The following Fedora 35 Security updates need testing: Age URL 267 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11 mysql-connector-java-8.0.28-1.fc35 38 https://bodhi.fedoraproject.org/updates/FEDORA-2022-58055cb1ef nodejs-16.17.1-1.fc35 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-39688a779d curl-7.79.1-7.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ebbac924d3 exim-4.96-5.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ad73a633f dotnet6.0-6.0.110-2.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-99af00f60e xen-4.15.3-7.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-76b3530ac2 php-pear-CAS-1.6.0-1.fc35 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fcf5dbb447 libxml2-2.10.3-2.fc35 xmlsec1-1.2.29-5.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ae2559a8f4 mingw-pixman-0.42.2-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c43235716e mingw-expat-2.5.0-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-061f857481 mingw-libtasn1-4.19.0-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3d354ef0fb vim-9.0.828-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8ac4104a02 systemd-249.13-6.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e7726761c4 webkit2gtk3-2.38.2-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved: Age URL 86 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bca7996d14 annobin-10.81-1.fc35 50 https://bodhi.fedoraproject.org/updates/FEDORA-2022-97f6c4fd2a libblockdev-2.28-2.fc35 21 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c5789009a python3-docs-3.10.8-1.fc35 python3.10-3.10.8-1.fc35 13 https://bodhi.fedoraproject.org/updates/FEDORA-2022-84a4d61a33 mtools-4.0.42-1.fc35 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8cc2a55191 libidn2-2.3.4-1.fc35 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-39688a779d curl-7.79.1-7.fc35 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a044f89f66 koji-1.30.1-2.fc35 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-569e7560ec python-rpm-macros-3.10-13.fc35 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0535a53522 cmake-3.24.2-1.fc35 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-80b7db48db rust-packaging-23-1.fc35 rust-srpm-macros-23-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ec0c51fe25 tzdata-2022f-1.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b2695fc0e hwdata-0.364-1.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-596a8be8cf expat-2.5.0-1.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-99af00f60e xen-4.15.3-7.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c76b13e24 libxcrypt-4.4.30-1.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1eb121f472 thunderbird-102.4.1-1.fc35 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fcf5dbb447 libxml2-2.10.3-2.fc35 xmlsec1-1.2.29-5.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e7726761c4 webkit2gtk3-2.38.2-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0e50fd06a firefox-106.0.4-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8ac4104a02 systemd-249.13-6.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3d354ef0fb vim-9.0.828-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-26c41f14c8 gnutls-3.7.8-3.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0b5c497fe0 kernel-6.0.7-100.fc35
The following builds have been pushed to Fedora 35 updates-testing
android-tools-33.0.3p1-2.fc35 golang-github-digitalocean-godo-1.89.0-1.fc35 golang-github-opencontainers-image-spec-1.1.0~rc2-1.fc35 golang-opentelemetry-otel-1.10.0-2.fc35 golang-x-oauth2-0.1.0-1.fc35 python-paramiko-2.12.0-1.fc35 solaar-1.1.7-2.fc35
Details about builds:
================================================================================ android-tools-33.0.3p1-2.fc35 (FEDORA-2022-7f14b7d45e) Android platform tools(adb, fastboot) -------------------------------------------------------------------------------- Update Information:
Merge branch 'rawhide' into f35 Security fix for CVE-2022-20128 CVE-2022-3168 -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 6 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 1:33.0.3p1-1 - Update to 33.0.3p1 * Wed Jul 20 2022 Fedora Release Engineering releng@fedoraproject.org - 1:31.0.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jul 19 2022 Maxwell G gotmax@e.email - 1:31.0.2-6 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------
================================================================================ golang-github-digitalocean-godo-1.89.0-1.fc35 (FEDORA-2022-f5455ea7e5) DigitalOcean Go API client -------------------------------------------------------------------------------- Update Information:
Update to 1.89.0 ---- Update to 1.88.0 ---- Update to 1.87.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 3 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 1.89.0-1 - Update to 1.89.0 - Closes rhbz#2139549 * Tue Nov 1 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 1.88.0-1 - Update to 1.88.0 - Closes rhbz#2139080 * Fri Oct 28 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 1.87.0-1 - Update to 1.87.0 - Closes rhbz#2134521 --------------------------------------------------------------------------------
================================================================================ golang-github-opencontainers-image-spec-1.1.0~rc2-1.fc35 (FEDORA-2022-880430adb7) OCI Image Format Specification -------------------------------------------------------------------------------- Update Information:
Update to 1.1.0~rc2 -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 5 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 1.1.0~rc2-1 - Update to 1.1.0~rc2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2132208 - golang-github-opencontainers-image-spec-1.1.0-rc2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2132208 --------------------------------------------------------------------------------
================================================================================ golang-opentelemetry-otel-1.10.0-2.fc35 (FEDORA-2022-6b1bfc9804) OpenTelemetry Go API and SDK -------------------------------------------------------------------------------- Update Information:
Add missing BR -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 6 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 1.10.0-2 - Add missing BR * Sun Sep 25 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 1.10.0-1 - Update to 1.10.0 * Wed Aug 10 2022 Maxwell G gotmax@e.email 1.2.0-3 - Rebuild to fix FTBFS * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org 1.2.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ golang-x-oauth2-0.1.0-1.fc35 (FEDORA-2022-6a85abab85) Client implementation for OAuth 2.0 spec -------------------------------------------------------------------------------- Update Information:
Update to 0.1.0 -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 5 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 0.1.0-1 - Update to 0.1.0 * Wed Aug 10 2022 Maxwell G gotmax@e.email 0-0.15 - Rebuild to fix FTBFS --------------------------------------------------------------------------------
================================================================================ python-paramiko-2.12.0-1.fc35 (FEDORA-2022-61febd2d5d) SSH2 protocol library for python -------------------------------------------------------------------------------- Update Information:
This update fixes various issues relating to socket error handling. -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 6 2022 Paul Howarth paul@city-fan.org - 2.12.0-1 - Update to 2.12.0 (rhbz#2140281) - Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced users to gain more control over early Transport setup and manipulation (GH#2054, GH#2125) - Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped socket object upon encountering socket errors at connection time; this should help somewhat with certain classes of memory leaks, resource warnings, and/or errors (though we hasten to remind everyone that Client and Transport have their own '.close()' methods for use in non-error situations!) (GH#1822) - Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private key data is loaded, instead of the natural result of 'IndexError'; this should help more bits of Paramiko or Paramiko-adjacent codebases to correctly handle this class of error (GH#1599, GH#1637) - Use SPDX-format license tag * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 2.11.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jun 14 2022 Python Maint python-maint@redhat.com - 2.11.0-2 - Rebuilt for Python 3.11 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2140281 - python-paramiko-2.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2140281 --------------------------------------------------------------------------------
================================================================================ solaar-1.1.7-2.fc35 (FEDORA-2022-148321cba6) Device manager for a wide range of Logitech devices -------------------------------------------------------------------------------- Update Information:
### Changes since 1.1.5: * Add dependency on typing_extension to setup.py * Don't defer saves in CLI and don't require Gtk in CLI * Be more permissive in recognizing HID++ report descriptors * Update Polish and Croatian translations * Switch scroll ratcheting in response to scroll ratchet button notification * Add setting to turn scroll ratchet on and off * Eliminate visual glitch when updating range setting * Make hid-parser an optional dependency * Only update remaining pairings after successful pairing * Check for presence of status attribute when resuming * Update Polish and Croatian translations * Don't add non-existant key in raw xy processing * Add special keys from MX Mechanical Mini * Fix processing of HID++ 1.0 battery reports * Use report descriptors to determine suitable devices * Handle exceptions when processing configuration file * Add Logitech PRO Gaming Keyboard * Fix bad entries in divert-keys when found * Correctly convert old-style diversions to new style and remove old ones * Add optional save argument to write_key_value methods * Use device name in configuration entries if device modelId is zeroes * Don't show normal DJ messages in debug log * Add Later rule action * Correctly record battery feature when ADC produces error * Print feature call errors in solaar show instead of terminating * Use ADC notifications to set device inactive and active * Add one to feature count to count ROOT feature * Don't check modifiers for KeyPress actions that are not clicks * Augment comments on what Solaar cannot do * Fix bug in printing closed handle * Use only product records to determine which receivers unpair * Add conditional delay to get around race with Linux HID++ driver -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 6 2022 Dominik Mierzejewski dominik@greysector.net - 1.1.7-2 - drop unnecessary dependency * Fri Nov 4 2022 Mark E. Fuller fuller@fedoraproject.org - 1.1.7-1 - Update to 1.1.7 (#2137568) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2137568 - solaar-1.1.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2137568 --------------------------------------------------------------------------------