The following Fedora 35 Security updates need testing:
Age URL
287
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
18
https://bodhi.fedoraproject.org/updates/FEDORA-2022-de515f765f
nodejs-16.18.1-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f44dd1bec2
python3.10-3.10.8-3.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e733724edb
freerdp-2.8.1-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-003403ec6b
samba-4.15.12-0.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-14f11bfc73
ntfs-3g-2022.10.3-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-927df621df
thunderbird-102.5.0-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-53a4a5dd11 xen-4.15.4-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-73e61f4c0b
drupal7-i18n-1.31-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-42723b43fe
python-virtualbmc-3.0.0-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-333df1c4aa
galera-26.4.13-1.fc35 mariadb-10.5.18-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-cbbd105d08
heimdal-7.7.1-3.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-07dd239d6c
admesh-0.98.5-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-df2f4923ea
libetpan-1.9.4-9.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ce9378e90 grub2-2.06-14.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-99c00af79f
advancecomp-2.4-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
106
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bca7996d14
annobin-10.81-1.fc35
70
https://bodhi.fedoraproject.org/updates/FEDORA-2022-97f6c4fd2a
libblockdev-2.28-2.fc35
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-43fa48ce4e
python-rpmautospec-0.3.1-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-08abe36a9e
linux-firmware-20221109-144.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0f700faae4 glibc-2.34-49.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e733724edb
freerdp-2.8.1-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f44dd1bec2
python3.10-3.10.8-3.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-53a4a5dd11 xen-4.15.4-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-927df621df
thunderbird-102.5.0-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-14f11bfc73
ntfs-3g-2022.10.3-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-003403ec6b
samba-4.15.12-0.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b402a5ebdf
libxcrypt-4.4.33-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7184211fc4 koji-1.31.0-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b29661d86 vim-9.0.915-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7d00240a55
langtable-0.0.61-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-32e69d01a9
libbsd-0.11.7-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ce9378e90 grub2-2.06-14.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9fde12c816 gcc-11.3.1-4.fc35
The following builds have been pushed to Fedora 35 updates-testing
btrfs-progs-6.0.2-1.fc35
fbrnch-1.2.1-8.fc35
firefox-107.0-4.fc35
ghc-bugzilla-redhat-1.0.1-1.fc35
ibus-table-1.16.14-2.fc35
mlpack-4.0.0-7.fc35
nativefiledialog-extended-1.0.1-1.fc35
nordugrid-arc-6.17.0-1.fc35
obs-build-20221118-405.2.1.fc35
pmbootstrap-1.50.0-1.fc35
qpress-20220819-1.fc35
Details about builds:
================================================================================
btrfs-progs-6.0.2-1.fc35 (FEDORA-2022-8d6a5c6f26)
Userspace programs for btrfs
--------------------------------------------------------------------------------
Update Information:
btrfs-progs version 6.0.2 have been released. This is a bugfix release.
Changelog: * fixes: * resize cancel did not work in some cases *
fix fileattr stream command format and add workaround when it cannot be applied
* properly handle degraded raid56 reads * fi defrag: fix verbosity, don't
print file names by default * receive: fix silent data loss after fall
back from encoded write * fi mkswapfile: new command to create a formatted
swapfile in one go
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 25 2022 Neal Gompa <ngompa(a)fedoraproject.org> - 6.0.2-1
- Update to 6.0.2
* Fri Nov 4 2022 Igor Raits <ignatenkobrain(a)fedoraproject.org> - 6.0.1-1
- Update to 6.0.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2140219 - btrfs-progs-6.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2140219
--------------------------------------------------------------------------------
================================================================================
fbrnch-1.2.1-8.fc35 (FEDORA-2022-ed396eb9b1)
Fedora packager tool to build package branches
--------------------------------------------------------------------------------
Update Information:
fbrnch-1.2.1-8.fc35 - 'install': if dnf install fails, include command in error
message - 'override': check for kerberos ticket - 'override': new --list
and
--expire option subcommands - 'parallel': print package header for merge -
'parallel': wait for sidetag update to transition to request testing -
'request-
branches': check package owner and admins: drop unordered-containers -
'sidetags': ensure krb ticket - 'update-version': now commits sources too
-
'update-version': prompt rather than warn if not updating rawhide - Git: fix
conflictPrompt to handle long hashes correctly - Prompt: use show for
unprintable characters - mergeBranch: print package branch header - require
bugzilla-redhat-1.0.1 since b.r.c dropped Bug see_also field
(juhp/hsbugzilla#18) - use logMsg when waiting for repo -
https://hackage.haskell.org/package/fbrnch-1.2.1/changelog - fbrnch.spec: SPDX
migration of license tags ghc-bugzilla-redhat-1.0.1-1.fc35 - Red Hat bugzilla
bugs no longer have a 'see_also' field (#18)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 23 2022 Jens Petersen <petersen(a)redhat.com> - 1.2.1-8
- 'install': if dnf install fails, include command in error message
- 'override': check for kerberos ticket
- 'override': new --list and --expire option subcommands
- 'parallel': print package header for merge
- 'parallel': wait for sidetag update to transition to request testing
- 'request-branches': check package owner and admins: drop unordered-containers
- 'sidetags': ensure krb ticket
- 'update-version': now commits sources too
- 'update-version': prompt rather than warn if not updating rawhide
- Git: fix conflictPrompt to handle long hashes correctly
- Prompt: use show for unprintable characters
- mergeBranch: print package branch header
- require bugzilla-redhat-1.0.1 since b.r.c dropped Bug see_also field
(juhp/hsbugzilla#18)
- use logMsg when waiting for repo
-
https://hackage.haskell.org/package/fbrnch-1.2.1/changelog
- fbrnch.spec: SPDX migration of license tags
--------------------------------------------------------------------------------
================================================================================
firefox-107.0-4.fc35 (FEDORA-2022-ec48d2c1b4)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- Fixed VA-API playback artifacts (mzbz#1779186) ---- - New upstream version
(107.0)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 24 2022 Martin Stransky <stransky(a)redhat.com>- 107.0-4
- Added fix for mozbz#1779186 - fix VA-API playback artifacts
* Mon Nov 21 2022 Martin Stransky <stransky(a)redhat.com>- 107.0-3
- Disabled crashreporter
* Mon Nov 21 2022 Jan Horak <jhorak(a)redhat.com> - 107.0-2
- Enabled mozilla crashreporter again
* Mon Nov 14 2022 Martin Stransky <stransky(a)redhat.com>- 107.0-1
- Update to 107.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2140574 - Firefox 106.0.5 was released
https://bugzilla.redhat.com/show_bug.cgi?id=2140574
--------------------------------------------------------------------------------
================================================================================
ghc-bugzilla-redhat-1.0.1-1.fc35 (FEDORA-2022-ed396eb9b1)
A Haskell interface to the Bugzilla native REST API
--------------------------------------------------------------------------------
Update Information:
fbrnch-1.2.1-8.fc35 - 'install': if dnf install fails, include command in error
message - 'override': check for kerberos ticket - 'override': new --list
and
--expire option subcommands - 'parallel': print package header for merge -
'parallel': wait for sidetag update to transition to request testing -
'request-
branches': check package owner and admins: drop unordered-containers -
'sidetags': ensure krb ticket - 'update-version': now commits sources too
-
'update-version': prompt rather than warn if not updating rawhide - Git: fix
conflictPrompt to handle long hashes correctly - Prompt: use show for
unprintable characters - mergeBranch: print package branch header - require
bugzilla-redhat-1.0.1 since b.r.c dropped Bug see_also field
(juhp/hsbugzilla#18) - use logMsg when waiting for repo -
https://hackage.haskell.org/package/fbrnch-1.2.1/changelog - fbrnch.spec: SPDX
migration of license tags ghc-bugzilla-redhat-1.0.1-1.fc35 - Red Hat bugzilla
bugs no longer have a 'see_also' field (#18)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 23 2022 Jens Petersen <petersen(a)redhat.com> - 1.0.1-1
- Red Hat bugzilla bugs no longer have a 'see_also' field (#18)
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jun 17 2022 Jens Petersen <petersen(a)redhat.com> - 1.0.0-2
- rebuild
--------------------------------------------------------------------------------
================================================================================
ibus-table-1.16.14-2.fc35 (FEDORA-2022-14eaa3fd9e)
The Table engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
Migrate license tag to SPDX
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 25 2022 Mike FABIAN <mfabian(a)redhat.com> - 1.16.14-2
- Migrate license tag to SPDX
--------------------------------------------------------------------------------
================================================================================
mlpack-4.0.0-7.fc35 (FEDORA-2022-41ef37eeba)
Fast, header-only C++ machine learning library
--------------------------------------------------------------------------------
Update Information:
Update to latest stable version.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 21 2022 Ryan Curtin <ryan(a)ratml.org> - 4.0.0-7
- Fix incorrect Requires again (oops) :).
* Thu Nov 17 2022 Benson Muite <benson_muite(a)emailplus.org> - 4.0.0-6
- Use license package
* Tue Nov 15 2022 Benson Muite <benson_muite(a)emailplus.org> - 4.0.0-5
- Use just bin and devel directories
* Mon Nov 14 2022 Benson Muite <benson_muite(a)emailplus.org> - 4.0.0-4
- Include README and other documentation files
* Sun Nov 13 2022 Benson Muite <benson_muite(a)emailplus.org> - 4.0.0-3
- Put license in base package
- Add static label to header only library
* Mon Oct 31 2022 Ryan Curtin <ryan(a)ratml.org> - 4.0.0-2
- Fix incorrect Requires.
* Wed Oct 26 2022 Ryan Curtin <ryan(a)ratml.org> - 4.0.0-1
- Update to latest stable version.
- doc subpackage is no longer produced (mlpack 4.0.0 has no Doxygen support anymore).
- Remove boost dependency, replace with cereal.
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4.2-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jun 21 2022 Lum��r Balhar <lbalhar(a)redhat.com> - 3.4.2-17
- Fix build by BR python3-devel
- Fix compatibility with latest setuptools
* Wed Jun 15 2022 Python Maint <python-maint(a)redhat.com> - 3.4.2-16
- Rebuilt for Python 3.11
* Wed May 4 2022 Thomas Rodgers <trodgers(a)redhat.com> - 3.4.2-15
- Rebuilt for Boost 1.78
--------------------------------------------------------------------------------
================================================================================
nativefiledialog-extended-1.0.1-1.fc35 (FEDORA-2022-830f48b85a)
Native file dialog library with C and C++ bindings
--------------------------------------------------------------------------------
Update Information:
initial build for f35
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 25 2022 Jonathan Wright <jonathan(a)almalinux.org> - 1.0.1-1
- Update to 1.0.1 rhbz#2148493
* Sat Aug 13 2022 Jonathan Wright <jonathan(a)almalinux.org> - 1.0.0-1
- Initial package build
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-6.17.0-1.fc35 (FEDORA-2022-4efa3a9a78)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
AEC 6.17.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 24 2022 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.17.0-1
- Update to version 6.17.0
- Drop swig 4.1 patch accepted upstream
* Thu Oct 27 2022 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.16.1-2
- Support SWIG 4.1
- Patch by Jitka Plesnikova <jplesnik(a)redhat.com> from RHBZ 2128189
--------------------------------------------------------------------------------
================================================================================
obs-build-20221118-405.2.1.fc35 (FEDORA-2022-169115311f)
A generic package build script
--------------------------------------------------------------------------------
Update Information:
Update obs-build to 20221118
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 24 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> - 20221118-405.2.1
- New upstream release 20221118, fixes rhbz#2144039
- Switch to SPDX license identifiers
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2144039 - obs-build-20221118 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2144039
--------------------------------------------------------------------------------
================================================================================
pmbootstrap-1.50.0-1.fc35 (FEDORA-2022-122009d449)
A sophisticated chroot/build/flash tool to develop and install postmarketOS
--------------------------------------------------------------------------------
Update Information:
Update pmbootstrap to 1.50.0 ---- Update pmbootstrap to 1.49.0 ---- Update
pmbootstrap to 1.48.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 25 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 1.50.0-1
- New upstream release 1.50.0, fixes rhbz#2144308
* Fri Nov 11 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 1.49.0-2
- SPDX: switch license tag to SPDX
* Fri Nov 11 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 1.49.0-1
- New upstream release 1.49.0, fixes rhbz#2141299
* Fri Oct 28 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 1.48.0-1
- New upstream release 1.48.0, fixes rhbz#2135144
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2135144 - pmbootstrap-1.48.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2135144
[ 2 ] Bug #2141299 - pmbootstrap-1.49.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2141299
[ 3 ] Bug #2144308 - pmbootstrap-1.50.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2144308
--------------------------------------------------------------------------------
================================================================================
qpress-20220819-1.fc35 (FEDORA-2022-0ff8149aad)
A portable file archiver using QuickLZ
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-45866
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 25 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220819-1
- Switch to new upstream and update to 20220819 (Fixes: RHBZ#2147535,
RHBZ#2147537)
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2147535 - CVE-2022-45866 qpress: directory traversal via ../ in a .qp file
https://bugzilla.redhat.com/show_bug.cgi?id=2147535
--------------------------------------------------------------------------------