2. - Emit
`PhanDeprecatedPartiallySupportedCallableAlternateScope` for uses of callables
such as `[new SubClass(), 'Base::method']` specifying an alternate scope. - Make
pass-by-ref vars result in a merged union type, not an overwritten one. (#4602)
Plugins: - Update format string message for `PhanPluginUnknownClosureParamType`
and `PhanPluginUnknownFunctionParamType`. Bug fixes: - Avoid crashing when
running in PHP 8.2+ after php 8.2 deprecated dynamic(undeclared) properties on
classes without `#[AllowDynamicProperties]`.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Remi Collet <remi(a)remirepo.net> - 5.3.1-1
- update to 5.3.1
- raise dependency on ast 1.0.16
- raise dependency on sabre/event 5.1.3
--------------------------------------------------------------------------------
================================================================================
php-pear-PHP-CodeSniffer-3.6.2-1.fc34 (FEDORA-2021-eb55bd321b)
PHP coding standards enforcement tool
--------------------------------------------------------------------------------
Update Information:
**Version 3.6.2** Changelog: - Processing large code bases that use tab
indenting inside comments and strings will now be faster - Thanks to Thiemo
Kreuz for the patch - Fixed bug #3388 : phpcs does not work when run from WSL
drives - Thanks to Juliette Reinders Folmer and Graham Wharton for the patch
- Fixed bug #3422 : Squiz.WhiteSpace.ScopeClosingBrace fixer removes HTML
content when fixing closing brace alignment - Thanks to Juliette Reinders
Folmer for the patch - Fixed bug #3437 : PSR12 does not forbid blank lines at
the start of the class body - Added new PSR12.Classes.OpeningBraceSpace
sniff to enforce this - Fixed bug #3440 : Squiz.WhiteSpace.MemberVarSpacing
false positives when attributes used without docblock - Thanks to Vadim
Borodavko for the patch - Fixed bug #3448 : PHP 8.1 deprecation notice while
generating running time value - Thanks to Juliette Reinders Folmer and Andy
Postnikov for the patch - Fixed bug #3456 :
PSR12.Classes.ClassInstantiation.MissingParentheses false positive using
attributes on anonymous class - Thanks to Juliette Reinders Folmer for the
patch - Fixed bug #3460 : Generic.Formatting.MultipleStatementAlignment false
positive on closure with parameters - Thanks to Juliette Reinders Folmer for
the patch - Fixed bug #3468 : do/while loops are double-counted in
Generic.Metrics.CyclomaticComplexity - Thanks to Mark Baker for the patch -
Fixed bug #3469 : Ternary Operator and Null Coalescing Operator are not counted
in Generic.Metrics.CyclomaticComplexity - Thanks to Mark Baker for the patch
- Fixed bug #3472 : PHP 8 match() expression is not counted in
Generic.Metrics.CyclomaticComplexity - Thanks to Mark Baker for the patch
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Remi Collet <remi(a)remirepo.net> - 3.6.2-1
- update to 3.6.2
--------------------------------------------------------------------------------
================================================================================
pyatspi-2.38.2-1.fc34 (FEDORA-2021-57ef2354c3)
Python bindings for at-spi
--------------------------------------------------------------------------------
Update Information:
Update to 2.38.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 11 2021 Kalev Lember <klember(a)redhat.com> - 2.38.2-1
- Update to 2.38.2
--------------------------------------------------------------------------------
================================================================================
python-dotmap-1.3.26-1.fc34 (FEDORA-2021-80633b4448)
Dot access dictionary with dynamic hierarchy creation and ordered iteration
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 11 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 1.3.26-1
- Initial package
--------------------------------------------------------------------------------
================================================================================
rust-ignition-config-0.2.0-1.fc34 (FEDORA-2021-e95cbf8a90)
Data structures for reading/writing Ignition configs
--------------------------------------------------------------------------------
Update Information:
New upstream release. See release notes at
https://github.com/coreos/ignition-
config-rs/releases
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Sohan Kunkerkar <skunkerk(a)redhat.com> 0.2.0-1
- Initial import
--------------------------------------------------------------------------------
================================================================================
rust-systemd-0.10.0-1.fc34 (FEDORA-2021-cdb4716c9c)
Rust interface to libsystemd/libelogind provided APIs
--------------------------------------------------------------------------------
Update Information:
Update to version 0.10.0; Fixes RHBZ#2032178
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 R��mi Lauzier <remilauzier(a)protonmail.com> 0.10.0-1
- Update to version 0.10.0; Fixes RHBZ#2032178
* Sat Dec 11 2021 R��mi Lauzier <remilauzier(a)protonmail.com> 0.9.3-1
- Update to version 0.9.3; Fixes RHBZ#2030962
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> 0.9.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2032178 - rust-systemd-0.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2032178
--------------------------------------------------------------------------------
================================================================================
secvarctl-0.3-1.fc34 (FEDORA-2021-5e8344fff3)
A command line tool for managing Secure Boot Variables on POWER
--------------------------------------------------------------------------------
Update Information:
Update to v0.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Nick Child <nnac123(a)linux.vnet.ibm.com> - 0.3-1
- Update to v0.3
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
tang-11-1.fc34 (FEDORA-2021-aa1d373ed0)
Network Presence Binding Daemon
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-4076
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Sergio Correia <scorreia(a)redhat.com> - 11-1
- New upstream release - v11.
Resolves: CVE-2021-4076
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2029814 - CVE-2021-4076 tang: private key leak
https://bugzilla.redhat.com/show_bug.cgi?id=2029814
--------------------------------------------------------------------------------