The following Fedora 34 Security updates need testing: Age URL 41 https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bd024d2a7 podman-3.4.4-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7129fbaeed python-lxml-4.6.5-1.fc34 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-48b86d586f vim-8.2.4068-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-98f862bf34 firefox-96.0-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-61b55b6ebc cryptsetup-2.3.7-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-af1728fea9 systemd-248.10-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-426ea6c0b7 prosody-0.11.12-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5b10335b54 clamav-0.103.5-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfe346f53f zabbix-5.0.19-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b9743d6af7 guacamole-server-1.4.0-1.fc34 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d18d4159e binaryen-105-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d9697e3ba4 expat-2.4.3-1.fc34 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8c64cb0992 flatpak-1.10.7-1.fc34 flatpak-builder-1.2.2-1.fc34
The following Fedora 34 Critical Path updates have yet to be approved: Age URL 287 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34 ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34 sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34 48 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be annobin-9.79-3.fc34 13 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ca03da1d7 ndctl-72.1-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7129fbaeed python-lxml-4.6.5-1.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-875349d9f5 git-2.34.1-1.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4b47a838eb gnome-desktop3-40.7-1.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3b891fe11 gdb-11.1-7.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-90bf83c4f0 mtools-4.0.37-1.fc34 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-96c490ce12 zstd-1.5.1-6.fc34 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d9522bc88 gnome-shell-40.8-1.fc34 mutter-40.8-1.fc34 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-62c39ffea7 pango-1.48.11-1.fc34 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4edc1860d3 libmetalink-0.1.3-24.fc34 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6367a527e4 augeas-1.13.0-1.fc34 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-48b86d586f vim-8.2.4068-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-312c35803c fwupd-1.7.4-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-af1728fea9 systemd-248.10-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ec576bd84f cups-2.3.3op2-12.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-61b55b6ebc cryptsetup-2.3.7-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-98f862bf34 firefox-96.0-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-59a78d9e59 rdma-core-37.2-2.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d93c1b550 tigervnc-1.12.0-3.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fdf455183e pungi-4.3.3-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ef464a6b1c koji-1.27.1-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-19302c9494 libxcrypt-4.4.27-2.fc34 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c180c1560c dnsmasq-2.86-4.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7d96a8ae7e python-docs-theme-2022.1-1.fc34 python3-docs-3.9.10-1.fc34 python3.9-3.9.10-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d9697e3ba4 expat-2.4.3-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0de5436d4 pam-1.5.1-8.fc34 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8c64cb0992 flatpak-1.10.7-1.fc34 flatpak-builder-1.2.2-1.fc34 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f060667f1e selinux-policy-34.24-1.fc34 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9e17e5df9e libical-3.0.13-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
cfn-lint-0.57.0-1.fc34 davix-0.8.0-2.fc34 ethtool-5.16-1.fc34 fcitx5-5.0.13-1.fc34 grafana-7.5.11-3.fc34 ibus-table-chinese-1.8.6-1.fc34 libyang-2.0.112-2.fc34 lighttpd-1.4.64-1.fc34 lynis-3.0.7-1.fc34 osbuild-46-1.fc34 pyproject-rpm-macros-0-53.fc34 python3.11-3.11.0~a4-1.fc34 radicale-3.1.1-24.fc34 remmina-1.4.23-2.fc34 uvw-2.11.0-2.fc34 virtualbox-guest-additions-6.1.32-1.fc34 wine-7.0-1.fc34 x2goserver-4.1.0.3-15.fc34
Details about builds:
================================================================================ cfn-lint-0.57.0-1.fc34 (FEDORA-2022-95d151ddc0) CloudFormation Linter -------------------------------------------------------------------------------- Update Information:
### v0.57.0 ###### Features - EOL of Python 2.7, 3.4, and 3.5 support (pull #[2195](https://github.com/aws-cloudformation/cfn-lint/pull/2195)) ###### CloudFormation Specifications - Update CloudFormation specs to `53.0.0` (pull #[2196](https://github.com/aws-cloudformation/cfn-lint/pull/2196)) - Fix an issue with rule [E2001](https://github.com/aws-cloudformation/cfn-python- lint/blob/main/docs/rules.md#E2001) to allow string parameter constraints for all AWS specific types (pull #[2193](https://github.com/aws-cloudformation/cfn- lint/pull/2193)) ---- Update to 0.56.4 - Update CloudFormation specs to 52.0.0 - Add region `ap-southeast-3` -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Benjamin A. Beasley code@musicinmybrain.net 0.57.0-1 - Update to 0.57.0 (close RHBZ#2042187) * Wed Jan 12 2022 Benjamin A. Beasley code@musicinmybrain.net 0.56.4-1 - Update to 0.56.3 (close RHBZ#2039002) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2039002 - cfn-lint-0.56.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2039002 [ 2 ] Bug #2042187 - cfn-lint-0.57.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2042187 --------------------------------------------------------------------------------
================================================================================ davix-0.8.0-2.fc34 (FEDORA-2022-57ccfd7a46) Toolkit for http based file management -------------------------------------------------------------------------------- Update Information:
Fixing some compiler warnings. -------------------------------------------------------------------------------- ChangeLog:
* Sun Jan 16 2022 Mattias Ellert mattias.ellert@physics.uu.se - 0.8.0-2 - Fix some compilation warnings and errors --------------------------------------------------------------------------------
================================================================================ ethtool-5.16-1.fc34 (FEDORA-2022-aedf9de312) Settings tool for Ethernet NICs -------------------------------------------------------------------------------- Update Information:
ethtool 5.16 ============ * Feature: use memory maps for module EEPROM parsing (`-m`) * Feature: show CMIS diagnostic information (`-m`) * Fix: fix dumping advertised FEC modes (`--show-fec`) * Fix: ignore cable test notifications from other devices (`--cable-test`) * Fix: do not show duplicate options in help text (`--help`) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Robert Scheck robert@fedoraproject.org - 2:5.16-1 - Upgrade to 5.16 (#2042199) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2042199 - ethtool-5.16 is available https://bugzilla.redhat.com/show_bug.cgi?id=2042199 --------------------------------------------------------------------------------
================================================================================ fcitx5-5.0.13-1.fc34 (FEDORA-2022-49d0fc831c) Next generation of fcitx -------------------------------------------------------------------------------- Update Information:
update to 5.0.13 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 11 2022 Qiyu Yan yanqiyu@fedoraproject.org 5.0.13-1 - update to 5.0.13 --------------------------------------------------------------------------------
================================================================================ grafana-7.5.11-3.fc34 (FEDORA-2022-c6ae206be7) Metrics dashboard and graph editor -------------------------------------------------------------------------------- Update Information:
* fix CVE-2021-44716 * fix CVE-2021-43813 * use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 18 2022 Andreas Gerstmayr agerstmayr@redhat.com 7.5.11-3 - use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens - update FIPS tests in check phase * Thu Dec 16 2021 Andreas Gerstmayr agerstmayr@redhat.com 7.5.11-2 - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files --------------------------------------------------------------------------------
================================================================================ ibus-table-chinese-1.8.6-1.fc34 (FEDORA-2022-0a71160467) Chinese input tables for IBus -------------------------------------------------------------------------------- Update Information:
Update to 1.8.6 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 18 2022 Mike FABIAN mfabian@redhat.com - 1.8.6-1 - Update to 1.8.6 - Increase serial number of cangjie5.txt and erbi-qs.txt * Tue Jan 11 2022 Mike FABIAN mfabian@redhat.com - 1.8.5-1 - Update to 1.8.5 - erbi-qs.txt: add table_extra tag for auxiliary code (Resolves: https://github.com/definite/ibus-table-chinese/pull/18) --------------------------------------------------------------------------------
================================================================================ libyang-2.0.112-2.fc34 (FEDORA-2022-b780f6572e) YANG data modeling language library -------------------------------------------------------------------------------- Update Information:
Update of libyang and its dependent packages in fedora 34. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Tomas Korbar tkorbar@redhat.com - 2.0.112-2 - Fix building of libyang 2 on fedora 34 * Tue Nov 30 2021 Tomas Korbar tkorbar@redhat.com - 2.0.112-1 - Rebase to version 2.0.112 - Resolves: rhbz#2022586 * Mon Oct 11 2021 Tomas Korbar tkorbar@redhat.com - 2.0.97-1 - Rebase to version 2.0.97 - Resolves: rhbz#2012348 * Thu Sep 30 2021 Tomas Korbar tkorbar@redhat.com - 2.0.88-1 - Rebase to version 2.0.88 - Resolves: rhbz#2007673 * Fri Aug 6 2021 Tomas Korbar tkorbar@redhat.com - 2.0.7-1 - Rebase to version 2.0.7 - Resolves: rhbz#1959645 * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 1.0.225-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Sat Jul 10 2021 Neal Gompa ngompa@datto.com - 1.0.225-3 - Clean up the spec file for legibility and modern spec standards - Split out tools into their own subpackage - Remove archfulness from the build path to fix documentation build * Fri Jun 4 2021 Python Maint python-maint@redhat.com - 1.0.225-2 - Rebuilt for Python 3.10 --------------------------------------------------------------------------------
================================================================================ lighttpd-1.4.64-1.fc34 (FEDORA-2022-5c70ad10f6) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information:
1.4.64 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Gwyn Ciesla gwync@protonmail.com - 1.4.64-1 - 1.4.64 * Fri Jan 7 2022 Gwyn Ciesla gwync@protonmail.com - 1.4.63-4 - Update lib/httpd permissions. * Tue Jan 4 2022 Gwyn Ciesla gwync@protonmail.com - 1.4.63-3 - Fix typos. * Wed Dec 29 2021 Gwyn Ciesla gwync@protonmail.com - 1.4.63-2 - Drop mod_authn_mysql, mod_mysql_vhost, mod_geoip - Add mod_maxminddb, mod_authn_dbi, mod_authn_sasl - Add mod_vhostdb_dbi mod_vhostdb_mysql mod_vhostdb_pgsql - Add mod_openssl, mod_gnutls, mod_mbedtls, mod_nss - mod_deflate built with brotli, zstd - mod_webdav built with PROPPATCH and LOCK support -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2042584 - lighttpd-1.4.64 is available https://bugzilla.redhat.com/show_bug.cgi?id=2042584 --------------------------------------------------------------------------------
================================================================================ lynis-3.0.7-1.fc34 (FEDORA-2022-8412a2aad8) Security and system auditing tool -------------------------------------------------------------------------------- Update Information:
3.0.7 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Gwyn Ciesla gwync@protonmail.com - 3.0.7-1 - 3.0.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2042237 - lynis-3.0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2042237 --------------------------------------------------------------------------------
================================================================================ osbuild-46-1.fc34 (FEDORA-2022-3bde3bfc31) A build system for OS images -------------------------------------------------------------------------------- Update Information:
Update osbuild to the latest version -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Packit Service user-cont-team+packit-service@redhat.com - 46-1 CHANGES WITH 46: ---------------- * Add the option of compressing using lz4 (#946)
Contributions from: Thomas Lavocat, Tom���� Hozza
��� V��cklabruck, 2022-01-19 --------------------------------------------------------------------------------
================================================================================ pyproject-rpm-macros-0-53.fc34 (FEDORA-2022-9b8334c0df) RPM macros for PEP 517 Python packages -------------------------------------------------------------------------------- Update Information:
`%pyproject_buildrequires`: Make `-r` (include runtime) the default, use `-R` to opt-out. -------------------------------------------------------------------------------- ChangeLog:
* Fri Jan 14 2022 Miro Hron��ok mhroncok@redhat.com - 0-53 - %pyproject_buildrequires: Make -r (include runtime) the default, use -R to opt-out --------------------------------------------------------------------------------
================================================================================ python3.11-3.11.0~a4-1.fc34 (FEDORA-2022-0e7fd09e92) Version 3.11 of the Python interpreter -------------------------------------------------------------------------------- Update Information:
## Python 3.11.0a4 Python 3.11 is still in development. This release, 3.11.0a4 is the fourth of seven planned alpha releases. Alpha releases are intended to make it easier to test the current state of new features and bug fixes and to test the release process. During the alpha phase, features may be added up until the start of the beta phase (2022-05-06) and, if necessary, may be modified or deleted up until the release candidate phase (2022-08-01). Please keep in mind that this is a preview release and its use is **not** recommended for production environments. -------------------------------------------------------------------------------- ChangeLog:
* Mon Jan 17 2022 Tom���� Hrn��iar thrnciar@redhat.com - 3.11.0~a4-1 - Update to 3.11.0a4 * Sat Jan 8 2022 Miro Hron��ok mhroncok@redhat.com - 3.11.0~a3-3 - Rebuilt for https://fedoraproject.org/wiki/Changes/LIBFFI34 * Mon Dec 13 2021 Miro Hron��ok mhroncok@redhat.com - 3.11.0~a3-2 - Supplement tox --------------------------------------------------------------------------------
================================================================================ radicale-3.1.1-24.fc34 (FEDORA-2022-22be26d204) A simple CalDAV (calendar) and CardDAV (contact) server -------------------------------------------------------------------------------- Update Information:
Version 3.1.1 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Peter Bieringer pb@bieringer.de - 3.1.1-24 - Version 3.1.1 - Fix URLs to major version upgrade notes - Replace NEWS.md by CHANGELOG.md -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2042195 - radicale-3.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2042195 --------------------------------------------------------------------------------
================================================================================ remmina-1.4.23-2.fc34 (FEDORA-2022-3a84eb9f09) Remote Desktop Client -------------------------------------------------------------------------------- Update Information:
* Wed Jan 19 2022 Phil Wyett philip.wyett@kathenas.org - 1.4.23-2 - Remove unneeded BuildRequires for gtk-vnc-2.0. libvncserver is the preferred for VNC and disables the gvnc plugin if found. We have not in the recent past built the gvnc plugin. * Wed Jan 19 2022 Phil Wyett philip.wyett@kathenas.org - 1.4.23-1 - New upstream version 1.4.23. - Enable x2go plugin. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Phil Wyett philip.wyett@kathenas.org - 1.4.23-2 - Remove unneeded BuildRequires for gtk-vnc-2.0. libvncserver is the preferred for VNC and disables the gvnc plugin if found. We have not in the recent past built the gvnc plugin. * Wed Jan 19 2022 Phil Wyett philip.wyett@kathenas.org - 1.4.23-1 - New upstream version 1.4.23. - Enable x2go plugin. --------------------------------------------------------------------------------
================================================================================ uvw-2.11.0-2.fc34 (FEDORA-2022-438780c5c8) Header-only easy to use libuv C++ wrapper -------------------------------------------------------------------------------- Update Information:
- libuv C++ wrapper -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Petr Men����k pemensik@redhat.com 2.11.0-2 - Make not to documentation license * Tue Jan 18 2022 Petr Men����k pemensik@redhat.com 2.11.0-1 - Update to 2.11.0 * Tue Jan 18 2022 Petr Men����k pemensik@redhat.com 2.10.0-4 - Do not require non-existing package * Tue Jan 18 2022 Petr Men����k pihhan@gmail.com 2.10.0-2 - Add version to static provide * Tue Jan 18 2022 Petr Men����k pihhan@gmail.com 2.10.0-1 - Incorporate comments from review * Tue Jan 18 2022 Petr Men����k pemensik@redhat.com 2.9.0-2 - Ignore failing test, comment it out * Tue Jan 18 2022 Petr Men����k pemensik@redhat.com 2.9.0-1 - Move bigger doc part into noarch package * Tue Jan 18 2022 Petr Men����k pemensik@redhat.com Packaging variables read or set by -1 - Initial fedora package spec -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1996325 - Review Request: uvw - Header-only easy to use libuv C++ wrapper https://bugzilla.redhat.com/show_bug.cgi?id=1996325 --------------------------------------------------------------------------------
================================================================================ virtualbox-guest-additions-6.1.32-1.fc34 (FEDORA-2022-753cd6ea1d) VirtualBox Guest Additions -------------------------------------------------------------------------------- Update Information:
Update Virtualbox Guest Additions to 6.1.32 (#2042010) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 S��rgio Basto sergio@serjux.com - 6.1.32-1 - Update Virtualbox Guest Additions to 6.1.32 (#2042010) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2042010 - virtualbox-guest-additions-6.1.32 is available https://bugzilla.redhat.com/show_bug.cgi?id=2042010 --------------------------------------------------------------------------------
================================================================================ wine-7.0-1.fc34 (FEDORA-2022-3aff64b1aa) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information:
https://www.winehq.org/announce/7.0 https://www.winehq.org/announce/7.0-rc6 https://www.winehq.org/announce/7.0-rc5 https://www.winehq.org/announce/7.0-rc4 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Bj��rn Esser besser82@fedoraproject.org - 7.0-1 - version update * Sat Jan 15 2022 Bj��rn Esser besser82@fedoraproject.org - 7.0-0.6rc6 - version update * Sun Jan 9 2022 Bj��rn Esser besser82@fedoraproject.org - 7.0-0.5rc5 - version update * Mon Jan 3 2022 Michael Cronenworth mike@cchtml.com 7.0-0.4rc4 - version update * Mon Jan 3 2022 FeRD (Frank Dana) ferdnyc@gmail.com 7.0-0.3rc3 - Silence messages from expected failures during rpm scriptlets --------------------------------------------------------------------------------
================================================================================ x2goserver-4.1.0.3-15.fc34 (FEDORA-2022-5f809e95f9) X2Go Server -------------------------------------------------------------------------------- Update Information:
Add requires on xwininfo and xmessage -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 19 2022 Orion Poplawski orion@nwra.com - 4.1.0.3-15 - Add Requires on xwininfo and xmessage (bz#2025390) * Tue Nov 16 2021 Ren�� Genz liebundartig@freenet.de - 4.1.0.3-14 - fix typing mistakes * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 4.1.0.3-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri May 21 2021 Jitka Plesnikova jplesnik@redhat.com - 4.1.0.3-12 - Perl 5.34 rebuild * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 4.1.0.3-11 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2025390 - add xwininfo dependency for x2goserver rpm https://bugzilla.redhat.com/show_bug.cgi?id=2025390 --------------------------------------------------------------------------------