The following Fedora 34 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5d0676b098 qemu-5.2.0-9.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d3e6eb9e4 protobuf-3.14.0-7.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e5e723298 php-7.4.28-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1fd0cea1e2 dotnet6.0-6.0.102-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5a3603afe0 wireshark-3.6.2-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5e6d5fe680 polkit-0.117-3.fc34.3 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2aa7c08b53 kernel-5.16.10-100.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-16feb05e02 xpra-4.3.2-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ef99a016f6 python2.7-2.7.18-20.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-477401b0f7 java-11-openjdk-11.0.14.1.1-4.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5dd9b908d6 webkit2gtk3-2.34.6-1.fc34 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-087b1b4d2d swtpm-0.6.2-1.20220218git23b78c0.fc34
The following Fedora 34 Critical Path updates have yet to be approved: Age URL 320 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34 ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34 sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34 81 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be annobin-9.79-3.fc34 42 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3b891fe11 gdb-11.1-7.fc34 25 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bd2db62cf2 bolt-0.9.2-1.fc34 14 https://bodhi.fedoraproject.org/updates/FEDORA-2022-455e033450 libmodulemd-2.14.0-1.fc34 13 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6bcb2f1be9 gjs-1.68.5-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-be71664bec libguestfs-1.46.2-1.fc34.1 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5d0676b098 qemu-5.2.0-9.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-94bfde125e evolution-3.40.4-3.fc34 libical-3.0.14-1.fc34 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-88d642b37e langtable-0.0.57-1.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d3e6eb9e4 protobuf-3.14.0-7.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0fe24b4283 linux-firmware-20220209-129.fc34 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-74d7381cd7 gnome-control-center-40.9-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-20400632a3 gnome-shell-40.9-1.fc34 gnome-shell-extensions-40.6-1.fc34 mutter-40.9-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-144dec49f5 selinux-policy-34.26-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a0d116be0e tigervnc-1.12.0-5.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ca79783e7c gnome-desktop3-40.8-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5dd9b908d6 webkit2gtk3-2.34.6-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2aa7c08b53 kernel-5.16.10-100.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5e6d5fe680 polkit-0.117-3.fc34.3 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-efe247ceb8 cups-2.3.3op2-14.fc34 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-087b1b4d2d swtpm-0.6.2-1.20220218git23b78c0.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e4bcaeea7a zchunk-1.2.0-1.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8dc8d4755b rust-packaging-21-1.fc34 rust-srpm-macros-21-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
Carla-2.4.2-1.fc34 duf-0.8.1-1.fc34 expat-2.4.6-1.fc34 growlight-1.2.38-2.fc34 keepassxc-2.6.6-5.fc34 khealthcertificate-22.02-1.fc34 koji-1.28.0-1.fc34 libreport-2.15.2-3.fc34 libxml2-2.9.13-1.fc34 mingw-expat-2.4.6-1.fc34 mpdas-0.4.5-1.fc34 nest-3.2-4.fc34 notcurses-3.0.7-2.fc34 perl-Test-PostgreSQL-1.29-1.fc34 php-pecl-mailparse-3.1.3-1.fc34 php-phpunit-php-code-coverage9-9.2.11-1.fc34 phpunit9-9.5.14-1.fc34 rpminspect-data-fedora-1.8-1.fc34 rubygem-mini_portile2-2.8.0-1.fc34 seatd-0.6.4-1.fc34 setzer-0.4.4-1.fc34 tio-1.34-1.fc34 tldr-3.1.0-1.fc34 vala-0.48.23-1.fc34 vim-8.2.4428-1.fc34
Details about builds:
================================================================================ Carla-2.4.2-1.fc34 (FEDORA-2022-a3b6cac535) Audio plugin host -------------------------------------------------------------------------------- Update Information:
- Update to 2.4.2 - Add Carla-single-libs-path.patch -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 20 2022 Martin Gansser martinkg@fedoraproject.org - 1:2.4.2-1 - Update to 2.4.2 - Add Carla-single-libs-path.patch * Sat Jan 29 2022 Martin Gansser martinkg@fedoraproject.org - 1:2.4.1-3 - Add Carla-expression-error.patch * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 1:2.4.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2056241 - Carla-2.4.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2056241 --------------------------------------------------------------------------------
================================================================================ duf-0.8.1-1.fc34 (FEDORA-2022-81d68661eb) Disk Usage/Free Utility - a better 'df' alternative -------------------------------------------------------------------------------- Update Information:
New package: duf -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 20 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 0.8.1-1 - Initial package - Closes rhbz#2053877 --------------------------------------------------------------------------------
================================================================================ expat-2.4.6-1.fc34 (FEDORA-2022-07ff33f237) An XML parser library -------------------------------------------------------------------------------- Update Information:
Rebase to version 2.4.6 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Tomas Korbar tkorbar@redhat.com - 2.4.6-1 - Rebase to version 2.4.6 - Resolves: rhbz#2056133 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2056133 - expat-2.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2056133 --------------------------------------------------------------------------------
================================================================================ growlight-1.2.38-2.fc34 (FEDORA-2022-7b1b9d6213) Disk manipulation and system setup tool -------------------------------------------------------------------------------- Update Information:
New upstream version, needed for Notcurses 3.0.6 as now shipped in F34. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org 1.2.38-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Sat Dec 4 2021 Nick Black dankamongmen@gmail.com 1.2.38-1 - new upstream 1.2.38 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2055091 - F34FailsToInstall: growlight https://bugzilla.redhat.com/show_bug.cgi?id=2055091 --------------------------------------------------------------------------------
================================================================================ keepassxc-2.6.6-5.fc34 (FEDORA-2022-87e3bdd324) Cross-platform password manager -------------------------------------------------------------------------------- Update Information:
improves xcb.patch. On gnome check if the environment variable QT_QPA_PLATFORM is set, if so do not change the variable value, otherwise fallback to QT_QPA_PLATFORM="xcb". This changes the previous behavior of hardcoding the platform to xcb, irrespective of the user setting. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Germano Massullo germano.massullo@gmail.com - 2.6.6-5 - User pewpeww improved xcb.patch - https://src.fedoraproject.org/rpms/keepassxc/pull-request/1 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 2.6.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Aug 19 2021 Bj��rn Esser besser82@fedoraproject.org - 2.6.6-3 - Rebuild (quazip) * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 2.6.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ khealthcertificate-22.02-1.fc34 (FEDORA-2022-fa30369522) Handling of digital vaccination, test and recovery certificates. -------------------------------------------------------------------------------- Update Information:
Initial inclusion of khealthcertificate -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Justin Zobel justin@1707.io - 22.02-1 - Update to 22.02 * Wed Dec 22 2021 Justin Zobel justin@1707.io - 21.12-1 - Initial version of package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2051069 - Review Request: khealthcertificate - Handling of digital vaccination, test and recovery certificates. https://bugzilla.redhat.com/show_bug.cgi?id=2051069 --------------------------------------------------------------------------------
================================================================================ koji-1.28.0-1.fc34 (FEDORA-2022-fa3d585856) Build system tools -------------------------------------------------------------------------------- Update Information:
Update to upstream 1.28.0 release. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Kevin Fenzi kevin@scrye.com - 1.28.0-1 - Update to 1.28.0. Fixes rhbz#2056503 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 1.27.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libreport-2.15.2-3.fc34 (FEDORA-2022-1c53f95a4d) Generic library for reporting various problems -------------------------------------------------------------------------------- Update Information:
[reporter-bugzilla] Use API key for authentication Following change will take effect on February 28 2022: """ Applications making API calls to Bugzilla may no longer authenticate using passwords or supplying API keys in call parameters. Instead, API keys must be supplied in the Authorization header. """ See the announcement for more details: https://listman.redhat.com/archives/bugzilla-announce- list/2022-February/msg00000.html -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Michal Srb michal@redhat.com - 2.15.2-3 - [reporter-bugzilla] Use API key for authentication --------------------------------------------------------------------------------
================================================================================ libxml2-2.9.13-1.fc34 (FEDORA-2022-050c712ed7) Library providing XML and HTML support -------------------------------------------------------------------------------- Update Information:
Update to 2.9.13 Fix CVE-2022-23308 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 David King amigadave@amigadave.com - 2.9.13-1 - Update to 2.9.13 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2056246 - libxml2-2.9.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=2056246 --------------------------------------------------------------------------------
================================================================================ mingw-expat-2.4.6-1.fc34 (FEDORA-2022-04f206996b) MinGW Windows port of expat XML parser library -------------------------------------------------------------------------------- Update Information:
Update to expat-2.4.6, see https://github.com/libexpat/libexpat/blob/R_2_4_6/expat/Changes for details. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Sandro Mani manisandro@gmail.com - 2.4.6-1 - Update to 2.4.6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2056352 - CVE-2022-25313 mingw-expat: expat: Stack exhaustion in build_model() via uncontrolled recursion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2056352 [ 2 ] Bug #2056355 - CVE-2022-25314 mingw-expat: expat: Integer overflow in copyString [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2056355 [ 3 ] Bug #2056365 - CVE-2022-25315 mingw-expat: expat: Integer overflow in storeRawNames [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2056365 [ 4 ] Bug #2056368 - CVE-2022-25235 mingw-expat: expat: xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2056368 [ 5 ] Bug #2056372 - CVE-2022-25236 mingw-expat: expat: expat allows attackers to insert namespace-separator characters into namespace URIs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2056372 --------------------------------------------------------------------------------
================================================================================ mpdas-0.4.5-1.fc34 (FEDORA-2022-9dea2ed9cd) An MPD audioscrobbling client -------------------------------------------------------------------------------- Update Information:
Update to latest bugfix release -------------------------------------------------------------------------------- ChangeLog:
* Sun Feb 20 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 0.4.5-1 - feat: update to 0.4.5 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 0.4.4-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 0.4.4-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ nest-3.2-4.fc34 (FEDORA-2022-cbc56acb3e) The neural simulation tool -------------------------------------------------------------------------------- Update Information:
Update to latest release ---- Update to latest bugfix release -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 3.2-4 - fix: disable lto on aarch64 * Mon Feb 21 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 3.2-3 - fix: disable lto on ppc (fixes rhbz#2056459) * Sat Jan 22 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 3.2-2 - chore: remove commented out files * Sat Jan 22 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 3.2-1 - feat: update to 3.2 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org 3.1-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2043732 - nest-3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2043732 --------------------------------------------------------------------------------
================================================================================ notcurses-3.0.7-2.fc34 (FEDORA-2022-94c8d8e50b) Character graphics and TUI library -------------------------------------------------------------------------------- Update Information:
https://github.com/dankamongmen/notcurses/releases/tag/v3.0.7 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Nick Black dankamongmen@gmail.com 3.0.7-2 - patch for big-endian unit tests * Mon Feb 21 2022 Nick Black dankamongmen@gmail.com 3.0.7-1 - new upstream 3.0.7 * Thu Feb 10 2022 Nick Black dankamongmen@gmail.com 3.0.6-1 - new upstream 3.0.6 --------------------------------------------------------------------------------
================================================================================ perl-Test-PostgreSQL-1.29-1.fc34 (FEDORA-2022-c2a14c4347) PostgreSQL runner for Perl tests -------------------------------------------------------------------------------- Update Information:
This release fixes parallel testing and a too long path to a socket file. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Petr Pisar ppisar@redhat.com - 1.29-1 - 1.29 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2055942 - perl-Test-PostgreSQL-1.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=2055942 --------------------------------------------------------------------------------
================================================================================ php-pecl-mailparse-3.1.3-1.fc34 (FEDORA-2022-0d46fe0e1f) PHP PECL package for parsing and working with email messages -------------------------------------------------------------------------------- Update Information:
**Version 3.1.3** - Fix #73110: Mails with unknown MIME version are treated as plain/text. (cmb) - Fix #74233: Parsing multi Content-Disposition causes memory leak. (cmb) - Fix #75825: mailparse_uudecode_all doesn't parse multiple files. (cmb) - Fix #81422: Potential double-free in mailparse_uudecode_all(). (cmb) - Fix gh#19 Segmentation fault with PHP 8.1 in extract_body using MAILPARSE_EXTRACT_RETURN. (Remi) -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Remi Collet remi@remirepo.net - 3.1.3-1 - update to 3.1.3 --------------------------------------------------------------------------------
================================================================================ php-phpunit-php-code-coverage9-9.2.11-1.fc34 (FEDORA-2022-48f92e5a48) PHP code coverage information -------------------------------------------------------------------------------- Update Information:
**Version 9.2.11** - 2022-02-18 Changed * `CoveredFileAnalyser` and `UncoveredFileAnalyser` have been combined to `FileAnalyser` * Updated bundled CSS/JavaScript components used for HTML report: Bootstrap 4.6.1, jQuery 3.6.0, and popper.js 1.16.1 Fixed * [#889](https://github.com/sebastianbergmann/php- code-coverage/issues/889): Code Coverage depends on autoload order -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 18 2022 Remi Collet remi@remirepo.net - 9.2.11-1 - update to 9.2.11 --------------------------------------------------------------------------------
================================================================================ phpunit9-9.5.14-1.fc34 (FEDORA-2022-75428b7942) The PHP Unit Testing framework version 9 -------------------------------------------------------------------------------- Update Information:
**Version 9.5.14** - 2022-02-18 Changed * [#4874](https://github.com/sebastianbergmann/phpunit/pull/4874): `PHP_FLOAT_EPSILON` is now used instead of hardcoded `0.0000000001` in `PHPUnit\Framework\Constraint\IsIdentical` -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 18 2022 Remi Collet remi@remirepo.net - 9.5.14-1 - update to 9.5.14 --------------------------------------------------------------------------------
================================================================================ rpminspect-data-fedora-1.8-1.fc34 (FEDORA-2022-33c6325f1b) Build deviation compliance tool data files -------------------------------------------------------------------------------- Update Information:
Upgrade to rpminspect-data-fedora-1.8 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 David Cantrell dcantrell@redhat.com - 1.8-1 - Upgrade to rpminspect-data-fedora-1.8 --------------------------------------------------------------------------------
================================================================================ rubygem-mini_portile2-2.8.0-1.fc34 (FEDORA-2022-30d1e20f4a) Simplistic port-like solution for developers -------------------------------------------------------------------------------- Update Information:
New version 2.8.0 is released. -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Mamoru TASAKA mtasaka@fedoraproject.org - 2.8.0-1 - 2.8.0 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 2.7.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ seatd-0.6.4-1.fc34 (FEDORA-2022-7f6136383e) Minimal seat management daemon -------------------------------------------------------------------------------- Update Information:
Update to 0.6.4 (#2056723) -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Aleksei Bavshin alebastr@fedoraproject.org - 0.6.4-1 - Update to 0.6.4 (#2056723) * Sat Jan 22 2022 Fedora Release Engineering releng@fedoraproject.org - 0.6.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2056723 - seatd-0.6.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2056723 --------------------------------------------------------------------------------
================================================================================ setzer-0.4.4-1.fc34 (FEDORA-2022-2208e7e16c) LaTeX editor written in Python with Gtk -------------------------------------------------------------------------------- Update Information:
Updating to 1.4.4 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Lyes Saadi fedora@lyes.eu - 0.4.4-1 - Updating to 0.4.4 (fix #2055916) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2055916 - setzer-0.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2055916 --------------------------------------------------------------------------------
================================================================================ tio-1.34-1.fc34 (FEDORA-2022-52e88523ff) Simple TTY terminal I/O application -------------------------------------------------------------------------------- Update Information:
# tio v1.34 * Fix setspeed2 compilation * Only apply color formatting when using color option To help the color blind who may use custom terminal foreground / background colors. * Update README * Add `-c`, `--color` option Allow user to select which ANSI color code to use to colorize the tio text. To successfully set the color the color code must be in the range 0..255. If color code is negative tio will print all available ANSI colors. The default color is changed to bold white to make tio defaults usable for most users, including color blind users. * Fix setspeed2 check * Fix meson header check string * Reintroduce long timestamp format But make the timestamp format RFC3339 compliant instead. The RFC states: NOTE: ISO 8601 defines date and time separated by `T`. Applications using this syntax may choose, for the sake of readability, to specify a full-date and full-time separated by (say) a space character. This way we keep the information specified by ISO 8601 but make it more human readable which is better for the console output. * Update version year * Fix TTY device listing on Darwin * Fix TCGETS2 search on Darwin -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 16 2022 Robert Scheck robert@fedoraproject.org 1.34-1 - Upgrade to 1.34 (#2054902) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2054902 - tio-1.35 is available https://bugzilla.redhat.com/show_bug.cgi?id=2054902 --------------------------------------------------------------------------------
================================================================================ tldr-3.1.0-1.fc34 (FEDORA-2022-bc785b0126) Simplified and community-driven man pages -------------------------------------------------------------------------------- Update Information:
Update to 3.1.0 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 3.1.0-1 - Update to 3.1.0 * Sat Jan 22 2022 Fedora Release Engineering releng@fedoraproject.org 3.0.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ vala-0.48.23-1.fc34 (FEDORA-2022-2902038562) A modern programming language for GNOME -------------------------------------------------------------------------------- Update Information:
Update to 0.48.23 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 David King amigadave@amigadave.com - 0.48.23-1 - Update to 0.48.23 --------------------------------------------------------------------------------
================================================================================ vim-8.2.4428-1.fc34 (FEDORA-2022-7ef65e6444) The VIM editor -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2022-0629 ---- Security fix for CVE-2022-0572 ---- Security fixes for CVE-2022-0408, CVE-2022-0413, CVE-2022-0393, CVE-2022-0417, CVE-2022-0443 -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 21 2022 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.4428-1 - patchlevel 4428 * Tue Feb 15 2022 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.4386-1 - patchlevel 4386 * Mon Feb 7 2022 Zdenek Dohnal zdohnal@redhat.com - 2:8.2.4314-1 - patchlevel 4314 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2048515 - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c https://bugzilla.redhat.com/show_bug.cgi?id=2048515 [ 2 ] Bug #2048519 - CVE-2022-0413 vim: Use after free in src/ex_cmds.c https://bugzilla.redhat.com/show_bug.cgi?id=2048519 [ 3 ] Bug #2049180 - CVE-2022-0393 vim: out-of-bounds read in delete_buff_tail() in getchar.c https://bugzilla.redhat.com/show_bug.cgi?id=2049180 [ 4 ] Bug #2050149 - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c https://bugzilla.redhat.com/show_bug.cgi?id=2050149 [ 5 ] Bug #2050182 - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c https://bugzilla.redhat.com/show_bug.cgi?id=2050182 [ 6 ] Bug #2054278 - CVE-2022-0572 vim: heap overflow in ex_retab() may lead to crash https://bugzilla.redhat.com/show_bug.cgi?id=2054278 [ 7 ] Bug #2055695 - CVE-2022-0629 vim: Stack-based Buffer Overflow in vim prior to 8.2. https://bugzilla.redhat.com/show_bug.cgi?id=2055695 --------------------------------------------------------------------------------