The following Fedora 36 Security updates need testing: Age URL 34 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3793987b02 nodejs-16.17.1-1.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-361f34f2a9 java-1.8.0-openjdk-1.8.0.352.b08-2.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f76014ae17 java-17-openjdk-17.0.5.0.8-2.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d989953883 java-11-openjdk-11.0.17.0.8-2.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1ecc10276e php-8.1.12-1.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ec78b2586 device-mapper-multipath-0.8.7-9.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-92ca0d5447 python3.11-3.11.0-1.fc36 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e8698f2e5e java-latest-openjdk-19.0.1.0.10-2.rolling.fc36 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6bcee2cc93 ghc-cmark-gfm-0.2.5-1.fc36 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-affcf9eea6 mingw-gdb-12.1-2.fc36 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-19538a3732 mingw-binutils-2.37-5.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d1682fef04 mingw-python3-3.10.8-1.fc36
The following Fedora 36 Critical Path updates have yet to be approved: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-57ee5658ba annobin-10.91-1.fc36 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1ce0e1a10 netcat-1.219-1.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2cfae0608f mtools-4.0.42-1.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-362bd01539 python3-docs-3.10.8-1.fc36 python3.10-3.10.8-1.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1f0c41e96a koji-1.30.1-2.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ec78b2586 device-mapper-multipath-0.8.7-9.fc36 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b3789b98eb python-rpm-macros-3.10-20.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-48bd42b2dc rust-packaging-23-1.fc36 rust-srpm-macros-23-1.fc36 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a57ed521ba tzdata-2022f-1.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3dcead123d hwdata-0.364-1.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1291faac0d mpg123-1.31.1-1.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-95075fcd45 gnome-control-center-42.4-1.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-59dce64ba4 gtk4-4.6.8-1.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ef19edbdc expat-2.5.0-1.fc36
The following builds have been pushed to Fedora 36 updates-testing
baresip-2.9.0-1.fc36 centpkg-0.6.8-1.fc36 containerd-1.6.8-5.fc36 crosswords-0.3.5-2.fc36 dotnet6.0-6.0.110-2.fc36 exim-4.96-5.fc36 fedora-license-data-1.7-1.fc36 golang-github-digitalocean-godo-1.88.0-1.fc36 golang-github-docker-22.06.0~beta.0-6.fc36 golang-github-docker-cli-22.06.0~beta.0-1.fc36 golang-github-graylog2-gelf-2.0.0-5.20201111git1550ee6.fc36 golang-github-moby-buildkit-0.10.5-2.fc36 golang-github-moby-swarmkit-2-2.0.0-0.5.pre1.20221009git139c54b.fc36 golang-github-rootless-containers-rootlesskit-1.0.1-1.fc36 golang-github-tonistiigi-fsutil-0-0.14.20221009git4638ad6.fc36 gretl-2022c-1.fc36 ibus-table-1.16.13-1.fc36 jgmenu-4.4.1-1.fc36 libfido2-1.10.0-4.fc36 libipuz-0.2.0-1.fc36 libre-2.9.0-1.fc36 librem-2.9.0-1.fc36 libxcrypt-4.4.30-1.fc36 mediawiki-1.37.6-1.fc36 mingw-gcc-11.2.1-6.fc36 openvpn-2.5.8-1.fc36 osbuild-composer-67-1.fc36 perl-HTML-Parser-3.80-1.fc36 putty-0.78-1.fc36 python-basemap-1.3.6-1.fc36 python-contourpy-1.0.6-1.fc36 python-mizani-0.8.1-1.fc36 python-plotnine-0.10.1-2.fc36 python-rust-update-set-0.0.1-1.fc36 python-yara-4.2.3-1.fc36 qbittorrent-4.4.5-1.fc36 rb_libtorrent-2.0.8-1.fc36 rust-hyper-0.14.22-1.fc36 socnetv-3.0.4-4.fc36 wine-7.20-1.fc36 wine-mono-7.4.0-1.fc36 xen-4.16.2-3.fc36 xorg-x11-server-Xwayland-22.1.5-1.fc36
Details about builds:
================================================================================ baresip-2.9.0-1.fc36 (FEDORA-2022-e7e879dd51) Modular SIP user-agent with audio and video support -------------------------------------------------------------------------------- Update Information:
# Baresip 2.9.0 (2022-11-01) * sndfile: Filename includes `strm->cname` (i.e. `call->local_uri`) && `strm->peer` values (i.e. `call->peer_uri`) to derive source and destination of recorded call * log: optional timestamps * avcodec: remove H263 codec * mk: bump `PROJECT_NUMBER` in `Doxyfile` * stream: correct Doxygen for peer field * cmake: add pre version handling * cmake,debian: use `dh-cmake` * cmake: add pkgconfig * Avoid webrtc_aecm module C++20 extension warnings * cmake/ctrld_dbus: ninja and subdirectory fixes * cmake: link `CMAKE_CURRENT_BINARY_DIR` modules * cmake,debian: fix libbaresip dependency * cmake: set C only flags * FindPNG needs to find also include directory * FindVPX needs to find also include directory * Multicast send events on mcreg enable commands * call, menu: support display name for outgoing calls * call: hangup call on transp reset if necessary * portaudio: add `mediadev_add` with mediadev driver fields * call: fix mnat `call_streams_alloc` * jack: fix CodeQL uninitialized local variable * Avoid snapshot compiler warnings * avformat: remove old call to `avcodec_register_all()` * avformat: remove `LIBAVUTIL_VERSION_MAJOR` check * ua: wording for warning in `ua_refer_send()` * ua: use mbuf functions for `ua_connect_dir` * ci: use `actions/checkout@v3` * avcodec: remove `av_packet_free()` wrapper * selfview: create window in encode_update * alsa: use C11 threads * config: fix template for `avcodec_xxx` * avformat: use C11 threads * v4l2: use C11 threads * avcodec: remove `LIBAVUTIL_VERSION_MAJOR` check * multicast: use C11 threads * menu fix display name * account: do not complete dial URI if scheme is included * menu: simplify URI complete * gtk: use new function `account_uri_complete_strdup()` * Removed module avformat dependency on libpostproc * make: detect and add swscale module in modules.mk * cmake: add `APP_MODULES` symlinks * cmake: use `CMAKE_SHARED_MODULE_SUFFIX` # librem v2.9.0 (2022-11-01) * cmake: add pre-release version handling * `README.md`: Update build instructions for cmake * aubuf: exclude non compatible CXX functions * auframe: skip level calculation if format is RAW * ci: use `actions/checkout@v3` * vidframe_draw_point: add NV12 and NV21 pixel format # libre v2.9.0 (2022-11-01) * cmake,make: bump version and set dev identifier * udp: remove `udp_send_anon()` * cmake: enable export symbols for backtrace * `README.md`: Update build instructions for cmake * cmake: improve kqueue and epoll detection * fs: add `fs_stdio_hide()` and `fs_stdio_restore()` helpers * json: remove unknown type warning * http: fix warning arguments * net_if_getlinklocal: use AF from input parameter * fmt: add `str_itoa` * SDP support for <proto> udp * tls: remove some warnings * fmt: add `pl_trim` functions * aes/openssl: remove obsolete version check * http: use `str_dup()` instead of unsafe `strcpy()` * doxygen: update comments * reg: remove obsolete void cast * Tls connect debug * mk: update doxygen file * ci: use `actions/checkout@v3` * tls: remove ifdef from public API * sip: `sip_conncfg_set` pass by reference * dnsc get conf and skip hash alloc without hash size changes * sdp/media: fix reorder codecs (restore old behavior) * list: fix `list_flush` head and tail * prepare 2.9.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Robert Scheck robert@fedoraproject.org 2.9.0-1 - Upgrade to 2.9.0 (#2139174) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2139163 - libre-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139163 [ 2 ] Bug #2139164 - librem-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139164 [ 3 ] Bug #2139174 - baresip-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139174 --------------------------------------------------------------------------------
================================================================================ centpkg-0.6.8-1.fc36 (FEDORA-2022-e1a3c1ac8f) CentOS utility for working with dist-git -------------------------------------------------------------------------------- Update Information:
Latest upstream -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Troy Dawson tdawson@redhat.com - 0.6.8-1 - Latest upstream --------------------------------------------------------------------------------
================================================================================ containerd-1.6.8-5.fc36 (FEDORA-2022-86bcccfbfe) Open and reliable container runtime -------------------------------------------------------------------------------- Update Information:
Add compatibility patch for latest runc -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 1.6.8-5 - Add compatibility patch for latest runc --------------------------------------------------------------------------------
================================================================================ crosswords-0.3.5-2.fc36 (FEDORA-2022-0dbfd4df93) Solve crossword puzzles -------------------------------------------------------------------------------- Update Information:
Initial crosswords build for f36 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Davide Cavalca dcavalca@fedoraproject.org 0.3.5-2 - Temporarily gate out tests on s390x * Tue Nov 1 2022 Davide Cavalca dcavalca@fedoraproject.org 0.3.5-1 - Initial import; Fixes: RHBZ#2137749 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2137748 - Review Request: libipuz - Library for parsing .ipuz puzzle files https://bugzilla.redhat.com/show_bug.cgi?id=2137748 [ 2 ] Bug #2137749 - Review Request: crosswords - Solve crossword puzzles https://bugzilla.redhat.com/show_bug.cgi?id=2137749 --------------------------------------------------------------------------------
================================================================================ dotnet6.0-6.0.110-2.fc36 (FEDORA-2022-5f28fceec0) .NET Runtime and SDK -------------------------------------------------------------------------------- Update Information:
This is the October 2022 monthly update for .NET 6. It updates the SDK to 6.0.110 and the Runtime to 6.0.10. This update includes a fix for CVE 2022-41032 -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 31 2022 Omair Majid omajid@redhat.com - 6.0.110-2 - Set OPENSSL_ENABLE_SHA1_SIGNATURES=1 when building * Fri Oct 28 2022 Omair Majid omajid@redhat.com - 6.0.110-1 - Update to .NET SDK 6.0.110 and Runtime 6.0.10 --------------------------------------------------------------------------------
================================================================================ exim-4.96-5.fc36 (FEDORA-2022-ebd5bb0478) The exim mail transfer agent -------------------------------------------------------------------------------- Update Information:
Fixed use after free in dmarc_dns_lookup (CVE-2022-3620). -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Jaroslav ��karvada jskarvad@redhat.com - 4.96-5 - Fixed use after free in dmarc_dns_lookup Resolves: CVE-2022-3620 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2136729 - CVE-2022-3620 exim: UAF in dmarc_dns_lookup https://bugzilla.redhat.com/show_bug.cgi?id=2136729 --------------------------------------------------------------------------------
================================================================================ fedora-license-data-1.7-1.fc36 (FEDORA-2022-571484f1a9) Fedora Linux license data -------------------------------------------------------------------------------- Update Information:
- Also use rich-deps on EL 8 - Once again, abandon the toml module, use tomllib/tomli/tomli-w instead - Fix typos in license review template - rename [fedora]name to [fedora]legacy-name - rename [fedora]abbreviation to [fedora]legacy-abbreviation - Revise toml for GPL-2.0-or-later WITH x11vnc- openssl-exception - Add FSFULLRWD - Add OFL-1.1-RFN as allowed-fonts - use tomllib instead of toml - document availablity of fedora-licenses.json artifact -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 2 2022 Miroslav Such�� msuchy@redhat.com 1.7-1 - redefine JSON format - Also use rich-deps on EL 8 (miro@hroncok.cz) - Once again, abandon the toml module, use tomllib/tomli/tomli-w instead (miro@hroncok.cz) - Fix typos in license review template (dcavalca@fedoraproject.org) - rename [fedora]name to [fedora]legacy-name - rename [fedora]abbreviation to [fedora]legacy-abbreviation - Revise toml for GPL-2.0-or-later WITH x11vnc-openssl-exception (rfontana@redhat.com) - Add FSFULLRWD (rfontana@redhat.com) - Add OFL-1.1-RFN as allowed-fonts (rfontana@redhat.com) - use tomllib instead of toml - document availablity of fedora-licenses.json artifact --------------------------------------------------------------------------------
================================================================================ golang-github-digitalocean-godo-1.88.0-1.fc36 (FEDORA-2022-2e2d79d2d5) DigitalOcean Go API client -------------------------------------------------------------------------------- Update Information:
Update to 1.88.0 ---- Update to 1.87.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 1.88.0-1 - Update to 1.88.0 - Closes rhbz#2139080 * Fri Oct 28 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 1.87.0-1 - Update to 1.87.0 - Closes rhbz#2134521 --------------------------------------------------------------------------------
================================================================================ golang-github-docker-22.06.0~beta.0-6.fc36 (FEDORA-2022-d69c07f22c) Collaborative project for the container ecosystem -------------------------------------------------------------------------------- Update Information:
Update to Docker stack -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 22.06.0~beta.0-6 - Unbootstrap * Sun Oct 30 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 22.06.0~beta.0-5 - Bootstrap * Sun Oct 30 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 22.06.0~beta.0-4 - Disable some flaky tests * Thu Oct 27 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 22.06.0~beta.0-3 - Fix patch * Wed Oct 26 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 22.06.0~beta.0-2 - Update to 22.06.0~beta.0 * Sat Oct 22 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 22.06.0~beta.0-1 - Update to 22.06.0~beta.0 * Wed Aug 10 2022 Maxwell G gotmax@e.email 20.10.12-4 - Rebuild to fix FTBFS * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org 20.10.12-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org 20.10.12-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ golang-github-docker-cli-22.06.0~beta.0-1.fc36 (FEDORA-2022-d69c07f22c) The docker CLI -------------------------------------------------------------------------------- Update Information:
Update to Docker stack -------------------------------------------------------------------------------- ChangeLog:
* Sat Oct 22 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 22.06.0~beta.0-1 - Update to to 22.06~beta.0 * Wed Aug 10 2022 Maxwell G gotmax@e.email 20.10.7-8 - Rebuild to fix FTBFS * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org 20.10.7-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ golang-github-graylog2-gelf-2.0.0-5.20201111git1550ee6.fc36 (FEDORA-2022-9843547bdf) GELF library for Go -------------------------------------------------------------------------------- Update Information:
Bump to commit 1550ee647df0510058c9d67a45c56f18911d80b8 ---- Fix release number -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0.0-5 - Bump to commit 1550ee647df0510058c9d67a45c56f18911d80b8 * Tue Nov 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0.0-4 - Fix release number * Tue Nov 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0.0-0.3 - Fix typo * Tue Nov 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com - Fix version number --------------------------------------------------------------------------------
================================================================================ golang-github-moby-buildkit-0.10.5-2.fc36 (FEDORA-2022-d69c07f22c) Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit -------------------------------------------------------------------------------- Update Information:
Update to Docker stack -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 0.10.5-2 - Disable tests on 32 bits * Wed Oct 26 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 0.10.5-1 - Add patch to work with latest tonistiigi/fsutil * Sat Oct 22 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 0.10.4-2 - Use gometa -f * Sat Oct 22 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 0.10.4-1 - Update tp 0.10.4 * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org 0.9.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ golang-github-moby-swarmkit-2-2.0.0-0.5.pre1.20221009git139c54b.fc36 (FEDORA-2022-d69c07f22c) Toolkit for orchestrating distributed systems at any scale -------------------------------------------------------------------------------- Update Information:
Update to Docker stack -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0.0-0.5.pre1 - Disable some flaky tests * Sun Oct 30 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0.0-0.4.pre1 - Disable some flaky tests * Sat Oct 22 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0.0-0.3.pre1 - Disable some tests for ppc64le * Sat Oct 22 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0.0-0.2.pre1 - Disable some tests for ppc64le * Sat Oct 22 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 2.0.0-0.1.pre1 - Initial import --------------------------------------------------------------------------------
================================================================================ golang-github-rootless-containers-rootlesskit-1.0.1-1.fc36 (FEDORA-2022-d69c07f22c) Linux-native "fake root" for implementing rootless containers -------------------------------------------------------------------------------- Update Information:
Update to Docker stack -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 24 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 1.0.1-1 - Initial import --------------------------------------------------------------------------------
================================================================================ golang-github-tonistiigi-fsutil-0-0.14.20221009git4638ad6.fc36 (FEDORA-2022-d69c07f22c) Incremental file directory sync tools in Golang -------------------------------------------------------------------------------- Update Information:
Update to Docker stack -------------------------------------------------------------------------------- ChangeLog:
* Sun Oct 23 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 0-0.14 - Bump to commit 4638ad635be52e38af6b57952a7a5d3f938704a7 * Wed Aug 10 2022 Maxwell G gotmax@e.email 0-0.13 - Rebuild to fix FTBFS * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org 0-0.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ gretl-2022c-1.fc36 (FEDORA-2022-163ebb3945) A tool for econometric analysis -------------------------------------------------------------------------------- Update Information:
- update to 2022c - https://gretlml.univpm.it/hyperkitty/list/gretl- announce@gretlml.univpm.it/message/U4JS2SGCRE3WZR6CJ6LT6RR6JJ7FHMSI/ -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 2 2022 Johannes Lips hannes@fedoraproject.org - 2022c-1 - Update to 2022c --------------------------------------------------------------------------------
================================================================================ ibus-table-1.16.13-1.fc36 (FEDORA-2022-3602fe6804) The Table engine for IBus platform -------------------------------------------------------------------------------- Update Information:
Update to 1.16.13 Get program name of focused window also when ibus cannot get it Use focus id if available (it is available for ibus >= 1.5.27) Use IBus.PreeditFocusMode.COMMIT and make sure the input is cleared and the UI updated when the focus changes (Resolves: https://github.com/mike-fabian/ibus- table/issues/129) Do not reset input purpose on focus out (See: https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/5966#note_1576732) Do not commit by index when OSK is visible (Resolves: https://github.com/mike- fabian/ibus-table/issues/128) -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Mike FABIAN mfabian@redhat.com - 1.16.13-1 - Update to 1.16.13 - Get program name of focused window also when ibus cannot get it - Use focus id if available (it is available for ibus >= 1.5.27) - Use IBus.PreeditFocusMode.COMMIT and make sure the input is cleared and the UI updated when the focus changes (Resolves: https://github.com/mike-fabian/ibus-table/issues/129) - Do not reset input purpose on focus out (See: https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/5966#note_1576732) - Do not commit by index when OSK is visible (Resolves: https://github.com/mike-fabian/ibus-table/issues/128) --------------------------------------------------------------------------------
================================================================================ jgmenu-4.4.1-1.fc36 (FEDORA-2022-173549cf8a) Simple X11 application menu -------------------------------------------------------------------------------- Update Information:
Version bump -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 TI_Eugene ti.eugene@gmail.com - 4.4.1-1 - Version bump (close #2138771) * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 4.4.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ libfido2-1.10.0-4.fc36 (FEDORA-2022-afc5ba67f7) FIDO2 library -------------------------------------------------------------------------------- Update Information:
Fixes libfido2 release 1.10.0 with OpenSSL 3.0 when using es256_pk. Fixed by upstream patch. -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 31 2022 Iker Pedrosa ipedrosa@redhat.com - 1.10.0-4 - es256: fix es256_pk_from_EVP_PKEY() using OpenSSL 3.0 (#2138900) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2138900 - es256_pk_from_EVP_PKEY() misbehaving with OpenSSL 3.0 https://bugzilla.redhat.com/show_bug.cgi?id=2138900 --------------------------------------------------------------------------------
================================================================================ libipuz-0.2.0-1.fc36 (FEDORA-2022-0dbfd4df93) Library for parsing .ipuz puzzle files -------------------------------------------------------------------------------- Update Information:
Initial crosswords build for f36 -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 27 2022 Davide Cavalca dcavalca@fedoraproject.org 0.2.0-1 - Initial import; Fixes: RHBZ#2137748 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2137748 - Review Request: libipuz - Library for parsing .ipuz puzzle files https://bugzilla.redhat.com/show_bug.cgi?id=2137748 [ 2 ] Bug #2137749 - Review Request: crosswords - Solve crossword puzzles https://bugzilla.redhat.com/show_bug.cgi?id=2137749 --------------------------------------------------------------------------------
================================================================================ libre-2.9.0-1.fc36 (FEDORA-2022-e7e879dd51) Generic library for real-time communications -------------------------------------------------------------------------------- Update Information:
# Baresip 2.9.0 (2022-11-01) * sndfile: Filename includes `strm->cname` (i.e. `call->local_uri`) && `strm->peer` values (i.e. `call->peer_uri`) to derive source and destination of recorded call * log: optional timestamps * avcodec: remove H263 codec * mk: bump `PROJECT_NUMBER` in `Doxyfile` * stream: correct Doxygen for peer field * cmake: add pre version handling * cmake,debian: use `dh-cmake` * cmake: add pkgconfig * Avoid webrtc_aecm module C++20 extension warnings * cmake/ctrld_dbus: ninja and subdirectory fixes * cmake: link `CMAKE_CURRENT_BINARY_DIR` modules * cmake,debian: fix libbaresip dependency * cmake: set C only flags * FindPNG needs to find also include directory * FindVPX needs to find also include directory * Multicast send events on mcreg enable commands * call, menu: support display name for outgoing calls * call: hangup call on transp reset if necessary * portaudio: add `mediadev_add` with mediadev driver fields * call: fix mnat `call_streams_alloc` * jack: fix CodeQL uninitialized local variable * Avoid snapshot compiler warnings * avformat: remove old call to `avcodec_register_all()` * avformat: remove `LIBAVUTIL_VERSION_MAJOR` check * ua: wording for warning in `ua_refer_send()` * ua: use mbuf functions for `ua_connect_dir` * ci: use `actions/checkout@v3` * avcodec: remove `av_packet_free()` wrapper * selfview: create window in encode_update * alsa: use C11 threads * config: fix template for `avcodec_xxx` * avformat: use C11 threads * v4l2: use C11 threads * avcodec: remove `LIBAVUTIL_VERSION_MAJOR` check * multicast: use C11 threads * menu fix display name * account: do not complete dial URI if scheme is included * menu: simplify URI complete * gtk: use new function `account_uri_complete_strdup()` * Removed module avformat dependency on libpostproc * make: detect and add swscale module in modules.mk * cmake: add `APP_MODULES` symlinks * cmake: use `CMAKE_SHARED_MODULE_SUFFIX` # librem v2.9.0 (2022-11-01) * cmake: add pre-release version handling * `README.md`: Update build instructions for cmake * aubuf: exclude non compatible CXX functions * auframe: skip level calculation if format is RAW * ci: use `actions/checkout@v3` * vidframe_draw_point: add NV12 and NV21 pixel format # libre v2.9.0 (2022-11-01) * cmake,make: bump version and set dev identifier * udp: remove `udp_send_anon()` * cmake: enable export symbols for backtrace * `README.md`: Update build instructions for cmake * cmake: improve kqueue and epoll detection * fs: add `fs_stdio_hide()` and `fs_stdio_restore()` helpers * json: remove unknown type warning * http: fix warning arguments * net_if_getlinklocal: use AF from input parameter * fmt: add `str_itoa` * SDP support for <proto> udp * tls: remove some warnings * fmt: add `pl_trim` functions * aes/openssl: remove obsolete version check * http: use `str_dup()` instead of unsafe `strcpy()` * doxygen: update comments * reg: remove obsolete void cast * Tls connect debug * mk: update doxygen file * ci: use `actions/checkout@v3` * tls: remove ifdef from public API * sip: `sip_conncfg_set` pass by reference * dnsc get conf and skip hash alloc without hash size changes * sdp/media: fix reorder codecs (restore old behavior) * list: fix `list_flush` head and tail * prepare 2.9.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Robert Scheck robert@fedoraproject.org 2.9.0-1 - Upgrade to 2.9.0 (#2139163) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2139163 - libre-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139163 [ 2 ] Bug #2139164 - librem-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139164 [ 3 ] Bug #2139174 - baresip-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139174 --------------------------------------------------------------------------------
================================================================================ librem-2.9.0-1.fc36 (FEDORA-2022-e7e879dd51) Audio and video processing media library -------------------------------------------------------------------------------- Update Information:
# Baresip 2.9.0 (2022-11-01) * sndfile: Filename includes `strm->cname` (i.e. `call->local_uri`) && `strm->peer` values (i.e. `call->peer_uri`) to derive source and destination of recorded call * log: optional timestamps * avcodec: remove H263 codec * mk: bump `PROJECT_NUMBER` in `Doxyfile` * stream: correct Doxygen for peer field * cmake: add pre version handling * cmake,debian: use `dh-cmake` * cmake: add pkgconfig * Avoid webrtc_aecm module C++20 extension warnings * cmake/ctrld_dbus: ninja and subdirectory fixes * cmake: link `CMAKE_CURRENT_BINARY_DIR` modules * cmake,debian: fix libbaresip dependency * cmake: set C only flags * FindPNG needs to find also include directory * FindVPX needs to find also include directory * Multicast send events on mcreg enable commands * call, menu: support display name for outgoing calls * call: hangup call on transp reset if necessary * portaudio: add `mediadev_add` with mediadev driver fields * call: fix mnat `call_streams_alloc` * jack: fix CodeQL uninitialized local variable * Avoid snapshot compiler warnings * avformat: remove old call to `avcodec_register_all()` * avformat: remove `LIBAVUTIL_VERSION_MAJOR` check * ua: wording for warning in `ua_refer_send()` * ua: use mbuf functions for `ua_connect_dir` * ci: use `actions/checkout@v3` * avcodec: remove `av_packet_free()` wrapper * selfview: create window in encode_update * alsa: use C11 threads * config: fix template for `avcodec_xxx` * avformat: use C11 threads * v4l2: use C11 threads * avcodec: remove `LIBAVUTIL_VERSION_MAJOR` check * multicast: use C11 threads * menu fix display name * account: do not complete dial URI if scheme is included * menu: simplify URI complete * gtk: use new function `account_uri_complete_strdup()` * Removed module avformat dependency on libpostproc * make: detect and add swscale module in modules.mk * cmake: add `APP_MODULES` symlinks * cmake: use `CMAKE_SHARED_MODULE_SUFFIX` # librem v2.9.0 (2022-11-01) * cmake: add pre-release version handling * `README.md`: Update build instructions for cmake * aubuf: exclude non compatible CXX functions * auframe: skip level calculation if format is RAW * ci: use `actions/checkout@v3` * vidframe_draw_point: add NV12 and NV21 pixel format # libre v2.9.0 (2022-11-01) * cmake,make: bump version and set dev identifier * udp: remove `udp_send_anon()` * cmake: enable export symbols for backtrace * `README.md`: Update build instructions for cmake * cmake: improve kqueue and epoll detection * fs: add `fs_stdio_hide()` and `fs_stdio_restore()` helpers * json: remove unknown type warning * http: fix warning arguments * net_if_getlinklocal: use AF from input parameter * fmt: add `str_itoa` * SDP support for <proto> udp * tls: remove some warnings * fmt: add `pl_trim` functions * aes/openssl: remove obsolete version check * http: use `str_dup()` instead of unsafe `strcpy()` * doxygen: update comments * reg: remove obsolete void cast * Tls connect debug * mk: update doxygen file * ci: use `actions/checkout@v3` * tls: remove ifdef from public API * sip: `sip_conncfg_set` pass by reference * dnsc get conf and skip hash alloc without hash size changes * sdp/media: fix reorder codecs (restore old behavior) * list: fix `list_flush` head and tail * prepare 2.9.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Robert Scheck robert@fedoraproject.org 2.9.0-1 - Upgrade to 2.9.0 (#2139164) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2139163 - libre-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139163 [ 2 ] Bug #2139164 - librem-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139164 [ 3 ] Bug #2139174 - baresip-2.9.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139174 --------------------------------------------------------------------------------
================================================================================ libxcrypt-4.4.30-1.fc36 (FEDORA-2022-e7a369b2b8) Extended crypt library for descrypt, md5crypt, bcrypt, and others -------------------------------------------------------------------------------- Update Information:
- New upstream release. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Bj��rn Esser besser82@fedoraproject.org - 4.4.30-1 - New upstream release * Mon Oct 31 2022 Bj��rn Esser besser82@fedoraproject.org - 4.4.29-1 - New upstream release * Wed Aug 10 2022 Bj��rn Esser besser82@fedoraproject.org - 4.4.28-3 - Rebuilt for arc4random_buf in glibc 2.36 (or later) * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 4.4.28-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ mediawiki-1.37.6-1.fc36 (FEDORA-2022-185482f0a7) A wiki engine -------------------------------------------------------------------------------- Update Information:
https://lists.wikimedia.org/hyperkitty/list/mediawiki- announce@lists.wikimedia.org/thread/DMQKMFSH4K7KLBXWZTDBGI2PWLLHJHJZ/ https://lists.wikimedia.org/hyperkitty/list/mediawiki- announce@lists.wikimedia.org/thread/SPYFDCGZE7KJNO73ET7QVSUXMHXVRFTE/ -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Michael Cronenworth mike@cchtml.com - 1.37.6-1 - Update to 1.37.4 --------------------------------------------------------------------------------
================================================================================ mingw-gcc-11.2.1-6.fc36 (FEDORA-2022-c9a1fd5370) MinGW Windows cross-compiler (GCC) for C -------------------------------------------------------------------------------- Update Information:
Backport fixes for CVE-2021-3826 and CVE-2022-27943. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Sandro Mani manisandro@gmail.com - 11.2.1-6 - Backport patches for CVE-2021-3826 and CVE-2022-27943 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2071731 - CVE-2022-27943 mingw-gcc: : binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2071731 [ 2 ] Bug #2132587 - CVE-2021-3826 mingw-gcc: libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2132587 --------------------------------------------------------------------------------
================================================================================ openvpn-2.5.8-1.fc36 (FEDORA-2022-e97adf373e) A full-featured TLS VPN solution -------------------------------------------------------------------------------- Update Information:
Update to upstream OpenVPN 2.5.8 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 David Sommerseth davids@openvpn.net - 2.5.8-1 - Update to upstream OpenVPN 2.5.8 --------------------------------------------------------------------------------
================================================================================ osbuild-composer-67-1.fc36 (FEDORA-2022-38abd6a72b) An image building service based on osbuild -------------------------------------------------------------------------------- Update Information:
New upstream release: 67 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 2 2022 Packit hello@packit.dev - 67-1 Changes with 67 ---------------- * Cloud API: make `location` optional for Azure Upload Options (#3093) * Content url and rhsm ostree resolve (#3091) * Fix blueprint firewall support (#3099) * Ostree resolve job (#3072) * RHEL-8.7+/9.1+: replace RHSM config on EC2 RHUI images with `redhat-cloud-client-configuration` package (#3081) * Update snapshots to 20221025 (#3098) * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.1 (#3094) * distro: add support for RHEL 8.8 and 9.2 (#3095) * internal/cloudapi: add ostree options for all otree image types (#3089) * koji: put artifacts uploaded to koji under a second level directory (#3083) * schutzbot/update_github_status: fix release fast-forwarding (#3082) * spec: Fix ownership of the dnf-json rpmmd files (#3085) * tests: Update the version of azurerm terraform provider (#3075)
Contributions from: Alexander Todorov, Antonio Murdaca, Brian C. Lane, Jakub Rusz, Ond��ej Budai, Sanne Raymaekers, Tom���� Hozza, dependabot[bot], schutzbot
��� Somewhere on the Internet, 2022-11-02 --------------------------------------------------------------------------------
================================================================================ perl-HTML-Parser-3.80-1.fc36 (FEDORA-2022-910c169d68) Perl module for parsing HTML -------------------------------------------------------------------------------- Update Information:
3.80 - Fix compatibility with ancient perl by avoiding index in test -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 2 2022 Jitka Plesnikova jplesnik@redhat.com - 3.80-1 - 3.80 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2139129 - perl-HTML-Parser-3.80 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139129 --------------------------------------------------------------------------------
================================================================================ putty-0.78-1.fc36 (FEDORA-2022-090c708af6) SSH, Telnet and Rlogin client -------------------------------------------------------------------------------- Update Information:
This is new version of putty. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Jaroslav ��karvada jskarvad@redhat.com - 0.78-1 - New version Resolves: rhbz#2138511 * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 0.76-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2138511 - putty-0.78 is available https://bugzilla.redhat.com/show_bug.cgi?id=2138511 --------------------------------------------------------------------------------
================================================================================ python-basemap-1.3.6-1.fc36 (FEDORA-2022-16b81e0a89) Plots data on map projections (with continental and political boundaries) -------------------------------------------------------------------------------- Update Information:
1.3.6 ---- 1.3.5 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Gwyn Ciesla gwync@protonmail.com - 1.3.6-1 - 1.3.6 * Wed Oct 26 2022 Gwyn Ciesla gwync@protonmail.com - 1.3.5-1 - 1.3.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2137761 - python-basemap-1.3.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2137761 [ 2 ] Bug #2139028 - python-basemap-1.3.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139028 --------------------------------------------------------------------------------
================================================================================ python-contourpy-1.0.6-1.fc36 (FEDORA-2022-4d503bfcc6) Python library for calculating contours in 2D quadrilateral grids -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 2 2022 Elliott Sales de Andrade quantum.analyst@gmail.com 1.0.6-1 - Update to latest version (#2138650) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2138650 - python-contourpy-1.0.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2138650 --------------------------------------------------------------------------------
================================================================================ python-mizani-0.8.1-1.fc36 (FEDORA-2022-3ad8950085) Scales package for graphics -------------------------------------------------------------------------------- Update Information:
Initial release -------------------------------------------------------------------------------- ChangeLog:
* Fri Oct 21 2022 Sandro devel@penguinpee.nl 0.8.1-1 - Initial release --------------------------------------------------------------------------------
================================================================================ python-plotnine-0.10.1-2.fc36 (FEDORA-2022-3ad8950085) Implementation of a grammar of graphics in Python, based on ggplot2 -------------------------------------------------------------------------------- Update Information:
Initial release -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Sandro devel@penguinpee.nl 0.10.1-2 - Fix tests for f36 - Remove test files causing ImportError - Disable one additional test in f36 * Wed Oct 26 2022 Sandro devel@penguinpee.nl 0.10.1-1 - Initial release --------------------------------------------------------------------------------
================================================================================ python-rust-update-set-0.0.1-1.fc36 (FEDORA-2022-cf22441180) A tool to help Fedora packagers update Rust packages -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Michel Alexandre Salim salimma@fedoraproject.org 0.0.1-1 - Initial Fedora package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2138993 - Review Request: python-rust-update-set - A tool to help Fedora packagers update Rust packages https://bugzilla.redhat.com/show_bug.cgi?id=2138993 --------------------------------------------------------------------------------
================================================================================ python-yara-4.2.3-1.fc36 (FEDORA-2022-0d7985180b) Python binding for the YARA pattern matching tool -------------------------------------------------------------------------------- Update Information:
Rebuilt for yara-4.2.3 - second service :) -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Michal Ambroz <rebus at, seznam.cz> - 4.2.3-1 - Rebuilt for yara-4.2.3 - second service :) --------------------------------------------------------------------------------
================================================================================ qbittorrent-4.4.5-1.fc36 (FEDORA-2022-4396cfdb67) A Bittorrent Client -------------------------------------------------------------------------------- Update Information:
- Update -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Leigh Scott leigh123linux@gmail.com - 1:4.4.5-1 - Update to 4.4.5 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2137560 - rb_libtorrent-2.0.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2137560 --------------------------------------------------------------------------------
================================================================================ rb_libtorrent-2.0.8-1.fc36 (FEDORA-2022-4396cfdb67) A C++ BitTorrent library aiming to be the best alternative -------------------------------------------------------------------------------- Update Information:
- Update -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Leigh Scott leigh123linux@gmail.com - 2.0.8-1 - Upgrade to 2.0.8 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 2.0.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2137560 - rb_libtorrent-2.0.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2137560 --------------------------------------------------------------------------------
================================================================================ rust-hyper-0.14.22-1.fc36 (FEDORA-2022-80a73b141d) Fast and correct HTTP library -------------------------------------------------------------------------------- Update Information:
Update to version 0.14.22. -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 2 2022 Fabio Valentini decathorpe@gmail.com 0.14.22-1 - Update to version 0.14.22 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org 0.14.20-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ socnetv-3.0.4-4.fc36 (FEDORA-2022-092d755bb8) A Social Networks Analyser and Visualiser -------------------------------------------------------------------------------- Update Information:
Rebuild against fresh Qt5 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 3.0.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2112957 - F36FailsToInstall: socnetv https://bugzilla.redhat.com/show_bug.cgi?id=2112957 --------------------------------------------------------------------------------
================================================================================ wine-7.20-1.fc36 (FEDORA-2022-fd169cbbba) A compatibility layer for windows applications -------------------------------------------------------------------------------- Update Information:
- Mono engine updated to version 7.4.0. - Font linking improvements. - A number of fixes for exception unwinding. - Support for dumping EMF spool files in WineDump. - Various bug fixes. -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 31 2022 Michael Cronenworth mike@cchtml.com - 7.20-1 - version update -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2138998 - wine-7.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=2138998 --------------------------------------------------------------------------------
================================================================================ wine-mono-7.4.0-1.fc36 (FEDORA-2022-fd169cbbba) Mono library required for Wine -------------------------------------------------------------------------------- Update Information:
- Mono engine updated to version 7.4.0. - Font linking improvements. - A number of fixes for exception unwinding. - Support for dumping EMF spool files in WineDump. - Various bug fixes. -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 31 2022 Michael Cronenworth mike@cchtml.com - 7.4.0-1 - version upgrade * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 7.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2138998 - wine-7.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=2138998 --------------------------------------------------------------------------------
================================================================================ xen-4.16.2-3.fc36 (FEDORA-2022-07438e12df) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information:
x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327] Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309] Xenstore: Guests can create orphaned Xenstore nodes [XSA-415, CVE-2022-42310] Xenstore: guests can let run xenstored out of memory [XSA-326, CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318] Xenstore: Guests can cause Xenstore to not free temporary memory [XSA-416, CVE-2022-42319] Xenstore: Guests can get access to Xenstore nodes of deleted domains [XSA-417, CVE-2022-42320] Xenstore: Guests can crash xenstored via exhausting the stack [XSA-418, CVE-2022-42321] Xenstore: Cooperating guests can create arbitrary numbers of nodes [XSA-419, CVE-2022-42322, CVE-2022-42323] Oxenstored 32->31 bit integer truncation issues [XSA-420, CVE-2022-42324] Xenstore: Guests can create arbitrary number of nodes via transactions [XSA-421, CVE-2022-42325, CVE-2022-42326] -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 1 2022 Michael Young m.a.young@durham.ac.uk - 4.16.2-3 - x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327] - Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309] - Xenstore: Guests can create orphaned Xenstore nodes [XSA-415, CVE-2022-42310] - Xenstore: guests can let run xenstored out of memory [XSA-326, CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318] - Xenstore: Guests can cause Xenstore to not free temporary memory [XSA-416, CVE-2022-42319] - Xenstore: Guests can get access to Xenstore nodes of deleted domains [XSA-417, CVE-2022-42320] - Xenstore: Guests can crash xenstored via exhausting the stack [XSA-418, CVE-2022-42321] - Xenstore: Cooperating guests can create arbitrary numbers of nodes [XSA-419, CVE-2022-42322, CVE-2022-42323] - Oxenstored 32->31 bit integer truncation issues [XSA-420, CVE-2022-42324] - Xenstore: Guests can create arbitrary number of nodes via transactions [XSA-421, CVE-2022-42325, CVE-2022-42326] --------------------------------------------------------------------------------
================================================================================ xorg-x11-server-Xwayland-22.1.5-1.fc36 (FEDORA-2022-0c6f7be0c2) Xwayland -------------------------------------------------------------------------------- Update Information:
xwayland 22.1.5 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 2 2022 Olivier Fourdan ofourdan@redhat.com - 22.1.5-1 - xwayland 22.1.5 (#2139387) * Thu Oct 20 2022 Olivier Fourdan ofourdan@redhat.com - 22.1.4-1 - xwayland 22.1.4 (#2136518) * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 22.1.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2139387 - xorg-x11-server-Xwayland-22.1.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2139387 --------------------------------------------------------------------------------
test-reports@lists.fedoraproject.org