The following Fedora 36 Security updates need testing:
Age URL
31
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3793987b02
nodejs-16.17.1-1.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-361f34f2a9
java-1.8.0-openjdk-1.8.0.352.b08-2.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f76014ae17
java-17-openjdk-17.0.5.0.8-2.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d989953883
java-11-openjdk-11.0.17.0.8-2.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1ecc10276e php-8.1.12-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ec78b2586
device-mapper-multipath-0.8.7-9.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e8698f2e5e
java-latest-openjdk-19.0.1.0.10-2.rolling.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6bcee2cc93
ghc-cmark-gfm-0.2.5-1.fc36
The following Fedora 36 Critical Path updates have yet to be approved:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6afb31b4ad
osinfo-db-20221018-1.fc36
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-57ee5658ba
annobin-10.91-1.fc36
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1ce0e1a10
netcat-1.219-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2cfae0608f
mtools-4.0.42-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-362bd01539
python3-docs-3.10.8-1.fc36 python3.10-3.10.8-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1f0c41e96a koji-1.30.1-2.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ec78b2586
device-mapper-multipath-0.8.7-9.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b3789b98eb
python-rpm-macros-3.10-20.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-48bd42b2dc
rust-packaging-23-1.fc36 rust-srpm-macros-23-1.fc36
The following builds have been pushed to Fedora 36 updates-testing
Zim-0.75.1-1.fc36
cgnslib-4.2.0-7.fc36
evince-42.4-1.fc36
fpaste-0.4.3.0-1.fc36
jo-1.7-1.fc36
kBuild-0.1.9998.r3572-1.20221024.fc36
kicad-6.0.9-1.fc36
lxi-tools-2.3-1.fc36
magic-8.3.333-1.fc36
mcpanel-1.0-1.fc36
mingw-binutils-2.37-5.fc36
mingw-fontconfig-2.14.1-1.fc36
mingw-gdb-12.1-2.fc36
mpg123-1.31.0-1.fc36
ngspice-38-1.fc36
python-shtab-1.5.6-1.fc36
yacreader-9.10.0-1.fc36
Details about builds:
================================================================================
Zim-0.75.1-1.fc36 (FEDORA-2022-9cad1ce350)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
* Fix bug with relative path notebook icon * Fix bug with icons in
notebookdialog * Fix bug with loading sub-notebooks via "notebook.zim" * Fix
bug
with "--list" commandline * Fix issue opening unicode attachements on win32 *
Fix saving preferences for edit bar * Fix link visibility in TableEditor
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Robin Lee <cheeselee(a)fedoraproject.org> 0.75.1-1
- Update to 0.75.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2137759 - Zim-0.75.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2137759
--------------------------------------------------------------------------------
================================================================================
cgnslib-4.2.0-7.fc36 (FEDORA-2022-92913b9448)
Computational Fluid Dynamics General Notation System
--------------------------------------------------------------------------------
Update Information:
Fix broken desktop files.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Sandro Mani <manisandro(a)gmail.com> - 4.2.0-7
- Fix invalid Icon and Exec paths in desktop files
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2138580 - broken desktop files in cgnslib-common
https://bugzilla.redhat.com/show_bug.cgi?id=2138580
--------------------------------------------------------------------------------
================================================================================
evince-42.4-1.fc36 (FEDORA-2022-788b45155d)
Document viewer
--------------------------------------------------------------------------------
Update Information:
Update to 42.4
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 29 2022 David King <amigadave(a)amigadave.com> - 42.4-1
- Update to 42.4
--------------------------------------------------------------------------------
================================================================================
fpaste-0.4.3.0-1.fc36 (FEDORA-2022-e46ecffb62)
A simple tool for pasting info onto the Fedora community paste server
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com>
0.4.3.0-1
- feat: update to 0.4.3.0
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.2.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2071423 - fpaste's manpage still refers to the dead
fpaste.org site
https://bugzilla.redhat.com/show_bug.cgi?id=2071423
[ 2 ] Bug #2093449 - RFE: include zramctl to gather info about the state of swap on
zram
https://bugzilla.redhat.com/show_bug.cgi?id=2093449
[ 3 ] Bug #2093451 - RFE: include resource control pressure stall information
https://bugzilla.redhat.com/show_bug.cgi?id=2093451
--------------------------------------------------------------------------------
================================================================================
jo-1.7-1.fc36 (FEDORA-2022-2e779ab1d0)
Small utility to create JSON objects
--------------------------------------------------------------------------------
Update Information:
### 2022-10-29 1.7 - FIX: fix warnings on Windows build and reimplement
`err{x,}` functions - FIX: fix reading of long lines from `stdin` and refactor
`slurp_file()` in the process. - NEW: Add option `-o outfile` for when not run
from a shell and redirect `'>'` is not an option. - FIX: fix tables in
jo.���md
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.7-1
- Update to 1.7 (close RHBZ#2138606)
* Sun Oct 30 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.6-5
- Enable rebuilding jo.1 and jo.md from jo.pandoc
* Sun Oct 30 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.6-4
- Build with meson instead of Autotools
* Sun Oct 30 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.6-3
- Update License to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2138606 - jo-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2138606
--------------------------------------------------------------------------------
================================================================================
kBuild-0.1.9998.r3572-1.20221024.fc36 (FEDORA-2022-7802782ca9)
A cross-platform build environment
--------------------------------------------------------------------------------
Update Information:
Update to r3572.20221024
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 24 2022 S��rgio Basto <sergio(a)serjux.com> - 0.1.9998.r3572-2.20221024
- Update to r3572.20221024
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.9998.r3564-2.20220308
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kicad-6.0.9-1.fc36 (FEDORA-2022-4893dc1d66)
EDA software suite for creation of schematic diagrams and PCBs
--------------------------------------------------------------------------------
Update Information:
Update to 6.0.9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 28 2022 Steven A. Falco <stevenfalco(a)gmail.com> - 1:6.0.9-1
- Update to 6.0.9
* Fri Oct 21 2022 Steven A. Falco <stevenfalco(a)gmail.com> - 1:6.0.8-5
- Remove wxWidgets work-around
--------------------------------------------------------------------------------
================================================================================
lxi-tools-2.3-1.fc36 (FEDORA-2022-adb1763454)
Tools to manage network attached LXI compatible instruments
--------------------------------------------------------------------------------
Update Information:
# lxi-tools v2.3 * Fix copy of IP and ID * Also autocomplete `lxi-
tools.lxi` * Update `LICENSE`
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Robert Scheck <robert(a)fedoraproject.org> 2.3-1
- Upgrade to 2.3 (#2138618)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2138618 - lxi-tools-2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2138618
--------------------------------------------------------------------------------
================================================================================
magic-8.3.333-1.fc36 (FEDORA-2022-3d8c0fbc7b)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.3.333 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.3.333-1
- 8.3.333
--------------------------------------------------------------------------------
================================================================================
mcpanel-1.0-1.fc36 (FEDORA-2022-61f61baec8)
Library that provides a scope interface for displaying multichannel signal
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 1.0-1
- feat: update to 1.0 (fix rhbz#1795359)
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mingw-binutils-2.37-5.fc36 (FEDORA-2022-19538a3732)
Cross-compiled version of binutils for Win32 and Win64 environments
--------------------------------------------------------------------------------
Update Information:
Backport fixes for CVE-2021-3826 and CVE-2022-38533.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Sandro Mani <manisandro(a)gmail.com> - 2.37-5
- Backport patch for CVE-2021-3826 and CVE-2022-38533
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2124580 - CVE-2022-38533 mingw-binutils: binutils: heap-based buffer overflow
in bfd_getl32() when called by strip_main() in objcopy.c via a crafted file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2124580
[ 2 ] Bug #2132596 - CVE-2021-3826 mingw-binutils: libiberty: Heap/stack buffer overflow
in the dlang_lname function in d-demangle.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2132596
--------------------------------------------------------------------------------
================================================================================
mingw-fontconfig-2.14.1-1.fc36 (FEDORA-2022-38215763a1)
MinGW Windows Fontconfig library
--------------------------------------------------------------------------------
Update Information:
Sync with native versions.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Sandro Mani <manisandro(a)gmail.com> - 2.14.1-1
- Update to 2.14.1
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.14.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Apr 6 2022 Sandro Mani <manisandro(a)gmail.com> - 2.14.0-1
- Update to 2.14.0
* Fri Mar 25 2022 Sandro Mani <manisandro(a)gmail.com> - 2.13.1-8
- Rebuild with mingw-gcc-12
--------------------------------------------------------------------------------
================================================================================
mingw-gdb-12.1-2.fc36 (FEDORA-2022-affcf9eea6)
MinGW Windows port of the GDB debugger
--------------------------------------------------------------------------------
Update Information:
Update to 12.1, fixes CVE-2021-3826.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 12.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri May 20 2022 Sandro Mani <manisandro(a)gmail.com> - 12.1-1
- Update to 12.1
* Fri Mar 25 2022 Sandro Mani <manisandro(a)gmail.com> - 11.2-2
- Rebuild with mingw-gcc-12
* Thu Feb 10 2022 Sandro Mani <manisandro(a)gmail.com> - 11.2-1
- Update to 11.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2132603 - CVE-2021-3826 mingw-gdb: libiberty: Heap/stack buffer overflow in
the dlang_lname function in d-demangle.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2132603
--------------------------------------------------------------------------------
================================================================================
mpg123-1.31.0-1.fc36 (FEDORA-2022-d4dee753f8)
Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3
--------------------------------------------------------------------------------
Update Information:
Update to 1.31.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 1.31.0-1
- Update to 1.31.0
* Tue Aug 9 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 1.30.2-1
- Update to 1.30.2
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.30.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ngspice-38-1.fc36 (FEDORA-2022-698471defd)
A mixed level/signal circuit simulator
--------------------------------------------------------------------------------
Update Information:
New version 38 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 29 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 38-1
- Update to 38
* Wed Oct 26 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 37-2
- Split out codemodel files, and make ngspice, libngspice require codemodel
- Move scripts to %_libdir, they were arch-dependent actually
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 37-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-shtab-1.5.6-1.fc36 (FEDORA-2022-8dcf21bbc7)
Automagic shell tab completion for Python CLI applications
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.6
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 29 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 1.5.6-1
- Update to 1.5.6 - Closes rhbz#2138543
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.5.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
yacreader-9.10.0-1.fc36 (FEDORA-2022-75824a9f5c)
Cross platform comic reader and library manager
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 9.10.0-1
- build: Update to 9.10.0
--------------------------------------------------------------------------------