The following Fedora 35 Security updates need testing: Age URL 93 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9 libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35 86 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11 mysql-connector-java-8.0.28-1.fc35 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3e03a200b freerdp-2.7.0-1.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-411f088574 curl-7.79.1-3.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-be6d83642a libxml2-2.9.14-1.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-600e0cba93 mingw-SDL2_ttf-2.0.18-2.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-80e1724780 freetype-2.11.0-6.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0a719e8ba4 java-1.8.0-openjdk-aarch32-1.8.0.332.b09-1.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c9173843a keylime-6.4.0-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9e66cba2d8 thunderbird-91.9.0-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6d9d1862ee slurm-21.08.8-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf58612696 ecdsautils-0.4.1-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-88e3257aef supertux-0.6.3-2.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0ac71a8f3a clamav-0.103.6-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0aab67e874 chafa-1.2.1-7.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-185b91b741 et-6.2.1-2.fc35
The following Fedora 35 Critical Path updates have yet to be approved: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bdfcd4f5d3 libtpms-0.9.4-0.20220425gite4d68670e1.fc35.0 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0c44eb0df4 python-rpmautospec-0.2.6-1.fc35 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3e03a200b freerdp-2.7.0-1.fc35 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3046139e5 gnutls-3.7.4-1.fc35 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0ab93ad2ab python-requests-2.27.1-2.fc35 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3 systemd-249.12-3.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-be6d83642a libxml2-2.9.14-1.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-baecfaaa06 hwdata-0.359-1.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-411f088574 curl-7.79.1-3.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2368b50c31 evolution-data-server-3.42.5-1.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-80e1724780 freetype-2.11.0-6.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d5d6b61663 icu-69.1-6.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e649fb9f96 gnome-shell-41.6-1.fc35 mutter-41.6-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-19b83f9dc2 annobin-10.69-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b296d34f96 ostree-2022.3-2.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1d746fb606 dnf-plugins-core-4.2.0-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-36df99e823 dnf-4.12.0-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-767f37bebd libdnf-0.67.0-2.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e0e85658f gdb-12.1-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e97f69b5b librepo-1.14.3-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-063307d879 createrepo_c-0.20.0-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-594405302f xdg-desktop-portal-gnome-41.2-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9e66cba2d8 thunderbird-91.9.0-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c04a2637f hexedit-1.6-1.fc35
The following builds have been pushed to Fedora 35 updates-testing
CImg-3.1.0-1.fc35 cpu-x-4.3.1-2.fc35 ddgr-2.0-1.fc35 fedora-upgrade-36.3-1.fc35 gdisk-1.0.9-2.fc35 gmic-3.1.0-1.fc35 golang-github-containers-ocicrypt-1.1.3-1.fc35 golang-github-docker-libnetwork-0.8.0-17.20220508git339b972.fc35 golang-github-opencontainers-runc-1.1.1-1.fc35 igt-gpu-tools-1.26-1.20220508gitcffa5ff.fc35 moby-engine-20.10.15-1.fc35 mopidy-mpd-3.3.0-1.fc35 mozjs91-91.9.0-1.fc35 python-exif-3.0.0-1.fc35 python-pytelegrambotapi-4.5.1-1.fc35 python-steam-1.2.1-2.fc35 rb_libtorrent-2.0.6-2.fc35 rust-inlinable_string-0.1.15-1.fc35 scidavis-2.9.0-1.fc35 setup-2.13.10-1.fc35 srain-1.4.0-2.fc35
Details about builds:
================================================================================ CImg-3.1.0-1.fc35 (FEDORA-2022-eca0926460) C++ Template Image Processing Toolkit -------------------------------------------------------------------------------- Update Information:
bump version -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 28 2022 josef radinger cheese@nosuchhost.net - 3.1.0-1 - bump version * Thu Jan 20 2022 josef radinger cheese@nosuchhost.net - 3.0.2-1 - bump version * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 1:3.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jan 14 2022 josef radinger cheese@nosuchhost.net -3.0.1-1 - bump version - update Source-URL (https) * Sat Dec 11 2021 josef radinger cheese@nosuchhost.net - 1:3.0.0-1 - bump version -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2074549 - CVE-2022-1325 CImg: Denial of service via RAM exhaustion in _load_bmp https://bugzilla.redhat.com/show_bug.cgi?id=2074549 --------------------------------------------------------------------------------
================================================================================ cpu-x-4.3.1-2.fc35 (FEDORA-2022-765e29f2f8) Gathers information on CPU, motherboard and more -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Artem Polishchuk ego.cordatus@gmail.com - 4.3.1-1 - chore(update): 4.3.1 --------------------------------------------------------------------------------
================================================================================ ddgr-2.0-1.fc35 (FEDORA-2022-693404d0e1) DuckDuckGo from the terminal -------------------------------------------------------------------------------- Update Information:
Update to 2.0 Close: rhbz#2061065 -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0-1 - Update to 2.0 Close: rhbz#2061065 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2061065 - ddgr-2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2061065 --------------------------------------------------------------------------------
================================================================================ fedora-upgrade-36.3-1.fc35 (FEDORA-2022-d22a1e006e) Upgrade Fedora to next version using dnf upgrade (unofficial tool) -------------------------------------------------------------------------------- Update Information:
- do not test prerelease for F36 - remove-retired-packages: Normalize grammatical tense in messages - remove-retired-packages: Rewrite introductory text for better clarity - remove-retired-packages: Normalize quotation marks in echo commands - ignore if rpmfusion repos are not present during upgrade to rawhide - ignore if some gpg keys to be remove are missing - 2066053 - ask for the GPG key if needed -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Miroslav Such�� msuchy@redhat.com 36.3-1 - do not test prerelease for F36 - remove-retired-packages: Normalize grammatical tense in messages - remove-retired-packages: Rewrite introductory text for better clarity - remove-retired-packages: Normalize quotation marks in echo commands - ignore if rpmfusion repos are not present during upgrade to rawhide - ignore if some gpg keys to be remove are missing - 2066053 - ask for the GPG key if needed - remove-retired-packages: Typo -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2066053 - remove-retired-packages will not prompt, but still wait for input, when dnf attempts to import a gpg key. https://bugzilla.redhat.com/show_bug.cgi?id=2066053 --------------------------------------------------------------------------------
================================================================================ gdisk-1.0.9-2.fc35 (FEDORA-2022-79bdaa4fbc) An fdisk-like partitioning tool for GPT disks -------------------------------------------------------------------------------- Update Information:
Fixes a warning related to UUID. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 7 2022 Dominik Mierzejewski dominik@greysector.net - 1.0.9-2 - backport upstream fix for UUID issue with latest popt - run internal testsuite in %check -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2082857 - "Warning! Unable to generate a proper UUID!" when built against libuuid 2.38 https://bugzilla.redhat.com/show_bug.cgi?id=2082857 --------------------------------------------------------------------------------
================================================================================ gmic-3.1.0-1.fc35 (FEDORA-2022-eca0926460) GREYC's Magic for Image Computing -------------------------------------------------------------------------------- Update Information:
bump version -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 28 2022 josef radinger cheese@nosuchhost.net - 3.1.0-1 - bump version - disable patch0 - disable patch2 - BuildRequires: chrpath * Wed Jan 26 2022 josef radinger cheese@nosuchhost.net - 3.0.2-1 - bump version * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 3.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jan 14 2022 josef radinger cheese@nosuchhost.net -3.0.1-1 - bump version - add gmic_denoise_cnn.gmz to gimp-subpackage * Sat Dec 11 2021 josef radinger cheese@nosuchhost.net -3.0.0-1 - bump version * Thu Nov 25 2021 Orion Poplawski orion@nwra.com - 2.9.9-2 - Rebuild for hdf5 1.12.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2074549 - CVE-2022-1325 CImg: Denial of service via RAM exhaustion in _load_bmp https://bugzilla.redhat.com/show_bug.cgi?id=2074549 --------------------------------------------------------------------------------
================================================================================ golang-github-containers-ocicrypt-1.1.3-1.fc35 (FEDORA-2022-35559d9fa5) Encryption libraries for Encrypted OCI Container images -------------------------------------------------------------------------------- Update Information:
Update to 1.1.3. Fixes rhbz#2065875. -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 29 2022 Maxwell G gotmax@e.email 1.1.3-1 - Update to 1.1.3. Fixes rhbz#2065875. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2065875 - golang-github-containers-ocicrypt-1.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2065875 --------------------------------------------------------------------------------
================================================================================ golang-github-docker-libnetwork-0.8.0-17.20220508git339b972.fc35 (FEDORA-2022-e9aaae11c8) Native Go implementation for connecting containers -------------------------------------------------------------------------------- Update Information:
Bump to 339b972b464ee3d401b5788b2af9e31d09d6b7da. -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Maxwell G gotmax@e.email 0.8.0-16 - Bump to 339b972b464ee3d401b5788b2af9e31d09d6b7da. --------------------------------------------------------------------------------
================================================================================ golang-github-opencontainers-runc-1.1.1-1.fc35 (FEDORA-2022-21ce6f5ccd) CLI tool for spawning and running containers -------------------------------------------------------------------------------- Update Information:
Update to 1.1.1. Fixes rhbz#2069649. -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 29 2022 Maxwell G gotmax@e.email 1.1.1-1 - Update to 1.1.1. Fixes rhbz#2069649. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2069649 - golang-github-opencontainers-runc-1.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2069649 --------------------------------------------------------------------------------
================================================================================ igt-gpu-tools-1.26-1.20220508gitcffa5ff.fc35 (FEDORA-2022-3cfd778be1) Test suite and tools for DRM drivers -------------------------------------------------------------------------------- Update Information:
New git snapshot -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Lyude Paul lyude@redhat.com - 1.26-1.20220508gitcffa5ff - New git snapshot --------------------------------------------------------------------------------
================================================================================ moby-engine-20.10.15-1.fc35 (FEDORA-2022-ec3d3c0f08) The open-source application container engine -------------------------------------------------------------------------------- Update Information:
- Update to 20.10.15 (rhbz#2082501). - Fix BUILDTAGS (rhbz#2082924). - Make non- binary subpackages noarch. -------------------------------------------------------------------------------- ChangeLog:
* Sat May 7 2022 Maxwell G gotmax@e.email - 20.10.15-1 - Update to 20.10.15 (rhbz#2082501). - Fix BUILDTAGS (rhbz#2082924). - Make non-binary subpackages noarch. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2082501 - moby-engine-20.10.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=2082501 [ 2 ] Bug #2082924 - moby-engine: docker security options missing seccomp support https://bugzilla.redhat.com/show_bug.cgi?id=2082924 --------------------------------------------------------------------------------
================================================================================ mopidy-mpd-3.3.0-1.fc35 (FEDORA-2022-27325d93af) Mopidy extension for controlling Mopidy from MPD clients -------------------------------------------------------------------------------- Update Information:
Update to 3.3.0 (#2080093) -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 29 2022 Fedora Release Monitoring release-monitoring@fedoraproject.org - 3.3.0-1 - Update to 3.3.0 (#2080093) * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 3.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2080093 - mopidy-mpd-3.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2080093 --------------------------------------------------------------------------------
================================================================================ mozjs91-91.9.0-1.fc35 (FEDORA-2022-474436da77) SpiderMonkey JavaScript library -------------------------------------------------------------------------------- Update Information:
- mozjs91-91.9.0: https://www.mozilla.org/en-US/firefox/91.9.0/releasenotes/ -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Frantisek Zatloukal fzatlouk@redhat.com - 91.9.0-1 - mozjs91-91.9.0 --------------------------------------------------------------------------------
================================================================================ python-exif-3.0.0-1.fc35 (FEDORA-2022-a5cb6d52a5) Python module to extract EXIF information -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release EXIF py 3.0.0. -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Terje Rosten terje.rosten@ntnu.no - 3.0.0-1 - 3.0.0 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 2.3.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2082954 - python-exif-3.0.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2082954 --------------------------------------------------------------------------------
================================================================================ python-pytelegrambotapi-4.5.1-1.fc35 (FEDORA-2022-28c936aff2) Python Telegram Bot API implementation -------------------------------------------------------------------------------- Update Information:
Updated to version 4.5.1. -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Vitaly Zaitsev vitaly@easycoding.org - 4.5.1-1 - Updated to version 4.5.1. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2082906 - python-pytelegrambotapi-4.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2082906 --------------------------------------------------------------------------------
================================================================================ python-steam-1.2.1-2.fc35 (FEDORA-2022-9db8021189) Python package for interacting with Steam -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Artem Polishchuk ego.cordatus@gmail.com - 1.2.1-1 - chore(update): 1.2.1 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ rb_libtorrent-2.0.6-2.fc35 (FEDORA-2022-dfcc5b4732) A C++ BitTorrent library aiming to be the best alternative -------------------------------------------------------------------------------- Update Information:
- Update -------------------------------------------------------------------------------- ChangeLog:
* Sat May 7 2022 Leigh Scott leigh123linux@gmail.com - 2.0.6-2 - Fix i686 build * Thu May 5 2022 Leigh Scott leigh123linux@gmail.com - 2.0.6-1 - Upgrade to 2.0.6 * Wed May 4 2022 Thomas Rodgers trodgers@redhat.com - 2.0.5-3 - Rebuilt for Boost 1.78 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 2.0.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2076052 - rb_libtorrent-2.0.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2076052 --------------------------------------------------------------------------------
================================================================================ rust-inlinable_string-0.1.15-1.fc35 (FEDORA-2022-37e3e17898) `inlinable_string` crate provides the `InlinableString` type -- an owned, grow-able UTF-8 string that stores small strings inline and avoids heap-allocation -- and the `StringExt` trait which abstracts string operations over both `std::string::String` and `InlinableString` (or even your own custom string type) -------------------------------------------------------------------------------- Update Information:
Initial import (fedora#2005982). -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Jan Baudisch jan@baudisch.xyz 0.1.15-1 - Initial import (fedora#2005982). -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2005982 - Review Request: rust-inlinable_string - Alternative Rust String implementation https://bugzilla.redhat.com/show_bug.cgi?id=2005982 --------------------------------------------------------------------------------
================================================================================ scidavis-2.9.0-1.fc35 (FEDORA-2022-4149f25489) Application for Scientific Data Analysis and Visualization -------------------------------------------------------------------------------- Update Information:
Update to version 2.9.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Alexander Ploumistos alexpl@fedoraproject.org - 2.9.0-1 - Update to 2.9.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2075360 - scidavis-2.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2075360 --------------------------------------------------------------------------------
================================================================================ setup-2.13.10-1.fc35 (FEDORA-2022-d37f9b1e8b) A set of system configuration and setup files -------------------------------------------------------------------------------- Update Information:
New version 2.13.10 Move /var/log/lastlog ownership to systemd (#1798685) tcsh sets variable p to /usr/sbin from /etc/csh.login (#2019874) 'history -a' doesn't belong in /etc/bashrc (#1871744) localhost.localdomain in wrong order /etc/hosts (#1724539) -------------------------------------------------------------------------------- ChangeLog:
* Sat May 7 2022 Martin Osvald mosvald@redhat.com - 2.13.10-1 - Move /var/log/lastlog ownership to systemd (#1798685) - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2019874) - 'history -a' doesn't belong in /etc/bashrc (#1871744) - localhost.localdomain in wrong order /etc/hosts (#1724539) * Sat Jan 22 2022 Fedora Release Engineering releng@fedoraproject.org - 2.13.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1724539 - localhost.localdomain in wrong order /etc/hosts https://bugzilla.redhat.com/show_bug.cgi?id=1724539 [ 2 ] Bug #1871744 - 'history -a' doesn't belong in /etc/bashrc https://bugzilla.redhat.com/show_bug.cgi?id=1871744 [ 3 ] Bug #2019874 - tcsh sets variable p to /usr/sbin from /etc/csh.login https://bugzilla.redhat.com/show_bug.cgi?id=2019874 --------------------------------------------------------------------------------
================================================================================ srain-1.4.0-2.fc35 (FEDORA-2022-1557175629) Modern, beautiful IRC client written in GTK+ 3 -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Sun May 8 2022 Artem Polishchuk ego.cordatus@gmail.com - 1.4.0-1 - chore(update): 1.4.0 --------------------------------------------------------------------------------