The following Fedora 36 Security updates need testing:
Age URL
17
https://bodhi.fedoraproject.org/updates/FEDORA-2022-15729fa33d
protobuf-3.19.6-1.fc36
15
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6d2b6ad1a6
golang-1.18.9-1.fc36
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3f40d00dd9
xorg-x11-server-Xwayland-22.1.7-1.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3727f00e4b
binwalk-2.3.3-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ce7369b9ec
GitPython-3.1.30-1.fc36
The following Fedora 36 Critical Path updates have yet to be approved:
Age URL
48
https://bodhi.fedoraproject.org/updates/FEDORA-2022-beaae40a8f
python-rpmautospec-0.3.1-1.fc36
46
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ca291a78cf glibc-2.35-21.fc36
23
https://bodhi.fedoraproject.org/updates/FEDORA-2022-df7e4caec9
gnome-shell-42.7-1.fc36 mutter-42.7-1.fc36
17
https://bodhi.fedoraproject.org/updates/FEDORA-2022-15729fa33d
protobuf-3.19.6-1.fc36
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-4848fe117b git-2.39.0-1.fc36
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-cbee720c8f xen-4.16.3-1.fc36
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3f40d00dd9
xorg-x11-server-Xwayland-22.1.7-1.fc36
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fabaf54050 gdb-12.1-3.fc36
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-19e019f39c
tpm2-tss-3.2.1-1.fc36
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3cff953f4b
edk2-20221117gitfff6d81270b5-8.fc36
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a31f25c6a1
samba-4.16.8-1.fc36
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9b30518993
linux-firmware-20221214-145.fc36
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b6c29072a3
thunderbird-102.6.0-2.fc36
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e7408b527a
libksba-1.6.3-1.fc36
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2a77cf04a0
libretls-3.7.0-1.fc36 netcat-1.219-2.fc36 rpki-client-8.2-3.fc36
The following builds have been pushed to Fedora 36 updates-testing
emacs-28.2-1.fc36
gi-docgen-2022.2-3.fc36
magic-8.3.358-1.fc36
mame-0.251-1.fc36
mmapper-22.12.1-1.fc36
python-dask-2022.12.1-1.fc36~bootstrap
rEFInd-0.13.3.1-5.fc36
rednotebook-2.29-1.fc36
rust-terminal_size-0.2.3-1.fc36
rust-terminal_size0.1-0.1.17-1.fc36
unrealircd-6.0.5-1.fc36
waydroid-1.3.4-3.fc36
xfe-1.45-1.fc36
Details about builds:
================================================================================
emacs-28.2-1.fc36 (FEDORA-2022-e37f239f2e)
GNU Emacs text editor
--------------------------------------------------------------------------------
Update Information:
Update to Emacs 28.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 1 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> - 1:28.2-1
- New upstream release 28.2, fixes rhbz#2126048
- Add patch to fix CVE-2022-45939, fixes rhbz#2149381
- spawn native-compilation processes with -Q rhbz#2155824 (petersen)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2108993 - Latest Emacs update (28.1-2) hanging system
https://bugzilla.redhat.com/show_bug.cgi?id=2108993
[ 2 ] Bug #2109473 - When install emacs-common-ess, emacs crashes the system when it
starts.
https://bugzilla.redhat.com/show_bug.cgi?id=2109473
[ 3 ] Bug #2109717 - emacs (emacs-ess) freezes system
https://bugzilla.redhat.com/show_bug.cgi?id=2109717
[ 4 ] Bug #2109745 - emacs-ess spawn multiple processes with ... --batch -l
/tmp/emacs-async-comp-ess-custom-*.el
https://bugzilla.redhat.com/show_bug.cgi?id=2109745
[ 5 ] Bug #2138441 - i3-gaps-4.21.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2138441
[ 6 ] Bug #2149381 - CVE-2022-45939 emacs: ctags local command execution vulnerability
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2149381
[ 7 ] Bug #2155824 - emacs-ess spawn multiple processes with ... --batch -l
/tmp/emacs-async-comp-ess-custom-*.el
https://bugzilla.redhat.com/show_bug.cgi?id=2155824
--------------------------------------------------------------------------------
================================================================================
gi-docgen-2022.2-3.fc36 (FEDORA-2022-02a236b2c1)
Documentation tool for GObject-based libraries
--------------------------------------------------------------------------------
Update Information:
Use tomli instated of deprecated python3-toml
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 31 2022 Miro Hron��ok <miro(a)hroncok.cz> 2022.2-3
- Use tomllib (tomli) instated of deprecated python3-toml
--------------------------------------------------------------------------------
================================================================================
magic-8.3.358-1.fc36 (FEDORA-2022-ccbcb8e9b1)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.3.357 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 31 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.3.358-1
- 8.3.358
--------------------------------------------------------------------------------
================================================================================
mame-0.251-1.fc36 (FEDORA-2022-585ec64bef)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release: *
https://www.mamedev.org/?p=520
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 31 2022 Julian Sikorski <belegdol(a)fedoraproject.org> 0.251-1
- Update to 0.251
--------------------------------------------------------------------------------
================================================================================
mmapper-22.12.1-1.fc36 (FEDORA-2022-6a682ea1e1)
Graphical MUME mapper
--------------------------------------------------------------------------------
Update Information:
MMapper 22.12.1 release.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 31 2022 Kalev Lember <klember(a)redhat.com> - 22.12.1-1
- Update to 22.12.1
--------------------------------------------------------------------------------
================================================================================
python-dask-2022.12.1-1.fc36~bootstrap (FEDORA-2022-5325a49906)
Parallel PyData with Task Scheduling
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 18 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 2022.12.1-1
- Update to latest version (#2154467)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2154467 - python-dask-2022.12.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2154467
--------------------------------------------------------------------------------
================================================================================
rEFInd-0.13.3.1-5.fc36 (FEDORA-2022-43e4dba21e)
User friendly EFI boot manager
--------------------------------------------------------------------------------
Update Information:
Fix `refind-install` and auto-install the correct bootloader package per
architecture
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 31 2022 Neal Gompa <ngompa(a)fedoraproject.org> - 0.13.3.1-5
- Make sure rEFInd metapackage pulls in correct bootloader package (rhbz#2157177)
- Fix syntax error in refind-install caused by efi-size detection patch (rhbz#2157178)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2157177 - rEFInd dependencies installs the wrong architecture
https://bugzilla.redhat.com/show_bug.cgi?id=2157177
[ 2 ] Bug #2157178 - refind-install syntax error
https://bugzilla.redhat.com/show_bug.cgi?id=2157178
--------------------------------------------------------------------------------
================================================================================
rednotebook-2.29-1.fc36 (FEDORA-2022-cbc4e239f8)
Daily journal with calendar, templates and keyword searching
--------------------------------------------------------------------------------
Update Information:
New upstream version 2.29. ---- New upstream version 2.28.1. ---- New
upstream version 2.28.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 31 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 2.29-1
- New upstream version 2.29
* Thu Dec 29 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 2.28.1-1
- New upstream version 2.28.1
* Wed Dec 28 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 2.28-1
- New upstream version 2.28
--------------------------------------------------------------------------------
================================================================================
rust-terminal_size-0.2.3-1.fc36 (FEDORA-2022-8de0a2f9e9)
Gets the size of your Linux or Windows terminal
--------------------------------------------------------------------------------
Update Information:
Updates terminal_size to 0.2 and provides a compatibility 0.1 package
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 21 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 0.2.3-1
- Update to 0.2.3
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.17-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103419 - rust-terminal_size-0.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2103419
--------------------------------------------------------------------------------
================================================================================
rust-terminal_size0.1-0.1.17-1.fc36 (FEDORA-2022-8de0a2f9e9)
Gets the size of your Linux or Windows terminal
--------------------------------------------------------------------------------
Update Information:
Updates terminal_size to 0.2 and provides a compatibility 0.1 package
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 22 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 0.1.17-1
- Initial Fedora package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103419 - rust-terminal_size-0.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2103419
--------------------------------------------------------------------------------
================================================================================
unrealircd-6.0.5-1.fc36 (FEDORA-2022-a9d88822df)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
# UnrealIRCd 6.0.5 This release adds experimental JSON-RPC support, a new TLINE
command, logging to files has been improved and there are several other
enhancements. There are also two important changes: 1) servers that use
websockets now also need to load the "webserver" module (so you may need to
edit
your config file). 2) upstream now requires by default TLSv1.2 or higher and a
modern cipher for IRC clients. This should be no problem for clients using any
reasonably new SSL/TLS library (from 2014 or later). ## Enhancements *
Internally the websocket module has been split up into 3 modules:
`websocket_common`, `webserver` and `websocket`. The `websocket_common` one is
loaded by default via modules.default.conf, the other two are not.
**Important:** If you use websockets then you need to load two modules now
(instead of only one): ``` loadmodule "websocket"; loadmodule
"webserver";
``` * [
JSON-RPC](https://www.unrealircd.org/docs/JSON-RPC) API for UnrealIRCd.
This is work in progress. * New `TLINE` command to test *LINEs. This can be
especially useful for checking how many people match an [extended server
ban](https://www.unrealircd.org/docs/Extended_server_bans) such as `TLINE ~C:NL`
* When an IRCOp is outside the channel and does `MODE #channel` they will now
get to see the mode parameters too. This depends on the
`channel:see:mode:remote` [operclass
permission](https://www.unrealircd.org/docs/Operclass_permissions) which all
IRCOps have by default if you use the default operclasses. * [Logging to a
file](https://www.unrealircd.org/docs/Log_block) now creates a directory
structure if needed. * You could already use: ``` log { source {
!debug; all; } destination { file "ircd.%Y-%m-%d.log"; } } ``` * But now
you can also use: ``` log { source { !debug; all; } destination { file
"%Y-%m-%d/ircd.log"; } } ``` This is especially useful if you output to
multiple log files and then want them grouped by date in a directory. * Add
additional variables in
[
blacklist::reason](https://www.unrealircd.org/docs/Blacklist_block): *
`$blacklist`: name of the blacklist block * `$dnsname`: the
blacklist::dns::name * `$dnsreply`: the DNS reply code * Resolved technical
issue so opers can `REHASH` from [Websocket
connections](https://www.unrealircd.org/docs/WebSocket_support). * In the [TLD
block](https://www.unrealircd.org/docs/Tld_block) the use of `tld::motd` and
`tld::rules` is now optional. * Log which oper actually initiated a server link
request (`CONNECT`) ## Changes * SSL/TLS: By default upstream now requires
TLSv1.2 or later and a modern cipher with forward secrecy. Otherwise the
connection is refused. * Since UnrealIRCd 4.2.2 (March 2019) users see an on-
connect notice with a warning when they use an outdated TLS protocol or cipher
that does not meet these requirements. * This move also reflects the phase out
of versions below TLSv1.2 which happened in browsers in 2020/2021. * In
practice on the client-side this requires at least: * OpenSSL 1.0.1
(released in 2012) * GnuTLS 3.2.6 (2013) * Android 4.4.2 (2013) * Or
presumably any other SSL/TLS library that is not 9+ years old * If you want to
revert back to the previous less secure settings, then look under ''Previous
less secure setting'' in [TLS Ciphers and
protocols](https://www.unrealircd.org/docs/TLS_Ciphers_and_protocols). * The
code for handling [`set::anti-flood::everyone::connect-
flood`](https://www.unrealircd.org/docs/Anti-flood_settings#connect-flood) is
now in its own module `connect-flood`. This module is loaded by default, no
changes needed in your configuration file. * Similarly, [`set:max-unknown-
connections-per-ip`](https://www.unrealircd.org/docs/Set_block#set::max-u...
connections-per-ip) is now handled by the new module `max-unknown-connections-
per-ip`. This module is loaded by default as well, no changes needed in your
configuration file. * When timing out on the
[
authprompt](https://www.unrealircd.org/docs/Set_block#set::authentication-
prompt) module, the error (quit message) is now the original (ban) reason for
the prompt, instead of the generic `Registration timeout`. ## Fixes * Crash
when linking. This requires a certain sequence of events: first a server is
linked in successfully, then it needs to REHASH, and then a new link attempt has
to come in with the same server name (for example because there is a network
issue and the old link has not timed out yet). If all that happens, then an
UnreaIRCd 6 server may crash, but not always. * Warning message about moddata
creationtime when linking. * [Snomask
`+j`](https://www.unrealircd.org/docs/Snomasks) was not showing remote joins,
even though it did show remote parts and kicks. * Leak of 1 file descriptor per
/REHASH (the control socket). * Ban letters showing up twice in 005 EXTBAN= *
Setting [set::authentication-
prompt::enabled](https://www.unrealircd.org/docs/Set_block#set::authentic...
prompt) to `no` was ignored. The default is still `yes`. ## Developers and
protocol * Add `CALL_CMD_FUNC(cmd_func_name)` for calling commands in the same
module, see [this
commit](https://github.com/unrealircd/unrealircd/commit/dc55c3
ec9f19e5ed284e5a786f646d0e6bb60ef9). Benefit of this is that it will keep
working if we ever change command paramters. * Add
`CALL_NEXT_COMMAND_OVERRIDE()` which can be used instead of
`CallCommandOverride()`, see also [this
commit](https://github.com/unrealircd/un
realircd/commit/4e5598b6cf0986095f757f31a2540b03e4d235dc). This too, will keep
working if we ever change command parameters. * During loading and rehash we now
set `loop.config_status` to one of `CONFIG_STATUS_*` so modules (and core) can
see at what step we are during configuration file and module processing. * New
RPC API. See the `src/modules/rpc/` directory for examples. * New function
`get_nvplist(NameValuePrioList *list, const char *name)`
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 31 2022 Robert Scheck <robert(a)fedoraproject.org> 6.0.5-1
- Upgrade to 6.0.5 (#2151482)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2151482 - unrealircd-6.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2151482
--------------------------------------------------------------------------------
================================================================================
waydroid-1.3.4-3.fc36 (FEDORA-2022-d5c219f4bc)
Container-based approach to boot a full Android system on GNU/Linux
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 27 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.4-3
- Fix description typos etc.
- Validate desktop and metainfo files
- Reorder post install scriptlets
* Sun Dec 25 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.4-2
- Add selinux label to android rootfs
- Make package noarch
* Wed Dec 14 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.4-1
- Update to 1.3.4
* Sat Nov 5 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.3-3
- Override selinux context of the android rootfs
- Fixes
https://github.com/casualsnek/waydroid_script
* Sun Oct 30 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.3-2
- Add sepolicy for updating from the android app
* Sun Sep 25 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.3-1
- Update to 1.3.3
* Fri Sep 2 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.1-1
- Update to 1.3.1
* Tue Aug 9 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.3.0-1
- Update to 1.3.0
* Sun Apr 17 2022 Alessandro Astone <ales.astone(a)gmail.com> - 1.2.1-1
- Update to 1.2.1
* Mon Mar 7 2022 Alessandro Astone <ales.astone(a)gmail.com> -
1.2.0-7.20220307git1.2.0
- Recommend pyclip
* Sat Feb 26 2022 Alessandro Astone <ales.astone(a)gmail.com> -
1.2.0-5.20220226git1.2.0
- Add sepolicy for crash handler
* Fri Feb 25 2022 Alessandro Astone <ales.astone(a)gmail.com> -
1.2.0-4.20220225git1.2.0
- Respin package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2120119 - Review Request: waydroid - run android applications on wayland
https://bugzilla.redhat.com/show_bug.cgi?id=2120119
--------------------------------------------------------------------------------
================================================================================
xfe-1.45-1.fc36 (FEDORA-2022-036cd08a0f)
X File Explorer File Manager
--------------------------------------------------------------------------------
Update Information:
New version 1.45 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 31 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.45-1
- 1.45
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.44-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------