The following Fedora 35 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4786825dd expat-2.4.4-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b58d156ab0 ipython-7.26.0-3.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7884684e5a dotnet6.0-6.0.101-3.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-983a78275c xstream-1.4.19-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e49dbaa4e5 dotnet-build-reference-packages-0-11.20220201git045b288.fc35 dotnet3.1-3.1.416-2.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9 libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-725db8230b mingw-gdk-pixbuf-2.42.6-4.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-88f6a3d290 mingw-expat-2.4.4-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-58abb323f0 php-twig2-2.14.11-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7d871d7583 php-twig3-3.3.8-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-da8222a1bc hostapd-2.10-3.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a0b2a4d594 containerd-1.6.0~rc.2-2.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1033a2718b python-rencode-1.0.6-17.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9bf751cdf7 xterm-370-3.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2f14ec7663 varnish-6.6.2-2.fc35 varnish-modules-0.18.0-5.fc35 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-727e3914e1 xrdp-0.9.18-5.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-737e44718a zziplib-0.13.72-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4786825dd expat-2.4.4-1.fc35 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-faaf4ebee4 libwacom-1.12.1-2.fc35 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c917683ac9 python-blivet-3.4.3-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-310e303f6b pungi-4.3.3-3.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c15897fe7d git-2.35.1-1.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-25879afa08 rdma-core-39.0-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-17e7d10dd2 python-cffi-1.15.0-4.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ff8d3feb1 libtool-2.4.6-48.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-33ec204d7d kernel-5.16.8-200.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ceb71ae38 anaconda-35.22.2-4.fc35
The following builds have been pushed to Fedora 35 updates-testing
AMF-1.4.23-1.fc35 FlightGear-2020.3.12-2.fc35 FlightGear-Atlas-0.5.0-0.75.cvs20141002.fc35 FlightGear-data-2020.3.12-1.fc35 R-flexiblas-3.0.0-5.fc35 SimGear-2020.3.12-1.fc35 aardvark-dns-1.0.0~rc2-1.fc35 borgmatic-1.5.23-1.fc35 bst-external-0.26.0-1.fc35 cbmc-5.50.0-1.fc35 cppcheck-2.7-1.fc35 cyrus-imapd-3.2.8-2.fc35 fedora-upgrade-36.1-1.fc35 fgrun-2016.3.1-48.fc35 gap-pkg-hap-1.35-1.fc35 google-api-python-client-2.37.0-1.fc35 jacoco-0.8.7-1.fc35 julia-1.7.2-1.fc35 knot-3.1.6-1.fc35 libgee-0.20.5-1.fc35 libnbd-1.10.5-1.fc35 libusb1-1.0.25-2.fc35 magic-8.3.266-1.fc35 mesa-21.3.6-1.fc35 mimedefang-2.86-1.fc35 mingw-SDL2_ttf-2.0.18-1.fc35 mingw-spice-gtk-0.40-1.fc35 mingw-spice-protocol-0.14.4-1.fc35 nodejs-16.14.0-2.fc35 oneVPL-2022.0.4-1.fc35 oneVPL-intel-gpu-22.2.0-1.fc35 pango-1.50.4-1.fc35 perl-HTTP-Daemon-6.13-1.fc35 python-SALib-1.4.5-2.fc35 python-google-resumable-media-2.2.1-1.fc35 python-read-roi-1.6.0-1.fc35 python-rpm-macros-3.10-11.fc35 python-trimesh-3.10.0-1.fc35 python-txredisapi-1.4.7-1.fc35 python-xnat-0.4.0-1.fc35 qemu-6.1.0-14.fc35 spice-protocol-0.14.4-1.fc35 spice-vdagent-0.22.0-1.fc35 srain-1.3.2-1.fc35 thermald-2.4.8-3.fc35 tuned-2.18.0-1.fc35 urlscan-0.9.9-1.fc35 virt-v2v-1.45.98-1.fc35 webkit2gtk3-2.34.5-1.fc35
Details about builds:
================================================================================ AMF-1.4.23-1.fc35 (FEDORA-2022-b4af149c27) Advanced Media Framework (AMF) SDK -------------------------------------------------------------------------------- Update Information:
New package for Advanced Media Framework SDK. -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Simone Caronni negativo17@gmail.com - 1.4.23-1 - First build. --------------------------------------------------------------------------------
================================================================================ FlightGear-2020.3.12-2.fc35 (FEDORA-2022-c56108b314) The FlightGear Flight Simulator -------------------------------------------------------------------------------- Update Information:
This update provides a new version of FlightGear, the flight simulator. -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Orion Poplawski orion@nwra.com - 2020.3.12-2 - Rebuild for glew 2.2 * Fri Feb 4 2022 Fabrice Bellet fabrice@bellet.info - 2020.3.12-1 - new upstream release * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 2020.3.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Mon Nov 15 2021 Sandro Mani manisandro@gmail.com - 2020.3.11-2 - Rebuild (OpenSceneGraph) --------------------------------------------------------------------------------
================================================================================ FlightGear-Atlas-0.5.0-0.75.cvs20141002.fc35 (FEDORA-2022-c56108b314) Flightgear map tools -------------------------------------------------------------------------------- Update Information:
This update provides a new version of FlightGear, the flight simulator. -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Orion Poplawski orion@nwra.com - 0.5.0-0.75.cvs20141002 - Rebuild for glew 2.2 * Fri Feb 4 2022 Fabrice Bellet fabrice@bellet.info - 0.5.0-0.74.cvs20141002 - rebuild with newer SimGear * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 0.5.0-0.73.cvs20141002 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ FlightGear-data-2020.3.12-1.fc35 (FEDORA-2022-c56108b314) FlightGear base scenery and data files -------------------------------------------------------------------------------- Update Information:
This update provides a new version of FlightGear, the flight simulator. -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 4 2022 Fabrice Bellet fabrice@bellet.info - 2020.3.12-1 - new upstream release * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 2020.3.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ R-flexiblas-3.0.0-5.fc35 (FEDORA-2022-fa350d2a03) FlexiBLAS API Interface for R -------------------------------------------------------------------------------- Update Information:
Fix test -------------------------------------------------------------------------------- ChangeLog:
* Mon Jan 3 2022 I��aki ��car iucar@fedoraproject.org - 3.0.0-5 - Fix test --------------------------------------------------------------------------------
================================================================================ SimGear-2020.3.12-1.fc35 (FEDORA-2022-c56108b314) Simulation library components -------------------------------------------------------------------------------- Update Information:
This update provides a new version of FlightGear, the flight simulator. -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 4 2022 Fabrice Bellet fabrice@bellet.info - 2020.3.12-1 - new upstream release * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 2020.3.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Mon Nov 15 2021 Sandro Mani manisandro@gmail.com - 2020.3.11-2 - Rebuild (OpenSceneGraph) --------------------------------------------------------------------------------
================================================================================ aardvark-dns-1.0.0~rc2-1.fc35 (FEDORA-2022-5869f3225b) Authoritative DNS server for A/AAAA container records -------------------------------------------------------------------------------- Update Information:
bump to v1.0.0-rc2 ---- upload source to lookaside cache ---- initial package -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Lokesh Mandvekar lsm5@fedoraproject.org 1.0.0~rc2-1 - bump to v1.0.0-rc2 * Thu Feb 3 2022 Lokesh Mandvekar lsm5@fedoraproject.org 1.0.0~rc1-1 - bump to v1.0.0-rc1 * Thu Jan 27 2022 Lokesh Mandvekar lsm5@fedoraproject.org 0-1 - Resolves: #2043581 - initial build -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2043581 - Review Request: aardvark-dns - Authoritative DNS server for A/AAAA container records https://bugzilla.redhat.com/show_bug.cgi?id=2043581 --------------------------------------------------------------------------------
================================================================================ borgmatic-1.5.23-1.fc35 (FEDORA-2022-eb55d09cde) Simple Python wrapper script for borgbackup -------------------------------------------------------------------------------- Update Information:
- [#394](https://projects.torsion.org/borgmatic- collective/borgmatic/issues/394): Compact repository segments and free space with new "borgmatic compact" action. Borg 1.2+ only. Also run "compact" by default when no actions are specified, as "prune" in Borg 1.2 no longer frees up space unless "compact" is run. - [#394](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/394): When using the "atime", "bsd_flags", "numeric_owner", or "remote_rate_limit" options, tailor the flags passed to Borg depending on the Borg version. - [#480](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/480), [#482](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/482): Fix traceback when a YAML validation error occurs. ---- - [#288](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/288): Add database dump hook for MongoDB. - [#470](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/470): Move mysqldump options to the beginning of the command due to MySQL bug 30994. - [#471](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/471): When command-line configuration override produces a parse error, error cleanly instead of tracebacking. - [#476](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/476): Fix unicode error when restoring particular MySQL databases. - Drop support for Python 3.6, which has been end-of-lifed. - Add support for Python 3.10. -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Felix Kaechele felix@kaechele.ca - 1.5.23-1 - update to 1.5.23 * Fri Feb 4 2022 Felix Kaechele felix@kaechele.ca - 1.5.22-2 - fix sed on systemd unit to only replace the path * Fri Feb 4 2022 Felix Kaechele felix@kaechele.ca - 1.5.22-1 - update to 1.5.22 * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 1.5.21-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2037158 - borgmatic-1.5.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=2037158 [ 2 ] Bug #2053244 - borgmatic-1.5.23 is available https://bugzilla.redhat.com/show_bug.cgi?id=2053244 --------------------------------------------------------------------------------
================================================================================ bst-external-0.26.0-1.fc35 (FEDORA-2022-8b9e548b3f) Additional BuildStream plugins -------------------------------------------------------------------------------- Update Information:
Update to 0.26.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Artem Polishchuk ego.cordatus@gmail.com - 0.26.0-1 - chore(update): 0.26.0 * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 0.25.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2052298 - bst-external-0.26.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2052298 --------------------------------------------------------------------------------
================================================================================ cbmc-5.50.0-1.fc35 (FEDORA-2022-37244ad542) Bounded Model Checker for ANSI-C and C++ programs -------------------------------------------------------------------------------- Update Information:
new upstream release and implementation of "--add-cmd-line-arg" option. -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Vincent Mihalkovic vmihalko@redhat.com - 5.50.0-1 - New upstream release of cbmc and also cbmc-utils - Add "--add-cmd-line-arg" option for goto-instrument --------------------------------------------------------------------------------
================================================================================ cppcheck-2.7-1.fc35 (FEDORA-2022-75d05798ad) Tool for static C/C++ code analysis -------------------------------------------------------------------------------- Update Information:
Update to 2.7. -------------------------------------------------------------------------------- ChangeLog:
* Tue Feb 8 2022 Wolfgang St��ggl c72578@yahoo.de - 2.7-1 - Update to 2.7. --------------------------------------------------------------------------------
================================================================================ cyrus-imapd-3.2.8-2.fc35 (FEDORA-2022-c30b1a8aa3) A high-performance email, contacts and calendar server -------------------------------------------------------------------------------- Update Information:
New version 3.2.8 Security fix for CVE-2021-33582 Security fix for CVE-2021-32056 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Martin Osvald mosvald@redhat.com - 3.2.8-1 - New version 3.2.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1959138 - CVE-2021-32056 cyrus-imapd: remote authenticated users could bypass intended access restrictions on certain server annotations https://bugzilla.redhat.com/show_bug.cgi?id=1959138 [ 2 ] Bug #1993232 - CVE-2021-33582 cyrus-imapd: Denial of service via string hashing algorithm collisions https://bugzilla.redhat.com/show_bug.cgi?id=1993232 --------------------------------------------------------------------------------
================================================================================ fedora-upgrade-36.1-1.fc35 (FEDORA-2022-bd7e9b853f) Upgrade Fedora to next version using dnf upgrade (unofficial tool) -------------------------------------------------------------------------------- Update Information:
Added new subpackage remove-retired-packages as part of https://fedoraproject.org/wiki/Changes/RetiredPackages -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Miroslav Such�� msuchy@redhat.com 36.1-1 - add upgrade to Feodora 36 - failure during reset of services preset should not be fatal * Tue Nov 9 2021 Miroslav Such�� msuchy@redhat.com 35.3-1 - do not test prerelease during upgrade to F35 - note fedora-remove-old-gpg-keys in fedora-upgrade man page - print whole list before asking on individual packages - add fedora 33 gpg keys to remove - add fedora 32 gpg keys to remove - add fedora-remove-old-gpg-key - fail if something fail, or when user interrupt - grammar edits - work on list of removed packages rather than components - Small changes to reduce dependencies * Thu Sep 23 2021 Miroslav Such�� msuchy@redhat.com 35.2-1 - add remove-retired-packages --------------------------------------------------------------------------------
================================================================================ fgrun-2016.3.1-48.fc35 (FEDORA-2022-c56108b314) Graphical front-end for launching FlightGear flight simulator -------------------------------------------------------------------------------- Update Information:
This update provides a new version of FlightGear, the flight simulator. -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 4 2022 Fabrice Bellet fabrice@bellet.info - 2016.3.1-48 - rebuild with newer SimGear * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 2016.3.1-47 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Mon Nov 15 2021 Sandro Mani manisandro@gmail.com - 2016.3.1-46 - Rebuild (OpenSceneGraph) --------------------------------------------------------------------------------
================================================================================ gap-pkg-hap-1.35-1.fc35 (FEDORA-2022-feeb65a6e7) Homological Algebra Programming for GAP -------------------------------------------------------------------------------- Update Information:
Changes in version 1.35: - Added functions for non-free resolutions - Make `StarGraph` an operation, with hidden attribute `StarGraphAttr` -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Jerry James loganjerry@gmail.com - 1.35-1 - Version 1.35 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 1.34-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2053110 - gap-pkg-hap-1.35 is available https://bugzilla.redhat.com/show_bug.cgi?id=2053110 --------------------------------------------------------------------------------
================================================================================ google-api-python-client-2.37.0-1.fc35 (FEDORA-2022-984a4bdebd) Google APIs Client Library for Python -------------------------------------------------------------------------------- Update Information:
Update to 2.37.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 2:2.37.0-1 - Update to 2.37.0 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org 2:2.36.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Jan 19 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 2:2.36.0-1 - Update to 2.36.0 - Closes rhbz#2042177 --------------------------------------------------------------------------------
================================================================================ jacoco-0.8.7-1.fc35 (FEDORA-2022-21b036fd5a) Java Code Coverage for Eclipse -------------------------------------------------------------------------------- Update Information:
* Add a patch due to update of maven-reporting-api 3.1.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 18 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 0.8.7-1 - New upstream release 0.8.7 * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 0.8.3-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ julia-1.7.2-1.fc35 (FEDORA-2022-9ab3606fcf) High-level, high-performance dynamic language for technical computing -------------------------------------------------------------------------------- Update Information:
New upstream release. -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Milan Bouchet-Valat nalimilan@club.fr - 1.7.2-1 - New upstream release. --------------------------------------------------------------------------------
================================================================================ knot-3.1.6-1.fc35 (FEDORA-2022-e7889d21c7) High-performance authoritative DNS server -------------------------------------------------------------------------------- Update Information:
Update to upstream 3.1.6 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Jakub Ru��i��ka jakub.ruzicka@nic.cz - 3.1.6-1 - Update to 3.1.6 - Add dbus config - Use _sharedstatedir for home --------------------------------------------------------------------------------
================================================================================ libgee-0.20.5-1.fc35 (FEDORA-2022-563105d083) GObject collection library -------------------------------------------------------------------------------- Update Information:
Update to 0.20.5 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 David King amigadave@amigadave.com - 0.20.5-1 - Update to 0.20.5 --------------------------------------------------------------------------------
================================================================================ libnbd-1.10.5-1.fc35 (FEDORA-2022-2fa5931425) NBD client library in userspace -------------------------------------------------------------------------------- Update Information:
New upstream stable branch version 1.10.5 ---- New upstream stable branch version 1.10.4 Fixes: CVE-2022-0485 nbdcopy may create corrupted destination image -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Richard W.M. Jones rjones@redhat.com - 1.10.5-1 - New upstream stable branch version 1.10.5 * Sat Feb 5 2022 Richard W.M. Jones rjones@redhat.com - 1.10.4-1 - New upstream stable branch version 1.10.4 - Fixes: CVE-2022-0485 nbdcopy may create corrupted destination image -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2050325 - CVE-2022-0485 libnbd: nbdcopy: missing error handling may create corrupted destination image [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2050325 --------------------------------------------------------------------------------
================================================================================ libusb1-1.0.25-2.fc35 (FEDORA-2022-ca13cbc97f) Library for accessing USB devices -------------------------------------------------------------------------------- Update Information:
-Fix a crash after libusb_exit API has been misused -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Benjamin Berg bberg@redhat.com 1.0.25-2 - Fix a crash after libusb_exit API has been misused * Wed Feb 2 2022 Benjamin Berg bberg@redhat.com 1.0.25-1 - Update to 1.0.25 --------------------------------------------------------------------------------
================================================================================ magic-8.3.266-1.fc35 (FEDORA-2022-ff90ef86b8) A very capable VLSI layout tool -------------------------------------------------------------------------------- Update Information:
New version 8.3.266 is released. -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Mamoru TASAKA mtasaka@fedoraproject.org - 8.3.266-1 - 8.3.263 --------------------------------------------------------------------------------
================================================================================ mesa-21.3.6-1.fc35 (FEDORA-2022-d271efea8b) Mesa graphics libraries -------------------------------------------------------------------------------- Update Information:
Update 21.3.6 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Pete Walter pwalter@fedoraproject.org 21.3.6-1 - Update to 21.3.6 * Mon Jan 31 2022 Lyude Paul lyude@redhat.com 21.3.5-2 - Add missing attributions for 21.3.4-3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2052727 - mesa-21.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2052727 --------------------------------------------------------------------------------
================================================================================ mimedefang-2.86-1.fc35 (FEDORA-2022-55edec2408) E-Mail filtering framework using Sendmail's Milter interface -------------------------------------------------------------------------------- Update Information:
# MIMEDefang 2.86 * Rspamd support by forking `rspamc(1)` binary is now deprecated, added Rspamd support by implementing its protocol * Fallback to plaintext when `md_check_against_smtp_server()` fails SSL connection for unknown reasons -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 11 2022 Robert Scheck robert@fedoraproject.org 2.86-1 - Upgrade to 2.86 (#2033718, #2053245) * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 2.85-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2033718 - mimedefang-2.86 is available https://bugzilla.redhat.com/show_bug.cgi?id=2033718 [ 2 ] Bug #2053245 - Please upgrade to mimedefang 2.86 or pull fix to non-ASCII characters in dropped attachment file names https://bugzilla.redhat.com/show_bug.cgi?id=2053245 --------------------------------------------------------------------------------
================================================================================ mingw-SDL2_ttf-2.0.18-1.fc35 (FEDORA-2022-98615e0fb1) MinGW Windows port of the TrueType font handling library for SDL2 -------------------------------------------------------------------------------- Update Information:
Update to v2.0.18 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Artur Frenszek-Iwicki fedora@svgames.pl - 2.0.18-1 - Update to v2.0.18 --------------------------------------------------------------------------------
================================================================================ mingw-spice-gtk-0.40-1.fc35 (FEDORA-2022-0201bf5a75) A GTK+ widget for SPICE clients -------------------------------------------------------------------------------- Update Information:
Update to 0.40 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Victor Toso victortoso@redhat.com - 0.40-1 - Update to 0.40 --------------------------------------------------------------------------------
================================================================================ mingw-spice-protocol-0.14.4-1.fc35 (FEDORA-2022-8af6f312d5) Spice protocol header files -------------------------------------------------------------------------------- Update Information:
Update spice-protocol to version 0.14.4 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Victor Toso victortoso@redhat.com - 0.14.4-1 - Update spice-protocol to version 0.14.4 --------------------------------------------------------------------------------
================================================================================ nodejs-16.14.0-2.fc35 (FEDORA-2022-97b214b298) JavaScript runtime -------------------------------------------------------------------------------- Update Information:
## 2022-02-08, Version 16.14.0 'Gallium' (LTS), @danielleadams ### Notable changes #### Importing JSON modules now requires experimental import assertions syntax This release adds experimental support for the import assertions stage 3 proposal. To keep Node.js ESM implementation as compatible as possible with the HTML spec, import assertions are now required to import JSON modules (still behind the `--experimental-json-modules` CLI flag): ```mjs import info from './package.json' assert { type: 'json' }; ``` Or use dynamic import: ```mjs const info = await import('./package.json', { assert: { type: 'json' } }); ``` Contributed by Antoine du Hamel and Geoffrey Booth [#40250](https://github.com/nodejs/node/pull/40250) #### Other notable changes * **async_hooks**: * **(SEMVER-MINOR)** expose async_wrap providers (Rafael Gonzaga) [#40760](https://github.com/nodejs/node/pull/40760) * **child_process**: * **(SEMVER-MINOR)** add support for URL to `cp.fork` (Antoine du Hamel) [#41225](https://github.com/nodejs/node/pull/41225) * **doc**: * add @Mesteery to collaborators (Mestery) [#41543](https://github.com/nodejs/node/pull/41543) * add @bnb as a collaborator (Tierney Cyren) [#41100](https://github.com/nodejs/node/pull/41100) * **esm**: * **(SEMVER-MINOR)** graduate capturerejections to supported (James M Snell) [#41267](https://github.com/nodejs/node/pull/41267) * **(SEMVER- MINOR)** add EventEmitterAsyncResource to core (James M Snell) [#41246](https://github.com/nodejs/node/pull/41246) * **events**: * **(SEMVER- MINOR)** propagate weak option for kNewListener (James M Snell) [#40899](https://github.com/nodejs/node/pull/40899) * **fs**: * **(SEMVER- MINOR)** accept URL as argument for `fs.rm` and `fs.rmSync` (Antoine du Hamel) [#41132](https://github.com/nodejs/node/pull/41132) * **lib**: * **(SEMVER- MINOR)** make AbortSignal cloneable/transferable (James M Snell) [#41050](https://github.com/nodejs/node/pull/41050) * **(SEMVER-MINOR)** add AbortSignal.timeout (James M Snell) [#40899](https://github.com/nodejs/node/pull/40899) * **(SEMVER-MINOR)** add reason to AbortSignal (James M Snell) [#40807](https://github.com/nodejs/node/pull/40807) * **(SEMVER-MINOR)** add unsubscribe method to non-active DC channels (simon-id) [#40433](https://github.com/nodejs/node/pull/40433) * **(SEMVER-MINOR)** add return value for DC channel.unsubscribe (simon-id) [#40433](https://github.com/nodejs/node/pull/40433) * **loader**: * **(SEMVER- MINOR)** return package format from defaultResolve if known (Gabriel Bota) [#40980](https://github.com/nodejs/node/pull/40980) * **perf_hooks**: * **(SEMVER-MINOR)** multiple fixes for Histogram (James M Snell) [#41153](https://github.com/nodejs/node/pull/41153) * **process**: * **(SEMVER-MINOR)** add `getActiveResourcesInfo()` (Darshan Sen) [#40813](https://github.com/nodejs/node/pull/40813) * **src**: * **(SEMVER- MINOR)** add x509.fingerprint512 to crypto module (3nprob) [#39809](https://github.com/nodejs/node/pull/39809) * **(SEMVER-MINOR)** add flags for controlling process behavior (Cheng Zhao) [#40339](https://github.com/nodejs/node/pull/40339) * **stream**: * **(SEMVER- MINOR)** add filter method to readable (Benjamin Gruenbaum) [#41354](https://github.com/nodejs/node/pull/41354) * **(SEMVER-MINOR)** add isReadable helper (Robert Nagy) [#41199](https://github.com/nodejs/node/pull/41199) * **(SEMVER-MINOR)** add map method to Readable (Benjamin Gruenbaum) [#40815](https://github.com/nodejs/node/pull/40815) * deprecate thenable support (Antoine du Hamel) [#40860](https://github.com/nodejs/node/pull/40860) * **util**: * **(SEMVER-MINOR)** pass through the inspect function to custom inspect functions (Ruben Bridgewater) [#41019](https://github.com/nodejs/node/pull/41019) * **(SEMVER-MINOR)** add numericSeparator to util.inspect (Ruben Bridgewater) [#41003](https://github.com/nodejs/node/pull/41003) * **(SEMVER-MINOR)** always visualize cause property in errors during inspection (Ruben Bridgewater) [#41002](https://github.com/nodejs/node/pull/41002) * **timers**: * **(SEMVER- MINOR)** add experimental scheduler api (James M Snell) [#40909](https://github.com/nodejs/node/pull/40909) * **v8**: * **(SEMVER- MINOR)** multi-tenant promise hook api (Stephen Belanger) [#39283](https://github.com/nodejs/node/pull/39283) ---- Fix for CVE-2021-43616 -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Zuzana Svetlikova zsvetlik@redhat.com - 1:16.14.0-2 - Replace explicit version of npm in %check with variable and make build fail if it doesn't match * Tue Feb 8 2022 Stephen Gallagher sgallagh@redhat.com - 1:16.14.0-1 - Update to Node.js 16.14.0 * Thu Feb 3 2022 Stephen Gallagher sgallagh@redhat.com - 1:16.13.2-8 - Update npm to 8.3.1 (CVE-2021-43616) * Wed Feb 2 2022 Stephen Gallagher sgallagh@redhat.com - 1:16.13.2-7 - Fix incorrect version Provides: for npm (bz#2049873) * Mon Jan 31 2022 Stephen Gallagher sgallagh@redhat.com - 1:16.13.2-6 - Rebuild for more architectures * Mon Jan 31 2022 Stephen Gallagher sgallagh@redhat.com - 1:16.13.2-5 - Tweak some dependencies on EPEL 7 (bz2048589) - Add Provides: bundled(zlib) * Wed Jan 19 2022 Stephen Gallagher sgallagh@redhat.com - 1:16.13.2-3 - Bundle zlib on EPEL 7 * Mon Jan 17 2022 Stephen Gallagher sgallagh@redhat.com - 1:16.13.2-2 - Add support for building on EPEL 7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2050282 - CVE-2021-43616 npm: npm ci succeeds when package-lock.json doesn't match package.json https://bugzilla.redhat.com/show_bug.cgi?id=2050282 --------------------------------------------------------------------------------
================================================================================ oneVPL-2022.0.4-1.fc35 (FEDORA-2022-7fa10dd9d6) oneAPI Video Processing Library -------------------------------------------------------------------------------- Update Information:
New package. -------------------------------------------------------------------------------- ChangeLog:
* Tue Feb 8 2022 Simone Caronni negativo17@gmail.com - 2022.0.4-1 - Update to 2022.0.4. * Mon Feb 7 2022 Simone Caronni negativo17@gmail.com - 2022.0.0-2 - Enable Python binding. * Sat Feb 5 2022 Simone Caronni negativo17@gmail.com - 2022.0.0-1 - First build. --------------------------------------------------------------------------------
================================================================================ oneVPL-intel-gpu-22.2.0-1.fc35 (FEDORA-2022-7fa10dd9d6) Intel oneVPL GPU Runtime -------------------------------------------------------------------------------- Update Information:
New package. -------------------------------------------------------------------------------- ChangeLog:
* Tue Feb 8 2022 Simone Caronni negativo17@gmail.com - 2022.2.0-1 - First build. --------------------------------------------------------------------------------
================================================================================ pango-1.50.4-1.fc35 (FEDORA-2022-c31b57056e) System for layout and rendering of internationalized text -------------------------------------------------------------------------------- Update Information:
Update to 1.50.4 * Tweak synthetic space sizes * itemize: Try harder to avoid NULL fonts * docs: Some additions * Pass synthetic slant to harfbuzz * Make sloped carets work with uneven scales * Fix serialiation on arm * Avoid an uninitialized variable warning * Reinstate previous behavior of pango_attr_list_splice * Deprecated pango_coverage_ref/unref * Fix serialization on non-glibc systems * Fix allow-breaks handling -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 David King amigadave@amigadave.com - 1.50.4-1 - Update to 1.50.4 --------------------------------------------------------------------------------
================================================================================ perl-HTTP-Daemon-6.13-1.fc35 (FEDORA-2022-d9d2b8c5eb) Simple HTTP server class -------------------------------------------------------------------------------- Update Information:
Changes: 6.13 2022-02-09 20:39:12Z - Bump minimum IO::Socket::IP version to 0.32 (GH#50) (Olaf Alders) -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Michal Josef ��pa��ek mspacek@redhat.com - 6.13-1 - 6.13 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2052745 - perl-HTTP-Daemon-6.13 is available https://bugzilla.redhat.com/show_bug.cgi?id=2052745 --------------------------------------------------------------------------------
================================================================================ python-SALib-1.4.5-2.fc35 (FEDORA-2022-ee485ac8d0) Sensitivity Analysis Library -------------------------------------------------------------------------------- Update Information:
Update to latest release ---- Update to newest patch release -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 1.4.5-2 - chore: bump for branch * Mon Feb 7 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 1.4.5-1 - feat: update to 1.4.5 * Mon Feb 7 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 1.4.4-5 - chore: use correct py3 macro * Mon Feb 7 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 1.4.4-4 - feat: drop sphinx documentation * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.4.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2001189 - python-SALib-1.4.6b0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2001189 --------------------------------------------------------------------------------
================================================================================ python-google-resumable-media-2.2.1-1.fc35 (FEDORA-2022-9e3277501d) Utilities for Google media downloads and resumable uploads -------------------------------------------------------------------------------- Update Information:
Update to 2.2.1 ---- Update to 2.2.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Major Hayden major@mhtx.net 2.2.1-1 - Update to 2.2.1 * Mon Feb 7 2022 Major Hayden major@mhtx.net 2.2.0-1 - Update to 2.2.0 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org 2.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2051656 - python-google-resumable-media-2.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2051656 [ 2 ] Bug #2052754 - python-google-resumable-media-2.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2052754 --------------------------------------------------------------------------------
================================================================================ python-read-roi-1.6.0-1.fc35 (FEDORA-2022-94e1653bc4) Read ROI files .zip or .roi generated with imagej -------------------------------------------------------------------------------- Update Information:
New package! python-read-roi -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 9 2021 Adeleye Opeyemi <adebola786 AT gmail DOT com> - 1.6.0-2 -updated spec file * Thu Oct 28 2021 Adeleye Opeyemi <adebola786 AT gmail DOT com> - 1.6.0-1 -initial rpm -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2018238 - Review Request: python-read-roi - Read ROI files .zip or .roi generated with ImageJ. https://bugzilla.redhat.com/show_bug.cgi?id=2018238 --------------------------------------------------------------------------------
================================================================================ python-rpm-macros-3.10-11.fc35 (FEDORA-2022-fc961066b5) The common Python RPM macros -------------------------------------------------------------------------------- Update Information:
Set $RPM_BUILD_ROOT in %{python3_...} macros to allow selecting alternate sysconfig install scheme based on that variable (needed for Python 3.11+) -------------------------------------------------------------------------------- ChangeLog:
* Mon Feb 7 2022 Miro Hron��ok mhroncok@redhat.com - 3.10-11 - Set $RPM_BUILD_ROOT in %{python3_...} macros to allow selecting alternate sysconfig install scheme based on that variable --------------------------------------------------------------------------------
================================================================================ python-trimesh-3.10.0-1.fc35 (FEDORA-2022-132ffcab37) Import, export, process, analyze and view triangular meshes -------------------------------------------------------------------------------- Update Information:
Update to 3.10.0: bug fixes and minor features -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Benjamin A. Beasley code@musicinmybrain.net 3.10.0-1 - Update to 3.10.0 (close RHBZ#2046501) * Thu Feb 10 2022 Benjamin A. Beasley code@musicinmybrain.net 3.9.43-1 - Update to 3.9.43 ���fix build��� * Thu Feb 10 2022 Benjamin A. Beasley code@musicinmybrain.net 3.9.42-2 - Restore mapbox-earcut dependency in ���all��� extra -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2046501 - python-trimesh-3.10.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2046501 --------------------------------------------------------------------------------
================================================================================ python-txredisapi-1.4.7-1.fc35 (FEDORA-2022-f1a2a59123) Non-blocking Redis client for Python -------------------------------------------------------------------------------- Update Information:
Update to v1.4.7 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Kai A. Hiller V02460@gail.com.com - 1.4.7-1 - Update to v1.4.7 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.4.4-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ python-xnat-0.4.0-1.fc35 (FEDORA-2022-7bd1104574) A new XNAT client that exposes XNAT objects/functions as python objects/functions. -------------------------------------------------------------------------------- Update Information:
Update to new minor release -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 0.4.0-1 - feat: update to 4.0.1 (fixes rhbz#2018060) --------------------------------------------------------------------------------
================================================================================ qemu-6.1.0-14.fc35 (FEDORA-2022-3a60c34473) QEMU is a FAST! processor emulator -------------------------------------------------------------------------------- Update Information:
virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) ---- Fix iovec limits with scsi-generic -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Eduardo Lima (Etrunko) etrunko@redhat.com - 6.1.0-14 - virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) Resolves: rhbz#2044863 * Thu Nov 25 2021 Daniel P. Berrang�� berrange@redhat.com - 6.1.0-13 - Fix iovec limits with scsi-generic - Define STAP_SDT_ARG_CONSTRAINT=g on %{arm}, workaround for: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103395 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2044863 - CVE-2022-0358 QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 https://bugzilla.redhat.com/show_bug.cgi?id=2044863 --------------------------------------------------------------------------------
================================================================================ spice-protocol-0.14.4-1.fc35 (FEDORA-2022-db6cae5da6) Spice protocol header files -------------------------------------------------------------------------------- Update Information:
Update to 0.14.4 release -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Victor Toso victortoso@redhat.com - 0.14.4-1 - Update to 0.14.4 release --------------------------------------------------------------------------------
================================================================================ spice-vdagent-0.22.0-1.fc35 (FEDORA-2022-3581bfb038) Agent for Spice guests -------------------------------------------------------------------------------- Update Information:
Update to spice-vdagent 0.22.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Victor Toso victortoso@redhat.com 0.22.0-1 - Update to spice-vdagent 0.22.0 --------------------------------------------------------------------------------
================================================================================ srain-1.3.2-1.fc35 (FEDORA-2022-ddf7011312) Modern, beautiful IRC client written in GTK+ 3 -------------------------------------------------------------------------------- Update Information:
Update to 1.3.2 -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Artem Polishchuk ego.cordatus@gmail.com - 1.3.2-1 - chore(update): 1.3.2 * Sat Jan 22 2022 Fedora Release Engineering releng@fedoraproject.org - 1.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ thermald-2.4.8-3.fc35 (FEDORA-2022-7208209d22) Thermal Management daemon -------------------------------------------------------------------------------- Update Information:
Pull in adaptive fixes/improvements and p-p-d integration -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Benjamin Berg bberg@redhat.com 2.4.8-3 - Pull in adaptive fixes/improvements and p-p-d integration --------------------------------------------------------------------------------
================================================================================ tuned-2.18.0-1.fc35 (FEDORA-2022-e63c0c5310) A dynamic adaptive system tuning daemon -------------------------------------------------------------------------------- Update Information:
This is new TuneD release. -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Jaroslav ��karvada jskarvad@redhat.com - 2.18.0-1 - new release - rebased tuned to latest upstream related: rhbz#2003833 - tuned-gui: fixed creation of new profile --------------------------------------------------------------------------------
================================================================================ urlscan-0.9.9-1.fc35 (FEDORA-2022-fdff5b0689) Extract and browse the URLs contained in an email (urlview replacement) -------------------------------------------------------------------------------- Update Information:
Update to latest patch release -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com 0.9.9-1 - feat: update to 0.9.9 (fixes rhbz#2048042) * Sat Jan 22 2022 Fedora Release Engineering releng@fedoraproject.org - 0.9.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ virt-v2v-1.45.98-1.fc35 (FEDORA-2022-5bafd045ca) Convert a virtual machine to run on KVM -------------------------------------------------------------------------------- Update Information:
New upstream development version 1.45.98 (preview of 2.0) -------------------------------------------------------------------------------- ChangeLog:
* Thu Feb 10 2022 Richard W.M. Jones rjones@redhat.com - 1:1.45.98-1 - New upstream development version 1.45.98 (preview of 2.0) * Fri Feb 4 2022 Richard W.M. Jones rjones@redhat.com - 1:1.45.97-3 - OCaml 4.13.1 rebuild to remove package notes * Sat Jan 22 2022 Fedora Release Engineering releng@fedoraproject.org - 1:1.45.97-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ webkit2gtk3-2.34.5-1.fc35 (FEDORA-2022-cbd155f714) GTK Web content engine library -------------------------------------------------------------------------------- Update Information:
Update to 2.34.5: * Improve VP8 codec selection when using GStreamer 1.20. * Fix connecting to the accessibility bus when using the Bubblewrap sandbox. * Fix links being incorrectly activated when starting a pinch zoom gesture. * Fix touch-based scrolling. * Fix several crashes and rendering issues. * Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592 -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 9 2022 Michael Catanzaro mcatanzaro@redhat.com 2.34.5-1 - Update to WebKitGTK 2.34.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2053180 - CVE-2022-22589 webkit2gtk3: webkitgtk: Processing a maliciously crafted mail message may lead to running arbitrary javascript [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2053180 [ 2 ] Bug #2053182 - CVE-2022-22590 webkit2gtk3: webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2053182 [ 3 ] Bug #2053186 - CVE-2022-22592 webkit2gtk3: webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2053186 --------------------------------------------------------------------------------