The following Fedora 36 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6225445e2b
advancecomp-2.4-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e19ca639ef
qpress-20220819-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f7fdcb1820
moodle-3.11.11-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ef96a58bbe
ruby-3.1.3-172.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-706c76c4f0
woff-0.20091126-34.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fd6e43dec8
freerdp-2.9.0-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f0980dffd1
sfnt2woff-zopfli-1.3.1-3.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-902df3b060
nextcloud-25.0.1-1.fc36
The following Fedora 36 Critical Path updates have yet to be approved:
Age URL
18
https://bodhi.fedoraproject.org/updates/FEDORA-2022-beaae40a8f
python-rpmautospec-0.3.1-1.fc36
16
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ca291a78cf glibc-2.35-21.fc36
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b65eb8fe04 koji-1.31.0-1.fc36
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0ae435577c
perl-Getopt-Long-2.54-1.fc36
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-19aa7f5efb
libbsd-0.11.7-1.fc36
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3e19cf7fff
annobin-10.93-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-267565bb13
gnome-remote-desktop-42.6-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fb08a00425
guestfs-tools-1.48.2-3.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e8401578c3
fontconfig-2.14.1-2.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0c9a98c795
libxcrypt-4.4.33-3.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-52584e32a0
appstream-data-36-5.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9cdbed6500
seabios-1.16.1-2.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7154df3266
libguestfs-1.48.6-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e7602b4c78
langtable-0.0.61-2.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6499e05ba6
firewalld-1.2.2-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8a83a0e569
pciutils-3.9.0-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2b91cbd30f
gnome-online-accounts-3.44.0-2.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fd6e43dec8
freerdp-2.9.0-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d36b04e2d4
osinfo-db-20221130-1.fc36
The following builds have been pushed to Fedora 36 updates-testing
borgmatic-1.7.5-1.fc36
cockpit-281-1.fc36
cockpit-machines-279-1.fc36
cockpit-podman-58-1.fc36
csdiff-2.8.0-1.fc36
csmock-3.3.5-1.fc36
dispenso-1.1.0-1.fc36
google-api-python-client-2.68.0-1.fc36
hplip-3.22.10-3.fc36
kiwix-desktop-2.3.1-1.fc36
kiwix-tools-3.4.0-1.fc36
libass-0.17.0-1.fc36
libbluray-1.3.4-1.fc36
libkiwix-12.0.0-1.fc36
libzia-4.38-1.fc36
mock-3.5-1.fc36
ovn-22.09.0-22.fc36
php-phpspec-prophecy-1.16.0-1.fc36
php-zetacomponents-base-1.9.4-1.fc36
python-regex-2022.10.31-1.fc36
python-simple-rlp-0.1.3-1.fc36
rust-capnp-0.14.11-1.fc36
rust-sequoia-octopus-librnp-1.4.1-2.fc36
sane-backends-1.1.1-10.fc36
snapd-2.57.6-1.fc36
sympa-6.2.70-1.fc36
tucnak-4.38-1.fc36
zimlib-8.1.0-1.fc36
Details about builds:
================================================================================
borgmatic-1.7.5-1.fc36 (FEDORA-2022-5edf25e8dc)
Simple Python wrapper script for borgbackup
--------------------------------------------------------------------------------
Update Information:
Update to 1.7.5 - [#311](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/311): Override PostgreSQL dump/restore commands via
configuration options. - [#604](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/604): Fix traceback when a configuration section is
present but lacking any options. -
[#607](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/607):
Clarify documentation examples for include merging and deep merging. -
[#611](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/611):
Fix "data" consistency check to support "check_last" and consistency
"prefix"
options. - [#613](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/613): Clarify documentation about multiple
repositories and separate configuration files.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Felix Kaechele <felix(a)kaechele.ca> - 1.7.5-1
- update to 1.7.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2148744 - borgmatic-1.7.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2148744
--------------------------------------------------------------------------------
================================================================================
cockpit-281-1.fc36 (FEDORA-2022-01f43fdd53)
Web Console for Linux servers
--------------------------------------------------------------------------------
Update Information:
Automatic update for cockpit-281-1.fc36. ##### **Changelog for cockpit** ``` *
Thu Dec 01 2022 Packit <hello(a)packit.dev> - 281-1 - Dark theme switcher ```
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Packit <hello(a)packit.dev> - 281-1
- Dark theme switcher
--------------------------------------------------------------------------------
================================================================================
cockpit-machines-279-1.fc36 (FEDORA-2022-86b857a50d)
Cockpit user interface for virtual machines
--------------------------------------------------------------------------------
Update Information:
Automatic update for cockpit-machines-279-1.fc36. ##### **Changelog for
cockpit-machines** ``` * Thu Dec 01 2022 Packit <hello(a)packit.dev> - 279-1 -
Autodetect file's format when attaching disk ```
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Packit <hello(a)packit.dev> - 279-1
- Autodetect file's format when attaching disk
--------------------------------------------------------------------------------
================================================================================
cockpit-podman-58-1.fc36 (FEDORA-2022-b74f1124b8)
Cockpit component for Podman containers
--------------------------------------------------------------------------------
Update Information:
Automatic update for cockpit-podman-58-1.fc36. ##### **Changelog for cockpit-
podman** ``` * Thu Dec 01 2022 Packit <hello(a)packit.dev> - 58-1 - Performance
and stability improvements ```
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Packit <hello(a)packit.dev> - 58-1
- Performance and stability improvements
--------------------------------------------------------------------------------
================================================================================
csdiff-2.8.0-1.fc36 (FEDORA-2022-94e8d0c850)
Non-interactive tools for processing code scan results in plain-text
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Kamil Dudka <kdudka(a)redhat.com> 2.8.0-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
csmock-3.3.5-1.fc36 (FEDORA-2022-94e8d0c850)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Kamil Dudka <kdudka(a)redhat.com> 3.3.5-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
dispenso-1.1.0-1.fc36 (FEDORA-2022-da555d2b0e)
A library for working with sets of tasks in parallel
--------------------------------------------------------------------------------
Update Information:
### performance and functionality enhancements * CMake changes to allow install
of targets and CMake dispenso target exports (thanks jeffamstutz!) * Addition of
typical container type definitions for ConcurrentVector (thanks Michael Jung!) *
Large performance improvements for Futures and CompletionEvents on MacOs.
Resulted in order-of-magnitude speedups for those use cases on MacOs. * Addition
of new benchmark for performance with infrequent use of `parallel_for`,
`for_latency_benchmark` * Fixes to ensure `parallel_for` works with thread pools
with zero threads (thanks kevinbchen!). Further work has been done to ensure
that thread pools with zero threads simply always run code inline. * By default,
the global thread pool uses one fewer thread than the machine has hardware
threads. This behavior was introduced because dispenso very often runs on the
calling thread as well as pool threads, and so one fewer thread in the pool can
lead to better performance. * Update googletest version to 1.12.1 (thanks
porumbes!) * Add a utility in dispenso to get a thread ID, `threadId`. These
64-bit IDs are unique per thread, and will not be recyled. These values grow
from zero, ensuring the caller can assume they are small if number of threads
also is small (e.g. you won't have an ID of `0xdeadbeef` if you only run
hundreds or thousands of threads in the lifetime of the process). * Add a
utility, `getTime`, to get time quickly. This provides the double-precision
time in seconds since the first call to `getTime` after process start. * Use a
new scheduling mechanism in the thread pool when in Windows. This resulted in
up to a 13x improvement in latency between putting items in the pool and having
those items run. This scheduling is optional, but turned off for Linux and
MacOs since scheduling was already fast on those platforms. * Optimizations to
enable faster scheduling in thread pools. This resulted in a range of 5% to 45%
speedup across multiple benchmarks including `future_benchmark` and
`pipeline_benchmark`. * Fixed a performance bug in work stealing logic; now
dispenso outperforms TBB in the `pipeline_benchmark` * Added a task set
cancellation feature, with a relatively simple mechanism for submitted work to
check if it's owning task set has been cancelled. When creating a task set, you
can optionally opt into parent cancellation propagation as well. While this
propagation is fairly efficient, it did create a noticeable impact on
performance in some cases, and thus it was decided to allow this behavior, but
not penalize performance for those who don't need the behavior.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 1.1.0-1
- Update to 1.1.0
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.0.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139516 - dispenso-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2139516
--------------------------------------------------------------------------------
================================================================================
google-api-python-client-2.68.0-1.fc36 (FEDORA-2022-a2292d0b7c)
Google APIs Client Library for Python
--------------------------------------------------------------------------------
Update Information:
Update to 2.68.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 2:2.68.0-1
- Update to 2.68.0 - Closes rhbz#2149793
--------------------------------------------------------------------------------
================================================================================
hplip-3.22.10-3.fc36 (FEDORA-2022-6e7376d7da)
HP Linux Imaging and Printing Project
--------------------------------------------------------------------------------
Update Information:
2148210 - hplip: pcardext Python extension broken stop shipping hp-unload,
since it depends on pcardext ---- 2139309 - hplip-3.22.10 is available
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.22.10-3
- 2148210 - hplip: pcardext Python extension broken
- stop shipping hp-unload, since it depends on pcardext
* Thu Nov 24 2022 Florian Weimer <fweimer(a)redhat.com> - 3.22.10-2
- C99 compatibility fixes
- Stop building the pcardext Python extension because it unusable (#2148210)
* Wed Nov 23 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.22.10-1
- 2139309 - hplip-3.22.10 is available
* Wed Oct 19 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 3.22.6-5
- distutils will be removed in Python3.12, use setuptools now
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139309 - hplip-3.22.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2139309
[ 2 ] Bug #2148210 - hplip: pcardext Python extension broken
https://bugzilla.redhat.com/show_bug.cgi?id=2148210
--------------------------------------------------------------------------------
================================================================================
kiwix-desktop-2.3.1-1.fc36 (FEDORA-2022-b6d688b9de)
Kiwix desktop application
--------------------------------------------------------------------------------
Update Information:
Updated to version 2.3.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Vitaly Zaitsev <vitaly(a)easycoding.org> - 2.3.1-1
- Updated to version 2.3.1.
--------------------------------------------------------------------------------
================================================================================
kiwix-tools-3.4.0-1.fc36 (FEDORA-2022-b6d688b9de)
Common code base for all Kiwix ports
--------------------------------------------------------------------------------
Update Information:
Updated to version 2.3.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.4.0-1
- Updated to version 3.4.0.
--------------------------------------------------------------------------------
================================================================================
libass-0.17.0-1.fc36 (FEDORA-2022-e610e3e277)
Portable library for SSA/ASS subtitles rendering
--------------------------------------------------------------------------------
Update Information:
Update to 0.17.0 bugfix release: * Fix various parts relating to automatic
linebreaking * Fix rendering when hinting was enabled and fontsizes or scales
are zero * Switch build to a non-recursive setup for improved parallelism *
Improve quality of SSA Effects movement * Further documentation improvements *
Completely invalid Events are now discarded during parsing * Introduction of
LayoutRes{X,Y} script headers * New AlphaLevel style override to set all alpha
values while keeping the color * Add ASS_FEATURE_WRAP_UNICODE to allow
automatic linebreaks in accordance with the Unicode line breaking algorithm
instead of ASS' much stricter breaking rules. For the feature to be available
at runtime, libass must be linked against the new optional dependency
libunibreak. * Improve VSFilter compatibility: * Fix premature truncation
of animated alphas (was a 0.15.0 regression) * Fix handling of small delay
parameters for legacy SSA Effects * Fix x-scaling with PlayResX * Fix
x-scaling for anamorphic video (except for \be whose scaling remains buggy
in general) * Support SSA's AlphaLevel style field * Support the \kt
override tag from VSFilter's v4++ set * Parse ScriptType headers * Parse
integer header, style and event field values like VSFilter * Ignore trailing
whitespace in an event's text
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Nicolas Chauvet <kwizart(a)gmail.com> - 0.17.0-1
- Update to 0.17.0
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.16.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sun May 15 2022 Nicolas Chauvet <kwizart(a)gmail.com> - 0.16.0-1
- Update to 0.16.0
--------------------------------------------------------------------------------
================================================================================
libbluray-1.3.4-1.fc36 (FEDORA-2022-62c17cf38c)
Library to access Blu-Ray disks for video playback
--------------------------------------------------------------------------------
Update Information:
- Improve JVM probing
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 30 2022 Xavier Bachelot <xavier(a)bachelot.org> - 1.3.4-1
- Update to 1.3.4 (RHBZ#2149455)
--------------------------------------------------------------------------------
================================================================================
libkiwix-12.0.0-1.fc36 (FEDORA-2022-b6d688b9de)
Common code base for all Kiwix ports
--------------------------------------------------------------------------------
Update Information:
Updated to version 2.3.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Vitaly Zaitsev <vitaly(a)easycoding.org> - 12.0.0-1
- Updated to version 12.0.0.
--------------------------------------------------------------------------------
================================================================================
libzia-4.38-1.fc36 (FEDORA-2022-5678a9328a)
Platform abstraction layer for the tucnak package
--------------------------------------------------------------------------------
Update Information:
This is new version of tucnak.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.38-1
- New version
Related: rhbz#2148552
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2148552 - tucnak-4.38 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2148552
--------------------------------------------------------------------------------
================================================================================
mock-3.5-1.fc36 (FEDORA-2022-70f96b283e)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
https://rpm-software-management.github.io/mock/Release-Notes-3.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Pavel Raiskup <praiskup(a)redhat.com> 3.5-1
- check for qemu-user-static raises InvalidArchitecture()
- forcearch: map armv7hl to the /usr/bin/qemu-arm-static binary
- more pedantic check for the qemu-*-static binaries
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2143069 - mock requires /usr/bin/qemu-x86_64-static when trying to build for
armv7hl on aarch64
https://bugzilla.redhat.com/show_bug.cgi?id=2143069
--------------------------------------------------------------------------------
================================================================================
ovn-22.09.0-22.fc36 (FEDORA-2022-4e889f770b)
Open Virtual Network support
--------------------------------------------------------------------------------
Update Information:
Sync to upstream OVN branch-22.09 and also backport
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Numan Siddique <numans(a)ovn.org> - 22.09.0-22
- Sync to upstream OVN branch-22.09 and also backport
Load balancer affinity patches. These patches are not backported
to branch-22.09, but ovn-kubernetes need them.
Below are the commits since last update (22.09.0-4.
- northd: rely on new actions for lb affinity
[Upstream: 5b6223dcb6060205c6e9d4e8c092e96134bb032a]
- actions: introduce chk_lb_aff action
[Upstream: f74c418e3cd2079e7cae4d3ec293ffc387f5a660]
- actions: introduce commit_lb_aff action
[Upstream: 2d190e5c69c9440c720ab8412cc04e4096d4114a]
- controller: Fixed ovs/ovn(features) connection lost when running more than 120 seconds
(#2144084)
[Upstream: db61b2e4f166092e5bc93f4cba7696a72037a069]
- ovs: Bump submodule to include latest fixes.
[Upstream: d62dde642879ffb7ff1eb8f4077b6224f977c6d7]
- ovn-controller: Fixed missing flows after interface deletion (#2129866)
[Upstream: 90c165fa5a6ecdd9bac606cf259ae88228b96208]
- ovn-controller: Fix releasing wrong vif
[Upstream: 4da7a269c9eb055b2cfa27d67593a77167b8c9a6]
- tests: Fix flaky test "multi-vtep SB Chassis encap updates"
[Upstream: ef15d5c22fa2255db69be2d6da822cefb099327c]
- controller: Fix QoS for ports with undetected or too low link speed. (#2136716)
[Upstream: ae96d5d753ccbee9b239178f56460e05169ac9f7]
- ovn-controller: Fix some issues with CT zone assignment. (#2126406)
[Upstream: 0fc041667031da20cd03c0b76de8de3dbe502d50]
- ci: Update jobs to use numbers instead of test flags
[Upstream: bc609bf148be3a38a0b8f38f049f30eb7e9b55f8]
- ovs: Bump submodule to tip of branch-3.0 and add related test (#2126450)
[Upstream: c18415d5ae7273c633190df4ac9e872a0a0f9709]
- controller: fix ipv6 prefix delegation in gw router mode (#2129244 2129247)
[Upstream: f2042a2e6aeb1a7fe266316337545331f5186dd0]
- spec: require python3-openvswitch for ovn-detrace
[Upstream: 29e4d43966fbf34d9707e31880c455f22a643bb3]
- northd: Use separate SNAT for already-DNATted traffic.
[Upstream: 51044dbfdba234a3f50d8c9c952335e41b72a39b]
- controller: Restore MAC and vlan for DVR scenario (#2123837)
[Upstream: 86e99bf95a2191ebdcd5d03335ff8add2a636f55]
- northd: Fix multicast table full (#2094710)
[Upstream: 40dd85eb8d2d2d88f9000b6be6fb263b4bd1a27f]
- controller: Fix first ping from lsp to external through snat failing (#2130045)
[Upstream: 76a01e53a9fcc3184211cca10787d462cb86a352]
--------------------------------------------------------------------------------
================================================================================
php-phpspec-prophecy-1.16.0-1.fc36 (FEDORA-2022-c783455a33)
Highly opinionated mocking framework for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.16.0** / 2022/11/29 * [added] Allow install with PHP 8.2
[@gquemener] * [added] Use shorter object IDs for object comparison
[@TysonAndre] * [added] Support standalone false,true and null types
[@kschatzle] * [added] Support doubling readonly classes [@gquemener] * [fixed]
Remove workarounds for unsupported HHVM [@TysonAndre] * [fixed] Clear error
message when doubling DNF types [@kschatzle]
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Remi Collet <remi(a)remirepo.net> - 1.16.0-1
- update to 1.16.0
--------------------------------------------------------------------------------
================================================================================
php-zetacomponents-base-1.9.4-1.fc36 (FEDORA-2022-bb8c8dfe77)
Zeta Base Component
--------------------------------------------------------------------------------
Update Information:
**Version 1.9.4** - Wednesday 30 November 2022 - PHP 8.2 compatibility, by
declaring all properties in the tests.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Remi Collet <remi(a)remirepo.net> - 1.9.4-1
- update to 1.9.4
--------------------------------------------------------------------------------
================================================================================
python-regex-2022.10.31-1.fc36 (FEDORA-2022-45644a382a)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update python-regex to the latest release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Thomas Moschny <thomas.moschny(a)gmx.de> - 2022.10.31-1
- Update to 2022.10.31.
--------------------------------------------------------------------------------
================================================================================
python-simple-rlp-0.1.3-1.fc36 (FEDORA-2022-3a55448bc0)
Simple RLP (Recursive Length Prefix)
--------------------------------------------------------------------------------
Update Information:
Inital packaging
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 16 2022 Jonny Heggheim <hegjon(a)gmail.com> - 0.1.3-1
- Inital packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2128486 - Review Request: python-simple-rlp - Simple RLP (Recursive Length
Prefix)
https://bugzilla.redhat.com/show_bug.cgi?id=2128486
--------------------------------------------------------------------------------
================================================================================
rust-capnp-0.14.11-1.fc36 (FEDORA-2022-fd7eeedd02)
Runtime library for Cap'n Proto data encoding
--------------------------------------------------------------------------------
Update Information:
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 /
RUSTSEC-2022-0068. This update also includes a rebuild of the only affected
application (the Sequoia PGP plugin for Thunderbird).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.14.11-1
- Update to version 0.14.11
--------------------------------------------------------------------------------
================================================================================
rust-sequoia-octopus-librnp-1.4.1-2.fc36 (FEDORA-2022-fd7eeedd02)
Reimplementation of RNP's interface using Sequoia
--------------------------------------------------------------------------------
Update Information:
Update the capnp crate to version 0.14.11 to address CVE-2022-46149 /
RUSTSEC-2022-0068. This update also includes a rebuild of the only affected
application (the Sequoia PGP plugin for Thunderbird).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.4.1-2
- Rebuild with capnp v0.14.11 for CVE-2022-46149 / RUSTSEC-2022-0068
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.1.1-10.fc36 (FEDORA-2022-0703f0114c)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
Remove ldflags from pkgconfig file completely Put epsonds.conf back, removed by
mistake ---- 2139882 - Plustek 8100 and 7600i VID:PID are missing in
genesys.conf
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.1.1-10
- remove ldflags from pkgconfig file completely
* Wed Nov 30 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.1.1-10
- put epsonds.conf back to sane-backends
* Thu Nov 24 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.1.1-9
- 2139882 - Plustek 8100 and 7600i VID:PID are missing in genesys.conf
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139882 - Plustek 8100 and 7600i VID:PID are missing in genesys.conf
https://bugzilla.redhat.com/show_bug.cgi?id=2139882
--------------------------------------------------------------------------------
================================================================================
snapd-2.57.6-1.fc36 (FEDORA-2022-8268fa6877)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 30 2022 Maciek Borzecki <maciek.borzecki(a)gmail.com>
- Release 2.57.6 to Fedora
* Tue Nov 15 2022 Michael Vogt <michael.vogt(a)ubuntu.com>
- New upstream release 2.57.6
- bugfixes
* Mon Oct 17 2022 Michael Vogt <michael.vogt(a)ubuntu.com>
- New upstream release 2.57.5
- image: clean snapd mount after preseeding
- wrappers,snap/quota: clear LogsDirectory= in the service unit
for journal namespaces
- cmd/snap,daemon: allow zero values from client to daemon for
journal rate-limit
- interfaces: steam-support allow pivot /run/media and /etc/nvidia
mount
- o/ifacestate: introduce DebugAutoConnectCheck hook
- release, snapd-apparmor, syscheck: distinguish WSL1 and WSL2
- autopkgtests: fix running autopkgtest on kinetic
- interfaces: add microceph interface
- interfaces: steam-support allow additional mounts
- many: add stub services
- interfaces: add kconfig paths to system-observe
- i/b/system_observe: honour root dir when checking for
/boot/config-*
- interfaces: grant access to speech-dispatcher socket
- interfaces: rework logic of unclashMountEntries
* Thu Sep 29 2022 Michael Vogt <michael.vogt(a)ubuntu.com>
- New upstream release 2.57.4
- release, snapd-apparmor: fixed outdated WSL detection
- overlord/ifacestate: fix conflict detection of auto-connection
- overlord: run install-device hook during factory reset
- image/preseed/preseed_linux: add missing new line
- boot: add factory-reset cases for boot-flags.
- interfaces: added read/write access to /proc/self/coredump_filter
for process-control
- interfaces: add read access to /proc/cgroups and
/proc/sys/vm/swappiness to system-observe
- fde: run fde-reveal-key with `DefaultDependencies=no`
- snapdenv: added wsl to userAgent
- tests: fix restore section for persistent-journal-namespace
- i/b/mount-control: add optional `/` to umount rules
- cmd/snap-bootstrap: changes to be able to boot classic rootfs
- cmd/snap-bootstrap: add CVM mode
* Thu Sep 15 2022 Michael Vogt <michael.vogt(a)ubuntu.com>
- New upstream release 2.57.3
- wrappers: journal namespaces did not honor journal.persistent
- snap/quota,wrappers: allow using 0 values for the journal rate to
override the system default values
- multiple: clear up naming convention for cpu-set quota
- i/b/mount-control: allow custom filesystem types
- i/b/system-observe: allow reading processes security label
- sandbox/cgroup: don't check V1 cgroup if V2 is active
- asserts,boot,secboot: switch to a secboot version measuring
classic
* Fri Sep 2 2022 Michael Vogt <michael.vogt(a)ubuntu.com>
- New upstream release 2.57.2
- store/tooling,tests: support UBUNTU_STORE_URL override env var
- packaging/*/tests/integrationtests: reload ssh.service, not
sshd.service
- tests: check snap download with snapcraft v7+ export-login auth
data
- store/tooling: support using snapcraft v7+ base64-encoded auth
data
- many: progress bars should use the overridable stdouts
- many: refactor store code to be able to use simpler form of auth
creds
- snap,store: drop support/consideration for anonymous download urls
- data: include snapd/mounts in preseeded blob
- many: Set SNAPD_APPARMOR_REEXEC=1
- overlord: track security profiles for non-active snaps
* Wed Aug 10 2022 Alberto Mardegan <alberto.mardegan(a)canonical.com>
- New upstream release 2.57.1
- cmd/snap-update-ns: handle mountpoint removal failures with EBUSY
- cmd/snap-update-ns: print current mount entries
- cmd/snap-update-ns: check the unused mounts with a cleaned path
- snap-confine: disable -Werror=array-bounds in __overflow tests to
fix build error on Ubuntu 22.10
- systemd: add `WantedBy=default.target` to snap mount units
(LP: #1983528)
* Thu Jul 28 2022 Michael Vogt <michael.vogt(a)ubuntu.com>
- New upstream release 2.57
- tests: Fix calls to systemctl is-system-running
- osutil/disks: handle GPT for 4k disk and too small tables
- packaging: import change from the 2.54.3-1.1 upload
- many: revert "features: disable refresh-app-awarness by default
again"
- tests: improve robustness of preparation for regression/lp-1803542
- tests: get the ubuntu-image binary built with test keys
- tests: remove commented code from lxd test
- interfaces/builtin: add more permissions for steam-support
- tests: skip interfaces-network-control on i386
- tests: tweak the "tests/nested/manual/connections" test
- interfaces: posix-mq: allow specifying message queue paths as an
array
- bootloader/assets: add ttyS0,115200n8 to grub.cfg
- i/b/desktop,unity7: remove name= specification on D-Bus signals
- tests: ensure that microk8s does not produce DENIED messages
- many: support non-default provenance snap-revisions in
DeriveSideInfo
- tests: fix `core20-new-snapd-does-not-break-old-initrd` test
- many: device and provenance revision authority cross checks
- tests: fix nested save-data test on 22.04
- sandbox/cgroup: ignore container slices when tracking snaps
- tests: improve 'ignore-running' spread test
- tests: add `debug:` section to `tests/nested/manual/connections`
- tests: remove leaking `pc-kernel.snap` in `repack_kernel_snap`
- many: preparations for revision authority cross checks including
device scope
- daemon,overlord/servicestate: followup changes from PR #11960 to
snap logs
- cmd/snap: fix visual representation of 'AxB%' cpu quota modifier.
- many: expose and support provenance from snap.yaml metadata
- overlord,snap: add support for per-snap storage on ubuntu-save
- nested: fix core-early-config nested test
- tests: revert lxd change to support nested lxd launch
- tests: add invariant check for leftover cgroup scopes
- daemon,systemd: introduce support for namespaces in 'snap logs'
- cmd/snap: do not track apps that wish to stay outside of the life-
cycle system
- asserts: allow classic + snaps models and add distribution to
model
- cmd/snap: add snap debug connections/connection commands
- data: start snapd after time-set.target
- tests: remove ubuntu 21.10 from spread tests due to end of life
- tests: Update the whitebox word to avoid inclusive naming issues
- many: mount gadget in run folder
- interfaces/hardware-observe: clean up reading access to sysfs
- tests: use overlayfs for interfaces-opengl-nvidia test
- tests: update fake-netplan-apply test for 22.04
- tests: add executions for ubuntu 22.04
- tests: enable centos-9
- tests: make more robust the files check in preseed-core20 test
- bootloader/assets: add fallback entry to grub.cfg
- interfaces/apparmor: add permissions for per-snap directory on
ubuntu-save partition
- devicestate: add more path to `fixupWritableDefaultDirs()`
- boot,secboot: reset DA lockout counter after successful boot
- many: Revert "overlord,snap: add support for per-snap storage on
ubuntu-save"
- overlord,snap: add support for per-snap storage on ubuntu-save
- tests: exclude centos-7 from kernel-module-load test
- dirs: remove unused SnapAppArmorAdditionalDir
- boot,device: extract SealedKey helpers from boot to device
- boot,gadget: add new `device.TpmLockoutAuthUnder()` and use it
- interfaces/display-control: allow changing brightness value
- asserts: add more context to key expiry error
- many: introduce IsUndo flag in LinkContext
- i/apparmor: allow calling which.debianutils
- tests: new profile id for apparmor in test preseed-core20
- tests: detect 403 in apt-hooks and skip test in this case
- overlord/servicestate: restart the relevant journald service when
a journal quota group is modified
- client,cmd/snap: add journal quota frontend (5/n)
- gadget/device: introduce package which provides helpers for
locations of things
- features: disable refresh-app-awarness by default again
- many: install bash completion files in writable directory
- image: fix handling of var/lib/extrausers when preseeding
uc20
- tests: force version 2.48.3 on xenial ESM
- tests: fix snap-network-erros on uc16
- cmd/snap-confine: be compatible with a snap rootfs built as a
tmpfs
- o/snapstate: allow install of unasserted gadget/kernel on
dangerous models
- interfaces: dynamic loading of kernel modules
- many: add optional primary key provenance to snap-revision, allow
delegating via snap-declaration revision-authority
- tests: fix boringcripto errors in centos7
- tests: fix snap-validate-enforce in opensuse-tumbleweed
- test: print User-Agent on failed checks
- interfaces: add memory stats to system_observe
- interfaces/pwm: Remove implicitOnCore/implicitOnClassic
- spread: add openSUSE Leap 15.4
- tests: disable core20-to-core22 nested test
- tests: fix nested/manual/connections test
- tests: add spread test for migrate-home command
- overlord/servicestate: refresh security profiles when services are
affected by quotas
- interfaces/apparmor: add missing apparmor rules for journal
namespaces
- tests: add nested test variant that adds 4k sector size
- cmd/snap: fix test failing due to timezone differences
- build-aux/snap: build against the snappy-dev/image PPA
- daemon: implement api handler for refresh with enforced validation
sets
- preseed: suggest to install "qemu-user-static"
- many: add migrate-home debug command
- o/snapstate: support passing validation sets to storehelpers via
RevisionOptions
- cmd/snapd-apparmor: fix unit tests on distros which do not support
reexec
- o/devicestate: post factory reset ensure, spread test update
- tests/core/basic20: Enable on uc22
- packaging/arch: install snapd-apparmor
- o/snapstate: support migrating snap home as change
- tests: enable snapd.apparmor service in all the opensuse systems
- snapd-apparmor: add more integration-ish tests
- asserts: store required revisions for missing snaps in
CheckInstalledSnaps
- overlord/ifacestate: fix path for journal redirect
- o/devicestate: factory reset with encryption
- cmd/snapd-apparmor: reimplement snapd-apparmor in Go
- squashfs: improve error reporting when `unsquashfs` fails
- o/assertstate: support multiple extra validation sets in
EnforcedValidationSets
- tests: enable mount-order-regression test for arm devices
- tests: fix interfaces network control
- interfaces: update AppArmor template to allow read the memory ���
- cmd/snap-update-ns: add /run/systemd to unrestricted paths
- wrappers: fix LogNamespace being written to the wrong file
- boot: release the new PCR handles when sealing for factory reset
- tests: add support fof uc22 in test uboot-unpacked-assets
- boot: post factory reset cleanup
- tests: add support for uc22 in listing test
- spread.yaml: add ubuntu-22.04-06 to qemu-nested
- gadget: check also mbr type when testing for implicit data
partition
- interfaces/system-packages-doc: allow read-only access to
/usr/share/cups/doc-root/ and /usr/share/gimp/2.0/help/
- tests/nested/manual/core20-early-config: revert changes that
disable netplan checks
- o/ifacestate: warn if the snapd.apparmor service is disabled
- tests: add spread execution for fedora 36
- overlord/hookstate/ctlcmd: fix timestamp coming out of sync in
unit tests
- gadget/install: do not assume dm device has same block size as
disk
- interfaces: update network-control interface with permissions
required by resolvectl
- secboot: stage and transition encryption keys
- secboot, boot: support and use alternative PCR handles during
factory reset
- overlord/ifacestate: add journal bind-mount snap layout when snap
is in a journal quota group (4/n)
- secboot/keymgr, cmd/snap-fde-keymgr: two step encryption key
change
- cmd/snap: cleanup and make the code a bit easier to read/maintain
for quota options
- overlord/hookstate/ctlcmd: add 'snapctl model' command (3/3)
- cmd/snap-repair: fix snap-repair tests silently failing
- spread: drop openSUSE Leap 15.2
- interfaces/builtin: remove the name=org.freedesktop.DBus
restriction in cups-control AppArmor rules
- wrappers: write journald config files for quota groups with
journal quotas (3/n)
- o/assertstate: auto aliases for apps that exist
- o/state: use more detailed NoStateError in state
- tests/main/interfaces-browser-support: verify jupyter notebooks
access
- o/snapstate: exclude services from refresh app awareness hard
running check
- tests/main/nfs-support: be robust against umount failures
- tests: update centos images and add new centos 9 image
- many: print valid/invalid status on snap validate --monitor
- secboot, boot: TPM provisioning mode enum, introduce
reprovisioning
- tests: allow to re-execute aborted tests
- cmd/snapd-apparmor: add explicit WSL detection to
is_container_with_internal_policy
- tests: avoid launching lxd inside lxd on cloud images
- interfaces: extra htop apparmor rules
- gadget/install: encrypted system factory reset support
- secboot: helpers for dealing with PCR handles and TPM resources
- systemd: improve error handling for systemd-sysctl command
- boot, secboot: separate the TPM provisioning and key sealing
- o/snapstate: fix validation sets restoring and snap revert on
failed refresh
- interfaces/builtin/system-observe: extend access for htop
- cmd/snap: support custom apparmor features dir with snap prepare-
image
- interfaces/mount-observe: Allow read access to /run/mount/utab
- cmd/snap: add help strings for set-quota options
- interfaces/builtin: add README file
- cmd/snap-confine: mount support cleanups
- overlord: execute snapshot cleanup in task
- i/b/accounts_service: fix path of introspectable objects
- interfaces/opengl: update allowed PCI accesses for RPi
- configcore: add core.system.ctrl-alt-del-action config option
- many: structured startup timings
- spread: switch back to building ubuntu-image from source
- many: optional recovery keys
- tests/lib/nested: fix unbound variable
- run-checks: fail on equality checks w/ ErrNoState
- snap-bootstrap: Mount as private
- tests: Test for gadget connections
- tests: set `br54.dhcp4=false` in the netplan-cfg test
- tests: core20 preseed/nested spread test
- systemd: remove the systemctl stop timeout handling
- interfaces/shared-memory: Update AppArmor permissions for
mmap+link
- many: replace ErrNoState equality checks w/ errors.Is()
- cmd/snap: exit w/ non-zero code on missing snap
- systemd: fix snapd systemd-unit stop progress notifications
- .github: Trigger daily riscv64 snapd edge builds
- interfaces/serial-port: add ttyGS to serial port allow list
- interfaces/modem-manager: Don't generate DBus plug policy
- tests: add spread test to test upgrade from release snapd to
current
- wrappers: refactor EnsureSnapServices
- testutil: add ErrorIs test checker
- tests: import spread shellcheck changes
- cmd/snap-fde-keymgr: best effort idempotency of add-recovery-key
- interfaces/udev: refactor handling of udevadm triggers for input
- secboot: support for changing encryption keys via keymgr
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.56.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
sympa-6.2.70-1.fc36 (FEDORA-2022-a243247a14)
Powerful multilingual List Manager
--------------------------------------------------------------------------------
Update Information:
See
https://github.com/sympa-community/sympa/releases/tag/6.2.70
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 30 2022 Xavier Bachelot <xavier(a)bachelot.org> 6.2.70-1
- Update to 6.2.70
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
6.2.68-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1846266 - sympa-httpd contains nginx user name
https://bugzilla.redhat.com/show_bug.cgi?id=1846266
--------------------------------------------------------------------------------
================================================================================
tucnak-4.38-1.fc36 (FEDORA-2022-5678a9328a)
VHF contest logging program
--------------------------------------------------------------------------------
Update Information:
This is new version of tucnak.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.38-1
- New version
Resolves: rhbz#2148552
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2148552 - tucnak-4.38 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2148552
--------------------------------------------------------------------------------
================================================================================
zimlib-8.1.0-1.fc36 (FEDORA-2022-b6d688b9de)
Reference implementation of the ZIM specification
--------------------------------------------------------------------------------
Update Information:
Updated to version 2.3.1.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 1 2022 Vitaly Zaitsev <vitaly(a)easycoding.org> - 8.1.0-1
- Updated to version 8.1.0.
--------------------------------------------------------------------------------