The following Fedora 35 Security updates need testing:
Age URL
267
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
38
https://bodhi.fedoraproject.org/updates/FEDORA-2022-58055cb1ef
nodejs-16.17.1-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-39688a779d curl-7.79.1-7.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ebbac924d3 exim-4.96-5.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ad73a633f
dotnet6.0-6.0.110-2.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-99af00f60e xen-4.15.3-7.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-76b3530ac2
php-pear-CAS-1.6.0-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fcf5dbb447
libxml2-2.10.3-2.fc35 xmlsec1-1.2.29-5.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ae2559a8f4
mingw-pixman-0.42.2-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c43235716e
mingw-expat-2.5.0-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-061f857481
mingw-libtasn1-4.19.0-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3d354ef0fb vim-9.0.828-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8ac4104a02
systemd-249.13-6.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e7726761c4
webkit2gtk3-2.38.2-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
86
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bca7996d14
annobin-10.81-1.fc35
50
https://bodhi.fedoraproject.org/updates/FEDORA-2022-97f6c4fd2a
libblockdev-2.28-2.fc35
21
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c5789009a
python3-docs-3.10.8-1.fc35 python3.10-3.10.8-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-84a4d61a33
mtools-4.0.42-1.fc35
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8cc2a55191
libidn2-2.3.4-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-39688a779d curl-7.79.1-7.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a044f89f66 koji-1.30.1-2.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-569e7560ec
python-rpm-macros-3.10-13.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0535a53522
cmake-3.24.2-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-80b7db48db
rust-packaging-23-1.fc35 rust-srpm-macros-23-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ec0c51fe25
tzdata-2022f-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8b2695fc0e
hwdata-0.364-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-596a8be8cf expat-2.5.0-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-99af00f60e xen-4.15.3-7.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c76b13e24
libxcrypt-4.4.30-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1eb121f472
thunderbird-102.4.1-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fcf5dbb447
libxml2-2.10.3-2.fc35 xmlsec1-1.2.29-5.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e7726761c4
webkit2gtk3-2.38.2-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d0e50fd06a
firefox-106.0.4-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8ac4104a02
systemd-249.13-6.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3d354ef0fb vim-9.0.828-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-26c41f14c8
gnutls-3.7.8-3.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0b5c497fe0
kernel-6.0.7-100.fc35
The following builds have been pushed to Fedora 35 updates-testing
android-tools-33.0.3p1-2.fc35
golang-github-digitalocean-godo-1.89.0-1.fc35
golang-github-opencontainers-image-spec-1.1.0~rc2-1.fc35
golang-opentelemetry-otel-1.10.0-2.fc35
golang-x-oauth2-0.1.0-1.fc35
python-paramiko-2.12.0-1.fc35
solaar-1.1.7-2.fc35
Details about builds:
================================================================================
android-tools-33.0.3p1-2.fc35 (FEDORA-2022-7f14b7d45e)
Android platform tools(adb, fastboot)
--------------------------------------------------------------------------------
Update Information:
Merge branch 'rawhide' into f35 Security fix for CVE-2022-20128 CVE-2022-3168
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 6 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1:33.0.3p1-1
- Update to 33.0.3p1
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:31.0.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jul 19 2022 Maxwell G <gotmax(a)e.email> - 1:31.0.2-6
- Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in
golang
--------------------------------------------------------------------------------
================================================================================
golang-github-digitalocean-godo-1.89.0-1.fc35 (FEDORA-2022-f5455ea7e5)
DigitalOcean Go API client
--------------------------------------------------------------------------------
Update Information:
Update to 1.89.0 ---- Update to 1.88.0 ---- Update to 1.87.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 1.89.0-1
- Update to 1.89.0 - Closes rhbz#2139549
* Tue Nov 1 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 1.88.0-1
- Update to 1.88.0 - Closes rhbz#2139080
* Fri Oct 28 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 1.87.0-1
- Update to 1.87.0 - Closes rhbz#2134521
--------------------------------------------------------------------------------
================================================================================
golang-github-opencontainers-image-spec-1.1.0~rc2-1.fc35 (FEDORA-2022-880430adb7)
OCI Image Format Specification
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.0~rc2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 5 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.1.0~rc2-1
- Update to 1.1.0~rc2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2132208 - golang-github-opencontainers-image-spec-1.1.0-rc2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2132208
--------------------------------------------------------------------------------
================================================================================
golang-opentelemetry-otel-1.10.0-2.fc35 (FEDORA-2022-6b1bfc9804)
OpenTelemetry Go API and SDK
--------------------------------------------------------------------------------
Update Information:
Add missing BR
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 6 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.10.0-2
- Add missing BR
* Sun Sep 25 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.10.0-1
- Update to 1.10.0
* Wed Aug 10 2022 Maxwell G <gotmax(a)e.email> 1.2.0-3
- Rebuild to fix FTBFS
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-x-oauth2-0.1.0-1.fc35 (FEDORA-2022-6a85abab85)
Client implementation for OAuth 2.0 spec
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 5 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 0.1.0-1
- Update to 0.1.0
* Wed Aug 10 2022 Maxwell G <gotmax(a)e.email> 0-0.15
- Rebuild to fix FTBFS
--------------------------------------------------------------------------------
================================================================================
python-paramiko-2.12.0-1.fc35 (FEDORA-2022-61febd2d5d)
SSH2 protocol library for python
--------------------------------------------------------------------------------
Update Information:
This update fixes various issues relating to socket error handling.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 6 2022 Paul Howarth <paul(a)city-fan.org> - 2.12.0-1
- Update to 2.12.0 (rhbz#2140281)
- Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced
users
to gain more control over early Transport setup and manipulation (GH#2054,
GH#2125)
- Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped
socket object upon encountering socket errors at connection time; this
should help somewhat with certain classes of memory leaks, resource
warnings, and/or errors (though we hasten to remind everyone that Client
and Transport have their own '.close()' methods for use in non-error
situations!) (GH#1822)
- Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private
key data is loaded, instead of the natural result of 'IndexError'; this
should help more bits of Paramiko or Paramiko-adjacent codebases to
correctly handle this class of error (GH#1599, GH#1637)
- Use SPDX-format license tag
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.11.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jun 14 2022 Python Maint <python-maint(a)redhat.com> - 2.11.0-2
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2140281 - python-paramiko-2.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2140281
--------------------------------------------------------------------------------
================================================================================
solaar-1.1.7-2.fc35 (FEDORA-2022-148321cba6)
Device manager for a wide range of Logitech devices
--------------------------------------------------------------------------------
Update Information:
### Changes since 1.1.5: * Add dependency on typing_extension to setup.py *
Don't defer saves in CLI and don't require Gtk in CLI * Be more permissive in
recognizing HID++ report descriptors * Update Polish and Croatian translations *
Switch scroll ratcheting in response to scroll ratchet button notification * Add
setting to turn scroll ratchet on and off * Eliminate visual glitch when
updating range setting * Make hid-parser an optional dependency * Only update
remaining pairings after successful pairing * Check for presence of status
attribute when resuming * Update Polish and Croatian translations * Don't add
non-existant key in raw xy processing * Add special keys from MX Mechanical Mini
* Fix processing of HID++ 1.0 battery reports * Use report descriptors to
determine suitable devices * Handle exceptions when processing configuration
file * Add Logitech PRO Gaming Keyboard * Fix bad entries in divert-keys when
found * Correctly convert old-style diversions to new style and remove old ones
* Add optional save argument to write_key_value methods * Use device name in
configuration entries if device modelId is zeroes * Don't show normal DJ
messages in debug log * Add Later rule action * Correctly record battery feature
when ADC produces error * Print feature call errors in solaar show instead of
terminating * Use ADC notifications to set device inactive and active * Add one
to feature count to count ROOT feature * Don't check modifiers for KeyPress
actions that are not clicks * Augment comments on what Solaar cannot do * Fix
bug in printing closed handle * Use only product records to determine which
receivers unpair * Add conditional delay to get around race with Linux HID++
driver
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 6 2022 Dominik Mierzejewski <dominik(a)greysector.net> - 1.1.7-2
- drop unnecessary dependency
* Fri Nov 4 2022 Mark E. Fuller <fuller(a)fedoraproject.org> - 1.1.7-1
- Update to 1.1.7 (#2137568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2137568 - solaar-1.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2137568
--------------------------------------------------------------------------------