Fedora rawhide compose report: 20220711.n.0 changes
by Fedora Rawhide Report
OLD: Fedora-Rawhide-20220710.n.0
NEW: Fedora-Rawhide-20220711.n.0
===== SUMMARY =====
Added images: 1
Dropped images: 0
Added packages: 12
Dropped packages: 0
Upgraded packages: 61
Downgraded packages: 0
Size of added packages: 1.44 MiB
Size of dropped packages: 0 B
Size of upgraded packages: 1.36 GiB
Size of downgraded packages: 0 B
Size change of upgraded packages: -1.32 MiB
Size change of downgraded packages: 0 B
===== ADDED IMAGES =====
Image: Comp_Neuro live x86_64
Path: Labs/x86_64/iso/Fedora-Comp_Neuro-Live-x86_64-Rawhide-20220711.n.0.iso
===== DROPPED IMAGES =====
===== ADDED PACKAGES =====
Package: python-token-bucket-0.3.0-1.fc37
Summary: A Token Bucket implementation
RPMs: python3-token-bucket
Size: 19.22 KiB
Package: rust-aparato-6.0.2-1.fc37
Summary: Pci.ids-compliant library for getting information about available PCI devices
RPMs: rust-aparato+default-devel rust-aparato-devel
Size: 24.62 KiB
Package: rust-const_format_proc_macros-0.2.22-1.fc37
Summary: Implementation detail of the `const_format` crate
RPMs: rust-const_format_proc_macros+all-devel rust-const_format_proc_macros+debug-devel rust-const_format_proc_macros+default-devel rust-const_format_proc_macros+derive-devel rust-const_format_proc_macros+syn-devel rust-const_format_proc_macros-devel
Size: 70.65 KiB
Package: rust-daemonize-0.4.1-2.fc37
Summary: Library to enable your code run as a daemon process on Unix-like systems
RPMs: rust-daemonize+default-devel rust-daemonize-devel
Size: 29.41 KiB
Package: rust-gmp-mpfr-sys-1.4.8-1.fc37
Summary: Rust FFI bindings for GMP, MPFR and MPC
RPMs: rust-gmp-mpfr-sys+c-no-tests-devel rust-gmp-mpfr-sys+cnodelete-devel rust-gmp-mpfr-sys+default-devel rust-gmp-mpfr-sys+fail-on-warnings-devel rust-gmp-mpfr-sys+force-cross-devel rust-gmp-mpfr-sys+mpc-devel rust-gmp-mpfr-sys+mpfr-devel rust-gmp-mpfr-sys+use-system-libs-devel rust-gmp-mpfr-sys-devel
Size: 323.12 KiB
Package: rust-impls-1.0.3-1.fc37
Summary: Determine if a type implements a logical trait expression
RPMs: rust-impls+default-devel rust-impls-devel
Size: 27.79 KiB
Package: rust-local-encoding-0.2.0-1.fc37
Summary: Rust library for encoding/decoding a string with local charset
RPMs: rust-local-encoding+default-devel rust-local-encoding-devel
Size: 20.94 KiB
Package: rust-local_ipaddress-0.1.3-1.fc37
Summary: Get your local IP address without panic
RPMs: local_ipaddress rust-local_ipaddress+default-devel rust-local_ipaddress-devel
Size: 756.13 KiB
Package: rust-stfu8-0.2.5-1.fc37
Summary: Sorta Text Format in UTF-8
RPMs: rust-stfu8+default-devel rust-stfu8+testing-devel rust-stfu8-devel
Size: 49.92 KiB
Package: rust-tokio-compat-0.1.6-1.fc37
Summary: Compatibility between tokio 0.2 and legacy versions
RPMs: rust-tokio-compat+blocking-devel rust-tokio-compat+default-devel rust-tokio-compat+pin-project-lite-devel rust-tokio-compat+rt-current-thread-devel rust-tokio-compat+rt-full-devel rust-tokio-compat+sink-devel rust-tokio-compat+tokio-current-thread-01-devel rust-tokio-compat+tokio-executor-01-devel rust-tokio-compat+tokio-reactor-01-devel rust-tokio-compat+tokio-timer-02-devel rust-tokio-compat-devel
Size: 102.29 KiB
Package: rust-typed-builder-0.10.0-1.fc37
Summary: Compile-time type-checked builder derive
RPMs: rust-typed-builder+default-devel rust-typed-builder-devel
Size: 37.51 KiB
Package: rust-uucore_procs-0.0.14-1.fc37
Summary: Uutils ~ 'uucore' proc-macros
RPMs: rust-uucore_procs+default-devel rust-uucore_procs-devel
Size: 16.95 KiB
===== DROPPED PACKAGES =====
===== UPGRADED PACKAGES =====
Package: airinv-1.00.7-1.fc37
Old package: airinv-1.00.5-7.fc37
Summary: C++ Simulated Airline Inventory Management System library
RPMs: airinv airinv-devel airinv-doc
Size: 3.48 MiB
Size change: 7.99 KiB
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.00.5-9
- Rebuilt for Boost 1.78
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.7-1
- Upgraded to v1.00.7
Package: airrac-1.00.6-1.fc37
Old package: airrac-1.00.4-11.fc37
Summary: C++ Simulated Revenue Accounting (RAC) System Library
RPMs: airrac airrac-devel airrac-doc
Size: 1.16 MiB
Size change: 1.33 KiB
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.00.4-15
- Rebuilt for Boost 1.78
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.6-1
- Upgraded to v1.00.6
Package: airtsp-1.01.9-1.fc37
Old package: airtsp-1.01.8-5.fc37
Summary: C++ Simulated Airline Travel Solution Provider Library
RPMs: airtsp airtsp-devel airtsp-doc
Size: 2.29 MiB
Size change: 5.06 KiB
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.01.8-8
- Rebuilt for Boost 1.78
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.01.9-1
- Upgraded to v1.01.9
Package: aml-0.2.2-1.fc37
Old package: aml-0.2.0-4.fc36
Summary: Another Main Loop
RPMs: aml aml-devel
Size: 151.30 KiB
Size change: 573 B
Changelog:
* Sun Jul 10 2022 Bob Hepple <bob.hepple(a)gmail.com> - 0.2.2-1
- new version
Package: blender-1:3.2.1-2.fc37
Old package: blender-1:3.2.1-1.fc37
Summary: 3D modeling, animation, rendering and post-production
RPMs: blender blender-rpm-macros
Size: 158.91 MiB
Size change: 9.76 KiB
Changelog:
* Mon Jul 11 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> 1:3.2.1-2
- Synchronize release with F35 version
Package: ceph-2:17.2.1-4.fc37
Old package: ceph-2:17.2.1-3.fc37
Summary: User space components of the Ceph file system
RPMs: ceph ceph-base ceph-common ceph-fuse ceph-grafana-dashboards ceph-immutable-object-cache ceph-mds ceph-mgr ceph-mgr-cephadm ceph-mgr-dashboard ceph-mgr-diskprediction-local ceph-mgr-k8sevents ceph-mgr-modules-core ceph-mgr-rook ceph-mon ceph-osd ceph-prometheus-alerts ceph-radosgw ceph-resource-agents ceph-selinux ceph-test ceph-volume cephadm cephfs-java cephfs-mirror cephfs-shell cephfs-top libcephfs-devel libcephfs2 libcephfs_jni-devel libcephfs_jni1 libcephsqlite libcephsqlite-devel librados-devel librados2 libradospp-devel libradosstriper-devel libradosstriper1 librbd-devel librbd1 librgw-devel librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw rados-objclass-devel rbd-fuse rbd-mirror rbd-nbd
Size: 338.26 MiB
Size change: 32.24 KiB
Changelog:
* Sun Jul 10 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2:17.2.1-4
- Rebuild for new gtest
Package: davix-0.8.2-2.fc37
Old package: davix-0.8.2-1.fc37
Summary: Toolkit for http based file management
RPMs: davix davix-devel davix-doc davix-libs davix-tests
Size: 4.81 MiB
Size change: 2.28 KiB
Changelog:
* Sun Jul 10 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.8.2-2
- Rebuild for new gtest
Package: drbd-9.21.3-1.fc37
Old package: drbd-9.21.1-1.fc37
Summary: DRBD user-land tools and scripts
RPMs: drbd drbd-bash-completion drbd-pacemaker drbd-rgmanager drbd-udev drbd-utils drbd-xen
Size: 3.37 MiB
Size change: 7.30 KiB
Changelog:
* Tue Jun 14 2022 Carl George <carl(a)george.computer> - 9.21.1-2
- Change drbd-pacemaker to recommend instead of require pacemaker on EPEL8/EPEL9 rhbz#2086146
* Sun Jul 10 2022 Peter Hanecak <hany(a)hany.sk> - 9.21.3-1
- Upstream release of 9.21.3
Package: fritzing-0.9.10-1.20220514.fc37
Old package: fritzing-0.9.9-2.20210922.fc37
Summary: Electronic Design Automation software; from prototype to product
RPMs: fritzing fritzing-parts
Size: 33.15 MiB
Size change: 519.91 KiB
Changelog:
* Fri Jul 08 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 0.9.10-1.20220514
- Update to v0.9.10
Package: gdl-1.0.1-7.fc37
Old package: gdl-1.0.1-6.fc37
Summary: GNU Data Language
RPMs: gdl gdl-common python3-gdl
Size: 53.15 MiB
Size change: -845 B
Changelog:
* Sun Jul 10 2022 Orion Poplawski <orion(a)nwra.com> - 1.0.1-7
- Drop java for i686 (bz#2104042)
Package: gfal2-2.20.5-3.fc37
Old package: gfal2-2.20.5-2.fc37
Summary: Grid file access library 2.0
RPMs: gfal2 gfal2-all gfal2-devel gfal2-doc gfal2-plugin-dcap gfal2-plugin-file gfal2-plugin-gridftp gfal2-plugin-http gfal2-plugin-mock gfal2-plugin-sftp gfal2-plugin-srm gfal2-plugin-xrootd gfal2-tests
Size: 2.32 MiB
Size change: 4.79 KiB
Changelog:
* Sun Jul 10 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.20.5-3
- Rebuild for new gtest
Package: gnome-shell-extension-freon-2:45-1.20220710gitdab42ff.fc37
Old package: gnome-shell-extension-freon-2:44-3.fc36
Summary: GNOME Shell extension to display system temperature, voltage, and fan speed
RPMs: gnome-shell-extension-freon
Size: 50.98 KiB
Size change: 2.42 KiB
Changelog:
* Sun Jul 10 2022 Linus Walleij <triad(a)df.lth.se> - 2:45-1
- Update to 45 (#2009382)
- Turkish translation file problem is fixed upstream.
- Trash po directory removed upstream
Package: goaccess-1.6.1-1.fc37
Old package: goaccess-1.6-1.fc37
Summary: Real-time web log analyzer and interactive viewer
RPMs: goaccess
Size: 1.35 MiB
Size change: 5.42 KiB
Changelog:
* Sun Jul 10 2022 Fabio Alessandro Locati <fale(a)fedoraproject.org> - 1.6.1-1
- Update to 1.6.1, fixes rhbz#2103284
Package: gtengine-1:6.4-1.fc37
Old package: gtengine-1:5.12-2.fc36
Summary: Library for computations in mathematics, graphics, image analysis, and physics
RPMs: gtengine gtengine-devel gtengine-samples
Size: 159.78 MiB
Size change: -2.48 MiB
Changelog:
* Sun Jul 10 2022 Antonio Trande <sagitter(a)fedoraproject.org> 1:6.4-1
- Release 6.4
Package: hatari-2.4.0-1.fc37
Old package: hatari-2.3.1-4.fc36
Summary: An Atari ST/STE/TT/Falcon emulator suitable for playing games
RPMs: hatari hatari-ui
Size: 22.67 MiB
Size change: 511.43 KiB
Changelog:
* Sun Jul 10 2022 Andrea Musuruane <musuruan(a)gmail.com> - 2.4.0-1
- Updated to new upstream release
Package: hdf-4.2.15-10.fc37
Old package: hdf-4.2.15-9.fc36
Summary: A general purpose library and file format for storing scientific data
RPMs: hdf hdf-devel hdf-libs hdf-static java-hdf
Size: 7.60 MiB
Size change: -355.27 KiB
Changelog:
* Sun Jul 10 2022 Orion Poplawski <orion(a)nwra.com> - 4.2.15-10
- Drop java for i686 (bz#2104047)
Package: hdf5-1.12.1-9.fc37
Old package: hdf5-1.12.1-8.fc37
Summary: A general purpose library and file format for storing scientific data
RPMs: hdf5 hdf5-devel hdf5-mpich hdf5-mpich-devel hdf5-mpich-static hdf5-openmpi hdf5-openmpi-devel hdf5-openmpi-static hdf5-static java-hdf5
Size: 82.28 MiB
Size change: -125.62 KiB
Changelog:
* Sun Jul 10 2022 Orion Poplawski <orion(a)nwra.com> - 1.12.1-9
- Drop java for i686 (bz#2104046)
Package: kirc-0.3.1-1.fc37
Old package: kirc-0.2.9-2.fc36
Summary: Tiny IRC client written in POSIX C99
RPMs: kirc
Size: 94.40 KiB
Size change: 1.89 KiB
Changelog:
* Mon Jul 11 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.3.1-1
- Update to 0.3.1; Fixes: RHBZ#2043587
Package: libcamera-0.0.0~git.20220126.bb84fc6-4.fc37
Old package: libcamera-0.0.0~git.20220126.bb84fc6-3.fc37
Summary: A library to support complex camera ISPs
RPMs: libcamera libcamera-devel libcamera-doc libcamera-gstreamer libcamera-ipa libcamera-qcam libcamera-tools
Size: 15.90 MiB
Size change: 2.26 KiB
Changelog:
* Sun Jul 10 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.0.0~git.20220126.bb84fc6-4
- Rebuild for new gtest
Package: libnbd-1.13.6-1.fc37
Old package: libnbd-1.13.5-1.fc37
Summary: NBD client library in userspace
RPMs: libnbd libnbd-bash-completion libnbd-devel nbdfuse ocaml-libnbd ocaml-libnbd-devel python3-libnbd
Size: 3.86 MiB
Size change: 2.43 KiB
Changelog:
* Sun Jul 10 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.13.6-1
- New upstream development version 1.13.6
Package: libquentier-0.5.0-12.fc37
Old package: libquentier-0.5.0-11.fc36
Summary: Set of Qt/C++ APIs for feature rich desktop clients for Evernote service
RPMs: libquentier libquentier-devel libquentier-doc
Size: 9.81 MiB
Size change: 117.89 KiB
Changelog:
* Sun Jul 10 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.5.0-12
- Bump to commit 04b7e7d8415b2610d30ce727db9cebc77387928e
Package: lksctp-tools-1.0.19-1.fc37
Old package: lksctp-tools-1.0.18-12.fc36
Summary: User-space access to Linux Kernel SCTP
RPMs: lksctp-tools lksctp-tools-devel lksctp-tools-doc
Size: 1.61 MiB
Size change: 571 B
Changelog:
* Sun Jun 05 2022 Peter Hanecak <hany(a)hany.sk> - 1.0.19-1
- Updated to 1.0.19
- Patches dropped since changes are now incorporated in the upstream
Package: mate-control-center-1.26.0-4.fc37
Old package: mate-control-center-1.26.0-3.fc36
Summary: MATE Desktop control-center
RPMs: mate-control-center mate-control-center-devel mate-control-center-filesystem
Size: 14.22 MiB
Size change: -17.37 KiB
Changelog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-4
- add upstream commits from 1.26 branch
Package: mate-polkit-1.26.0-3.fc37
Old package: mate-polkit-1.26.0-2.fc36
Summary: Integrates polkit authentication for MATE desktop
RPMs: mate-polkit
Size: 353.95 KiB
Size change: -278 B
Changelog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-3
- Fix segfault from gdk_x11_get_server_time if not on X11
Package: mate-power-manager-1.26.0-3.fc37
Old package: mate-power-manager-1.26.0-2.fc36
Summary: MATE power management service
RPMs: mate-power-manager
Size: 23.51 MiB
Size change: 364 B
Changelog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-3
- add upstream commits from 1.26 branch
Package: mate-utils-1.26.0-3.fc37
Old package: mate-utils-1.26.0-2.fc36
Summary: MATE utility programs
RPMs: mate-dictionary mate-disk-image-mounter mate-disk-usage-analyzer mate-screenshot mate-search-tool mate-system-log mate-utils mate-utils-common mate-utils-devel
Size: 125.41 MiB
Size change: -1.28 KiB
Changelog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-3
- add upstream commits from 1.26 branch
Package: mir-2.8.0-3.fc37
Old package: mir-2.8.0-2.fc37
Summary: Next generation display server
RPMs: mir-common-libs mir-demos mir-devel mir-doc mir-lomiri-libs mir-server-libs mir-test-libs-static mir-test-tools
Size: 14.00 MiB
Size change: 2.16 KiB
Changelog:
* Sun Jul 10 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.8.0-3
- Rebuild for new gtest
Package: mousepad-0.5.10-1.fc37
Old package: mousepad-0.5.9-2.fc37
Summary: Simple text editor for Xfce desktop environment
RPMs: libmousepad0 mousepad mousepad-devel
Size: 2.13 MiB
Size change: 2.28 KiB
Changelog:
* Sun Jul 10 2022 Mukundan Ragavan <nonamedotc(a)gmail.com> 0.5.10-1
- update to v0.5.10
Package: nbdkit-1.31.11-1.fc37
Old package: nbdkit-1.31.10-1.fc37
Summary: NBD server
RPMs: nbdkit nbdkit-S3-plugin nbdkit-bash-completion nbdkit-basic-filters nbdkit-basic-plugins nbdkit-cc-plugin nbdkit-cdi-plugin nbdkit-curl-plugin nbdkit-devel nbdkit-example-plugins nbdkit-ext2-filter nbdkit-guestfs-plugin nbdkit-gzip-filter nbdkit-iso-plugin nbdkit-libvirt-plugin nbdkit-linuxdisk-plugin nbdkit-lua-plugin nbdkit-nbd-plugin nbdkit-ocaml-plugin nbdkit-ocaml-plugin-devel nbdkit-perl-plugin nbdkit-python-plugin nbdkit-ruby-plugin nbdkit-server nbdkit-srpm-macros nbdkit-ssh-plugin nbdkit-stats-filter nbdkit-tar-filter nbdkit-tcl-plugin nbdkit-tmpdisk-plugin nbdkit-torrent-plugin nbdkit-vddk-plugin nbdkit-xz-filter
Size: 7.24 MiB
Size change: -81.76 KiB
Changelog:
* Sun Jul 10 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.31.11-1
- New upstream development version 1.31.11
Package: neatvnc-0.5.1-1.fc37
Old package: neatvnc-0.4.0-4.fc36
Summary: a liberally licensed VNC server library
RPMs: neatvnc neatvnc-devel
Size: 273.61 KiB
Size change: 67.11 KiB
Changelog:
* Sun Jul 10 2022 Bob Hepple <bob.hepple(a)gmail.com> - 0.5.1-1
- new version
Package: octave-6:7.1.0-2.fc37
Old package: octave-6:7.1.0-1.fc37
Summary: A high-level language for numerical computations
RPMs: octave octave-devel octave-doc
Size: 94.78 MiB
Size change: -38.44 KiB
Changelog:
* Sun Jul 10 2022 Orion Poplawski <orion(a)nwra.com> - 6:7.1.0-2
- Drop java for i686 (bz#2104081)
Package: opentrep-0.07.11-1.fc37
Old package: opentrep-0.07.10-3.fc37
Summary: C++ library providing a clean API for parsing travel-focused requests
RPMs: opentrep opentrep-devel opentrep-doc python3-opentrep
Size: 5.76 MiB
Size change: 21.49 KiB
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 0.07.10-4
- Rebuilt for Boost 1.78
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> 0.07.10-5
- Rebuilt for Python 3.11
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 0.07.11-1
- Upgraded to v0.07.11
Package: perl-Sub-HandlesVia-0.027-4.fc37
Old package: perl-Sub-HandlesVia-0.027-2.fc37
Summary: Alternative handles_via implementation
RPMs: perl-Sub-HandlesVia
Size: 94.60 KiB
Size change: 201 B
Changelog:
* Sun Jul 10 2022 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 0.027-3
- Drop BR: perl(Class::Tiny) for Sub-HandlesVia >= 0.29.
* Sun Jul 10 2022 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 0.027-4
- Drop BR: perl(Scope::Guard) for Sub-HandlesVia >= 0.30.
Package: perl-WWW-Mechanize-2.10-1.fc37
Old package: perl-WWW-Mechanize-2.09-1.fc37
Summary: Automates web page form & link interaction
RPMs: perl-WWW-Mechanize
Size: 152.16 KiB
Size change: 596 B
Changelog:
* Sun Jul 10 2022 Emmanuel Seyman <emmanuel(a)seyman.fr> - 2.10-1
- Update to 2.10
Package: pre-commit-2.19.0-2.fc37
Old package: pre-commit-2.19.0-1.fc37
Summary: Framework for managing and maintaining multi-language pre-commit hooks
RPMs: pre-commit
Size: 313.64 KiB
Size change: 39.82 KiB
Changelog:
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 2.19.0-2
- Rebuilt for Python 3.11
Package: python-django-uuslug-2.0.0-1.fc37
Old package: python-django-uuslug-1.2.0-6.fc36
Summary: A Django slugify application that guarantees uniqueness and handles Unicode
RPMs: python3-django-uuslug
Size: 19.80 KiB
Size change: -2.24 KiB
Changelog:
* Tue Jun 14 2022 Python Maint <python-maint(a)redhat.com> - 1.2.0-7
- Rebuilt for Python 3.11
* Sun Jul 10 2022 Chenxiong Qi <qcxhome(a)gmail.com> - 2.0.0-1
- Build 2.0.0
Package: python-iniparse-0.5-2.fc37
Old package: python-iniparse-0.4-47.fc37
Summary: Accessing and Modifying INI files
RPMs: python3-iniparse
Size: 50.14 KiB
Size change: -203 B
Changelog:
* Mon Jun 13 2022 Jiri Hnidek <jhnidek(a)redhat.com> - 0.5-1
- Release 0.5
- Moved project to https://github.com/candlepin/python-iniparse
- Added support for Python 3 to upstream project
* Mon Jun 13 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.5-2
- Port to pyproject-rpm-macros
- Mention license breakdown in a spec file comment
- Update summary and description from upstream
Package: python-molecule-docker-1.1.0-3.fc37
Old package: python-molecule-docker-1.1.0-2.fc36
Summary: Molecule Docker plugin
RPMs: python3-molecule-docker
Size: 30.02 KiB
Size change: 1.66 KiB
Changelog:
* Sun Jul 10 2022 Python Maint <python-maint(a)redhat.com> - 1.1.0-3
- Rebuilt for Python 3.11
Package: python-pyscaffold-4.2.1-3.fc37
Old package: python-pyscaffold-4.2.1-2.fc37
Summary: Template tool for putting up the scaffold of a Python project
RPMs: python-pyscaffold-doc python3-pyscaffold
Size: 851.14 KiB
Size change: 29.24 KiB
Changelog:
* Sun Jul 10 2022 Python Maint <python-maint(a)redhat.com> 4.2.1-3
- Rebuilt for Python 3.11
Package: python-qtconsole-5.3.1-1.fc37
Old package: python-qtconsole-5.3.0-2.fc37
Summary: Jupyter Qt console
RPMs: python-qtconsole-doc python3-qtconsole
Size: 740.34 KiB
Size change: 1.14 KiB
Changelog:
* Mon Jul 11 2022 Mukundan Ragavan <nonamedotc(a)gmail.com> 5.3.1-1
- update to v5.3.1
Package: python-spyder-kernels-1:2.3.2-1.fc37
Old package: python-spyder-kernels-1:2.3.1-5.fc37
Summary: Jupyter kernels for the Spyder console
RPMs: python3-spyder-kernels
Size: 164.49 KiB
Size change: 1.29 KiB
Changelog:
* Mon Jul 11 2022 Mukundan Ragavan <nonamedotc(a)gmail.com> 1:2.3.2-1
- update to v2.3.2
Package: python-steps-3.6.0-11.fc37
Old package: python-steps-3.6.0-8.fc37
Summary: STochastic Engine for Pathway Simulation
RPMs: python3-steps python3-steps-mpich python3-steps-openmpi
Size: 19.07 MiB
Size change: 1.61 KiB
Changelog:
* Sun Jul 10 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 3.6.0-11
- fix: correct macro
Package: python-swagger-spec-validator-2.7.4-1.fc37
Old package: python-swagger-spec-validator-2.7.3-6.fc37
Summary: Validation of Swagger specifications
RPMs: python3-swagger-spec-validator
Size: 50.95 KiB
Size change: -1.20 KiB
Changelog:
* Sun Jul 10 2022 Kevin Fenzi <kevin(a)scrye.com> - 2.7.4-1
- Update to 2.7.4.
Package: ristretto-0.12.3-1.fc37
Old package: ristretto-0.12.2-2.fc36
Summary: Image-viewer for the Xfce desktop environment
RPMs: ristretto
Size: 1.70 MiB
Size change: 8.47 KiB
Changelog:
* Sun Jul 10 2022 Mukundan Ragavan <nonamedotc(a)fedoraproject.org> - 0.12.3-1
- Update to v0.12.3
Package: rmol-1.00.8-1.fc37
Old package: rmol-1.00.7-5.fc37
Summary: C++ library of Revenue Management and Optimisation classes and functions
RPMs: python3-rmol rmol rmol-devel rmol-doc
Size: 1.70 MiB
Size change: 743 B
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.00.7-6
- Rebuilt for Boost 1.78
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> 1.00.7-7
- Rebuilt for Python 3.11
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.8-1
- Upgraded to v1.00.8
Package: seqan2-2.4.0-17.fc37
Old package: seqan2-2.4.0-16.fc36
Summary: C++ library of efficient algorithms and data structures
RPMs: seqan2-apps seqan2-examples seqan2-headers
Size: 49.12 MiB
Size change: 62.47 KiB
Changelog:
* Sun Jul 10 2022 Antonio Trande <sagitter(a)fedoraproject.org> - 2.4.0-17
- Drop Java dependency (rhbz#2104101)
Package: sevmgr-1.00.7-1.fc37
Old package: sevmgr-1.00.5-11.fc37
Summary: C++ Simulation-Oriented Discrete Event Management Library
RPMs: sevmgr sevmgr-devel sevmgr-doc
Size: 1.76 MiB
Size change: 647 B
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.00.5-13
- Rebuilt for Boost 1.78
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.7-1
- Upgraded to v1.00.7
Package: simcrs-1.01.7-1.fc37
Old package: simcrs-1.01.5-10.fc37
Summary: C++ Simulated Travel-Oriented Distribution System library
RPMs: simcrs simcrs-devel simcrs-doc
Size: 946.41 KiB
Size change: 289 B
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.01.5-13
- Rebuilt for Boost 1.78
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.01.7-1
- Upgraded to v1.01.7
Package: simfqt-1.00.6-1.fc37
Old package: simfqt-1.00.4-11.fc37
Summary: C++ Simulated Fare Quote System Library
RPMs: simfqt simfqt-devel simfqt-doc
Size: 1.98 MiB
Size change: 1.25 KiB
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.00.4-13
- Rebuilt for Boost 1.78
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.6-1
- Upgraded to v1.00.6
Package: snapd-2.56.2-3.fc37
Old package: snapd-2.56.2-1.fc37
Summary: A transactional software package manager
RPMs: snap-confine snapd snapd-devel snapd-selinux
Size: 66.29 MiB
Size change: 44.89 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 2.56.2-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sun Jul 10 2022 Maxwell G <gotmax(a)e.email> - 2.56.2-2
- Only build on %golang_arches (i.e. where golang is available).
- Rebuild to fix update ordering issues.
Package: soci-4.0.3-1.fc37
Old package: soci-4.0.2-6.fc36
Summary: The database access library for C++ programmers
RPMs: soci soci-devel soci-doc soci-mysql soci-mysql-devel soci-odbc soci-odbc-devel soci-postgresql soci-postgresql-devel soci-sqlite3 soci-sqlite3-devel
Size: 2.65 MiB
Size change: -18.30 KiB
Changelog:
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 4.0.3-1
- Upgraded to SOCI v4.0.3
Package: spectrographic-0.9.3-9.fc37
Old package: spectrographic-0.9.3-8.fc36
Summary: Turn an image into sound whose spectrogram looks like the image
RPMs: spectrographic spectrographic-doc
Size: 192.76 KiB
Size change: 2.12 KiB
Changelog:
* Sun Jul 10 2022 Python Maint <python-maint(a)redhat.com> - 0.9.3-9
- Rebuilt for Python 3.11
Package: stdair-1.00.12-1.fc37
Old package: stdair-1.00.10-11.fc37
Summary: C++ Standard Airline IT Object Library
RPMs: stdair stdair-devel stdair-doc
Size: 9.56 MiB
Size change: 64.15 KiB
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.00.10-14
- Rebuilt for Boost 1.78
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.12-1
- Upgraded to 1.00.12
Package: stress-ng-0.14.02-1.fc37
Old package: stress-ng-0.13.11-1.fc36
Summary: Stress test a computer system in various ways
RPMs: stress-ng
Size: 4.28 MiB
Size change: 251.51 KiB
Changelog:
* Sun Jul 10 2022 Fabio Alessandro Locati <fale(a)fedoraproject.org> - 0.14.02-1
- Update to 0.14.02
Package: trademgen-1.00.8-1.fc37
Old package: trademgen-1.00.7-5.fc37
Summary: C++ Simulated Travel Demand Generation Library
RPMs: python3-trademgen trademgen trademgen-devel trademgen-doc
Size: 2.35 MiB
Size change: 5.73 KiB
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.00.7-8
- Rebuilt for Boost 1.78
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> 1.00.7-9
- Rebuilt for Python 3.11
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.8-1
- Upgraded to v1.00.8
Package: travelccm-1.00.7-1.fc37
Old package: travelccm-1.00.5-11.fc37
Summary: C++ Travel Customer Choice Model (CCM) Library
RPMs: travelccm travelccm-devel travelccm-doc
Size: 771.44 KiB
Size change: 719 B
Changelog:
* Wed May 04 2022 Thomas Rodgers <trodgers(a)redhat.com> 1.00.5-12
- Rebuilt for Boost 1.78
* Sun Jul 10 2022 Denis Arnaud <denis.arnaud_fedora(a)m4x.org> 1.00.7-1
- Upgraded to v1.00.7
Package: wayvnc-0.5.0-1.fc37
Old package: wayvnc-0.4.1-2.fc36
Summary: A VNC server for wlroots based Wayland compositors
RPMs: wayvnc
Size: 154.03 KiB
Size change: 2.51 KiB
Changelog:
* Sun Jul 10 2022 Bob Hepple <bob.hepple(a)gmail.com> - 0.5.0-1
- new version
Package: wlcs-1.4.0-3.fc37
Old package: wlcs-1.4.0-2.fc37
Summary: Wayland Conformance Test Suite
RPMs: wlcs wlcs-devel
Size: 29.00 MiB
Size change: -35.73 KiB
Changelog:
* Sun Jul 10 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> 1.4.0-3
- Rebuild against new gtest
Package: xbanish-1.8-1.fc37
Old package: xbanish-1.7-4.fc36
Summary: Banish the mouse cursor when typing, show it again when the mouse moves
RPMs: xbanish
Size: 73.70 KiB
Size change: 5.08 KiB
Changelog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 1.8-1
- Update to 1.8; Fixes: RHBZ#2056151
Package: xmodmap-1.0.11-1.fc37
Old package: xmodmap-1.0.10-3.fc36
Summary: Edit and display the X11 core keyboard map
RPMs: xmodmap
Size: 125.39 KiB
Size change: 1.14 KiB
Changelog:
* Mon Jul 11 2022 Peter Hutterer <peter.hutterer(a)redhat.com> - 1.0.11-1
- xmodmap 1.0.11
Package: xwm-0.1.9-1.fc37
Old package: xwm-0.1.8-3.fc36
Summary: Tiny XCB floating window manager
RPMs: xwm
Size: 75.34 KiB
Size change: 595 B
Changelog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.1.9-1
- Update to 0.1.9; Fixes: RHBZ#2046583
===== DOWNGRADED PACKAGES =====
1 year, 10 months
ank22's Introduction
by Ankit Sinha
Hi all,
I am ank22 & I am a developer [full-stack]. Looking into the fedora project testing, I have not worked on testing but Would like to learn and give it a try. Looking into wiki pages my interest is in Release Validation Testing & Joining Test Days.
My main coding language is Python3, Other than that I know Java, JS, Cloud Computing & Few libraries related to Machine Learning.
Looking forward to Contributing
Thanks,
Ankit Sinha [ank22]
1 year, 10 months
Fedora 36 updates-testing report
by updates@fedoraproject.org
The following Fedora 36 Security updates need testing:
Age URL
18 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ba365d3703 apptainer-1.0.2-2.fc36 asciigraph-0.5.5-2.fc36 buildah-1.26.1-4.fc36 butane-0.14.0-2.fc36 caddy-2.4.6-3.fc36 cheat-4.2.2-4.fc36 clipman-1.6.1-3.fc36 cri-o-1.24.1-2.fc36 deepin-gir-generator-2.1.0-3.fc36 docker-distribution-2.6.2-17.git48294d9.fc36 git-lfs-3.1.2-4.fc36 git-octopus-2.0-0.4.beta.3.fc36.12 gmailctl-0.10.4-3.fc36 go-bindata-3.0.7-22.gita0ff256.fc36 godep-62-17.fc36 golang-1.18.3-2.fc36 golang-ariga-atlas-0.3.6-3.fc36 golang-entgo-ent-0.10.0-4.fc36 golang-github-chromedp-0.8.1-2.fc36 golang-github-client9-gospell-0-0.11.20190524git90dfc71.fc36 golang-github-elves-elvish-0.15.0-4.fc36 golang-github-google-dap-0.4.0-4.fc36 golang-github-heistp-irtt-0.9.1-2.fc36 golang-github-kalafut-imohash-1.0.2-3.fc36 golang-github-letsencrypt-pebble-2.3.1-5.fc36 golang-github-lofanmi-pinyin-1.0-4.fc36 golang-github-lunixbochs-vtclean-1.0.0-8.fc36 golang-github-mbndr-figlet4go-0-0.8.20191009gitd6cef5b.fc36 golang-github
-mozillazg-pinyin-0.19.0-4.fc36 golang-github-msprev-fzf-bibtex-1.1-5.20220205gitd5df2c6.fc36 golang-github-rickb777-date-1.19.1-2.fc36 golang-github-segmentio-ksuid-1.0.4-3.fc36 golang-github-sqshq-sampler-1.1.0-9.fc36 golang-github-tomnomnom-xtermcolor-0.1.2-8.fc36 golang-github-tscholl2-siec-0-3.20211128git9bdfc48.fc36 golang-github-zyedidia-highlight-0-0.6.20200218git291680f.fc36 golang-rsc-pdf-0.1.1-10.fc36 golang-starlark-0-0.7.20210113gite81fc95.fc36 gomtree-0.4.0-11.fc36 google-guest-agent-20201217.02-4.fc36 gotun-0-0.14.gita9dbe4d.fc36 grafana-7.5.15-3.fc36 grafana-pcp-3.2.0-3.fc36 gron-0.7.1-2.fc36 ignition-2.14.0-2.fc36 kata-containers-2.3.3-2.fc36.1 kompose-1.17.0-9.fc36 manifest-tool-2.0.3-2.fc36 oci-seccomp-bpf-hook-1.2.5-3.fc36 origin-3.11.2-6.fc36 osbuild-composer-55-2.fc36 pack-0.27.0~rc1-4.fc36 podman-4.1.1-2.fc36 reposurgeon-4.32-2.fc36 restic-0.12.1-3.fc36 runc-1.1.1-2.fc36 singularity-3.8.7-2.fc36 skopeo-1.8.0-9.fc36 xe-guest-utilities-latest-7.30.0-4.fc36
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-edf7301147 libtiff-4.4.0-2.fc36
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dc3e8972a1 libgit2-1.3.1-1.fc36
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ec0491574d php-8.1.8-1.fc36
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2af658b090 subversion-1.14.2-5.fc36
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4ec706488 xen-4.16.1-5.fc36
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-89a17be281 openssl1.1-1.1.1q-1.fc36
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-794cd592d2 php-laminas-diactoros2-2.13.0-1.fc36
The following Fedora 36 Critical Path updates have yet to be approved:
Age URL
30 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4300e4c941 binutils-2.37-31.fc36
10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fd22b79a84 selinux-policy-36.11-1.fc36
9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-763dfc66f1 rpm-4.17.1-1.fc36
9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7e40de9335 libtpms-0.9.5-1.fc36
9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d118d0d265 switcheroo-control-2.6-1.fc36
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-edf7301147 libtiff-4.4.0-2.fc36
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1613ae08d6 libnl3-3.7.0-1.fc36
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4ec706488 xen-4.16.1-5.fc36
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3db9a9733f gnome-control-center-42.3-1.fc36
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3a558c1977 gnome-remote-desktop-42.3-1.fc36
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-89a17be281 openssl1.1-1.1.1q-1.fc36
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d979323763 gnome-bluetooth-42.2-1.fc36
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3340e5040a tracker-3.3.2-1.fc36
2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f974e1a80a dnsmasq-2.86-10.fc36
2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8e949e7a88 alsa-lib-1.2.7.2-1.fc36
2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-afc2d2e53c unbound-1.16.0-5.fc36
2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-22a59ada07 freetype-2.12.1-2.fc36
The following builds have been pushed to Fedora 36 updates-testing
Singular-4.2.1p3-2.fc36
aml-0.2.2-1.fc36
antic-0.2.5-1.fc36
arb-2.23.0-1.fc36
drbd-9.21.3-1.fc36
e-antic-1.2.1-3.fc36
eclib-20220621-1.fc36
flint-2.9.0-1.fc36
fritzing-0.9.10-1.20220514.fc36
gnome-shell-extension-freon-45-1.20220710gitdab42ff.fc36
goaccess-1.6.1-1.fc36
golang-github-google-tpm-0.3.3-1.fc36
hatari-2.4.0-1.fc36
icecat-91.11.0-3.rh1.fc36
jmol-14.32.62-1.fc36
libnbd-1.12.5-1.fc36
libquentier-0.5.0-12.fc36
lksctp-tools-1.0.19-1.fc36
mate-applets-1.26.1-1.fc36
mate-control-center-1.26.0-4.fc36
mate-polkit-1.26.0-3.fc36
mate-power-manager-1.26.0-3.fc36
mate-utils-1.26.0-3.fc36
mousepad-0.5.10-1.fc36
nbdkit-1.30.7-1.fc36
neatvnc-0.5.1-1.fc36
normaliz-3.9.3-2.fc36
poedit-3.1.1-1.fc36
polymake-4.6-7.fc36
python-token-bucket-0.3.0-1.fc36
ristretto-0.12.3-1.fc36
rust-aparato-6.0.2-1.fc36
rust-daemonize-0.4.1-2.fc36
rust-typed-builder-0.10.0-1.fc36
sagemath-9.6-2.fc36
stress-ng-0.14.02-1.fc36
wayvnc-0.5.0-1.fc36
xbanish-1.8-1.fc36
xfce4-settings-4.16.3-1.fc36
xwm-0.1.9-1.fc36
zcfan-1.1.1-1.fc36
Details about builds:
================================================================================
Singular-4.2.1p3-2.fc36 (FEDORA-2022-3e933838cb)
Computer Algebra System for polynomial computations
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 4.2.1p3-2
- Rebuild for flint 2.9.0
- Add bootstrap build mode that excludes qepcad-B
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
aml-0.2.2-1.fc36 (FEDORA-2022-faec9c0656)
Another Main Loop
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Bob Hepple <bob.hepple(a)gmail.com> - 0.2.2-1
- new version
--------------------------------------------------------------------------------
================================================================================
antic-0.2.5-1.fc36 (FEDORA-2022-3e933838cb)
Algebraic Number Theory In C
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 0.2.5-1
- Version 0.2.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
arb-2.23.0-1.fc36 (FEDORA-2022-3e933838cb)
Arbitrary-precision floating point ball arithmetic
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 2.23.0-1
- Version 2.23.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
drbd-9.21.3-1.fc36 (FEDORA-2022-df2febd09b)
DRBD user-land tools and scripts
--------------------------------------------------------------------------------
Update Information:
Upstream release of 9.21.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Peter Hanecak <hany(a)hany.sk> - 9.21.3-1
- Upstream release of 9.21.3
* Tue Jun 14 2022 Carl George <carl(a)george.computer> - 9.21.1-2
- Change drbd-pacemaker to recommend instead of require pacemaker on EPEL8/EPEL9 rhbz#2086146
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2045323 - drbd: FTBFS in Fedora rawhide/f36
https://bugzilla.redhat.com/show_bug.cgi?id=2045323
[ 2 ] Bug #2086146 - drbd-pacemaker: fails to install
https://bugzilla.redhat.com/show_bug.cgi?id=2086146
[ 3 ] Bug #2094876 - drbd-9.21.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2094876
--------------------------------------------------------------------------------
================================================================================
e-antic-1.2.1-3.fc36 (FEDORA-2022-3e933838cb)
Real Embedded Algebraic Number Theory In C
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 1.2.1-3
- Rebuild for flint 2.9.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
eclib-20220621-1.fc36 (FEDORA-2022-3e933838cb)
Library for Computations on Elliptic Curves
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 20220621-1
- Version 20220621
* Wed May 4 2022 Thomas Rodgers <trodgers(a)redhat.com> - 20210625-6
- Rebuilt for Boost 1.78
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
flint-2.9.0-1.fc36 (FEDORA-2022-3e933838cb)
Fast Library for Number Theory
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 2.9.0-1
- Version 2.9.0
- Add -test patch to work around broken tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
fritzing-0.9.10-1.20220514.fc36 (FEDORA-2022-fa7f6287ca)
Electronic Design Automation software; from prototype to product
--------------------------------------------------------------------------------
Update Information:
Update to v0.9.10
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 0.9.10-1.20220514
- Update to v0.9.10
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-freon-45-1.20220710gitdab42ff.fc36 (FEDORA-2022-3c90f518c5)
GNOME Shell extension to display system temperature, voltage, and fan speed
--------------------------------------------------------------------------------
Update Information:
Update to 45 (#2009382)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Linus Walleij <triad(a)df.lth.se> - 2:45-1
- Update to 45 (#2009382)
- Turkish translation file problem is fixed upstream.
- Trash po directory removed upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2009382 - gnome-shell-extension-freon-48 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2009382
[ 2 ] Bug #2065044 - gnome-shell-extension-freon incompatible with GNOME 41.3
https://bugzilla.redhat.com/show_bug.cgi?id=2065044
--------------------------------------------------------------------------------
================================================================================
goaccess-1.6.1-1.fc36 (FEDORA-2022-294d29ca7a)
Real-time web log analyzer and interactive viewer
--------------------------------------------------------------------------------
Update Information:
* Added a `--ping-interval=<secs>` in an attempt to keep the WebSocket
connection opened. * Added support for timezone conversion via `--datetime-
format=<format>` and `--tz=<timezone>`. * Added the ability to reconnect to
WebSocket server after 1 sec with exponential backoff (x20). * Fixed issue where
an invalid client connection would stall data out to clients via the WebSocket
server. * Fixed issue where real-time data would be parsed multiple times under
`Cygwin`.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Fabio Alessandro Locati <fale(a)fedoraproject.org> - 1.6.1-1
- Update to 1.6.1, fixes rhbz#2103284
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103284 - goaccess-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2103284
--------------------------------------------------------------------------------
================================================================================
golang-github-google-tpm-0.3.3-1.fc36 (FEDORA-2022-881c41de84)
Go library that communicates directly with a TPM device
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.3; Fixes: RHBZ#2051794
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.3.3-1
- Update to 0.3.3; Fixes: RHBZ#2051794
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2051794 - golang-github-google-tpm-0.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2051794
--------------------------------------------------------------------------------
================================================================================
hatari-2.4.0-1.fc36 (FEDORA-2022-1b9ca9a53c)
An Atari ST/STE/TT/Falcon emulator suitable for playing games
--------------------------------------------------------------------------------
Update Information:
Major highlights of this new version : * Major rewrite of the internal
delays/timers, speed up emulation by ~10% on average * Various CPU improvements
(FPU, IPL timing) * Faster CPU emulation for 68000 in cycle exact mode (speed up
emulation by ~7%) * More accurate MFP emulation, combined with the new internal
timers * Improved VBLANK position in 50 and 60 Hz mode * Improved cycle accurate
YM2149 emulation, supporting new effects (syncsquare in maxYMiser v1.53) *
Better value for MFP GPIP bit 7 (STE DMA sound and Falcon sound) * For SCSI,
improve "Mode Sense" and "Report Luns" * For IKDB, better emulation of commands
$A and $B * Better MIDI using PortMidi (Linux/Windows/macOS) * Better RS232
support for BSD/macOS * Some fixes for Gemdos HD mode * Many debugger
improvements * Hatari now defaults to the SMALL_MEM build option, using less RAM
during emulation * ... and many more. See doc/release-notes.txt for the full
changelog. Fixed demos: * Hackabonds Demo (wrong vblank detection) * We Were @
HD version under GEMDOS HD (file handle access) Fixed programs: * maxYMiser FM
v1.53 by gwEn (support for syncsquare effect) Fixed games: * Chambers of
Shaolin : DMA sound was wrong in STE mode with 1 MB RAM (MFP GPIP bit 7) * Super
Hang On : fix flickering raster colors (bclr #0,$fffffa0f sometimes happened at
the same time timer C expired)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Andrea Musuruane <musuruan(a)gmail.com> - 2.4.0-1
- Updated to new upstream release
--------------------------------------------------------------------------------
================================================================================
icecat-91.11.0-3.rh1.fc36 (FEDORA-2022-491dc93bcb)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Release 91.11.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Antonio Trande <sagitter(a)fedoraproject.org> - 91.11.0-3.rh1
- Drop Java dependency (rhbz#2104050)
* Fri Jul 8 2022 Antonio Trande <sagitter(a)fedoraproject.org> - 91.11.0-2.rh1.test
- Release 91.11.0
- Less optbuild activated
- Add patch for mozilla bug #1773336
* Wed Jun 29 2022 Antonio Trande <sagitter(a)fedoraproject.org> - 91.11.0-1.rh1
- Release 91.11.0 rh1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2104050 - native icecat depends on to be removed i686 java-openjdk packages
https://bugzilla.redhat.com/show_bug.cgi?id=2104050
--------------------------------------------------------------------------------
================================================================================
jmol-14.32.62-1.fc36 (FEDORA-2022-3e933838cb)
Java viewer for chemical structures in 3D
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 14.32.62-1
- Version 14.32.62
- Add -lock patch to fix sagemath build hangs
* Thu Jun 30 2022 Jerry James <loganjerry(a)gmail.com> - 14.32.61-1
- Version 14.32.61
* Tue Apr 12 2022 Jerry James <loganjerry(a)gmail.com> - 14.32.47-1
- Version 14.32.47
* Tue Apr 5 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 14.32.22-2
- Rebuild with fixed msgfmt (in gettext) (bug 2062407)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
libnbd-1.12.5-1.fc36 (FEDORA-2022-79a19d03de)
NBD client library in userspace
--------------------------------------------------------------------------------
Update Information:
New upstream stable version 1.12.5
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.12.5-1
- New upstream stable version 1.12.5
--------------------------------------------------------------------------------
================================================================================
libquentier-0.5.0-12.fc36 (FEDORA-2022-1923953a7b)
Set of Qt/C++ APIs for feature rich desktop clients for Evernote service
--------------------------------------------------------------------------------
Update Information:
Bump to commit 04b7e7d8415b2610d30ce727db9cebc77387928e
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.5.0-12
- Bump to commit 04b7e7d8415b2610d30ce727db9cebc77387928e
--------------------------------------------------------------------------------
================================================================================
lksctp-tools-1.0.19-1.fc36 (FEDORA-2022-1d4bf7e0e3)
User-space access to Linux Kernel SCTP
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0.19
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 5 2022 Peter Hanecak <hany(a)hany.sk> - 1.0.19-1
- Updated to 1.0.19
- Patches dropped since changes are now incorporated in the upstream
--------------------------------------------------------------------------------
================================================================================
mate-applets-1.26.1-1.fc36 (FEDORA-2022-1278bc7cf9)
MATE Desktop panel applets
--------------------------------------------------------------------------------
Update Information:
- update to 1.26.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.1-1
- update to 1.26.1
--------------------------------------------------------------------------------
================================================================================
mate-control-center-1.26.0-4.fc36 (FEDORA-2022-e9350cbf47)
MATE Desktop control-center
--------------------------------------------------------------------------------
Update Information:
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-4
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
================================================================================
mate-polkit-1.26.0-3.fc36 (FEDORA-2022-c83081e77e)
Integrates polkit authentication for MATE desktop
--------------------------------------------------------------------------------
Update Information:
- Fix segfault from gdk_x11_get_server_time if not on X11
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-3
- Fix segfault from gdk_x11_get_server_time if not on X11
--------------------------------------------------------------------------------
================================================================================
mate-power-manager-1.26.0-3.fc36 (FEDORA-2022-59e2d9d188)
MATE power management service
--------------------------------------------------------------------------------
Update Information:
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-3
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
================================================================================
mate-utils-1.26.0-3.fc36 (FEDORA-2022-43988be347)
MATE utility programs
--------------------------------------------------------------------------------
Update Information:
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-3
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
================================================================================
mousepad-0.5.10-1.fc36 (FEDORA-2022-42c38478b7)
Simple text editor for Xfce desktop environment
--------------------------------------------------------------------------------
Update Information:
- update to v0.5.10
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Mukundan Ragavan <nonamedotc(a)gmail.com> 0.5.10-1
- update to v0.5.10
* Mon May 16 2022 Mukundan Ragavan <nonamedotc(a)gmail.com> 0.5.9-2
- build against gtksourceview4 for testing
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.30.7-1.fc36 (FEDORA-2022-46fbf34a02)
NBD server
--------------------------------------------------------------------------------
Update Information:
New stable version 1.30.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.30.7-1
- New stable version 1.30.7
--------------------------------------------------------------------------------
================================================================================
neatvnc-0.5.1-1.fc36 (FEDORA-2022-bc23e8d4b2)
a liberally licensed VNC server library
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Bob Hepple <bob.hepple(a)gmail.com> - 0.5.1-1
- new version
--------------------------------------------------------------------------------
================================================================================
normaliz-3.9.3-2.fc36 (FEDORA-2022-3e933838cb)
A tool for discrete convex geometry
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 3.9.3-2
- Rebuild for flint 2.9.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
poedit-3.1.1-1.fc36 (FEDORA-2022-d6575dcfeb)
GUI editor for GNU gettext .po files
--------------------------------------------------------------------------------
Update Information:
New upstream version 3.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Wolfgang St��ggl <c72578(a)yahoo.de> - 3.1.1-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
polymake-4.6-7.fc36 (FEDORA-2022-3e933838cb)
Algorithms on convex polytopes and polyhedra
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 4.6-7
- Rebuild for flint 2.9.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
python-token-bucket-0.3.0-1.fc36 (FEDORA-2022-f7503ca58b)
A Token Bucket implementation
--------------------------------------------------------------------------------
Update Information:
Initial version of the package.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 20 2022 supakeen <cmdr(a)supakeen.com> - 0.3.0-1
- Initial version of the package.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2056244 - Review Request: python-token-bucket - A Token Bucket implementation.
https://bugzilla.redhat.com/show_bug.cgi?id=2056244
--------------------------------------------------------------------------------
================================================================================
ristretto-0.12.3-1.fc36 (FEDORA-2022-a9fa8403b9)
Image-viewer for the Xfce desktop environment
--------------------------------------------------------------------------------
Update Information:
- update to v0.12.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Mukundan Ragavan <nonamedotc(a)fedoraproject.org> - 0.12.3-1
- Update to v0.12.3
--------------------------------------------------------------------------------
================================================================================
rust-aparato-6.0.2-1.fc36 (FEDORA-2022-e59576920b)
Pci.ids-compliant library for getting information about available PCI devices
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#1983887
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 6.0.2-1
- Initial import; Fixes: RHBZ#1983887
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1983887 - Review Request: rust-aparato - Pci.ids-compliant library for getting information about available PCI devices
https://bugzilla.redhat.com/show_bug.cgi?id=1983887
--------------------------------------------------------------------------------
================================================================================
rust-daemonize-0.4.1-2.fc36 (FEDORA-2022-185ce93010)
Library to enable your code run as a daemon process on Unix-like systems
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#1981129
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.4.1-2
- Fix path used in tests
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.4.1-1
- Initial import; Fixes: RHBZ#1981129
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1981129 - Review Request: rust-daemonize - Library to enable your code run as a daemon process on Unix-like systems
https://bugzilla.redhat.com/show_bug.cgi?id=1981129
--------------------------------------------------------------------------------
================================================================================
rust-typed-builder-0.10.0-1.fc36 (FEDORA-2022-21fe89cd4a)
Compile-time type-checked builder derive
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#1983879
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.10.0-1
- Initial import; Fixes: RHBZ#1983879
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1983879 - Review Request: rust-typed-builder - Compile-time type-checked builder derive
https://bugzilla.redhat.com/show_bug.cgi?id=1983879
--------------------------------------------------------------------------------
================================================================================
sagemath-9.6-2.fc36 (FEDORA-2022-3e933838cb)
A free open-source mathematics software system
--------------------------------------------------------------------------------
Update Information:
Changes in antic 0.2.5: - header file cleanup - `nf_elem_init` sets the element
to the zero element - slightly faster multiplication in quadratic fields,
especially for `Q(i)` - fix `nf_elem_mul_gen` with linear `nf` and negative
leading coefficient - bump default `test_multiplier` from 1 to 10 - support
building with cmake - detect whether `fmpz_gcd3` is available - add
`fmpq_poly_fit_length` - fix wrong reference in `nf_elem_den_is_one` See
https://fredrikj.net/blog/2022/06/arb-2-23-released/ for changes in arb 2.23.0.
For changes in eclib 20220621, see: -
https://github.com/JohnCremona/eclib/releases/tag/20220620 -
https://github.com/JohnCremona/eclib/releases/tag/20220621 See
https://groups.google.com/g/flint-devel/c/8fIxhiiRTis for changes in flint
2.9.0. Changes in jmol 14.32.62: - new feature: implements `MODELKIT ROTATE
axis1 axis2 {atoms} degrees` - proper symmetry handling - will not move
fixed atoms - bug fix: (JavaScript only) modelkit atom clicking does not work,
broken in 14.32.8 Sagemath was patched as follows: - Add workaround for
symlink/directory conflict (bz 2097773) - When invoking jmol to create images,
timeout after 5 minutes. This is a workaround for recently observed jmol hangs,
but is not a proper fix. The builds of e-antic, normaliz, Singular, and
polymake are simple rebuilds due to the above changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Jerry James <loganjerry(a)gmail.com> - 9.6-2
- Add workaround for symlink/directory conflict (bz 2097773)
- Modify the jmol patch to timeout after 5 minutes. This is a workaround for
recently observed jmol hangs, but is not a proper fix.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055851 - jmol-14.32.62 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2055851
[ 2 ] Bug #2079464 - singular-libs doesn't create a symbolic link to the libSingular shared library
https://bugzilla.redhat.com/show_bug.cgi?id=2079464
[ 3 ] Bug #2097773 - Error updating sagemath-9.5 to sagemath-9.6
https://bugzilla.redhat.com/show_bug.cgi?id=2097773
[ 4 ] Bug #2101041 - antic-0.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2101041
[ 5 ] Bug #2102665 - arb-2.23.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2102665
--------------------------------------------------------------------------------
================================================================================
stress-ng-0.14.02-1.fc36 (FEDORA-2022-0e1cf6dc38)
Stress test a computer system in various ways
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Fabio Alessandro Locati <fale(a)fedoraproject.org> - 0.14.02-1
- Update to 0.14.02
--------------------------------------------------------------------------------
================================================================================
wayvnc-0.5.0-1.fc36 (FEDORA-2022-37d6fc04ad)
A VNC server for wlroots based Wayland compositors
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Bob Hepple <bob.hepple(a)gmail.com> - 0.5.0-1
- new version
--------------------------------------------------------------------------------
================================================================================
xbanish-1.8-1.fc36 (FEDORA-2022-d7c9156ad7)
Banish the mouse cursor when typing, show it again when the mouse moves
--------------------------------------------------------------------------------
Update Information:
Update to 1.8; Fixes: RHBZ#2056151
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 1.8-1
- Update to 1.8; Fixes: RHBZ#2056151
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2056151 - xbanish-1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2056151
--------------------------------------------------------------------------------
================================================================================
xfce4-settings-4.16.3-1.fc36 (FEDORA-2022-1c3864dcf9)
Settings Manager for Xfce
--------------------------------------------------------------------------------
Update Information:
- update to v4.16.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jul 5 2022 Kevin Fenzi <kevin(a)scrye.com> - 4.16.3-1
- Update to 4.16.3. Fixes rhbz#2100401
--------------------------------------------------------------------------------
================================================================================
xwm-0.1.9-1.fc36 (FEDORA-2022-b2016de548)
Tiny XCB floating window manager
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.9; Fixes: RHBZ#2046583
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.1.9-1
- Update to 0.1.9; Fixes: RHBZ#2046583
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2046583 - xwm-0.1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2046583
--------------------------------------------------------------------------------
================================================================================
zcfan-1.1.1-1.fc36 (FEDORA-2022-b942f9e0e7)
Zero-configuration fan daemon for ThinkPads
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 1.1.1-1
- Update to 1.1.1
--------------------------------------------------------------------------------
1 year, 10 months
Fedora 35 updates-testing report
by updates@fedoraproject.org
The following Fedora 35 Security updates need testing:
Age URL
157 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9 libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
149 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11 mysql-connector-java-8.0.28-1.fc35
11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b3d7f6973 curl-7.79.1-5.fc35
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b9c2a3a2b7 libtiff-4.4.0-2.fc35
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6b749525f3 webkit2gtk3-2.36.4-1.fc35
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-13cc09ecf2 subversion-1.14.2-5.fc35
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1124e5882d gnupg2-2.3.4-2.fc35
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2c9f8224f8 xen-4.15.3-2.fc35
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-41890e9e44 openssl-1.1.1q-1.fc35
2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-90618703d0 seamonkey-2.53.13-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
30 https://bodhi.fedoraproject.org/updates/FEDORA-2022-57015a1d06 binutils-2.37-20.fc35
11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-590034bcdd annobin-10.76-3.fc35
11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b3d7f6973 curl-7.79.1-5.fc35
10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-12d41537af freeipa-4.9.10-2.fc35 libldb-2.4.3-1.fc35 samba-4.15.8-0.fc35
9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-37913de00f rpm-4.17.1-1.fc35
9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-336f54d470 libtpms-0.9.5-1.fc35
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6b749525f3 webkit2gtk3-2.36.4-1.fc35
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a80aa3becb wireplumber-0.4.11-1.fc35
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b9c2a3a2b7 libtiff-4.4.0-2.fc35
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1f6883991 hwdata-0.361-1.fc35
5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0ce968f910 gnome-shell-41.8.1-1.fc35 mutter-41.8-1.fc35
4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1124e5882d gnupg2-2.3.4-2.fc35
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4af24a9e1 firewalld-1.0.5-2.fc35
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-41890e9e44 openssl-1.1.1q-1.fc35
3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2c9f8224f8 xen-4.15.3-2.fc35
2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-65b9d4a999 alsa-lib-1.2.7.2-1.fc35
2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3bee8e2cf1 unbound-1.16.0-4.fc35
The following builds have been pushed to Fedora 35 updates-testing
3mux-1.1.0-5.fc35
act-1.6.0-6.fc35
aerc-0.10.0-4.fc35
age-1.0.0-5.fc35
aml-0.2.2-1.fc35
apache-cloudstack-cloudmonkey-6.2.0-3.fc35
aquatone-1.7.0-7.fc35
aron-0-0.6.20200626git7eade58.fc35
asciigraph-0.5.5-2.fc35
asnip-0-0.6.20200618git44ba98b.fc35
assetfinder-0.1.0-6.fc35
bettercap-2.32.0-4.fc35
breeze-icon-theme-5.96.0-1.fc35
butane-0.15.0-2.fc35
caddy-2.3.0-3.fc35
cadvisor-0.44.1-3.fc35
chisel-1.7.7-3.fc35
clash-1.6.5-3.fc35
commit-stream-0.1.2-7.fc35
containerd-1.6.6-4.fc35
direnv-2.32.1-2.fc35
dnscrypt-proxy-2.1.1-4.fc35
dnsx-1.1.0-3.fc35
douceur-0.2.0-14.fc35
drbd-9.21.3-1.fc35
duf-0.8.1-3.fc35
exercism-3.0.13-8.fc35
extra-cmake-modules-5.96.0-1.fc35
ffuf-1.0.2-6.fc35
geoipupdate-4.8.0-3.fc35
gh-2.13.0-3.fc35
gitjacker-0.0.2-6.fc35
glide-0.13.2-10.fc35
gnome-shell-extension-freon-45-1.20220710gitdab42ff.fc35
goaccess-1.6.1-1.fc35
goaltdns-0-0.7.20200627git2b3e8a3.fc35
gobuster-3.1.0-3.fc35
godoctor-0.6-12.fc35
godotenv-1.4.0-4.fc35
gojq-0.12.8-3.fc35
golang-ariga-atlas-0.3.6-3.fc35
golang-bug-serial-1-1.3.3-2.fc35
golang-contrib-opencensus-resource-0.1.2-7.fc35
golang-etcd-bbolt-1.3.6-4.fc35
golang-gioui-0-8.20201225git18d4dbf.fc35
golang-github-a8m-envsubst-1.3.0-2.fc35
golang-github-a8m-tree-0-0.16.20210725gitce3525c.fc35
golang-github-ajstarks-deck-0-0.12.20210114git30c9fc6.fc35
golang-github-akavel-rsrc-0.10.2-4.fc35
golang-github-alecthomas-chroma-0.10.0-3.fc35
golang-github-aliyun-cli-3.0.104-4.s20220118git031f9f2.fc35
golang-github-aliyun-ossutil-1.7.9-3.fc35
golang-github-andybalholm-cascadia-1.2.0-6.fc35
golang-github-apache-beam-2-2.33.0~RC1-7.fc35
golang-github-appc-docker2aci-0.17.2-9.fc35
golang-github-appc-goaci-0.1.1-12.fc35
golang-github-appc-spec-0.8.11-14.fc35
golang-github-aryann-difflib-0-0.5.20200822gite206f87.fc35
golang-github-aws-lambda-1.24.0-3.fc35
golang-github-axgle-mahonia-0-0.13.20181112git3358181.fc35
golang-github-bifurcation-mint-0-0.9.20200724git93c820e.fc35
golang-github-bobesa-domain-util-0-0.6.20200504git4033b5f.fc35
golang-github-burntsushi-toml-1.0.0-5.fc35
golang-github-burntsushi-toml-test-0.2.0-11.20210108git9767d20.fc35
golang-github-burntsushi-xgb-0-0.15.20210108git5f9e7b3.fc35
golang-github-c-bata-prompt-0.2.6-4.fc35
golang-github-cactus-statsd-client-5.0.0-5.fc35
golang-github-cespare-xxhash-2.1.1-5.fc35
golang-github-chai2010-gettext-1.0.2-6.fc35
golang-github-cheekybits-genny-1.0.0-9.20200724git3e22f1a.fc35
golang-github-chris-ramon-douceur-0.2.0-5.20200910gitf346305.fc35
golang-github-christrenkamp-goxpath-0-0.6.20200627gitc5096ec.fc35
golang-github-chromedp-0.6.12-5.fc35
golang-github-cilium-ebpf-0.8.0-2.fc35
golang-github-client9-plaintext-0-0.8.20190703git5bf47e7.fc35
golang-github-cloudflare-0.17.0-3.fc35
golang-github-cloudflare-redoctober-0-0.9.20210114git99c99a8.fc35
golang-github-cockroachdb-pebble-0-0.6.20210108git48f5530.fc35
golang-github-colinmarc-hdfs-2-2.2.0-4.fc35
golang-github-containerd-continuity-0.2.2-3.fc35
golang-github-containerd-fuse-overlayfs-snapshotter-1.0.2-7.fc35
golang-github-containerd-stargz-snapshotter-0.10.1-3.fc35
golang-github-containernetworking-cni-1.1.1-4.fc35
golang-github-coredns-corefile-migration-1.0.11-6.fc35
golang-github-cpu-goacmedns-0.1.1-5.fc35
golang-github-cpuguy83-md2man-2.0.2-2.fc35
golang-github-crossdock-0-0.8.20190628git049aabb.fc35
golang-github-cucumber-godog-0.11.0-4.fc35
golang-github-dave-jennifer-1.4.1-5.fc35
golang-github-deepmap-oapi-codegen-1.8.2-3.fc35
golang-github-dgrijalva-jwt-3.2.0-11.fc35
golang-github-docker-distribution-2.7.1-9.20200815git35b26de.fc35
golang-github-dreamacro-shadowsocks2-0.1.7-3.fc35
golang-github-dustinkirkland-petname-0-0.5.20200605git8e5a1ed.fc35
golang-github-eknkc-amber-0-0.17.20190601gitcdade1c.fc35
golang-github-elazarl-bindata-assetfs-1.0.1-9.fc35
golang-github-emersion-smtp-0.15.0-4.fc35
golang-github-envoyproxy-protoc-gen-validate-0.4.1-6.fc35
golang-github-etcd-io-gofail-0-0.3.20210808gitad7f989.fc35
golang-github-evanphx-json-patch-5.5.0-3.fc35
golang-github-evanw-esbuild-0.14.38-2.fc35
golang-github-facebookincubator-contest-0-0.4.20210706gitceebc35.fc35
golang-github-facebookincubator-dhcplb-0-0.4.20210706git2e66b27.fc35
golang-github-facebookincubator-go2chef-1.0-2.fc35
golang-github-facebookincubator-ntp-0-0.5.20210617git69c3282.fc35
golang-github-facebookincubator-nvdtools-0.1.4-5.fc35
golang-github-fernet-0-0.9.20200726giteff2850.fc35
golang-github-francoispqt-gojay-1.2.13-7.fc35
golang-github-fvbommel-util-0.0.3-5.fc35
golang-github-gdamore-tcell-1.4.0-5.fc35
golang-github-gdamore-tcell-2-2.5.0-2.fc35
golang-github-geertjohan-rice-1.0.2-5.fc35
golang-github-gobuffalo-here-0.6.2-5.fc35
golang-github-gobwas-ws-1.1.0-3.fc35
golang-github-goccy-yaml-1.9.5-3.fc35
golang-github-gocolly-colly-2-2.1.0-4.20210920git2f09941.fc35
golang-github-gogo-googleapis-1.4.1-4.fc35
golang-github-gogo-protobuf-1.3.2-5.fc35
golang-github-gohugoio-localescompressed-1.0.1-2.fc35
golang-github-gohugoio-testmodbuilder-0-0.10.20201030git72e1e0c.fc35
golang-github-gojuno-minimock-3.0.10-3.fc35
golang-github-golangci-lint-1-0-0.5.20200828gitd2cdd8c.fc35
golang-github-google-jsonnet-0.17.0-5.fc35
golang-github-google-martian-3.1.0-9.fc35
golang-github-google-pprof-0-16.20210802gitc50bf4f.fc35
golang-github-google-slothfs-0-0.11.20200727git59c1163.fc35
golang-github-google-tpm-0.3.3-1.fc35
golang-github-google-wire-0.4.0-6.fc35
golang-github-googleapis-gnostic-0.5.3-6.fc35
golang-github-googlecloudplatform-cloudsql-proxy-1.19.1-6.fc35
golang-github-gorhill-cronexpr-1.0.0-4.fc35
golang-github-grpc-ecosystem-gateway-2-2.7.3-4.fc35
golang-github-gucumber-0-0.23.20190703git7d5c79e.fc35
golang-github-haproxytech-client-native-2.5.3-3.fc35
golang-github-haproxytech-dataplaneapi-2.4.4-4.fc35
golang-github-hashicorp-consul-migrate-0.1.0-9.20190602git678fb10.fc35
golang-github-hashicorp-hclog-0.15.0-5.fc35
golang-github-hashicorp-memdb-1.3.0-5.fc35
golang-github-hashicorp-serf-0.9.5-5.fc35
golang-github-hashicorp-sockaddr-1.0.2-11.fc35
golang-github-hexdigest-gowrap-1.1.12-4.fc35
golang-github-hpcloud-tail-1.0.0-10.20190325gita1dbeea.fc35
golang-github-insomniacslk-termhook-0-6.20210406gita267c97.fc35
golang-github-instrumenta-kubeval-0.15.0-8.fc35
golang-github-intel-goresctrl-0.2.0-6.fc35
golang-github-j-keck-arping-1.0.1-4.fc35
golang-github-jamesclonk-vultr-2.0.2-4.fc35
golang-github-jmespath-0.4.0-5.fc35
golang-github-jsonnet-bundler-0.4.0-8.fc35
golang-github-jwt-3.2.2-3.fc35
golang-github-kr-text-0.2.0-5.fc35
golang-github-krishicks-yaml-patch-0.0.10-8.20200307git05b3177.fc35
golang-github-kyokomi-emoji-2.2.8-5.fc35
golang-github-ledisdb-0.6-5.20210112gitd35789e.fc35
golang-github-leonelquinteros-gotext-1.5.0-2.fc35
golang-github-leveldb-0-0.9.20190701git259d925.fc35
golang-github-liamg-scout-0.12.0-5.fc35
golang-github-liamg-tml-0.3.0-4.fc35
golang-github-magefile-mage-1.11.0-5.fc35
golang-github-mailru-easyjson-0.7.6-5.fc35
golang-github-markbates-pkger-0.17.1-5.fc35
golang-github-martinhoefling-goxkcdpwgen-0.1.0-2.fc35
golang-github-maruel-panicparse-1.6.0-5.fc35
golang-github-mattermost-xml-roundtrip-validator-0-0.5.20210103git8fd2afa.fc35
golang-github-mattn-colorable-0.1.8-7.fc35
golang-github-mdlayher-dhcp6-0-0.8.20200429git2a67805.fc35
golang-github-mdlayher-ethernet-0-0.5.20201109git0394541.fc35
golang-github-mgutz-ansi-0-0.13.20200729gitd51e80e.fc35
golang-github-mholt-archiver-3.5.1-3.fc35
golang-github-microcosm-cc-bluemonday-1.0.17-3.fc35
golang-github-mmarkdown-mmark-2.2.10-5.fc35
golang-github-moby-buildkit-0.9.0-4.fc35~bootstrap
golang-github-mock-1.4.4-4.fc35
golang-github-morikuni-aec-1.0.0-5.fc35
golang-github-mrunalp-fileutils-0.5.0-5.fc35
golang-github-multiformats-multibase-0.0.3-2.20220213gitf067816.fc35
golang-github-multiformats-multihash-0.1.0-2.fc35
golang-github-mvo5-uboot-0.4-10.fc35
golang-github-nats-io-nkeys-0.2.0-5.fc35
golang-github-nats-io-streaming-server-0.20.0-5.fc35
golang-github-nbutton23-zxcvbn-0.1-8.20210110gite56b841.fc35
golang-github-nicksnyder-i18n-2-2.1.2-5.fc35
golang-github-niklasfasching-org-1.6.2-2.fc35
golang-github-nxadm-tail-1.4.6-4.fc35
golang-github-oklog-0.3.2-11.20190701gitca7cdf5.fc35
golang-github-oklog-ulid-2.0.2-10.fc35
golang-github-olekukonko-tablewriter-0.0.5-3.fc35
golang-github-oneofone-xxhash-1.2.8-5.fc35
golang-github-onsi-ginkgo-2-2.1.4-2.fc35
golang-github-pact-foundation-1.5.1-6.fc35
golang-github-path-network-mmproxy-2.1-3.fc35
golang-github-pdfcpu-0.3.13-2.fc35
golang-github-pelletier-toml-1.9.4-2.fc35
golang-github-pelletier-toml-2-2.0.0~beta.8-4.fc35
golang-github-phayes-freeport-1.0.2-6.fc35
golang-github-pierrec-lz4-4.1.3-5.fc35
golang-github-pierrre-geohash-1.0.0-4.fc35
golang-github-pkg-diff-0-0.4.20210406git20ebb0f.fc35
golang-github-posener-complete-1.2.3-8.fc35
golang-github-posener-complete-2-2.0.1~alpha.13-5.fc35
golang-github-pquerna-ffjson-0-0.9.20200730gitaa0246c.fc35
golang-github-pressly-goose-2.7.0-4.fc35
golang-github-projectdiscovery-chaos-client-0.2.0-2.fc35
golang-github-projectdiscovery-mapcidr-0.0.8-3.fc35
golang-github-prometheus-2.32.1-6.fc35
golang-github-prometheus-alertmanager-0.23.0-10.fc35
golang-github-prometheus-node-exporter-1.3.1-9.fc35
golang-github-prometheus-prom2json-1.3.0-8.20210811git90766c0.fc35
golang-github-prometheus-tsdb-0.10.0-8.fc35
golang-github-quay-claircore-0.5.4-5.fc35
golang-github-quay-goval-parser-0.8.6-4.fc35
golang-github-rakyll-statik-0.1.7-4.fc35
golang-github-rcrowley-metrics-0-0.28.20210110gitcf1acfc.fc35
golang-github-redteampentesting-monsoon-0.6.0-6.fc35
golang-github-rogpeppe-internal-1.8.1-2.fc35
golang-github-rubenv-sql-migrate-0-0.4.20210529gita32ed26.fc35
golang-github-rwcarlsen-goexif-0-0.9.20191017git9e8deec.fc35
golang-github-segmentio-ksuid-1.0.4-3.fc35
golang-github-shellcode33-vm-detection-0-0.6.20200715git4fd05cb.fc35
golang-github-shopify-toxiproxy-2.1.4-10.fc35
golang-github-shulhan-bindata-3.6.1-4.fc35
golang-github-shurcool-vfsgen-0-0.11.20210113git0d455de.fc35
golang-github-skip2-qrcode-0-2.20220316gitda1b656.fc35
golang-github-skynetservices-skydns-2.5.3-22.20200802git94b2ea0.fc35
golang-github-snappy-0.0.2-6.fc35
golang-github-sophaskins-efs2tar-0-0.4.20210317git4db1b0f.fc35
golang-github-sourcegraph-syntaxhighlight-0-0.11.20180418gitbd320f5.fc35
golang-github-spf13-cobra-1.4.0-3.fc35
golang-github-spyzhov-ajson-0.4.2-10.fc35
golang-github-task-3.14.0-2.fc35
golang-github-tdewolff-minify-2.11.10-3.fc35
golang-github-temoto-robotstxt-1.1.1-5.fc35
golang-github-theoapp-theo-agent-0.14.0-4.fc35
golang-github-theupdateframework-notary-0.7.0-6.fc35
golang-github-tinylib-msgp-1.1.5-5.fc35
golang-github-tklauser-numcpus-0.2.3-7.fc35
golang-github-twitchtv-twirp-8.1.0-4.fc35
golang-github-twpayne-waypoint-0-0.4.20210130git4f8e6bf.fc35
golang-github-u-root-iscsinl-0.1.0-4.fc35
golang-github-uber-athenadriver-1.1.12-5.fc35
golang-github-ulikunitz-xz-0.5.10-4.fc35
golang-github-valyala-fasthttp-1.19.0-4.fc35
golang-github-vbatts-tar-split-0.11.1-10.fc35
golang-github-vincent-petithory-dataurl-0-0.7.20200110gitd1553a7.fc35
golang-github-vmware-govmomi-0.24.0-5.fc35
golang-github-xo-terminfo-0-0.6.20210113gitc22d04b.fc35
golang-github-xordataexchange-crypt-0.0.2-12.20190412gitb2862e3.fc35
golang-gitlab-commonmark-linkify-0-0.9.20200805git64bca66.fc35
golang-google-appengine-1.6.7-5.fc35
golang-google-protobuf-1.27.1-3.fc35
golang-gopkg-neurosnap-sentences-1-1.0.6-14.fc35
golang-gopkg-square-jose-2-2.6.0-3.fc35
golang-gopkg-src-d-git-4-4.13.1-8.fc35
golang-honnef-tools-2021.1-2.fc35
golang-jaytaylor-html2text-0-0.2.20220509gitbc68cce.fc35
golang-k8s-apiextensions-apiserver-1.22.0-6.fc35
golang-k8s-code-generator-1.22.0-4.fc35
golang-k8s-kube-aggregator-1.22.0-4.fc35
golang-k8s-kube-openapi-0-0.19.20210813git3c81807.fc35
golang-k8s-pod-security-admission-1.22.0-3.fc35
golang-k8s-sample-apiserver-1.22.0-5.fc35
golang-k8s-sample-cli-plugin-1.22.0-2.fc35
golang-k8s-sample-controller-1.22.0-4.fc35
golang-modernc-golex-1.0.1-5.fc35
golang-mongodb-mongo-driver-1.4.5-6.fc35
golang-mvdan-sh-3-3.4.3-4.fc35
golang-mvdan-xurls-2.2.0-6.fc35
golang-sourcegraph-appdash-0-0.9.20210113gitebfcffb.fc35
golang-storj-drpc-0.0.31-2.fc35
golang-vbom-util-0-0.11.20190520gitefcd4e0.fc35
golang-x-build-0-0.21.20201229git0a4bf69.fc35
golang-x-mod-0.6.0~dev-3.20220330git9b9b3d8.fc35
golang-x-perf-0-0.15.20210123gitbdcc622.fc35
golang-x-text-0.3.7-3.fc35~bootstrap
golang-x-tools-0.1.10-2.fc35
goloris-0-0.6.20200326gita59fafb.fc35
google-guest-agent-20201217.02-4.fc35
gopass-1.13.1-3.fc35
gotags-1.4.1-8.fc35
grpcurl-1.8.6-3.fc35
hakrevdns-0-0.5.20201116git9fa2d59.fc35
hcloud-1.29.5-2.fc35
htmltest-0.15.0-3.fc35
httpdump-0-0.6.20200714gite6fa868.fc35
httprobe-0.1.2-6.fc35
hulk-0-0.6.20200620git9670699.fc35
ignition-2.14.0-3.fc35
jid-0.7.6-9.fc35
kf5-5.96.0-1.fc35
kf5-attica-5.96.0-1.fc35
kf5-baloo-5.96.0-1.fc35
kf5-bluez-qt-5.96.0-1.fc35
kf5-frameworkintegration-5.96.0-1.fc35
kf5-kactivities-5.96.0-1.fc35
kf5-kactivities-stats-5.96.0-1.fc35
kf5-kapidox-5.96.0-1.fc35
kf5-karchive-5.96.0-1.fc35
kf5-kauth-5.96.0-1.fc35
kf5-kbookmarks-5.96.0-1.fc35
kf5-kcalendarcore-5.96.0-1.fc35
kf5-kcmutils-5.96.0-1.fc35
kf5-kcodecs-5.96.0-1.fc35
kf5-kcompletion-5.96.0-1.fc35
kf5-kconfig-5.96.0-1.fc35
kf5-kconfigwidgets-5.96.0-1.fc35
kf5-kcontacts-5.96.0-1.fc35
kf5-kcoreaddons-5.96.0-1.fc35
kf5-kcrash-5.96.0-1.fc35
kf5-kdav-5.96.0-1.fc35
kf5-kdbusaddons-5.96.0-1.fc35
kf5-kdeclarative-5.96.0-1.fc35
kf5-kded-5.96.0-1.fc35
kf5-kdelibs4support-5.96.0-1.fc35
kf5-kdesignerplugin-5.96.0-1.fc35
kf5-kdesu-5.96.0-1.fc35
kf5-kdewebkit-5.96.0-1.fc35
kf5-kdnssd-5.96.0-1.fc35
kf5-kdoctools-5.96.0-1.fc35
kf5-kemoticons-5.96.0-1.fc35
kf5-kfilemetadata-5.96.0-1.fc35
kf5-kglobalaccel-5.96.0-1.fc35
kf5-kguiaddons-5.96.0-1.fc35
kf5-kholidays-5.96.0-1.fc35
kf5-khtml-5.96.0-1.fc35
kf5-ki18n-5.96.0-1.fc35
kf5-kiconthemes-5.96.0-1.fc35
kf5-kidletime-5.96.0-1.fc35
kf5-kimageformats-5.96.0-1.fc35
kf5-kinit-5.96.0-1.fc35
kf5-kio-5.96.0-1.fc35
kf5-kirigami2-5.96.0-1.fc35
kf5-kitemmodels-5.96.0-1.fc35
kf5-kitemviews-5.96.0-1.fc35
kf5-kjobwidgets-5.96.0-1.fc35
kf5-kjs-5.96.0-1.fc35
kf5-kjsembed-5.96.0-1.fc35
kf5-kmediaplayer-5.96.0-1.fc35
kf5-knewstuff-5.96.0-1.fc35
kf5-knotifications-5.96.0-1.fc35
kf5-knotifyconfig-5.96.0-1.fc35
kf5-kpackage-5.96.0-1.fc35
kf5-kparts-5.96.0-1.fc35
kf5-kpeople-5.96.0-1.fc35
kf5-kplotting-5.96.0-1.fc35
kf5-kpty-5.96.0-1.fc35
kf5-kquickcharts-5.96.0-1.fc35
kf5-kross-5.96.0-1.fc35
kf5-krunner-5.96.0-1.fc35
kf5-kservice-5.96.0-1.fc35
kf5-ktexteditor-5.96.0-1.fc35
kf5-ktextwidgets-5.96.0-1.fc35
kf5-kunitconversion-5.96.0-1.fc35
kf5-kwallet-5.96.0-1.fc35
kf5-kwayland-5.96.0-1.fc35
kf5-kwidgetsaddons-5.96.0-1.fc35
kf5-kwindowsystem-5.96.0-1.fc35
kf5-kxmlgui-5.96.0-1.fc35
kf5-kxmlrpcclient-5.96.0-1.fc35
kf5-modemmanager-qt-5.96.0-1.fc35
kf5-networkmanager-qt-5.96.0-1.fc35
kf5-plasma-5.96.0-1.fc35
kf5-prison-5.96.0-1.fc35
kf5-purpose-5.96.0-1.fc35
kf5-solid-5.96.0-1.fc35
kf5-sonnet-5.96.0-1.fc35
kf5-syndication-5.96.0-1.fc35
kf5-syntax-highlighting-5.96.0-1.fc35
kf5-threadweaver-5.96.0-1.fc35
kiln-0.3.1-3.fc35
libquentier-0.5.0-12.fc35
lksctp-tools-1.0.19-1.fc35
manifest-tool-1.0.3-5.fc35
mass3-0-0.6.20200627gite1d5f1a.fc35
mate-applets-1.26.1-1.fc35
mate-control-center-1.26.0-3.fc35
mate-polkit-1.26.0-2.fc35
mate-power-manager-1.26.0-2.fc35
mate-utils-1.26.0-2.fc35
meg-0.2.4-6.fc35
meshbird-2.3-6.fc35
micro-2.0.8-5.fc35
moby-engine-20.10.17-4.fc35
mqttcli-0.2.3-2.fc35
nats-server-2.1.9-6.fc35
netscanner-0-0.5.20201116git8baab36.fc35
nex-20210330-2.fc35
ohmybackup-0-0.6.20200526git50f2fce.fc35
opendoas-6.8.2-1.fc35
oxygen-icon-theme-5.96.0-1.fc35
plasma-wayland-protocols-1.7.0-1.fc35
podman-tui-0.2.1-2.fc35
poedit-3.1.1-1.fc35
powerline-go-1.22.1-2.fc35
qqc2-desktop-style-5.96.0-1.fc35
reg-0.16.1-8.fc35
runc-1.1.2-2.fc35
rust-aparato-6.0.2-1.fc35
rust-daemonize-0.4.1-2.fc35
rust-typed-builder-0.10.0-1.fc35
shellz-1.5.0-7.fc35
shhgit-0.2-7.fc35
snapd-2.56.2-2.fc35
snowcrash-0-0.7.20201119git49b99ad.fc35
source-to-image-1.3.1-4.fc35
sysutil-0-0.7.20200615git15668db.fc35
terrier-0.0.2-6.fc35
tiedot-3.4-8.fc35
tinygo-0.23.0-5.fc35
vgrep-2.5.6-2.fc35
vultr-1.15.0-9.fc35
vultr-cli-2.14.2-2.fc35
webanalyze-0.3.1-6.fc35
weldr-client-35.5-2.fc35
wgctrl-0-0.11.20210811git4253848.fc35
xbanish-1.8-1.fc35
xq-0.0.7-4.fc35
xwm-0.1.9-1.fc35
yggdrasil-0.2.98^1.ffb580f-0.2.20220127gitffb580f.fc35
yubihsm-connector-3.0.2-2.fc35
zcfan-1.1.1-1.fc35
Details about builds:
================================================================================
3mux-1.1.0-5.fc35 (FEDORA-2022-3969b64d4b)
Terminal multiplexer inspired by i3
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.1.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
act-1.6.0-6.fc35 (FEDORA-2022-3969b64d4b)
Automatic Component Toolkit
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.6.0-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
aerc-0.10.0-4.fc35 (FEDORA-2022-3969b64d4b)
Email client for your terminal
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.10.0-4
- Use auto buildrequires
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.10.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.10.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
age-1.0.0-5.fc35 (FEDORA-2022-3969b64d4b)
Simple, modern and secure encryption tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.0.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
aml-0.2.2-1.fc35 (FEDORA-2022-c39585659d)
Another Main Loop
--------------------------------------------------------------------------------
Update Information:
new version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Bob Hepple <bob.hepple(a)gmail.com> - 0.2.2-1
- new version
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
apache-cloudstack-cloudmonkey-6.2.0-3.fc35 (FEDORA-2022-3969b64d4b)
Apache Cloudstack Cloudmonkey
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 6.2.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.2.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
aquatone-1.7.0-7.fc35 (FEDORA-2022-3969b64d4b)
Tool for Domain Flyovers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.7.0-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
aron-0-0.6.20200626git7eade58.fc35 (FEDORA-2022-3969b64d4b)
Tool to find hidden GET & POST parameters
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
asciigraph-0.5.5-2.fc35 (FEDORA-2022-3969b64d4b)
Makes lightweight ASCII line graphs
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 4 2022 Major Hayden <major(a)mhtx.net> 0.5.5-1
- Update to 0.5.5
* Tue May 3 2022 Major Hayden <major(a)mhtx.net> 0.5.4-1
- Update to 0.5.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
asnip-0-0.6.20200618git44ba98b.fc35 (FEDORA-2022-3969b64d4b)
ASN detail retriever
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
assetfinder-0.1.0-6.fc35 (FEDORA-2022-3969b64d4b)
Find domains and subdomains related to a given domain
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.1.0-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
bettercap-2.32.0-4.fc35 (FEDORA-2022-3969b64d4b)
Tool for 802.11, BLE and Ethernet reconnaissance and MITM attacks
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.32.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
breeze-icon-theme-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
Breeze icon theme
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
butane-0.15.0-2.fc35 (FEDORA-2022-3969b64d4b)
Butane config transpiler
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
caddy-2.3.0-3.fc35 (FEDORA-2022-3969b64d4b)
Web server with automatic HTTPS
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 2.3.0-3
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
cadvisor-0.44.1-3.fc35 (FEDORA-2022-3969b64d4b)
Analyzes resource usage and performance characteristics of running containers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> 0.44.1-3
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.44.1-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
chisel-1.7.7-3.fc35 (FEDORA-2022-3969b64d4b)
TCP tunnel over HTTP
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.7.7-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
clash-1.6.5-3.fc35 (FEDORA-2022-3969b64d4b)
A rule-based tunnel in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.6.5-3
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
commit-stream-0.1.2-7.fc35 (FEDORA-2022-3969b64d4b)
Github event API consumer
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.1.2-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
containerd-1.6.6-4.fc35 (FEDORA-2022-3969b64d4b)
Open and reliable container runtime
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> 1.6.6-4
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.6.6-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Sat Jun 11 2022 Maxwell G <gotmax(a)e.email> 1.6.6-2
- Rebuild for new golang-github-docker-libnetwork
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
direnv-2.32.1-2.fc35 (FEDORA-2022-3969b64d4b)
Per-directory shell configuration tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 2.32.1-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
dnscrypt-proxy-2.1.1-4.fc35 (FEDORA-2022-3969b64d4b)
Flexible DNS proxy, with support for encrypted DNS protocols
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.1.1-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.1.1-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.1.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
dnsx-1.1.0-3.fc35 (FEDORA-2022-3969b64d4b)
Dnsx is a fast and multi-purpose DNS toolkit
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.1.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.1.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
douceur-0.2.0-14.fc35 (FEDORA-2022-3969b64d4b)
A simple CSS parser and inliner in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.0-14
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
drbd-9.21.3-1.fc35 (FEDORA-2022-5409dd3d72)
DRBD user-land tools and scripts
--------------------------------------------------------------------------------
Update Information:
Upstream release of 9.21.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Peter Hanecak <hany(a)hany.sk> - 9.21.3-1
- Upstream release of 9.21.3
* Tue Jun 14 2022 Carl George <carl(a)george.computer> - 9.21.1-2
- Change drbd-pacemaker to recommend instead of require pacemaker on EPEL8/EPEL9 rhbz#2086146
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2045323 - drbd: FTBFS in Fedora rawhide/f36
https://bugzilla.redhat.com/show_bug.cgi?id=2045323
[ 2 ] Bug #2086146 - drbd-pacemaker: fails to install
https://bugzilla.redhat.com/show_bug.cgi?id=2086146
[ 3 ] Bug #2094876 - drbd-9.21.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2094876
--------------------------------------------------------------------------------
================================================================================
duf-0.8.1-3.fc35 (FEDORA-2022-3969b64d4b)
Disk Usage/Free Utility - a better 'df' alternative
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.8.1-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.8.1-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
exercism-3.0.13-8.fc35 (FEDORA-2022-3969b64d4b)
Exercism command-line interface
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.0.13-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.13-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
extra-cmake-modules-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
Additional modules for CMake build system
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
ffuf-1.0.2-6.fc35 (FEDORA-2022-3969b64d4b)
Fast web fuzzer written in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
geoipupdate-4.8.0-3.fc35 (FEDORA-2022-3969b64d4b)
Update GeoIP2 binary databases from MaxMind
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 4.8.0-3
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
gh-2.13.0-3.fc35 (FEDORA-2022-3969b64d4b)
GitHub���s official command line tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 2.13.0-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 2.13.0-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
gitjacker-0.0.2-6.fc35 (FEDORA-2022-3969b64d4b)
Leak git repositories from misconfigured websites
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.0.2-6
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
glide-0.13.2-10.fc35 (FEDORA-2022-3969b64d4b)
Package Management for Golang
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.13.2-10
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.13.2-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-freon-45-1.20220710gitdab42ff.fc35 (FEDORA-2022-2c98234a9d)
GNOME Shell extension to display system temperature, voltage, and fan speed
--------------------------------------------------------------------------------
Update Information:
Update to 45 (#2009382)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Linus Walleij <triad(a)df.lth.se> - 2:45-1
- Update to 45 (#2009382)
- Turkish translation file problem is fixed upstream.
- Trash po directory removed upstream
--------------------------------------------------------------------------------
================================================================================
goaccess-1.6.1-1.fc35 (FEDORA-2022-816021ae09)
Real-time web log analyzer and interactive viewer
--------------------------------------------------------------------------------
Update Information:
* Added a `--ping-interval=<secs>` in an attempt to keep the WebSocket
connection opened. * Added support for timezone conversion via `--datetime-
format=<format>` and `--tz=<timezone>`. * Added the ability to reconnect to
WebSocket server after 1 sec with exponential backoff (x20). * Fixed issue where
an invalid client connection would stall data out to clients via the WebSocket
server. * Fixed issue where real-time data would be parsed multiple times under
`Cygwin`.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Fabio Alessandro Locati <fale(a)fedoraproject.org> - 1.6.1-1
- Update to 1.6.1, fixes rhbz#2103284
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103284 - goaccess-1.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2103284
--------------------------------------------------------------------------------
================================================================================
goaltdns-0-0.7.20200627git2b3e8a3.fc35 (FEDORA-2022-3969b64d4b)
Permutation generation tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
gobuster-3.1.0-3.fc35 (FEDORA-2022-3969b64d4b)
Directory/File, DNS and VHost busting tool written in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 3.1.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
godoctor-0.6-12.fc35 (FEDORA-2022-3969b64d4b)
A golang refactoring tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.6-12
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
godotenv-1.4.0-4.fc35 (FEDORA-2022-3969b64d4b)
A Go port of Ruby's dotenv library
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.4.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.4.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.4.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
gojq-0.12.8-3.fc35 (FEDORA-2022-3969b64d4b)
Pure Go implementation of jq
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.12.8-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.12.8-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-ariga-atlas-0.3.6-3.fc35 (FEDORA-2022-3969b64d4b)
A database toolkit
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.3.6-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.3.6-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Apr 8 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 0.3.6-1
- Update to 0.3.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-bug-serial-1-1.3.3-2.fc35 (FEDORA-2022-3969b64d4b)
Cross-platform serial library for Golang
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 1.3.3-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-contrib-opencensus-resource-0.1.2-7.fc35 (FEDORA-2022-3969b64d4b)
Go packages for auto discovery of resource information in various environments
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.1.2-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-etcd-bbolt-1.3.6-4.fc35 (FEDORA-2022-3969b64d4b)
Embedded key/value database for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.3.6-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.3.6-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.3.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-gioui-0-8.20201225git18d4dbf.fc35 (FEDORA-2022-3969b64d4b)
Immediate mode GUI programs in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-a8m-envsubst-1.3.0-2.fc35 (FEDORA-2022-3969b64d4b)
Environment variables substitution for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.3.0-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
* Wed Jun 29 2022 Julien Rische <jrische(a)redhat.com> - 1.3.0-1
- Initial package
- Resolves: rhbz#2074406
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-a8m-tree-0-0.16.20210725gitce3525c.fc35 (FEDORA-2022-3969b64d4b)
Implementation of the Unix tree command written in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-0.16
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-0.15
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0-0.14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-ajstarks-deck-0-0.12.20210114git30c9fc6.fc35 (FEDORA-2022-3969b64d4b)
Slide Decks
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.12
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-akavel-rsrc-0.10.2-4.fc35 (FEDORA-2022-3969b64d4b)
Tool for embedding .ico & manifest resources in Go programs
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.10.2-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-alecthomas-chroma-0.10.0-3.fc35 (FEDORA-2022-3969b64d4b)
General purpose syntax highlighter in pure Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.10.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-aliyun-cli-3.0.104-4.s20220118git031f9f2.fc35 (FEDORA-2022-3969b64d4b)
Alibaba Cloud (Aliyun) CLI
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.0.104-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Wed Jan 26 2022 Brandon Perkins <bperkins(a)redhat.com> - 3.0.104-3
- remove 'unset LDFLAGS' with fix to redhat-rpm-config
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-aliyun-ossutil-1.7.9-3.fc35 (FEDORA-2022-3969b64d4b)
Alibaba Cloud (Aliyun) Object Storage Service (OSS) CLI
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.7.9-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Wed Jan 26 2022 Brandon Perkins <bperkins(a)redhat.com> - 1.7.9-2
- remove 'unset LDFLAGS' with fix to redhat-rpm-config
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-andybalholm-cascadia-1.2.0-6.fc35 (FEDORA-2022-3969b64d4b)
CSS selector library in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.2.0-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-apache-beam-2-2.33.0~RC1-7.fc35 (FEDORA-2022-3969b64d4b)
Unified programming model for Batch and Streaming
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-appc-docker2aci-0.17.2-9.fc35 (FEDORA-2022-3969b64d4b)
Library and CLI tool to convert Docker images to ACIs
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.17.2-9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-appc-goaci-0.1.1-12.fc35 (FEDORA-2022-3969b64d4b)
Tool to build Go projects into ACIs
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.1.1-12
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.1.1-11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-appc-spec-0.8.11-14.fc35 (FEDORA-2022-3969b64d4b)
App Container Specification and Tooling
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.8.11-14
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-aryann-difflib-0-0.5.20200822gite206f87.fc35 (FEDORA-2022-3969b64d4b)
Library for diffing two sequences of text
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-aws-lambda-1.24.0-3.fc35 (FEDORA-2022-3969b64d4b)
Libraries, samples and tools to help Go developers develop AWS Lambda functions
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.24.0-3
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-axgle-mahonia-0-0.13.20181112git3358181.fc35 (FEDORA-2022-3969b64d4b)
Character-set conversion library implemented in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.13
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-bifurcation-mint-0-0.9.20200724git93c820e.fc35 (FEDORA-2022-3969b64d4b)
Minimal TLS 1.3 Implementation in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-bobesa-domain-util-0-0.6.20200504git4033b5f.fc35 (FEDORA-2022-3969b64d4b)
Handler for URLs and identification of TLD and sub domains
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-burntsushi-toml-1.0.0-5.fc35 (FEDORA-2022-3969b64d4b)
Toml parser with reflection for Golang
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-burntsushi-toml-test-0.2.0-11.20210108git9767d20.fc35 (FEDORA-2022-3969b64d4b)
Language agnostic test suite for TOML parsers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.0-11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-burntsushi-xgb-0-0.15.20210108git5f9e7b3.fc35 (FEDORA-2022-3969b64d4b)
Low-level api to communicate with the X server
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.15
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-c-bata-prompt-0.2.6-4.fc35 (FEDORA-2022-3969b64d4b)
Building powerful interactive prompts in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.6-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.6-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cactus-statsd-client-5.0.0-5.fc35 (FEDORA-2022-3969b64d4b)
Statsd client for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 5.0.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cespare-xxhash-2.1.1-5.fc35 (FEDORA-2022-3969b64d4b)
Go implementation of the 64-bit xxHash algorithm (XXH64)
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 2.1.1-5
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-chai2010-gettext-1.0.2-6.fc35 (FEDORA-2022-3969b64d4b)
GNU gettext for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cheekybits-genny-1.0.0-9.20200724git3e22f1a.fc35 (FEDORA-2022-3969b64d4b)
Elegant generics for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.0-9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-chris-ramon-douceur-0.2.0-5.20200910gitf346305.fc35 (FEDORA-2022-3969b64d4b)
Simple CSS parser and inliner in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-christrenkamp-goxpath-0-0.6.20200627gitc5096ec.fc35 (FEDORA-2022-3969b64d4b)
XPath 1.0 implementation
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-chromedp-0.6.12-5.fc35 (FEDORA-2022-3969b64d4b)
Drive browsers supporting the Chrome DevTools Protocol
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.6.12-5
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cilium-ebpf-0.8.0-2.fc35 (FEDORA-2022-3969b64d4b)
EBPF Library for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.8.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-client9-plaintext-0-0.8.20190703git5bf47e7.fc35 (FEDORA-2022-3969b64d4b)
Tools to extract plaintext from computer code and markup
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cloudflare-0.17.0-3.fc35 (FEDORA-2022-3969b64d4b)
Go library for the Cloudflare v4 API
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.17.0-3
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cloudflare-redoctober-0-0.9.20210114git99c99a8.fc35 (FEDORA-2022-3969b64d4b)
Go server for two-man rule style file encryption and decryption
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0-0.9
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cockroachdb-pebble-0-0.6.20210108git48f5530.fc35 (FEDORA-2022-3969b64d4b)
RocksDB/LevelDB inspired key-value database in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0-0.6
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-colinmarc-hdfs-2-2.2.0-4.fc35 (FEDORA-2022-3969b64d4b)
Native go client for HDFS
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.2.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-containerd-continuity-0.2.2-3.fc35 (FEDORA-2022-3969b64d4b)
A transport-agnostic, filesystem metadata manifest system
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.2.2-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-containerd-fuse-overlayfs-snapshotter-1.0.2-7.fc35 (FEDORA-2022-3969b64d4b)
Fuse-overlayfs plugin for rootless containerd
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-containerd-stargz-snapshotter-0.10.1-3.fc35 (FEDORA-2022-3969b64d4b)
Fast container image distribution plugin with lazy pulling
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.10.1-2
- Fix OOM on 32 bits arches
* Fri Jun 17 2022 Maxwell G <gotmax(a)e.email> 0.10.1-1
- Update to 0.10.1. Fixes rhbz#1999889. Fixes rhbz#2045484.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-containernetworking-cni-1.1.1-4.fc35 (FEDORA-2022-3969b64d4b)
Container Network Interface - networking for Linux containers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.1.1-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Mon Jun 6 2022 Maxwell G <gotmax(a)e.email> 1.1.1-3
- Fix %%autorelease.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-coredns-corefile-migration-1.0.11-6.fc35 (FEDORA-2022-3969b64d4b)
Library and tools for migrating the CoreDNS corefile
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.11-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cpu-goacmedns-0.1.1-5.fc35 (FEDORA-2022-3969b64d4b)
Go library to handle acme-dns client communication
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.1.1-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cpuguy83-md2man-2.0.2-2.fc35 (FEDORA-2022-3969b64d4b)
Converts markdown into roff (man pages)
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.0.2-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-crossdock-0-0.8.20190628git049aabb.fc35 (FEDORA-2022-3969b64d4b)
Go client for Crossdock
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-cucumber-godog-0.11.0-4.fc35 (FEDORA-2022-3969b64d4b)
Cucumber for golang
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.11.0-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-dave-jennifer-1.4.1-5.fc35 (FEDORA-2022-3969b64d4b)
Code generator for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.4.1-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-deepmap-oapi-codegen-1.8.2-3.fc35 (FEDORA-2022-3969b64d4b)
Generate Go client and server boilerplate from OpenAPI 3 specifications
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.8.2-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-dgrijalva-jwt-3.2.0-11.fc35 (FEDORA-2022-3969b64d4b)
Golang implementation of json web tokens (jwt)
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.2.0-11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-docker-distribution-2.7.1-9.20200815git35b26de.fc35 (FEDORA-2022-3969b64d4b)
Docker toolset to pack, ship, store, and deliver content
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.7.1-9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-dreamacro-shadowsocks2-0.1.7-3.fc35 (FEDORA-2022-3969b64d4b)
Experimental Shadowsocks in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.1.7-3
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-dustinkirkland-petname-0-0.5.20200605git8e5a1ed.fc35 (FEDORA-2022-3969b64d4b)
An RFC1178 implementation
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0-0.5
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-eknkc-amber-0-0.17.20190601gitcdade1c.fc35 (FEDORA-2022-3969b64d4b)
Elegant templating engine for Go Programming Language
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.17
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-elazarl-bindata-assetfs-1.0.1-9.fc35 (FEDORA-2022-3969b64d4b)
Serve embedded files from jteeuwen/go-bindata with net/http
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.1-9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-emersion-smtp-0.15.0-4.fc35 (FEDORA-2022-3969b64d4b)
SMTP client & server library written in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.15.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.15.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-envoyproxy-protoc-gen-validate-0.4.1-6.fc35 (FEDORA-2022-3969b64d4b)
Protoc plugin to generate polyglot message validators
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.4.1-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-etcd-io-gofail-0-0.3.20210808gitad7f989.fc35 (FEDORA-2022-3969b64d4b)
Failpoints for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-evanphx-json-patch-5.5.0-3.fc35 (FEDORA-2022-3969b64d4b)
Go library to apply RFC6902 patches and create and apply RFC7386 patches
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 5.5.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 5.5.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-evanw-esbuild-0.14.38-2.fc35 (FEDORA-2022-3969b64d4b)
Fast JavaScript bundler and minifier
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.14.38-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-facebookincubator-contest-0-0.4.20210706gitceebc35.fc35 (FEDORA-2022-3969b64d4b)
Run continuous and on-demand system testing for real and virtual hardware
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0-0.4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-facebookincubator-dhcplb-0-0.4.20210706git2e66b27.fc35 (FEDORA-2022-3969b64d4b)
Facebook's implementation of a load balancer for DHCP
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0-0.4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-facebookincubator-go2chef-1.0-2.fc35 (FEDORA-2022-3969b64d4b)
Tool to bootstrap a system from zero so that it's able to run Chef
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 1.0-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-facebookincubator-ntp-0-0.5.20210617git69c3282.fc35 (FEDORA-2022-3969b64d4b)
Facebook's NTP libraries
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0-0.5
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-facebookincubator-nvdtools-0.1.4-5.fc35 (FEDORA-2022-3969b64d4b)
A collection of tools for working with National Vulnerability Database feeds
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.1.4-5
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-fernet-0-0.9.20200726giteff2850.fc35 (FEDORA-2022-3969b64d4b)
Generate and verify HMAC-based authentication tokens
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-francoispqt-gojay-1.2.13-7.fc35 (FEDORA-2022-3969b64d4b)
Fastest JSON encoder/decoder with powerful stream API for Golang
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.2.13-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-fvbommel-util-0.0.3-5.fc35 (FEDORA-2022-3969b64d4b)
Go utility packages
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.0.3-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.3-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gdamore-tcell-1.4.0-5.fc35 (FEDORA-2022-3969b64d4b)
Alternate terminal package
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.4.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gdamore-tcell-2-2.5.0-2.fc35 (FEDORA-2022-3969b64d4b)
Alternate terminal package
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.5.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-geertjohan-rice-1.0.2-5.fc35 (FEDORA-2022-3969b64d4b)
Go.rice is a Go package that makes working with resources such as html,js,css,images,templates, etc very easy
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gobuffalo-here-0.6.2-5.fc35 (FEDORA-2022-3969b64d4b)
Get you accurate Go information about the directory of package requested
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.6.2-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gobwas-ws-1.1.0-3.fc35 (FEDORA-2022-3969b64d4b)
Tiny WebSocket library
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.1.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-goccy-yaml-1.9.5-3.fc35 (FEDORA-2022-3969b64d4b)
YAML support for the Go language
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.9.5-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.9.5-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Fri Jun 24 2022 Julien Rische <jrische(a)redhat.com> - 1.9.5-1
- Initial package
- Resolves: rhbz#2074438
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gocolly-colly-2-2.1.0-4.20210920git2f09941.fc35 (FEDORA-2022-3969b64d4b)
Elegant Scraper and Crawler Framework for Golang
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.1.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gogo-googleapis-1.4.1-4.fc35 (FEDORA-2022-3969b64d4b)
Google APIs generated by gogoprotobuf
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.4.1-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gogo-protobuf-1.3.2-5.fc35 (FEDORA-2022-3969b64d4b)
Protocol buffers for Go with gadgets
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.3.2-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gohugoio-localescompressed-1.0.1-2.fc35 (FEDORA-2022-3969b64d4b)
The locales from https://github.com/gohugoio/locales in one package/struct
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.1-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gohugoio-testmodbuilder-0-0.10.20201030git72e1e0c.fc35 (FEDORA-2022-3969b64d4b)
Some helper scripts used for Hugo testing
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.10
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gojuno-minimock-3.0.10-3.fc35 (FEDORA-2022-3969b64d4b)
Powerful mock generation tool for Go programming language
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 3.0.10-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 3.0.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-golangci-lint-1-0-0.5.20200828gitd2cdd8c.fc35 (FEDORA-2022-3969b64d4b)
Fork of the official Go linter with API enhancements
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-google-jsonnet-0.17.0-5.fc35 (FEDORA-2022-3969b64d4b)
Implementation of Jsonnet in pure Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.17.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-google-martian-3.1.0-9.fc35 (FEDORA-2022-3969b64d4b)
Library for building custom HTTP/S proxies
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.1.0-9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.0-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-google-pprof-0-16.20210802gitc50bf4f.fc35 (FEDORA-2022-3969b64d4b)
Tool for visualization and analysis of profiling data
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-16
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-google-slothfs-0-0.11.20200727git59c1163.fc35 (FEDORA-2022-3969b64d4b)
FUSE filesystem for light-weight, lazily-loaded, read-only Git
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-google-tpm-0.3.3-1.fc35 (FEDORA-2022-6c2b3a0e15)
Go library that communicates directly with a TPM device
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.3; Fixes: #2051794
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.3.3-1
- Update to 0.3.3; Fixes: RHBZ#2051794
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2051794 - golang-github-google-tpm-0.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2051794
--------------------------------------------------------------------------------
================================================================================
golang-github-google-wire-0.4.0-6.fc35 (FEDORA-2022-3969b64d4b)
Compile-time Dependency Injection for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.4.0-6
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.4.0-5
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-googleapis-gnostic-0.5.3-6.fc35 (FEDORA-2022-3969b64d4b)
Compiler for APIs described by the OpenAPI Specification
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.5.3-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-googlecloudplatform-cloudsql-proxy-1.19.1-6.fc35 (FEDORA-2022-3969b64d4b)
Cloud SQL proxy client and Go library
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.19.1-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gorhill-cronexpr-1.0.0-4.fc35 (FEDORA-2022-3969b64d4b)
Cron expression parser in Go language
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-grpc-ecosystem-gateway-2-2.7.3-4.fc35 (FEDORA-2022-3969b64d4b)
GRPC to JSON proxy generator following the gRPC HTTP spec
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.7.3-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-gucumber-0-0.23.20190703git7d5c79e.fc35 (FEDORA-2022-3969b64d4b)
Cucumber BDD-style testing for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.23
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.22
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-haproxytech-client-native-2.5.3-3.fc35 (FEDORA-2022-3969b64d4b)
Go client for HAProxy configuration and runtime API
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.5.3-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-haproxytech-dataplaneapi-2.4.4-4.fc35 (FEDORA-2022-3969b64d4b)
HAProxy Data Plane API
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.4.4-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-consul-migrate-0.1.0-9.20190602git678fb10.fc35 (FEDORA-2022-3969b64d4b)
Consul server data migrator
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.1.0-9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.0-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-hclog-0.15.0-5.fc35 (FEDORA-2022-3969b64d4b)
Common logging package for hashicorp tools
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.15.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.15.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-memdb-1.3.0-5.fc35 (FEDORA-2022-3969b64d4b)
Golang in-memory database built on immutable radix trees
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.3.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-serf-0.9.5-5.fc35 (FEDORA-2022-3969b64d4b)
Service orchestration and management tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.9.5-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-hashicorp-sockaddr-1.0.2-11.fc35 (FEDORA-2022-3969b64d4b)
Ip address/unix socket convenience functions for go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-hexdigest-gowrap-1.1.12-4.fc35 (FEDORA-2022-3969b64d4b)
GoWrap is a command line tool for generating decorators for Go interfaces
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.1.12-4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.12-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-hpcloud-tail-1.0.0-10.20190325gita1dbeea.fc35 (FEDORA-2022-3969b64d4b)
Go package for reading from continously updated files (tail -f)
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.0-10
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-insomniacslk-termhook-0-6.20210406gita267c97.fc35 (FEDORA-2022-3969b64d4b)
Simple terminal that allows attaching hooks
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-instrumenta-kubeval-0.15.0-8.fc35 (FEDORA-2022-3969b64d4b)
Validate your Kubernetes configuration files
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.15.0-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-intel-goresctrl-0.2.0-6.fc35 (FEDORA-2022-3969b64d4b)
Golang library for managing resctrl filesystem
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-j-keck-arping-1.0.1-4.fc35 (FEDORA-2022-3969b64d4b)
Native Go library to ping a host per arp datagram, or query a host mac address
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.0.1-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-jamesclonk-vultr-2.0.2-4.fc35 (FEDORA-2022-3969b64d4b)
Vultr CLI and API client library
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 2.0.2-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-jmespath-0.4.0-5.fc35 (FEDORA-2022-3969b64d4b)
Golang implementation of JMESPath
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.4.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-jsonnet-bundler-0.4.0-8.fc35 (FEDORA-2022-3969b64d4b)
A jsonnet package manager
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.4.0-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-jwt-3.2.2-3.fc35 (FEDORA-2022-3969b64d4b)
A go implementation of JSON Web Tokens
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 3.2.2-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 3.2.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-kr-text-0.2.0-5.fc35 (FEDORA-2022-3969b64d4b)
Miscellaneous functions for formatting text
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-krishicks-yaml-patch-0.0.10-8.20200307git05b3177.fc35 (FEDORA-2022-3969b64d4b)
Library to apply YAML versions of RFC6902 patches
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.0.10-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-kyokomi-emoji-2.2.8-5.fc35 (FEDORA-2022-3969b64d4b)
Emoji terminal output for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.2.8-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.8-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-ledisdb-0.6-5.20210112gitd35789e.fc35 (FEDORA-2022-3969b64d4b)
A high performance NoSQL Database Server powered by Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.6-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-leonelquinteros-gotext-1.5.0-2.fc35 (FEDORA-2022-3969b64d4b)
Golang GNU gettext utilities package
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.5.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-leveldb-0-0.9.20190701git259d925.fc35 (FEDORA-2022-3969b64d4b)
LevelDB key-value database in the Go programming language
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-liamg-scout-0.12.0-5.fc35 (FEDORA-2022-3969b64d4b)
Lightweight URL fuzzer and spider
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.12.0-5
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-liamg-tml-0.3.0-4.fc35 (FEDORA-2022-3969b64d4b)
Markup language for terminal output
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.3.0-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-magefile-mage-1.11.0-5.fc35 (FEDORA-2022-3969b64d4b)
A Make/rake-like dev tool using Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.11.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mailru-easyjson-0.7.6-5.fc35 (FEDORA-2022-3969b64d4b)
Fast JSON serializer for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.7.6-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-markbates-pkger-0.17.1-5.fc35 (FEDORA-2022-3969b64d4b)
Embed static files in Go binaries
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.17.1-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-martinhoefling-goxkcdpwgen-0.1.0-2.fc35 (FEDORA-2022-3969b64d4b)
xkcd style password generator library and cli tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.1.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-maruel-panicparse-1.6.0-5.fc35 (FEDORA-2022-3969b64d4b)
Crash your app in style
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.6.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mattermost-xml-roundtrip-validator-0-0.5.20210103git8fd2afa.fc35 (FEDORA-2022-3969b64d4b)
Mitigations for multiple security issues in Go's encoding/xml
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mattn-colorable-0.1.8-7.fc35 (FEDORA-2022-3969b64d4b)
Colorable writer for windows
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0.1.8-7
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mdlayher-dhcp6-0-0.8.20200429git2a67805.fc35 (FEDORA-2022-3969b64d4b)
DHCPv6 server, as described in RFC 3315
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mdlayher-ethernet-0-0.5.20201109git0394541.fc35 (FEDORA-2022-3969b64d4b)
Implements marshaling and unmarshaling of IEEE 802.3 Ethernet II frames and IEEE 802.1Q VLAN tags
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0-0.5
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mgutz-ansi-0-0.13.20200729gitd51e80e.fc35 (FEDORA-2022-3969b64d4b)
Small, fast library to create ANSI colored strings and codes
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.13
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mholt-archiver-3.5.1-3.fc35 (FEDORA-2022-3969b64d4b)
Easily create and extract archive files with Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.5.1-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-microcosm-cc-bluemonday-1.0.17-3.fc35 (FEDORA-2022-3969b64d4b)
Fast golang HTML sanitizer
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.17-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.0.17-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mmarkdown-mmark-2.2.10-5.fc35 (FEDORA-2022-3969b64d4b)
Powerful markdown processor in Go geared towards the IETF
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.2.10-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.10-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-moby-buildkit-0.9.0-4.fc35~bootstrap (FEDORA-2022-3969b64d4b)
Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0.9.0-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mock-1.4.4-4.fc35 (FEDORA-2022-3969b64d4b)
Gomock is a mocking framework for the go programming language
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.4.4-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-morikuni-aec-1.0.0-5.fc35 (FEDORA-2022-3969b64d4b)
Go wrapper for ANSI escape code
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mrunalp-fileutils-0.5.0-5.fc35 (FEDORA-2022-3969b64d4b)
Collection of utilities for file manipulation in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.5.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-multiformats-multibase-0.0.3-2.20220213gitf067816.fc35 (FEDORA-2022-3969b64d4b)
Implementation of multibase parser in go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.0.3-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-multiformats-multihash-0.1.0-2.fc35 (FEDORA-2022-3969b64d4b)
Multihash implementation in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.1.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-mvo5-uboot-0.4-10.fc35 (FEDORA-2022-3969b64d4b)
Read uboot environment via Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.4-10
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-nats-io-nkeys-0.2.0-5.fc35 (FEDORA-2022-3969b64d4b)
Public-key signature system based on Ed25519 for the NATS ecosystem
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-nats-io-streaming-server-0.20.0-5.fc35 (FEDORA-2022-3969b64d4b)
NATS Streaming System Server
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.20.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.20.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-nbutton23-zxcvbn-0.1-8.20210110gite56b841.fc35 (FEDORA-2022-3969b64d4b)
Zxcvbn password complexity algorithm
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.1-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-nicksnyder-i18n-2-2.1.2-5.fc35 (FEDORA-2022-3969b64d4b)
Translate your Go program into multiple languages
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.1.2-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-niklasfasching-org-1.6.2-2.fc35 (FEDORA-2022-3969b64d4b)
Org mode parser with html & pretty printed org rendering
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 1.6.2-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-nxadm-tail-1.4.6-4.fc35 (FEDORA-2022-3969b64d4b)
Read from continously updated files (tail -f)
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.4.6-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-oklog-0.3.2-11.20190701gitca7cdf5.fc35 (FEDORA-2022-3969b64d4b)
Distributed and coordination-free log management system
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> - 0.3.2-11
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.2-10
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-oklog-ulid-2.0.2-10.fc35 (FEDORA-2022-3969b64d4b)
Universally Unique Lexicographically Sortable Identifier (ULID) in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.2-10
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.2-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-olekukonko-tablewriter-0.0.5-3.fc35 (FEDORA-2022-3969b64d4b)
ASCII table in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.0.5-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.0.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-oneofone-xxhash-1.2.8-5.fc35 (FEDORA-2022-3969b64d4b)
Native implementation of the excellent xxhash hashing algorithm
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.2.8-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.8-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-onsi-ginkgo-2-2.1.4-2.fc35 (FEDORA-2022-3969b64d4b)
A Modern Testing Framework for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.1.4-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pact-foundation-1.5.1-6.fc35 (FEDORA-2022-3969b64d4b)
Contract testing framework for HTTP APIs and non-HTTP messaging systems for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.5.1-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-path-network-mmproxy-2.1-3.fc35 (FEDORA-2022-3969b64d4b)
Golang implementation of MMProxy
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 2.1-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pdfcpu-0.3.13-2.fc35 (FEDORA-2022-3969b64d4b)
A PDF processor written in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.13-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pelletier-toml-1.9.4-2.fc35 (FEDORA-2022-3969b64d4b)
Go library for the toml language
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.9.4-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pelletier-toml-2-2.0.0~beta.8-4.fc35 (FEDORA-2022-3969b64d4b)
Go library for the TOML file format
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.0.0~beta.8-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-phayes-freeport-1.0.2-6.fc35 (FEDORA-2022-3969b64d4b)
Detect free and open TCP port
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.2-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pierrec-lz4-4.1.3-5.fc35 (FEDORA-2022-3969b64d4b)
LZ4 compression and decompression in pure Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 4.1.3-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.3-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pierrre-geohash-1.0.0-4.fc35 (FEDORA-2022-3969b64d4b)
Geohash library for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pkg-diff-0-0.4.20210406git20ebb0f.fc35 (FEDORA-2022-3969b64d4b)
Create, modify, and print diffs
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-posener-complete-1.2.3-8.fc35 (FEDORA-2022-3969b64d4b)
Bash completion written in go + bash completion for Go command
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.2.3-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.3-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-posener-complete-2-2.0.1~alpha.13-5.fc35 (FEDORA-2022-3969b64d4b)
Bash completion written in go + bash completion for go command
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.1~alpha.13-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.1~alpha.13-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pquerna-ffjson-0-0.9.20200730gitaa0246c.fc35 (FEDORA-2022-3969b64d4b)
Faster JSON serialization for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-pressly-goose-2.7.0-4.fc35 (FEDORA-2022-3969b64d4b)
Goose database migration tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.7.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-projectdiscovery-chaos-client-0.2.0-2.fc35 (FEDORA-2022-3969b64d4b)
Go client to communicate with Chaos DNS API
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.2.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-projectdiscovery-mapcidr-0.0.8-3.fc35 (FEDORA-2022-3969b64d4b)
Utility for operations on subnet/CIDR ranges
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.0.8-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.0.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-2.32.1-6.fc35 (FEDORA-2022-3969b64d4b)
Prometheus monitoring system and time series database
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> 2.32.1-6
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.32.1-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-alertmanager-0.23.0-10.fc35 (FEDORA-2022-3969b64d4b)
Prometheus Alertmanager
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> 0.23.0-10
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.23.0-9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-node-exporter-1.3.1-9.fc35 (FEDORA-2022-3969b64d4b)
Exporter for machine metrics
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> 1.3.1-9
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.3.1-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-prom2json-1.3.0-8.20210811git90766c0.fc35 (FEDORA-2022-3969b64d4b)
A tool to scrape a Prometheus client and dump the result as JSON
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.3.0-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.3.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-tsdb-0.10.0-8.fc35 (FEDORA-2022-3969b64d4b)
Prometheus time series database layer
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> 0.10.0-8
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.10.0-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Sat Apr 16 2022 Fabio Alessandro Locati <me(a)fale.io> 0.10.0-6
- Rebuilt for CVE-2022-27191
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.10.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-quay-claircore-0.5.4-5.fc35 (FEDORA-2022-3969b64d4b)
Foundation modules for scanning container packages and reporting vulnerabilities
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.5.4-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.5.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-quay-goval-parser-0.8.6-4.fc35 (FEDORA-2022-3969b64d4b)
OVAL parser written in go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.8.6-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.8.6-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-rakyll-statik-0.1.7-4.fc35 (FEDORA-2022-3969b64d4b)
Embed files into a Go executable
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.1.7-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-rcrowley-metrics-0-0.28.20210110gitcf1acfc.fc35 (FEDORA-2022-3969b64d4b)
Go port of coda hale's metrics library
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.28
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.27
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-redteampentesting-monsoon-0.6.0-6.fc35 (FEDORA-2022-3969b64d4b)
Fast HTTP enumerator
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.6.0-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-rogpeppe-internal-1.8.1-2.fc35 (FEDORA-2022-3969b64d4b)
Selected Go-internal packages factored out from the standard library
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.8.1-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-rubenv-sql-migrate-0-0.4.20210529gita32ed26.fc35 (FEDORA-2022-3969b64d4b)
SQL schema migration tool for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-rwcarlsen-goexif-0-0.9.20191017git9e8deec.fc35 (FEDORA-2022-3969b64d4b)
Decode embedded EXIF meta data from image files
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-segmentio-ksuid-1.0.4-3.fc35 (FEDORA-2022-3969b64d4b)
K-Sortable Globally Unique IDs
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.4-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.0.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-shellcode33-vm-detection-0-0.6.20200715git4fd05cb.fc35 (FEDORA-2022-3969b64d4b)
Linux and Windows VMs evasion fully written in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-shopify-toxiproxy-2.1.4-10.fc35 (FEDORA-2022-3969b64d4b)
TCP proxy to simulate network and system conditions for resiliency testing
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 2.1.4-10
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.4-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-shulhan-bindata-3.6.1-4.fc35 (FEDORA-2022-3969b64d4b)
A small utility which generates Go code from any file
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 3.6.1-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-shurcool-vfsgen-0-0.11.20210113git0d455de.fc35 (FEDORA-2022-3969b64d4b)
Takes an input http.FileSystem and generates code that statically implements it
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-skip2-qrcode-0-2.20220316gitda1b656.fc35 (FEDORA-2022-3969b64d4b)
QR Code encoder (Go)
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-skynetservices-skydns-2.5.3-22.20200802git94b2ea0.fc35 (FEDORA-2022-3969b64d4b)
DNS service discovery for etcd
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 2.5.3-22
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.5.3-21
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-snappy-0.0.2-6.fc35 (FEDORA-2022-3969b64d4b)
Implementation of the Snappy compression format for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.0.2-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-sophaskins-efs2tar-0-0.4.20210317git4db1b0f.fc35 (FEDORA-2022-3969b64d4b)
A tool to convert SGI efs filesystems to tarballs
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0-0.4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-sourcegraph-syntaxhighlight-0-0.11.20180418gitbd320f5.fc35 (FEDORA-2022-3969b64d4b)
Go package for syntax highlighting of code
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-spf13-cobra-1.4.0-3.fc35 (FEDORA-2022-3969b64d4b)
Commander for modern Go CLI interactions
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2022 Maxwell G <gotmax(a)e.email> 1.4.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-spyzhov-ajson-0.4.2-10.fc35 (FEDORA-2022-3969b64d4b)
Abstract JSON for Golang with JSONPath support
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0.4.2-10
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-task-3.14.0-2.fc35 (FEDORA-2022-3969b64d4b)
A task runner / simpler Make alternative written in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 3.14.0-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sat Jul 9 2022 Mark E. Fuller <mark.e.fuller(a)gmx.de> - 3.14.0-1
- Update to v3.14.0 (close rhbz#2105612)
- Reenable tests on recommendation of upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-minify-2.11.10-3.fc35 (FEDORA-2022-3969b64d4b)
Go minifiers for web formats
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.11.10-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-temoto-robotstxt-1.1.1-5.fc35 (FEDORA-2022-3969b64d4b)
Robots.txt exclusion protocol implementation
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.1.1-5
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-theoapp-theo-agent-0.14.0-4.fc35 (FEDORA-2022-3969b64d4b)
Theo authorized keys manager agent
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.14.0-4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.14.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-theupdateframework-notary-0.7.0-6.fc35 (FEDORA-2022-3969b64d4b)
Project that allows anyone to have trust over arbitrary collections of data
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> 0.7.0-6
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
* Sun Jun 19 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.7.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-tinylib-msgp-1.1.5-5.fc35 (FEDORA-2022-3969b64d4b)
Go code generator for MessagePack
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.1.5-5
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-tklauser-numcpus-0.2.3-7.fc35 (FEDORA-2022-3969b64d4b)
Go module to get the number of CPUs on a Linux/BSD system
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0.2.3-7
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-twitchtv-twirp-8.1.0-4.fc35 (FEDORA-2022-3969b64d4b)
A simple RPC framework with protobuf service definitions
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 8.1.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-twpayne-waypoint-0-0.4.20210130git4f8e6bf.fc35 (FEDORA-2022-3969b64d4b)
Reads and writes waypoints in formats used by the free flying community
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-u-root-iscsinl-0.1.0-4.fc35 (FEDORA-2022-3969b64d4b)
Go iSCSI initiator netlink library
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.1.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-uber-athenadriver-1.1.12-5.fc35 (FEDORA-2022-3969b64d4b)
A fully-featured AWS Athena database driver
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.1.12-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.12-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-ulikunitz-xz-0.5.10-4.fc35 (FEDORA-2022-3969b64d4b)
Pure golang package for reading and writing xz-compressed files
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.5.10-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.10-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-valyala-fasthttp-1.19.0-4.fc35 (FEDORA-2022-3969b64d4b)
Fast HTTP package
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.19.0-4
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-vbatts-tar-split-0.11.1-10.fc35 (FEDORA-2022-3969b64d4b)
Tar archive assembly/disassembly
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.11.1-10
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.1-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-vincent-petithory-dataurl-0-0.7.20200110gitd1553a7.fc35 (FEDORA-2022-3969b64d4b)
Data URL Schemes in Golang
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-vmware-govmomi-0.24.0-5.fc35 (FEDORA-2022-3969b64d4b)
Go library for the VMware vSphere API
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.24.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.24.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-xo-terminfo-0-0.6.20210113gitc22d04b.fc35 (FEDORA-2022-3969b64d4b)
A terminfo package in pure go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-github-xordataexchange-crypt-0.0.2-12.20190412gitb2862e3.fc35 (FEDORA-2022-3969b64d4b)
Store and retrieve encrypted configs from etcd or consul
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.0.2-12
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-gitlab-commonmark-linkify-0-0.9.20200805git64bca66.fc35 (FEDORA-2022-3969b64d4b)
Find what looks like links in plain text
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-google-appengine-1.6.7-5.fc35 (FEDORA-2022-3969b64d4b)
Go app engine packages
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.6.7-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.7-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-google-protobuf-1.27.1-3.fc35 (FEDORA-2022-3969b64d4b)
Go support for Google's protocol buffers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 1.27.1-3
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-neurosnap-sentences-1-1.0.6-14.fc35 (FEDORA-2022-3969b64d4b)
Multilingual command line sentence tokenizer in Golang
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.6-14
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.6-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-square-jose-2-2.6.0-3.fc35 (FEDORA-2022-3969b64d4b)
Implementation of JOSE standards (JWE, JWS, JWT) in Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.6.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.6.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-gopkg-src-d-git-4-4.13.1-8.fc35 (FEDORA-2022-3969b64d4b)
A highly extensible git implementation in pure go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 4.13.1-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-honnef-tools-2021.1-2.fc35 (FEDORA-2022-3969b64d4b)
Collection of static analysis tools for working with Go code
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 2021.1-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-jaytaylor-html2text-0-0.2.20220509gitbc68cce.fc35 (FEDORA-2022-3969b64d4b)
Golang HTML to plaintext conversion library
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-0.2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-k8s-apiextensions-apiserver-1.22.0-6.fc35 (FEDORA-2022-3969b64d4b)
API server for API extensions like CustomResourceDefinitions
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.22.0-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-k8s-code-generator-1.22.0-4.fc35 (FEDORA-2022-3969b64d4b)
Generators for kube-like API types
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.22.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-k8s-kube-aggregator-1.22.0-4.fc35 (FEDORA-2022-3969b64d4b)
Aggregator for Kubernetes-style API servers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.22.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-k8s-kube-openapi-0-0.19.20210813git3c81807.fc35 (FEDORA-2022-3969b64d4b)
Kubernetes OpenAPI spec generation & serving
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0-0.19
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-k8s-pod-security-admission-1.22.0-3.fc35 (FEDORA-2022-3969b64d4b)
Kubernetes Pod Security Standards implementation
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-k8s-sample-apiserver-1.22.0-5.fc35 (FEDORA-2022-3969b64d4b)
Reference implementation of an apiserver for a custom Kubernetes API
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.22.0-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-k8s-sample-cli-plugin-1.22.0-2.fc35 (FEDORA-2022-3969b64d4b)
Sample kubectl plugin
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 1.22.0-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-k8s-sample-controller-1.22.0-4.fc35 (FEDORA-2022-3969b64d4b)
Simple controller for watching Foo resources
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.22.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-modernc-golex-1.0.1-5.fc35 (FEDORA-2022-3969b64d4b)
Lex/flex like utility
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.0.1-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-mongodb-mongo-driver-1.4.5-6.fc35 (FEDORA-2022-3969b64d4b)
Go driver for MongoDB
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.4.5-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-mvdan-sh-3-3.4.3-4.fc35 (FEDORA-2022-3969b64d4b)
A shell parser, formatter, and interpreter
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 3.4.3-4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 3.4.3-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-mvdan-xurls-2.2.0-6.fc35 (FEDORA-2022-3969b64d4b)
Extract urls from text
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.2.0-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-sourcegraph-appdash-0-0.9.20210113gitebfcffb.fc35 (FEDORA-2022-3969b64d4b)
Application tracing system for Go, based on Google's Dapper
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-storj-drpc-0.0.31-2.fc35 (FEDORA-2022-3969b64d4b)
Lightweight, drop-in replacement for gRPC
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 21 2022 Maxwell G <gotmax(a)e.email> 0.0.31-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-vbom-util-0-0.11.20190520gitefcd4e0.fc35 (FEDORA-2022-3969b64d4b)
Sort orders, comparison functions, and "heavy-weight string" utilities
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-x-build-0-0.21.20201229git0a4bf69.fc35 (FEDORA-2022-3969b64d4b)
Packages and tools that support Go's build system
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.21
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.20
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-x-mod-0.6.0~dev-3.20220330git9b9b3d8.fc35 (FEDORA-2022-3969b64d4b)
Go module mechanics libraries
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.6.0~dev-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-x-perf-0-0.15.20210123gitbdcc622.fc35 (FEDORA-2022-3969b64d4b)
Performance measurement, storage, and analysis
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.15
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-x-text-0.3.7-3.fc35~bootstrap (FEDORA-2022-3969b64d4b)
Go text processing support
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 30 2022 Stephen Smoogen <smooge(a)fedoraproject.org> - 0.3.7-3
- Add in a minimal bootstrap mode to try and break golang cycle with x packages
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.7-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
golang-x-tools-0.1.10-2.fc35 (FEDORA-2022-3969b64d4b)
Various packages and tools that support the Go programming language
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0.1.10-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
goloris-0-0.6.20200326gita59fafb.fc35 (FEDORA-2022-3969b64d4b)
Slowloris for NGINX DoS
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
google-guest-agent-20201217.02-4.fc35 (FEDORA-2022-3969b64d4b)
Google Compute Engine guest environment
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 20201217.02-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 20201217.02-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
gopass-1.13.1-3.fc35 (FEDORA-2022-3969b64d4b)
The slightly more awesome standard unix password manager for teams
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 1.13.1-3
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
gotags-1.4.1-8.fc35 (FEDORA-2022-3969b64d4b)
ctags-compatible tag generator for Go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.4.1-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.1-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
grpcurl-1.8.6-3.fc35 (FEDORA-2022-3969b64d4b)
Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.8.6-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
hakrevdns-0-0.5.20201116git9fa2d59.fc35 (FEDORA-2022-3969b64d4b)
Tool for performing reverse DNS lookups
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
hcloud-1.29.5-2.fc35 (FEDORA-2022-3969b64d4b)
A command-line interface for Hetzner Cloud
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 1.29.5-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
htmltest-0.15.0-3.fc35 (FEDORA-2022-3969b64d4b)
Test generated HTML for problems
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.15.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.15.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
httpdump-0-0.6.20200714gite6fa868.fc35 (FEDORA-2022-3969b64d4b)
Capture and parse HTTP traffic
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
httprobe-0.1.2-6.fc35 (FEDORA-2022-3969b64d4b)
Probing tool for working HTTP and HTTPS servers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.1.2-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
hulk-0-0.6.20200620git9670699.fc35 (FEDORA-2022-3969b64d4b)
DoS tool using unique and obfuscated traffic
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
ignition-2.14.0-3.fc35 (FEDORA-2022-3969b64d4b)
First boot installer and configuration tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 27 2022 Benjamin Gilbert <bgilbert(a)redhat.com> - 2.14.0-3
- Add macOS aarch64 binary to -redistributable
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.14.0-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
jid-0.7.6-9.fc35 (FEDORA-2022-3969b64d4b)
JSON incremental digger
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.7.6-9
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.6-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
kf5-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
Filesystem and RPM macros for KDE Frameworks 5
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-attica-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks Tier 1 Addon with Open Collaboration Services API
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
- disable qch doc generation (FTBFS)
--------------------------------------------------------------------------------
================================================================================
kf5-baloo-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A Tier 3 KDE Frameworks 5 module that provides indexing and search functionality
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-bluez-qt-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A Qt wrapper for Bluez
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-frameworkintegration-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 4 workspace and cross-framework integration plugins
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Tue May 17 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.94.0-2
- Rebuild (qt5)
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
* Tue Mar 8 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.91.0-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
kf5-kactivities-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A KDE Frameworks 5 Tier 3 to organize user work into separate activities
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kactivities-stats-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A KDE Frameworks 5 Tier 3 library for accessing the usage data collected by the activities system
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kapidox-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 4 scripts and data for building API documentation
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 5.94.0-2
- Rebuilt for Python 3.11
* Wed Apr 27 2022 Than Ngo <than(a)redhat.com> - 5.93.0-2
- bz#2074418, resolves deps
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
--------------------------------------------------------------------------------
================================================================================
kf5-karchive-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with archive functions
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kauth-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 integration module to perform actions as privileged user
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kbookmarks-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 addon for bookmarks manipulation
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kcalendarcore-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 KCalendarCore Library
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 1:5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kcmutils-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 addon with extra API to write KConfigModules
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kcodecs-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with string manipulation methods
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kcompletion-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 addon with auto completion widgets and classes
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kconfig-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with advanced configuration system
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kconfigwidgets-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 addon for creating configuration dialogs
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kcontacts-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
The KContacts Library
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 1:5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kcoreaddons-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with various classes on top of QtCore
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kcrash-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 addon for handling application crashes
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdav-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A DAV protocol implementation with KJobs
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 1:5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdbusaddons-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with various classes on top of QtDBus
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdeclarative-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 addon for Qt declarative
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Tue May 17 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.94.0-2
- Rebuild (qt5)
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
* Tue Mar 8 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.91.0-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
kf5-kded-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 addon with extensible daemon for system-level services
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdelibs4support-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 4 module with porting aid from KDELibs 4
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdesignerplugin-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 integration module for Qt Designer
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdesu-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 integration with su
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdewebkit-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 integration module for QtWebKit
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdnssd-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 integration module for DNS-SD services (Zeroconf)
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kdoctools-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 addon for generating documentation
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kemoticons-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 module with support for emoticons and emoticons themes
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kfilemetadata-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A Tier 2 KDE Framework for extracting file metadata
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kglobalaccel-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 integration module for global shortcuts
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kguiaddons-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with various classes on top of QtGui
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Tue May 17 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.94.0-2
- Rebuild (qt5)
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
* Tue Mar 8 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.91.0-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
kf5-kholidays-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
The KHolidays Library
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 1:5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-khtml-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 4 solution with KHTML, a HTML rendering engine
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-ki18n-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon for localization
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Tue May 17 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.94.0-2
- Rebuild (qt5)
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
* Tue Mar 8 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.91.0-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
kf5-kiconthemes-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 integration module with icon themes
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kidletime-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 integration module for idle time detection
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kimageformats-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with additional image plugins for QtGui
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Thu Jun 23 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 5.94.0-2
- Rebuilt for new libavif
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kinit-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 tier 3 solution for process launching
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kio-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 solution for filesystem abstraction
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
* Tue Mar 8 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.91.0-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
kf5-kirigami2-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
QtQuick plugins to build user interfaces based on the KDE UX guidelines
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Tue May 17 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.94.0-2
- Rebuild (qt5)
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Mon Apr 11 2022 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 5.93-2
- Backport of "AboutPage: Prevent infinite loop" (Fixes RHBZ#2057563)
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
* Tue Mar 8 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.91.0-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
kf5-kitemmodels-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with item models
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kitemviews-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with item views
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kjobwidgets-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 addon for KJobs
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kjs-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 functional module with JavaScript interpreter
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kjsembed-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 addon for binding JS objects to QObjects
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kmediaplayer-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 module with interface for media player features
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-knewstuff-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 module for downloading application assets
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Tue Mar 29 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-2
- Do not set user-visible name as additional agent information (kde#451165)
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-knotifications-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 solution with abstraction for system notifications
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-knotifyconfig-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 module for KNotify configuration
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kpackage-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 library to load and install packages as plugins
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kparts-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 solution for KParts
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kpeople-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 library for contact and people aggregation
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kplotting-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon for plotting
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kpty-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 module providing Pty abstraction
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kquickcharts-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A QtQuick module providing high-performance charts
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kross-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 solution for multi-language application scripting
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-krunner-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 solution with parallelized query system
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kservice-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 solution for advanced plugin and service introspection
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
- remove patch as it is included upstream
* Tue May 17 2022 Timoth��e Ravier <tim(a)siosm.fr> - 5.94.0-2
- Fixes rhbz#2021087
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-ktexteditor-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 with advanced embeddable text editor
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-ktextwidgets-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 addon with advanced text editing widgets
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kunitconversion-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 2 addon for unit conversions
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kwallet-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 solution for password management
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kwayland-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 library that wraps Client and Server Wayland libraries
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Tue May 17 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.94.0-2
- Rebuild (qt5)
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
* Tue Mar 8 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.91.0-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
kf5-kwidgetsaddons-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon with various classes on top of QtWidgets
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kwindowsystem-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 integration module with classes for windows management
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-kxmlgui-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 solution for user-configurable main windows
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Tue May 17 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.94.0-2
- Rebuild (qt5)
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
* Tue Mar 8 2022 Jan Grulich <jgrulich(a)redhat.com> - 5.91.0-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
================================================================================
kf5-kxmlrpcclient-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 library for interaction with XML RPC services
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-modemmanager-qt-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A Tier 1 KDE Frameworks module wrapping ModemManager DBus API
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-networkmanager-qt-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
A Tier 1 KDE Frameworks 5 module that wraps NetworkManager DBus API
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-plasma-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 3 framework is foundation to build a primary user interface
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Wed Mar 30 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-2
- pull in upstream recommended fix
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-prison-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 barcode library
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
- BR: cmake(ZXing)
--------------------------------------------------------------------------------
================================================================================
kf5-purpose-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
Framework for providing abstractions to get the developer's purposes fulfilled
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-solid-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 integration module that provides hardware information
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-sonnet-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 solution for spell checking
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-syndication-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
The Syndication Library
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 1:5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-syntax-highlighting-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Syntax highlighting engine for Kate syntax definitions
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kf5-threadweaver-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
KDE Frameworks 5 Tier 1 addon for advanced thread management
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
kiln-0.3.1-3.fc35 (FEDORA-2022-3969b64d4b)
Simple static site generator.
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0.3.1-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sun Jul 3 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.3.1-2
- Fix merge
* Sun Jul 3 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com>
- RPMAUTOSPEC: unresolvable merge
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
libquentier-0.5.0-12.fc35 (FEDORA-2022-4620c7f708)
Set of Qt/C++ APIs for feature rich desktop clients for Evernote service
--------------------------------------------------------------------------------
Update Information:
Bump to commit 04b7e7d8415b2610d30ce727db9cebc77387928e
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.5.0-12
- Bump to commit 04b7e7d8415b2610d30ce727db9cebc77387928e
* Sat Jan 22 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.5.0-11
- Disable gold linker
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.5.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> 0.5.0-9
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
================================================================================
lksctp-tools-1.0.19-1.fc35 (FEDORA-2022-d3323261d3)
User-space access to Linux Kernel SCTP
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0.19
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 5 2022 Peter Hanecak <hany(a)hany.sk> - 1.0.19-1
- Updated to 1.0.19
- Patches dropped since changes are now incorporated in the upstream
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.18-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
manifest-tool-1.0.3-5.fc35 (FEDORA-2022-3969b64d4b)
A command line tool used for creating manifest list objects
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.0.3-5
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
mass3-0-0.6.20200627gite1d5f1a.fc35 (FEDORA-2022-3969b64d4b)
Buckets enumerator
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
mate-applets-1.26.1-1.fc35 (FEDORA-2022-accd89d8f9)
MATE Desktop panel applets
--------------------------------------------------------------------------------
Update Information:
- update to 1.26.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.1-1
- update to 1.26.1
--------------------------------------------------------------------------------
================================================================================
mate-control-center-1.26.0-3.fc35 (FEDORA-2022-f3b1849afc)
MATE Desktop control-center
--------------------------------------------------------------------------------
Update Information:
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-3
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
================================================================================
mate-polkit-1.26.0-2.fc35 (FEDORA-2022-b795ebebff)
Integrates polkit authentication for MATE desktop
--------------------------------------------------------------------------------
Update Information:
- Fix segfault from gdk_x11_get_server_time if not on X11
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-2
- Fix segfault from gdk_x11_get_server_time if not on X11
--------------------------------------------------------------------------------
================================================================================
mate-power-manager-1.26.0-2.fc35 (FEDORA-2022-f519745278)
MATE power management service
--------------------------------------------------------------------------------
Update Information:
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-2
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
================================================================================
mate-utils-1.26.0-2.fc35 (FEDORA-2022-82d7e94c67)
MATE utility programs
--------------------------------------------------------------------------------
Update Information:
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-2
- add upstream commits from 1.26 branch
--------------------------------------------------------------------------------
================================================================================
meg-0.2.4-6.fc35 (FEDORA-2022-3969b64d4b)
Fetch many paths for many hosts
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.4-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
meshbird-2.3-6.fc35 (FEDORA-2022-3969b64d4b)
Distributed private networking
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.3-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
micro-2.0.8-5.fc35 (FEDORA-2022-3969b64d4b)
A modern and intuitive terminal-based text editor
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.0.8-5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.8-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
moby-engine-20.10.17-4.fc35 (FEDORA-2022-3969b64d4b)
The open-source application container engine
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 4 2022 Maxwell G <gotmax(a)e.email> - 20.10.17-4
- Only build on %golang_arches (i.e. where golang is available).
* Sun Jun 19 2022 Maxwell G <gotmax(a)e.email> - 20.10.17-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
mqttcli-0.2.3-2.fc35 (FEDORA-2022-3969b64d4b)
Simple MQTT CLI pub/sub client
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 0.2.3-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
nats-server-2.1.9-6.fc35 (FEDORA-2022-3969b64d4b)
High-Performance server for NATS, the cloud native messaging system
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.1.9-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.9-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
netscanner-0-0.5.20201116git8baab36.fc35 (FEDORA-2022-3969b64d4b)
TCP/UDP scanner to find open or closed ports
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.5
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
nex-20210330-2.fc35 (FEDORA-2022-3969b64d4b)
A lexer generator for Go that is similar to Lex/Flex
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 20210330-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
ohmybackup-0-0.6.20200526git50f2fce.fc35 (FEDORA-2022-3969b64d4b)
Scan for backup directories and backup files
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
opendoas-6.8.2-1.fc35 (FEDORA-2022-18dea6d07a)
Portable fork of the OpenBSDs doas command
--------------------------------------------------------------------------------
Update Information:
Update to 6.8.2 - Close: #2046534
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 6.8.2-1
- Update to 6.8.2 - Close: rhbz#2046534
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.8.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2046534 - opendoas-6.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2046534
--------------------------------------------------------------------------------
================================================================================
oxygen-icon-theme-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
Oxygen icon theme
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 1:5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 1:5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
plasma-wayland-protocols-1.7.0-1.fc35 (FEDORA-2022-90af18528f)
Plasma Specific Protocols for Wayland
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 11 2022 Marc Deop marcdeop(a)fedoraproject.org - 1.7.0-1
- 1.7.0
--------------------------------------------------------------------------------
================================================================================
podman-tui-0.2.1-2.fc35 (FEDORA-2022-3969b64d4b)
Podman Terminal User Interface
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0.2.1-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
poedit-3.1.1-1.fc35 (FEDORA-2022-1b3116a78a)
GUI editor for GNU gettext .po files
--------------------------------------------------------------------------------
Update Information:
New upstream version 3.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Wolfgang St��ggl <c72578(a)yahoo.de> - 3.1.1-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
powerline-go-1.22.1-2.fc35 (FEDORA-2022-3969b64d4b)
A beautiful and useful low-latency prompt for your shell, written in go
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 1.22.1-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sun Jul 3 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.22.1-1
- Update to 1.22.1 - Close: rhbz#2077577
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.21.0-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.21.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
qqc2-desktop-style-5.96.0-1.fc35 (FEDORA-2022-90af18528f)
QtQuickControls2 style for consistency between QWidget and QML apps
--------------------------------------------------------------------------------
Update Information:
plasma-wayland-protocols 1.7.0 is required by this frameworks update Frameworks
5.96.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 3 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 5.96.0-1
- 5.96.0
* Fri May 13 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.94.0-1
- 5.94.0
* Sun Apr 10 2022 Justin Zobel <justin(a)1707.io> - 5.93-1
- Update to 5.93
* Thu Mar 10 2022 Rex Dieter <rdieter(a)fedoraproject.org> - 5.92.0-1
- 5.92.0
--------------------------------------------------------------------------------
================================================================================
reg-0.16.1-8.fc35 (FEDORA-2022-3969b64d4b)
Docker registry v2 command line client
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 4 2022 Maxwell G <gotmax(a)e.email> - 0.16.1-8
- Fix FTBFS
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.16.1-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.16.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
runc-1.1.2-2.fc35 (FEDORA-2022-3969b64d4b)
CLI for running Open Containers
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 27 2022 Maxwell G <gotmax(a)e.email> - 2:1.1.2-1
- Update to 1.1.2. Fixes rhbz#2069648.
- Mitigate CVE-2022-29162 / GHSA-f3fp-gc8g-vw66.
- Don't pull in git unnecessarily
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2:1.1.1-2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
rust-aparato-6.0.2-1.fc35 (FEDORA-2022-7964b1d456)
Pci.ids-compliant library for getting information about available PCI devices
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#1983887
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 6.0.2-1
- Initial import; Fixes: RHBZ#1983887
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1983887 - Review Request: rust-aparato - Pci.ids-compliant library for getting information about available PCI devices
https://bugzilla.redhat.com/show_bug.cgi?id=1983887
--------------------------------------------------------------------------------
================================================================================
rust-daemonize-0.4.1-2.fc35 (FEDORA-2022-43e9f85ffe)
Library to enable your code run as a daemon process on Unix-like systems
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#1981129
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.4.1-2
- Fix path used in tests
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.4.1-1
- Initial import; Fixes: RHBZ#1981129
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1981129 - Review Request: rust-daemonize - Library to enable your code run as a daemon process on Unix-like systems
https://bugzilla.redhat.com/show_bug.cgi?id=1981129
--------------------------------------------------------------------------------
================================================================================
rust-typed-builder-0.10.0-1.fc35 (FEDORA-2022-5ed72aa830)
Compile-time type-checked builder derive
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#1983879
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.10.0-1
- Initial import; Fixes: RHBZ#1983879
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1983879 - Review Request: rust-typed-builder - Compile-time type-checked builder derive
https://bugzilla.redhat.com/show_bug.cgi?id=1983879
--------------------------------------------------------------------------------
================================================================================
shellz-1.5.0-7.fc35 (FEDORA-2022-3969b64d4b)
Utility to tracking and controlling shells and tunnels
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.5.0-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
shhgit-0.2-7.fc35 (FEDORA-2022-3969b64d4b)
GitHub secrets search tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2-7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
snapd-2.56.2-2.fc35 (FEDORA-2022-3969b64d4b)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 2.56.2-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
snowcrash-0-0.7.20201119git49b99ad.fc35 (FEDORA-2022-3969b64d4b)
Polyglot payload generator
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
source-to-image-1.3.1-4.fc35 (FEDORA-2022-3969b64d4b)
A tool for building artifacts from source and injecting into docker images
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.3.1-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
sysutil-0-0.7.20200615git15668db.fc35 (FEDORA-2022-3969b64d4b)
Provides cross platform system utilities
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.7
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
terrier-0.0.2-6.fc35 (FEDORA-2022-3969b64d4b)
Image and Container analysis tool
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.0.2-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
tiedot-3.4-8.fc35 (FEDORA-2022-3969b64d4b)
NoSQL database
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 3.4-8
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
tinygo-0.23.0-5.fc35 (FEDORA-2022-3969b64d4b)
Go compiler for small places
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 0.23.0-5
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
vgrep-2.5.6-2.fc35 (FEDORA-2022-3969b64d4b)
User-friendly pager for grep
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 2.5.6-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
vultr-1.15.0-9.fc35 (FEDORA-2022-3969b64d4b)
Vultr CLI
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 1.15.0-9
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
vultr-cli-2.14.2-2.fc35 (FEDORA-2022-3969b64d4b)
Official command line tool for Vultr services
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> 2.14.2-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
webanalyze-0.3.1-6.fc35 (FEDORA-2022-3969b64d4b)
Tool to uncovers technologies used on websites
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.3.1-6
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
weldr-client-35.5-2.fc35 (FEDORA-2022-3969b64d4b)
Command line utility to control osbuild-composer
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 35.5-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
wgctrl-0-0.11.20210811git4253848.fc35 (FEDORA-2022-3969b64d4b)
Control of WireGuard interfaces on multiple platforms
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-0.11
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0-0.10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
xbanish-1.8-1.fc35 (FEDORA-2022-e2b2b2cedf)
Banish the mouse cursor when typing, show it again when the mouse moves
--------------------------------------------------------------------------------
Update Information:
Update to 1.8; Fixes: RHBZ#2056151
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 1.8-1
- Update to 1.8; Fixes: RHBZ#2056151
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2056151 - xbanish-1.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2056151
--------------------------------------------------------------------------------
================================================================================
xq-0.0.7-4.fc35 (FEDORA-2022-3969b64d4b)
Command line XML beautifier and content extractor. Similar to jq
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.0.7-4
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
xwm-0.1.9-1.fc35 (FEDORA-2022-a6158ed186)
Tiny XCB floating window manager
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.9; Fixes: RHBZ#2046583
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.1.9-1
- Update to 0.1.9; Fixes: RHBZ#2046583
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.8-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2046583 - xwm-0.1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2046583
--------------------------------------------------------------------------------
================================================================================
yggdrasil-0.2.98^1.ffb580f-0.2.20220127gitffb580f.fc35 (FEDORA-2022-3969b64d4b)
Remote execution client and dispatch service
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 18 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0.2.98^1.ffb580f-0.2
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
yubihsm-connector-3.0.2-2.fc35 (FEDORA-2022-3969b64d4b)
YubiHSM Connector
--------------------------------------------------------------------------------
Update Information:
Rebuild for CVE-2022-{24675,28327,29526} in golang and other go ecosystem CVEs
--- This contains the result from the mass rebuild in F35 for all packages that
require `golang` and provide binaries to mitigate the following CVEs: `golang`
itself: - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode -
CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar -
CVE-2022-29526 golang: syscall: faccessat checks wrong group (There are some Go
CVEs that are a little bit older that will also be mitigated by the rebuild for
packages that haven't been updated recently) CVEs in other golang libraries
that affect a subset of Go packages: - CVE-2022-21698 golang-github-prometheus-
client: prometheus/client_golang: Denial of service using
InstrumentHandlerCounter - CVE-2022-1996 go-restful: Authorization Bypass
Through User-Controlled Key ---- Initial import for golang-github-a8m-envsubst
Resolves: rhbz#2074406 ---- Initial package Resolves: rhbz#2074438 ----
Update to v3.14.0 (close rhbz#2105612) ---- Fix merge ---- Update to 1.22.1
- Close: rhbz#2077577
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Maxwell G <gotmax(a)e.email> - 3.0.2-2
- Rebuild for CVE-2022-{24675,28327,29526} in golang
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074406 - Review Request: golang-github-a8m-envsubst - Environment variables substitution for Go
https://bugzilla.redhat.com/show_bug.cgi?id=2074406
[ 2 ] Bug #2074438 - Review Request: golang-github-goccy-yaml - YAML support for the Go language
https://bugzilla.redhat.com/show_bug.cgi?id=2074438
[ 3 ] Bug #2077577 - powerline-go-1.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077577
[ 4 ] Bug #2105612 - golang-github-task-3.14.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2105612
--------------------------------------------------------------------------------
================================================================================
zcfan-1.1.1-1.fc35 (FEDORA-2022-42bbbb7c2a)
Zero-configuration fan daemon for ThinkPads
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 9 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 1.1.1-1
- Update to 1.1.1
--------------------------------------------------------------------------------
1 year, 10 months
Removing 5.19 kernel; dnf wants to remove 501 other packages too.
by George R Goffe
Hi,
I'm having trouble with dnf and the 5.19 kernel.
I have tried to exclude the 5.19 kernel on this system (FC37) because 1) Virtual box doesn't seem to support it yet, 2) the system gets stuck during boot and the boot will NOT succeed (It seems to be running a list of UUIDs).
The problem: somehow I managed to upgrade to the 5.19 kernel and am now stuck. dnf seems to want to remove EVERYTHING that it thinks is dependent on this kernel.I have used this command "dnf --noautoremove erase kernel-5.19.0-0.rc5.20220707git9f09069cde34.43.fc37.x86_64 kernel-core-5.19.0-0.rc5.20220707git9f09069cde34.43.fc37.x86_64 kernel-devel-5.19.0-0.rc5.20220707git9f09069cde34.43.fc37.x86_64 kernel-headers-5.19.0-0.rc5.git0.1.fc37.x86_64 kernel-modules-5.19.0-0.rc5.20220707git9f09069cde34.43.fc37.x86_64 kernel-modules-extra-5.19.0-0.rc5.20220707git9f09069cde34.43.fc37.x86_64'
which is where the 501 dependencies comes from.
I am a loss as to just what to do to get 5.19 out of my system. Is this happenstance a bug? Do all these packages REALLY depend on the kernel version?
"Normally" I would do something like "rpm --nodeps -e kernel*5.19*". Could the solution be that simple?
Any thoughts/hints/tips/suggestions would be greatly appreciated.
Best regards,
George...
1 year, 10 months
Fedora rawhide compose report: 20220710.n.0 changes
by Fedora Rawhide Report
OLD: Fedora-Rawhide-20220709.n.0
NEW: Fedora-Rawhide-20220710.n.0
===== SUMMARY =====
Added images: 0
Dropped images: 1
Added packages: 0
Dropped packages: 0
Upgraded packages: 56
Downgraded packages: 0
Size of added packages: 0 B
Size of dropped packages: 0 B
Size of upgraded packages: 5.21 GiB
Size of downgraded packages: 0 B
Size change of upgraded packages: 632.33 KiB
Size change of downgraded packages: 0 B
===== ADDED IMAGES =====
===== DROPPED IMAGES =====
Image: Comp_Neuro live x86_64
Path: Labs/x86_64/iso/Fedora-Comp_Neuro-Live-x86_64-Rawhide-20220709.n.0.iso
===== ADDED PACKAGES =====
===== DROPPED PACKAGES =====
===== UPGRADED PACKAGES =====
Package: ImageMagick-1:6.9.12.58-1.fc37
Old package: ImageMagick-1:6.9.12.52-1.fc37
Summary: An X application for displaying and manipulating images
RPMs: ImageMagick ImageMagick-c++ ImageMagick-c++-devel ImageMagick-devel ImageMagick-djvu ImageMagick-doc ImageMagick-libs ImageMagick-perl
Size: 33.06 MiB
Size change: -5.03 KiB
Changelog:
* Sat Jul 09 2022 S��rgio Basto <sergio(a)serjux.com> - 1:6.9.12.56-1
- Update ImageMagick to 6.9.12.56 (#2105662)
* Sat Jul 09 2022 S��rgio Basto <sergio(a)serjux.com> - 1:6.9.12.58-1
- Update ImageMagick to 6.9.12.58 (#2105662)
Package: arc-kde-20220706-1.fc37
Old package: arc-kde-20220612-1.fc37
Summary: Port of the popular GTK theme Arc for the Plasma 5 desktop
RPMs: arc-kde arc-kde-decorations arc-kde-konsole arc-kde-konversation arc-kde-kvantum arc-kde-wallpapers arc-kde-yakuake
Size: 31.65 MiB
Size change: 1.95 KiB
Changelog:
* Sat Jul 09 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 20220706-1
- Update to 20220706 - Close: rhbz#2104742
Package: barman-3.0.1-1.fc37
Old package: barman-2.17-3.fc37
Summary: Backup and Recovery Manager for PostgreSQL
RPMs: barman barman-cli python3-barman
Size: 597.07 KiB
Size change: 52.77 KiB
Changelog:
* Sat Jul 09 2022 Simone Caronni <negativo17(a)gmail.com> - 3.0.0-1
- Update to 3.0.0.
* Sat Jul 09 2022 Simone Caronni <negativo17(a)gmail.com> - 3.0.1-1
- Update to 3.0.1.
Package: blender-1:3.2.1-1.fc37
Old package: blender-1:3.2.0-7.fc37
Summary: 3D modeling, animation, rendering and post-production
RPMs: blender blender-rpm-macros
Size: 158.90 MiB
Size change: 11.16 KiB
Changelog:
* Sat Jul 09 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> 1:3.2.1-1
- local build
Package: fonttools-4.34.4-1.fc37
Old package: fonttools-4.33.3-2.fc37
Summary: Tools to manipulate font files
RPMs: fonttools python3-fonttools python3-fonttools+graphite python3-fonttools+interpolatable python3-fonttools+lxml python3-fonttools+plot python3-fonttools+symfont python3-fonttools+type1 python3-fonttools+ufo python3-fonttools+unicode python3-fonttools+woff
Size: 2.10 MiB
Size change: 23.84 KiB
Changelog:
* Sat Jul 09 2022 Parag Nemade <pnemade(a)fedoraproject.org> - 4.34.4-1
- Update to 4.34.4 version (#2104988)
Package: golang-github-facebookincubator-contest-0-0.4.20210706gitceebc35.fc37
Old package: golang-github-facebookincubator-contest-0-0.3.20210706gitceebc35.fc36
Summary: Run continuous and on-demand system testing for real and virtual hardware
RPMs: contest golang-github-facebookincubator-contest-devel
Size: 28.62 MiB
Size change: 226.40 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 0-0.4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-facebookincubator-dhcplb-0-0.4.20210706git2e66b27.fc37
Old package: golang-github-facebookincubator-dhcplb-0-0.3.20210706git2e66b27.fc36
Summary: Facebook's implementation of a load balancer for DHCP
RPMs: dhcplb golang-github-facebookincubator-dhcplb-devel
Size: 8.35 MiB
Size change: 33.70 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 0-0.4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-facebookincubator-go2chef-1.0-2.fc37
Old package: golang-github-facebookincubator-go2chef-1.0-1.fc37
Summary: Tool to bootstrap a system from zero so that it's able to run Chef
RPMs: go2chef golang-github-facebookincubator-go2chef-devel
Size: 16.21 MiB
Size change: 12.37 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> 1.0-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-facebookincubator-nvdtools-0.1.4-5.fc37
Old package: golang-github-facebookincubator-nvdtools-0.1.4-4.fc36
Summary: A collection of tools for working with National Vulnerability Database feeds
RPMs: golang-github-facebookincubator-nvdtools-devel nvdtools
Size: 45.08 MiB
Size change: 276.60 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 0.1.4-5
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-gojuno-minimock-3.0.10-3.fc37
Old package: golang-github-gojuno-minimock-3.0.10-2.fc36
Summary: Powerful mock generation tool for Go programming language
RPMs: golang-github-gojuno-minimock-devel minimock
Size: 7.97 MiB
Size change: 112.27 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> 3.0.10-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-google-tpm-0.3.3-1.fc37
Old package: golang-github-google-tpm-0.3.2-4.fc36
Summary: Go library that communicates directly with a TPM device
RPMs: golang-github-google-tpm-devel
Size: 95.88 KiB
Size change: 1.39 KiB
Changelog:
* Sun Jul 10 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 0.3.3-1
- Update to 0.3.3; Fixes: RHBZ#2051794
Package: golang-github-hexdigest-gowrap-1.1.12-4.fc37
Old package: golang-github-hexdigest-gowrap-1.1.12-3.fc36
Summary: GoWrap is a command line tool for generating decorators for Go interfaces
RPMs: golang-github-hexdigest-gowrap-devel gowrap
Size: 369.44 KiB
Size change: 561 B
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 1.1.12-4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-liamg-scout-0.15.1-4.fc37
Old package: golang-github-liamg-scout-0.15.1-2.fc36
Summary: Lightweight URL fuzzer and spider
RPMs: golang-github-liamg-scout-devel scout
Size: 9.49 MiB
Size change: 27.13 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 0.15.1-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 0.15.1-4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-mdlayher-ethernet-0-0.5.20201109git0394541.fc37
Old package: golang-github-mdlayher-ethernet-0-0.4.20201109git0394541.fc36
Summary: Implements marshaling and unmarshaling of IEEE 802.3 Ethernet II frames and IEEE 802.1Q VLAN tags
RPMs: etherecho golang-github-mdlayher-ethernet-devel
Size: 2.36 MiB
Size change: 18.80 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 0-0.5
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-niklasfasching-org-1.6.2-2.fc37
Old package: golang-github-niklasfasching-org-1.6.2-1.fc37
Summary: Org mode parser with html & pretty printed org rendering
RPMs: go-org golang-github-niklasfasching-org-devel
Size: 13.88 MiB
Size change: 30.96 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> 1.6.2-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-path-network-mmproxy-2.1-3.fc37
Old package: golang-github-path-network-mmproxy-2.1-2.fc36
Summary: Golang implementation of MMProxy
RPMs: go-mmproxy golang-github-path-network-mmproxy-devel
Size: 4.63 MiB
Size change: 18.68 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> 2.1-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-shopify-toxiproxy-2.1.4-10.fc37
Old package: golang-github-shopify-toxiproxy-2.1.4-9.fc36
Summary: TCP proxy to simulate network and system conditions for resiliency testing
RPMs: golang-github-shopify-toxiproxy-devel toxiproxy
Size: 11.78 MiB
Size change: 40.84 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 2.1.4-10
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-skynetservices-skydns-2.5.3-22.20200802git94b2ea0.fc37
Old package: golang-github-skynetservices-skydns-2.5.3-21.20200802git94b2ea0.fc36
Summary: DNS service discovery for etcd
RPMs: golang-github-skynetservices-skydns-devel skydns
Size: 17.97 MiB
Size change: 108.56 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> 2.5.3-22
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-sophaskins-efs2tar-0-0.4.20210317git4db1b0f.fc37
Old package: golang-github-sophaskins-efs2tar-0-0.3.20210317git4db1b0f.fc36
Summary: A tool to convert SGI efs filesystems to tarballs
RPMs: efs2tar golang-github-sophaskins-efs2tar-devel
Size: 2.42 MiB
Size change: 14.43 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 0-0.4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-task-3.14.0-2.fc37
Old package: golang-github-task-3.13.0-1.fc37
Summary: A task runner / simpler Make alternative written in Go
RPMs: go-task golang-github-task-devel golang-github-task-doc
Size: 8.03 MiB
Size change: 18.50 KiB
Changelog:
* Wed Jun 15 2022 Mark E. Fuller <mark.e.fuller(a)gmx.de> - 3.13.0-1
- Update to v3.13.0
- Disable tests on recommendation of upstream
* Sat Jul 09 2022 Mark E. Fuller <mark.e.fuller(a)gmx.de> - 3.14.0-1
- Update to v3.14.0 (close rhbz#2105612)
- Reenable tests on recommendation of upstream
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 3.14.0-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-theoapp-theo-agent-0.14.0-4.fc37
Old package: golang-github-theoapp-theo-agent-0.14.0-3.fc36
Summary: Theo authorized keys manager agent
RPMs: golang-github-theoapp-theo-agent-devel theo-agent
Size: 7.49 MiB
Size change: 28.17 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 0.14.0-4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-github-tinylib-msgp-1.1.5-5.fc37
Old package: golang-github-tinylib-msgp-1.1.5-4.fc36
Summary: Go code generator for MessagePack
RPMs: golang-github-tinylib-msgp-devel msgp
Size: 7.76 MiB
Size change: 78.03 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> - 1.1.5-5
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-gopkg-ini-1-1.66.6-1.fc37
Old package: golang-gopkg-ini-1-1.62.0-4.fc36
Summary: Package ini provides INI file read and write functionality in Go
RPMs: compat-golang-github-ini-devel golang-gopkg-ini-1-devel
Size: 58.29 KiB
Size change: 151 B
Changelog:
* Fri Jul 08 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 1.66.6-1
- Update to 1.66.6 - Closes rhbz#2001259
Package: golang-mvdan-sh-3-3.4.3-4.fc37
Old package: golang-mvdan-sh-3-3.4.3-2.fc37
Summary: A shell parser, formatter, and interpreter
RPMs: golang-mvdan-sh-3-devel gosh shfmt
Size: 7.70 MiB
Size change: 5.19 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> 3.4.3-3
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> 3.4.3-4
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: golang-x-tools-0.1.10-2.fc37
Old package: golang-x-tools-0.1.10-1.fc37
Summary: Various packages and tools that support the Go programming language
RPMs: golang-godoc golang-gotype golang-html2article golang-x-tools-benchcmp golang-x-tools-bundle golang-x-tools-callgraph golang-x-tools-compilebench golang-x-tools-cover golang-x-tools-devel golang-x-tools-digraph golang-x-tools-eg golang-x-tools-fiximports golang-x-tools-getgo golang-x-tools-go-contrib-init golang-x-tools-godex golang-x-tools-goimports golang-x-tools-gomvpkg golang-x-tools-gopls golang-x-tools-gorename golang-x-tools-goyacc golang-x-tools-guru golang-x-tools-present golang-x-tools-splitdwarf golang-x-tools-ssadump golang-x-tools-stress golang-x-tools-stringer golang-x-tools-toolstash
Size: 159.96 MiB
Size change: 208.29 KiB
Changelog:
* Sat Jul 09 2022 Maxwell G <gotmax(a)e.email> 0.1.10-2
- Rebuild for CVE-2022-{24675,28327,29526 in golang}
Package: gtest-1.12.1-1.fc37
Old package: gtest-1.12.0-1.fc37
Summary: Google C++ testing framework
RPMs: gmock gmock-devel gtest gtest-devel
Size: 3.30 MiB
Size change: 1.05 KiB
Changelog:
* Sat Jul 09 2022 Terje Rosten <terje.rosten(a)ntnu.no> - 1.12.1-1
- 1.12.1
Package: hyperestraier-1.4.13-49.fc37
Old package: hyperestraier-1.4.13-48.fc37
Summary: A full-text search system
RPMs: hyperestraier hyperestraier-devel hyperestraier-java hyperestraier-perl ruby-hyperestraier
Size: 3.69 MiB
Size change: -54.52 KiB
Changelog:
* Sat Jul 09 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.4.13-49
- Adopt %java_arches https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
Package: iotop-c-1.22-1.fc37
Old package: iotop-c-1.21-1.fc36
Summary: Simple top-like I/O monitor (implemented in C)
RPMs: iotop-c
Size: 239.81 KiB
Size change: 27.12 KiB
Changelog:
* Sun Jul 10 2022 Boian Bonev <bbonev(a)ipacct.com> - 1.22-1
- Update to latest ver 1.22
Package: java-latest-openjdk-1:18.0.1.0.10-8.rolling.fc37
Old package: java-latest-openjdk-1:18.0.1.0.10-7.rolling.fc37
Summary: OpenJDK 18 Runtime Environment
RPMs: java-latest-openjdk java-latest-openjdk-demo java-latest-openjdk-demo-fastdebug java-latest-openjdk-demo-slowdebug java-latest-openjdk-devel java-latest-openjdk-devel-fastdebug java-latest-openjdk-devel-slowdebug java-latest-openjdk-fastdebug java-latest-openjdk-headless java-latest-openjdk-headless-fastdebug java-latest-openjdk-headless-slowdebug java-latest-openjdk-javadoc java-latest-openjdk-javadoc-zip java-latest-openjdk-jmods java-latest-openjdk-jmods-fastdebug java-latest-openjdk-jmods-slowdebug java-latest-openjdk-slowdebug java-latest-openjdk-src java-latest-openjdk-src-fastdebug java-latest-openjdk-src-slowdebug java-latest-openjdk-static-libs java-latest-openjdk-static-libs-fastdebug java-latest-openjdk-static-libs-slowdebug
Size: 3.54 GiB
Size change: 426.68 KiB
Changelog:
* Sat Jul 09 2022 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:18.0.1.0.10-8.rolling
- Include a test in the RPM to check the build has the correct vendor information.
* Sat Jul 09 2022 Jayashree Huttanagoudar <jhuttana(a)redhat.com> - 1:18.0.1.0.10-8.rolling
- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&' is not treated as a special character by the shell.
Package: jpegxl-0.7.0~pre1-0.2.0~sonamebump.fc37
Old package: jpegxl-0.7.0~pre1-0.1.0~sonamebump.fc37
Summary: JPEG XL image format reference implementation
RPMs: gimp-jxl-plugin jpegxl-doc jxl-pixbuf-loader libjxl libjxl-devel libjxl-utils
Size: 13.01 MiB
Size change: -2.51 MiB
Changelog:
* Sat Jul 09 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.7.0~pre1-0.2.0~sonamebump
- Unbootstrap
Package: kvantum-1.0.3-1.fc37
Old package: kvantum-1.0.2-1.fc37
Summary: SVG-based theme engine for Qt5, KDE and LXQt
RPMs: kvantum kvantum-data
Size: 4.14 MiB
Size change: 817.08 KiB
Changelog:
* Sat Jul 09 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.3-1
- Update to 1.0.3 - Close: rhbz#2105097 rhbz#2058498
Package: libIDL-0.8.14-69.fc37
Old package: libIDL-0.8.14-40.fc37
Summary: Library for parsing IDL (Interface Definition Language)
RPMs: libIDL libIDL-devel libIDL-doc
Size: 708.51 KiB
Size change: 988 B
Changelog:
* Sat Apr 16 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.8.14-67
- Stop numbering patches
* Sat Apr 16 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.8.14-68
- Trivial spec file style adjustments
* Sat Jul 09 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.8.14-69
- Fix extra newline in description
Package: libspng-0.7.2-1.fc37
Old package: libspng-0.7.1-2.fc36
Summary: Simple, modern libpng alternative
RPMs: libspng libspng-devel
Size: 365.42 KiB
Size change: 2.93 KiB
Changelog:
* Sat Jul 09 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.7.2-1
- Update to 0.7.2 - Close: rhbz#2053787
Package: mate-applets-1.26.1-1.fc37
Old package: mate-applets-1.26.0-2.fc36
Summary: MATE Desktop panel applets
RPMs: mate-applets
Size: 36.79 MiB
Size change: 72.84 KiB
Changelog:
* Sat Jul 09 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.1-1
- update to 1.26.1
Package: mate-menus-1.26.0-4.fc37
Old package: mate-menus-1.26.0-3.fc36
Summary: Displays menus for MATE Desktop
RPMs: mate-menus mate-menus-devel mate-menus-libs mate-menus-preferences-category-menu
Size: 896.88 KiB
Size change: -6.98 KiB
Changelog:
* Sat Jul 09 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-4
- add commits from 1.26 branch
Package: mate-notification-daemon-1.26.0-3.fc37
Old package: mate-notification-daemon-1.26.0-2.fc36
Summary: Notification daemon for MATE Desktop
RPMs: mate-notification-daemon
Size: 717.25 KiB
Size change: 319 B
Changelog:
* Sat Jul 09 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-3
- add upstream commit
- Add AssumedAppArmorLabel to dbus service file
Package: mate-settings-daemon-1.26.0-5.fc37
Old package: mate-settings-daemon-1.26.0-4.fc37
Summary: MATE Desktop settings daemon
RPMs: mate-settings-daemon mate-settings-daemon-devel
Size: 3.52 MiB
Size change: 864 B
Changelog:
* Sat Jul 09 2022 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.0-2
- add upstream commits from 1.26 branch
Package: mecab-java-0.996-4.fc37
Old package: mecab-java-0.996-3.fc36.4
Summary: Java binding for MeCab
RPMs: mecab-java
Size: 196.12 KiB
Size change: 576 B
Changelog:
* Sat Jul 09 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.996-4
- Adopt %java_arches https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
Package: opendoas-6.8.2-1.fc37
Old package: opendoas-6.8.1-4.fc36
Summary: Portable fork of the OpenBSDs doas command
RPMs: opendoas
Size: 128.94 KiB
Size change: 669 B
Changelog:
* Sat Jul 09 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 6.8.2-1
- Update to 6.8.2 - Close: rhbz#2046534
Package: openmpi-4.1.4-3.fc37
Old package: openmpi-4.1.4-2.fc37
Summary: Open Message Passing Interface
RPMs: openmpi openmpi-devel openmpi-java openmpi-java-devel python3-openmpi
Size: 19.45 MiB
Size change: -221.35 KiB
Changelog:
* Sun Jul 10 2022 Orion Poplawski <orion(a)nwra.com> - 4.1.4-3
- Drop java for i686 (bz#2104085)
Package: pdns-recursor-4.7.1-1.fc37
Old package: pdns-recursor-4.7.0-1.fc37
Summary: Modern, advanced and high performance recursing/non authoritative name server
RPMs: pdns-recursor
Size: 7.61 MiB
Size change: -1.03 KiB
Changelog:
* Sat Jul 09 2022 Sander Hoentjen <sander(a)hoentjen.eu> - 4.7.1-1
- Update to 4.7.1 (#2105225)
Package: plplot-5.15.0-43.fc37
Old package: plplot-5.15.0-42.fc37
Summary: Library of functions for making scientific plots
RPMs: ocaml-plplot ocaml-plplot-devel plplot plplot-ada plplot-ada-devel plplot-data plplot-devel plplot-doc plplot-fortran-devel plplot-java plplot-java-devel plplot-libs plplot-lua plplot-octave plplot-pyqt plplot-qt plplot-qt-devel plplot-tk plplot-tk-devel plplot-wxGTK plplot-wxGTK-devel
Size: 35.20 MiB
Size change: -213.05 KiB
Changelog:
* Sun Jul 10 2022 Orion Poplawski <orion(a)nwra.com> - 5.15.0-43
- Drop java for i686 (bz#2104089)
Package: puddletag-2.2.0-1.fc37
Old package: puddletag-2.1.1-4.fc37
Summary: Feature rich, easy to use tag editor
RPMs: puddletag
Size: 1.38 MiB
Size change: 35.43 KiB
Changelog:
* Sat Jul 09 2022 Terje Rosten <terje.rosten(a)ntnu.no> - 2.2.0-1
- 2.2.0
Package: python-asyncssh-2.11.0-3.fc37
Old package: python-asyncssh-2.9.0-5.fc37
Summary: Asynchronous SSH for Python
RPMs: python3-asyncssh
Size: 727.75 KiB
Size change: 7.49 KiB
Changelog:
* Sat Jul 09 2022 Georg Sauthoff <mail(a)gms.tf> - 2.11.0-1
- Update to latest upstream version (fixes fedora#2068852)
* Sat Jul 09 2022 Georg Sauthoff <mail(a)gms.tf> - 2.11.0-2
- Fix test cases
* Sat Jul 09 2022 Georg Sauthoff <mail(a)gms.tf> - 2.11.0-3
- Fix test cases
Package: python-img2pdf-0.4.4-1.fc37
Old package: python-img2pdf-0.4.3-4.fc37
Summary: Lossless images to PDF conversion library and command
RPMs: python3-img2pdf
Size: 98.28 KiB
Size change: 2.11 KiB
Changelog:
* Sat Jul 09 2022 Georg Sauthoff <mail(a)gms.tf> - 0.4.4-1
- Update to latest upstream version (fixes fedora#2073201)
Package: python-inema-0.8.6-1.fc37
Old package: python-inema-0.8.5-3.fc37
Summary: A Python interface to the Deutsche Post Internetmarke Online Franking
RPMs: python3-inema
Size: 50.20 KiB
Size change: -511 B
Changelog:
* Sat Jul 09 2022 Georg Sauthoff <mail(a)gms.tf> - 0.8.6-1
- Update to latest upstream release (removes discontinued products)
Package: python-pdfminer-20220524-3.fc37
Old package: python-pdfminer-20220524-2.fc37
Summary: Tool for extracting information from PDF documents
RPMs: python-pdfminer-doc python3-pdfminer python3-pdfminer+image
Size: 5.74 MiB
Size change: -388 B
Changelog:
* Sat Jul 09 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 20220524-3
- Fix extra newline in description
Package: python-subprocess-tee-0.3.5-4.fc37
Old package: python-subprocess-tee-0.3.5-3.fc37
Summary: A subprocess.run that works like tee, being able to display output in real time while still capturing it
RPMs: python3-subprocess-tee
Size: 23.55 KiB
Size change: -1.00 KiB
Changelog:
* Sat Jul 09 2022 chedi toueiti <chedi.toueiti(a)gmail.com> 0.3.5-4
- clean up and modernization of the spec file
Package: qcoro-0.6.0-1.fc37
Old package: qcoro-0.5.1-1.fc37
Summary: C++ Coroutines for Qt
RPMs: qcoro-qt5 qcoro-qt5-devel qcoro-qt6 qcoro-qt6-devel
Size: 1.47 MiB
Size change: 379.93 KiB
Changelog:
* Sat Jul 09 2022 Marc Deop <marcdeop(a)fedoraproject.org> - 0.6.0-1
- 0.6.0
Package: qdbm-1.8.78-52.fc37
Old package: qdbm-1.8.78-51.fc37
Summary: Quick Database Manager
RPMs: qdbm qdbm++ qdbm++-devel qdbm-cgi qdbm-devel qdbm-java qdbm-javadoc qdbm-perl ruby-qdbm
Size: 3.60 MiB
Size change: -53.17 KiB
Changelog:
* Sat Jul 09 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.8.78-52
- Adopt %java_arches https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
Package: rubygem-minitest-5.16.2-200.fc37
Old package: rubygem-minitest-5.16.1-200.fc37
Summary: minitest provides a complete suite of testing facilities
RPMs: rubygem-minitest rubygem-minitest-doc
Size: 463.92 KiB
Size change: -232 B
Changelog:
* Sat Jul 09 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 5.16.2-200
- 5.16.2
Package: sameboy-0.15.1-1.fc37
Old package: sameboy-0.15-1.fc37
Summary: Game Boy and Game Boy Color emulator written in C
RPMs: sameboy
Size: 1.58 MiB
Size change: 2.26 KiB
Changelog:
* Sat Jul 09 2022 Jan Dr��gehoff <sentrycraft123(a)gmail.com> - 0.15.1-1
- Update to 0.15.1
Package: stellarium-0.22.2-1.fc37
Old package: stellarium-0.22.1-1.fc37
Summary: Photo-realistic nightsky renderer
RPMs: stellarium
Size: 978.26 MiB
Size change: 625.44 KiB
Changelog:
* Sat Jul 09 2022 Gwyn Ciesla <gwync(a)protonmail.com> - 0.22.2-1
- 0.22.2
Package: tio-1.43-1.fc37
Old package: tio-1.42-1.fc37
Summary: Simple TTY terminal I/O application
RPMs: tio
Size: 195.63 KiB
Size change: 3.85 KiB
Changelog:
* Sun Jul 10 2022 Robert Scheck <robert(a)fedoraproject.org> 1.43-1
- Upgrade to 1.43 (#2105681)
Package: truth-1.0.1-4.fc37
Old package: truth-1.0.1-2.fc36
Summary: An assertion framework for Java unit tests
RPMs: truth truth-javadoc
Size: 692.61 KiB
Size change: 289 B
Changelog:
* Fri Jul 08 2022 Jiri Vanek <jvanek(a)redhat.com> - 1.0.1-3
- Rebuilt for Drop i686 JDKs
* Sun Jul 10 2022 Orion Poplawski <orion(a)nwra.com> - 1.0.1-4
- Add BR on auto-value-annotations and re-enable dep (FTBFS bz#2105384)
- Build with OpenJDK 11 due to test failure with 17
Package: zcfan-1.1.1-1.fc37
Old package: zcfan-1.1.0-1.fc37
Summary: Zero-configuration fan daemon for ThinkPads
RPMs: zcfan
Size: 17.07 KiB
Size change: 136 B
Changelog:
* Sat Jul 09 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> 1.1.1-1
- Update to 1.1.1
===== DOWNGRADED PACKAGES =====
1 year, 10 months