The following Fedora 36 Security updates need testing:
Age URL
36
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3793987b02
nodejs-16.17.1-1.fc36
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ec78b2586
device-mapper-multipath-0.8.7-9.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e8698f2e5e
java-latest-openjdk-19.0.1.0.10-2.rolling.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6bcee2cc93
ghc-cmark-gfm-0.2.5-1.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-affcf9eea6
mingw-gdb-12.1-2.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-19538a3732
mingw-binutils-2.37-5.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d1682fef04
mingw-python3-3.10.8-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-185482f0a7
mediawiki-1.37.6-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c9a1fd5370
mingw-gcc-11.2.1-6.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ebd5bb0478 exim-4.96-5.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-07438e12df xen-4.16.2-3.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5f28fceec0
dotnet6.0-6.0.110-2.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-37c2d26f59
php-pear-CAS-1.6.0-1.fc36
The following Fedora 36 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1ce0e1a10
netcat-1.219-1.fc36
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-57ee5658ba
annobin-10.91-1.fc36
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-362bd01539
python3-docs-3.10.8-1.fc36 python3.10-3.10.8-1.fc36
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ec78b2586
device-mapper-multipath-0.8.7-9.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b3789b98eb
python-rpm-macros-3.10-20.fc36
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-48bd42b2dc
rust-packaging-23-1.fc36 rust-srpm-macros-23-1.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a57ed521ba
tzdata-2022f-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3dcead123d
hwdata-0.364-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1291faac0d
mpg123-1.31.1-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-95075fcd45
gnome-control-center-42.4-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ef19edbdc expat-2.5.0-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0c6f7be0c2
xorg-x11-server-Xwayland-22.1.5-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-07438e12df xen-4.16.2-3.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e7a369b2b8
libxcrypt-4.4.30-1.fc36
The following builds have been pushed to Fedora 36 updates-testing
asahi-installer-0.5pre7-1.fc36
asahi-scripts-20221027-6.fc36
bzip3-1.2.0-3.fc36
corosync-qdevice-3.0.2-1.fc36
gmailctl-0.10.6-1.fc36
golang-github-atotto-clipboard-0.1.4-7.fc36
golang-github-task-3.17.0-1.fc36
icewm-3.2.0-1.fc36
jacktrip-1.6.6-1.fc36
libreoffice-7.3.6.2-4.fc36
libxml2-2.10.3-2.fc36
nvtop-3.0.0-1.fc36
phpunit9-9.5.26-1.fc36
python-pynamodb-5.3.0-1.fc36
rust-1.65.0-1.fc36
swift-lang-5.7.1-1.fc36
wasmedge-0.11.2-1.fc36
xorgxrdp-0.9.19-4.fc36
Details about builds:
================================================================================
asahi-installer-0.5pre7-1.fc36 (FEDORA-2022-b946e82de6)
Asahi Linux installer
--------------------------------------------------------------------------------
Update Information:
asahi-{scripts,installer} for f36
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 31 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.5pre7-1
- Update to 0.5pre7; Fixes: RHBZ#2138560
* Thu Oct 27 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.5pre2-1
- Update to 0.5pre2
* Tue Sep 20 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.5pre1-2
- Make this package arched
* Mon Sep 19 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.5pre1-1
- Initial import; Fixes: RHBZ#2121984
--------------------------------------------------------------------------------
================================================================================
asahi-scripts-20221027-6.fc36 (FEDORA-2022-b946e82de6)
Miscellaneous admin scripts for Asahi Linux
--------------------------------------------------------------------------------
Update Information:
asahi-{scripts,installer} for f36
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 4 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20221027-6
- Backport one more upstream fix
* Thu Nov 3 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20221027-5
- Refresh PR#9 patch again
* Tue Nov 1 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20221027-4
- Refresh PR#9 patch
* Tue Nov 1 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20221027-3
- Add linux-firmware-vendor subpackage
* Tue Nov 1 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20221027-2
- Backport asahi-fwextract bugfix
* Mon Oct 31 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20221027-1
- Update to 20221027; Fixes: RHBZ#2137760
* Mon Sep 19 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220918.2-7
- Add asahi-fwextract subpackage
* Mon Sep 19 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220918.2-6
- Refresh dracut module patch
* Mon Sep 19 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220918.2-5
- Add missing Requires for dracut-asahi
* Sun Sep 18 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220918.2-4
- Add trailing slash to folders
* Sun Sep 18 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220918.2-3
- Rename dracut-config-asahi to dracut-asahi
* Sun Sep 18 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220918.2-2
- Add dracut module
* Sun Sep 18 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220918.2-1
- Update to 20220918.2
* Sun Sep 18 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220821-4
- Refresh dracut config and install it in the correct path
* Sun Aug 28 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220821-3
- Add dracut-config-asahi subpackage
* Sat Aug 27 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220821-2
- Add update-m1n1 subpackage
* Sat Aug 27 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 20220821-1
- Update to 20220821
--------------------------------------------------------------------------------
================================================================================
bzip3-1.2.0-3.fc36 (FEDORA-2022-72dd6f1f59)
Tools for compressing and decompressing bzip3 files
--------------------------------------------------------------------------------
Update Information:
This update brings bzip3, tools and libraries for handling bzip3 compression
format. bzip3 features higher compression ratios and better performance than
bzip2 thanks to an order-0 context mixing entropy coder.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 2 2022 Petr Pisar <ppisar(a)redhat.com> - 1.2.0-3
- Do not own pkg-config directory
* Wed Nov 2 2022 Petr Pisar <ppisar(a)redhat.com> - 1.2.0-2
- Less globs and and more verbose output in a spec file
* Tue Nov 1 2022 Petr Pisar <ppisar(a)redhat.com> - 1.2.0-1
- 1.2.0 bump
* Wed Oct 26 2022 Petr Pisar <ppisar(a)redhat.com> - 1.1.8-1
- 1.1.8 packaged
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2137932 - Review Request: bzip3 - Tools for compressing and decompressing
bzip3 files
https://bugzilla.redhat.com/show_bug.cgi?id=2137932
--------------------------------------------------------------------------------
================================================================================
corosync-qdevice-3.0.2-1.fc36 (FEDORA-2022-d81342c542)
The Corosync Cluster Engine Qdevice
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Jan Friesse <jfriesse(a)redhat.com> - 3.0.2-1
- New upstream release
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gmailctl-0.10.6-1.fc36 (FEDORA-2022-3012a7bc72)
Declarative configuration for Gmail filters
--------------------------------------------------------------------------------
Update Information:
update to v0.10.6, close rhbz#2139537
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Mark E. Fuller <mark.e.fuller(a)gmx.de> 0.10.6-1
- update to v0.10.6, close rhbz#2139537
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139537 - gmailctl-0.10.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2139537
--------------------------------------------------------------------------------
================================================================================
golang-github-atotto-clipboard-0.1.4-7.fc36 (FEDORA-2022-c6f1733bd1)
Clipboard for golang
--------------------------------------------------------------------------------
Update Information:
Fix FTBFS
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.1.4-7
- Fix FTBFS
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.1.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jul 19 2022 Maxwell G <gotmax(a)e.email> 0.1.4-5
- Rebuild for
CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.1.4-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.1.4-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.1.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2045472 - golang-github-atotto-clipboard: FTBFS in Fedora rawhide/f36
https://bugzilla.redhat.com/show_bug.cgi?id=2045472
[ 2 ] Bug #2096130 - golang-github-atotto-clipboard-1.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2096130
--------------------------------------------------------------------------------
================================================================================
golang-github-task-3.17.0-1.fc36 (FEDORA-2022-478b6d5361)
A task runner / simpler Make alternative written in Go
--------------------------------------------------------------------------------
Update Information:
update to v3.17.0, close rhbz#2135017
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 18 2022 Mark E. Fuller <mark.e.fuller(a)gmx.de> 3.17.0-1
- update to v3.17.0, close rhbz#2135017
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2135017 - golang-github-task-3.17.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2135017
--------------------------------------------------------------------------------
================================================================================
icewm-3.2.0-1.fc36 (FEDORA-2022-0c6e24a7f1)
Window manager designed for speed, usability, and consistency
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.2.0-1
- chore: Update to 3.2.0
* Sun Oct 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.1.0-6
- build: Add xrandr as weak dep
* Sun Oct 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.1.0-5
- build: Make alsa-utils as weak dep
* Sun Oct 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.1.0-4
- build: Drop adwaita-icon-theme dep
* Sun Oct 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.1.0-3
- style: Update .spec
* Sun Oct 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 3.1.0-2
- build: Add mutt as weak dep
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139559 - icewm-3.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2139559
--------------------------------------------------------------------------------
================================================================================
jacktrip-1.6.6-1.fc36 (FEDORA-2022-3975f979e8)
A system for high-quality audio network performance over the Internet
--------------------------------------------------------------------------------
Update Information:
Update to v1.6.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 I��aki ��car <iucar(a)fedoraproject.org> 1.6.6-1
- Update to v1.6.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2137050 - jacktrip-1.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2137050
--------------------------------------------------------------------------------
================================================================================
libreoffice-7.3.6.2-4.fc36 (FEDORA-2022-0cecfa1e9a)
Free Software Productivity Suite
--------------------------------------------------------------------------------
Update Information:
- Resolves: tdf#149932 honour preedit none/double underlining
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Caol��n McNamara <caolanm(a)redhat.com> - 1:7.3.6.2-4
- Resolves: tdf#149932 honour preedit none/double underlining
--------------------------------------------------------------------------------
================================================================================
libxml2-2.10.3-2.fc36 (FEDORA-2022-d7349a124a)
Library providing XML and HTML support
--------------------------------------------------------------------------------
Update Information:
This update restores most of the library symbols that were incorrectly removed
in 2.10.3-1.fc36, hopefully making all dependent packages work again.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Adam Williamson <awilliam(a)redhat.com> - 2.10.3-2
- Set build options to maintain (most) symbols from 2.9.14 (#2139546)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139546 - libxml2 update to 2.10..3 breaks ABI by removing 111 symbols
https://bugzilla.redhat.com/show_bug.cgi?id=2139546
--------------------------------------------------------------------------------
================================================================================
nvtop-3.0.0-1.fc36 (FEDORA-2022-c3901e45f6)
GPU process monitoring for AMD, Intel and NVIDIA
--------------------------------------------------------------------------------
Update Information:
Initial release of `nvtop`, a GPU process monitoring tool for AMD, Intel and
NVIDIA (the latter via dlopen)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 3.0.0-1
- Initial Fedora package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139889 - Review Request: nvtop - GPU process monitoring for AMD, Intel and
NVIDIA
https://bugzilla.redhat.com/show_bug.cgi?id=2139889
--------------------------------------------------------------------------------
================================================================================
phpunit9-9.5.26-1.fc36 (FEDORA-2022-66f0619560)
The PHP Unit Testing framework version 9
--------------------------------------------------------------------------------
Update Information:
**Version 9.5.26** - 2022-10-28 Fixed *
[#5076](https://github.com/sebastianbergmann/phpunit/issues/5076): Test Runner
does not warn about conflicting options
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 28 2022 Remi Collet <remi(a)remirepo.net> - 9.5.26-1
- update to 9.5.26
--------------------------------------------------------------------------------
================================================================================
python-pynamodb-5.3.0-1.fc36 (FEDORA-2022-1ebdb71400)
A pythonic interface to Amazon���s DynamoDB
--------------------------------------------------------------------------------
Update Information:
v5.3.0 ---------- * No longer call ``DescribeTable`` API before first operation
Before this change, we would call ``DescribeTable`` before the first operation
on a given table in order to discover its schema. This slowed down bootstrap
(particularly important for lambdas), complicated testing and could potentially
cause inconsistent behavior since queries were serialized using the table's
(key) schema but deserialized using the model's schema. With this change,
both queries and models now use the model's schema.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 5.3.0-1
- Update to 5.3.0 (close RHBZ#2139576)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139576 - python-pynamodb-5.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2139576
--------------------------------------------------------------------------------
================================================================================
rust-1.65.0-1.fc36 (FEDORA-2022-240038331f)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
Update to Rust 1.65.0: * Generic associated types (GATs) * `let`-`else`
statements * `break` from labeled blocks * Splitting Linux debuginfo *
Stabilized APIs See the [blog post](https://blog.rust-
lang.org/2022/11/03/Rust-1.65.0.html) and [release
notes](https://github.com/rust-
lang/rust/blob/stable/RELEASES.md#version-1650-2022-11-03) for more details. At
the packaging level, `rust-analyzer` now obsoletes `rls`.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 3 2022 Josh Stone <jistone(a)redhat.com> - 1.65.0-1
- Update to 1.65.0.
- rust-analyzer now obsoletes rls.
--------------------------------------------------------------------------------
================================================================================
swift-lang-5.7.1-1.fc36 (FEDORA-2022-c8bd59d2a0)
The Swift programming language
--------------------------------------------------------------------------------
Update Information:
Updated to Swift 5.7.1-RELEASE
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 2 2022 Ron Olson <tachoknight(a)gmail.com> - 5.7.1-1
- Updated to Swift 5.7.1-RELEASE
Resolves: rhbz#2139320
* Tue Nov 1 2022 Ron Olson <tachoknight(a)gmail.com> - 5.7-4
- Merged fix from Lum��r Balhar to replace the pathfix.py tool
with the new way for Python 3.12
* Tue Sep 27 2022 Ron Olson <tachoknight(a)gmail.com> - 5.7-3
- Resolves: rhbz#2130233
* Tue Sep 27 2022 Ron Olson <tachoknight(a)gmail.com> - 5.7-2
- Added patch to handle an initialized variable but not
used
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139320 - swift-lang-5.7.1-RELEASE is available
https://bugzilla.redhat.com/show_bug.cgi?id=2139320
--------------------------------------------------------------------------------
================================================================================
wasmedge-0.11.2-1.fc36 (FEDORA-2022-ff1b11ae98)
High performance WebAssembly Virtual Machine
--------------------------------------------------------------------------------
Update Information:
Release 0.11.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 4 2022 dm4 <dm4(a)secondstate.io> 0.11.2-1
- Release 0.11.2
* Thu Nov 3 2022 Lokesh Mandvekar <lsm5(a)fedoraproject.org> 0.11.1-2
- Provides: wasm-library
--------------------------------------------------------------------------------
================================================================================
xorgxrdp-0.9.19-4.fc36 (FEDORA-2022-e1e39f820a)
Implementation of xrdp backend as Xorg modules
--------------------------------------------------------------------------------
Update Information:
Provide alternative binary with glamor enabled.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 4 2022 Bojan Smojver <bojan(a)rexursive.com> - 0.9.19-4
- Build alternative binary with glamor enabled
--------------------------------------------------------------------------------