The following Fedora 35 Security updates need testing:
Age URL
93
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9
libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
86
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3e03a200b
freerdp-2.7.0-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-411f088574 curl-7.79.1-3.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-be6d83642a
libxml2-2.9.14-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-600e0cba93
mingw-SDL2_ttf-2.0.18-2.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-80e1724780
freetype-2.11.0-6.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0a719e8ba4
java-1.8.0-openjdk-aarch32-1.8.0.332.b09-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c9173843a
keylime-6.4.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9e66cba2d8
thunderbird-91.9.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6d9d1862ee
slurm-21.08.8-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf58612696
ecdsautils-0.4.1-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-88e3257aef
supertux-0.6.3-2.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0ac71a8f3a
clamav-0.103.6-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0aab67e874 chafa-1.2.1-7.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-185b91b741 et-6.2.1-2.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bdfcd4f5d3
libtpms-0.9.4-0.20220425gite4d68670e1.fc35.0
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0c44eb0df4
python-rpmautospec-0.2.6-1.fc35
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3e03a200b
freerdp-2.7.0-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3046139e5
gnutls-3.7.4-1.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0ab93ad2ab
python-requests-2.27.1-2.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
systemd-249.12-3.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-be6d83642a
libxml2-2.9.14-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-baecfaaa06
hwdata-0.359-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-411f088574 curl-7.79.1-3.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2368b50c31
evolution-data-server-3.42.5-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-80e1724780
freetype-2.11.0-6.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d5d6b61663 icu-69.1-6.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e649fb9f96
gnome-shell-41.6-1.fc35 mutter-41.6-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-19b83f9dc2
annobin-10.69-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b296d34f96
ostree-2022.3-2.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1d746fb606
dnf-plugins-core-4.2.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-36df99e823 dnf-4.12.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-767f37bebd
libdnf-0.67.0-2.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e0e85658f gdb-12.1-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e97f69b5b
librepo-1.14.3-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-063307d879
createrepo_c-0.20.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-594405302f
xdg-desktop-portal-gnome-41.2-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9e66cba2d8
thunderbird-91.9.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c04a2637f hexedit-1.6-1.fc35
The following builds have been pushed to Fedora 35 updates-testing
CImg-3.1.0-1.fc35
cpu-x-4.3.1-2.fc35
ddgr-2.0-1.fc35
fedora-upgrade-36.3-1.fc35
gdisk-1.0.9-2.fc35
gmic-3.1.0-1.fc35
golang-github-containers-ocicrypt-1.1.3-1.fc35
golang-github-docker-libnetwork-0.8.0-17.20220508git339b972.fc35
golang-github-opencontainers-runc-1.1.1-1.fc35
igt-gpu-tools-1.26-1.20220508gitcffa5ff.fc35
moby-engine-20.10.15-1.fc35
mopidy-mpd-3.3.0-1.fc35
mozjs91-91.9.0-1.fc35
python-exif-3.0.0-1.fc35
python-pytelegrambotapi-4.5.1-1.fc35
python-steam-1.2.1-2.fc35
rb_libtorrent-2.0.6-2.fc35
rust-inlinable_string-0.1.15-1.fc35
scidavis-2.9.0-1.fc35
setup-2.13.10-1.fc35
srain-1.4.0-2.fc35
Details about builds:
================================================================================
CImg-3.1.0-1.fc35 (FEDORA-2022-eca0926460)
C++ Template Image Processing Toolkit
--------------------------------------------------------------------------------
Update Information:
bump version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2022 josef radinger <cheese(a)nosuchhost.net> - 3.1.0-1
- bump version
* Thu Jan 20 2022 josef radinger <cheese(a)nosuchhost.net> - 3.0.2-1
- bump version
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:3.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Jan 14 2022 josef radinger <cheese(a)nosuchhost.net> -3.0.1-1
- bump version
- update Source-URL (https)
* Sat Dec 11 2021 josef radinger <cheese(a)nosuchhost.net> - 1:3.0.0-1
- bump version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074549 - CVE-2022-1325 CImg: Denial of service via RAM exhaustion in
_load_bmp
https://bugzilla.redhat.com/show_bug.cgi?id=2074549
--------------------------------------------------------------------------------
================================================================================
cpu-x-4.3.1-2.fc35 (FEDORA-2022-765e29f2f8)
Gathers information on CPU, motherboard and more
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 4.3.1-1
- chore(update): 4.3.1
--------------------------------------------------------------------------------
================================================================================
ddgr-2.0-1.fc35 (FEDORA-2022-693404d0e1)
DuckDuckGo from the terminal
--------------------------------------------------------------------------------
Update Information:
Update to 2.0 Close: rhbz#2061065
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 2.0-1
- Update to 2.0 Close: rhbz#2061065
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2061065 - ddgr-2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2061065
--------------------------------------------------------------------------------
================================================================================
fedora-upgrade-36.3-1.fc35 (FEDORA-2022-d22a1e006e)
Upgrade Fedora to next version using dnf upgrade (unofficial tool)
--------------------------------------------------------------------------------
Update Information:
- do not test prerelease for F36 - remove-retired-packages: Normalize
grammatical tense in messages - remove-retired-packages: Rewrite introductory
text for better clarity - remove-retired-packages: Normalize quotation marks in
echo commands - ignore if rpmfusion repos are not present during upgrade to
rawhide - ignore if some gpg keys to be remove are missing - 2066053 - ask for
the GPG key if needed
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Miroslav Such�� <msuchy(a)redhat.com> 36.3-1
- do not test prerelease for F36
- remove-retired-packages: Normalize grammatical tense in messages
- remove-retired-packages: Rewrite introductory text for better clarity
- remove-retired-packages: Normalize quotation marks in echo commands
- ignore if rpmfusion repos are not present during upgrade to rawhide
- ignore if some gpg keys to be remove are missing
- 2066053 - ask for the GPG key if needed
- remove-retired-packages: Typo
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2066053 - remove-retired-packages will not prompt, but still wait for input,
when dnf attempts to import a gpg key.
https://bugzilla.redhat.com/show_bug.cgi?id=2066053
--------------------------------------------------------------------------------
================================================================================
gdisk-1.0.9-2.fc35 (FEDORA-2022-79bdaa4fbc)
An fdisk-like partitioning tool for GPT disks
--------------------------------------------------------------------------------
Update Information:
Fixes a warning related to UUID.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 7 2022 Dominik Mierzejewski <dominik(a)greysector.net> - 1.0.9-2
- backport upstream fix for UUID issue with latest popt
- run internal testsuite in %check
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2082857 - "Warning! Unable to generate a proper UUID!" when built
against libuuid 2.38
https://bugzilla.redhat.com/show_bug.cgi?id=2082857
--------------------------------------------------------------------------------
================================================================================
gmic-3.1.0-1.fc35 (FEDORA-2022-eca0926460)
GREYC's Magic for Image Computing
--------------------------------------------------------------------------------
Update Information:
bump version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 28 2022 josef radinger <cheese(a)nosuchhost.net> - 3.1.0-1
- bump version
- disable patch0
- disable patch2
- BuildRequires: chrpath
* Wed Jan 26 2022 josef radinger <cheese(a)nosuchhost.net> - 3.0.2-1
- bump version
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Jan 14 2022 josef radinger <cheese(a)nosuchhost.net> -3.0.1-1
- bump version
- add gmic_denoise_cnn.gmz to gimp-subpackage
* Sat Dec 11 2021 josef radinger <cheese(a)nosuchhost.net> -3.0.0-1
- bump version
* Thu Nov 25 2021 Orion Poplawski <orion(a)nwra.com> - 2.9.9-2
- Rebuild for hdf5 1.12.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074549 - CVE-2022-1325 CImg: Denial of service via RAM exhaustion in
_load_bmp
https://bugzilla.redhat.com/show_bug.cgi?id=2074549
--------------------------------------------------------------------------------
================================================================================
golang-github-containers-ocicrypt-1.1.3-1.fc35 (FEDORA-2022-35559d9fa5)
Encryption libraries for Encrypted OCI Container images
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.3. Fixes rhbz#2065875.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 29 2022 Maxwell G <gotmax(a)e.email> 1.1.3-1
- Update to 1.1.3. Fixes rhbz#2065875.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2065875 - golang-github-containers-ocicrypt-1.1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2065875
--------------------------------------------------------------------------------
================================================================================
golang-github-docker-libnetwork-0.8.0-17.20220508git339b972.fc35
(FEDORA-2022-e9aaae11c8)
Native Go implementation for connecting containers
--------------------------------------------------------------------------------
Update Information:
Bump to 339b972b464ee3d401b5788b2af9e31d09d6b7da.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Maxwell G <gotmax(a)e.email> 0.8.0-16
- Bump to 339b972b464ee3d401b5788b2af9e31d09d6b7da.
--------------------------------------------------------------------------------
================================================================================
golang-github-opencontainers-runc-1.1.1-1.fc35 (FEDORA-2022-21ce6f5ccd)
CLI tool for spawning and running containers
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1. Fixes rhbz#2069649.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 29 2022 Maxwell G <gotmax(a)e.email> 1.1.1-1
- Update to 1.1.1. Fixes rhbz#2069649.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069649 - golang-github-opencontainers-runc-1.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069649
--------------------------------------------------------------------------------
================================================================================
igt-gpu-tools-1.26-1.20220508gitcffa5ff.fc35 (FEDORA-2022-3cfd778be1)
Test suite and tools for DRM drivers
--------------------------------------------------------------------------------
Update Information:
New git snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Lyude Paul <lyude(a)redhat.com> - 1.26-1.20220508gitcffa5ff
- New git snapshot
--------------------------------------------------------------------------------
================================================================================
moby-engine-20.10.15-1.fc35 (FEDORA-2022-ec3d3c0f08)
The open-source application container engine
--------------------------------------------------------------------------------
Update Information:
- Update to 20.10.15 (rhbz#2082501). - Fix BUILDTAGS (rhbz#2082924). - Make non-
binary subpackages noarch.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 7 2022 Maxwell G <gotmax(a)e.email> - 20.10.15-1
- Update to 20.10.15 (rhbz#2082501).
- Fix BUILDTAGS (rhbz#2082924).
- Make non-binary subpackages noarch.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2082501 - moby-engine-20.10.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2082501
[ 2 ] Bug #2082924 - moby-engine: docker security options missing seccomp support
https://bugzilla.redhat.com/show_bug.cgi?id=2082924
--------------------------------------------------------------------------------
================================================================================
mopidy-mpd-3.3.0-1.fc35 (FEDORA-2022-27325d93af)
Mopidy extension for controlling Mopidy from MPD clients
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.0 (#2080093)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 29 2022 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
3.3.0-1
- Update to 3.3.0 (#2080093)
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2080093 - mopidy-mpd-3.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2080093
--------------------------------------------------------------------------------
================================================================================
mozjs91-91.9.0-1.fc35 (FEDORA-2022-474436da77)
SpiderMonkey JavaScript library
--------------------------------------------------------------------------------
Update Information:
- mozjs91-91.9.0:
https://www.mozilla.org/en-US/firefox/91.9.0/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 91.9.0-1
- mozjs91-91.9.0
--------------------------------------------------------------------------------
================================================================================
python-exif-3.0.0-1.fc35 (FEDORA-2022-a5cb6d52a5)
Python module to extract EXIF information
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release EXIF py 3.0.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Terje Rosten <terje.rosten(a)ntnu.no> - 3.0.0-1
- 3.0.0
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2082954 - python-exif-3.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2082954
--------------------------------------------------------------------------------
================================================================================
python-pytelegrambotapi-4.5.1-1.fc35 (FEDORA-2022-28c936aff2)
Python Telegram Bot API implementation
--------------------------------------------------------------------------------
Update Information:
Updated to version 4.5.1.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Vitaly Zaitsev <vitaly(a)easycoding.org> - 4.5.1-1
- Updated to version 4.5.1.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2082906 - python-pytelegrambotapi-4.5.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2082906
--------------------------------------------------------------------------------
================================================================================
python-steam-1.2.1-2.fc35 (FEDORA-2022-9db8021189)
Python package for interacting with Steam
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.2.1-1
- chore(update): 1.2.1
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rb_libtorrent-2.0.6-2.fc35 (FEDORA-2022-dfcc5b4732)
A C++ BitTorrent library aiming to be the best alternative
--------------------------------------------------------------------------------
Update Information:
- Update
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 7 2022 Leigh Scott <leigh123linux(a)gmail.com> - 2.0.6-2
- Fix i686 build
* Thu May 5 2022 Leigh Scott <leigh123linux(a)gmail.com> - 2.0.6-1
- Upgrade to 2.0.6
* Wed May 4 2022 Thomas Rodgers <trodgers(a)redhat.com> - 2.0.5-3
- Rebuilt for Boost 1.78
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2076052 - rb_libtorrent-2.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2076052
--------------------------------------------------------------------------------
================================================================================
rust-inlinable_string-0.1.15-1.fc35 (FEDORA-2022-37e3e17898)
`inlinable_string` crate provides the `InlinableString` type -- an owned, grow-able UTF-8
string that stores small strings inline and avoids heap-allocation -- and the `StringExt`
trait which abstracts string operations over both `std::string::String` and
`InlinableString` (or even your own custom string type)
--------------------------------------------------------------------------------
Update Information:
Initial import (fedora#2005982).
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Jan Baudisch <jan(a)baudisch.xyz> 0.1.15-1
- Initial import (fedora#2005982).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2005982 - Review Request: rust-inlinable_string - Alternative Rust String
implementation
https://bugzilla.redhat.com/show_bug.cgi?id=2005982
--------------------------------------------------------------------------------
================================================================================
scidavis-2.9.0-1.fc35 (FEDORA-2022-4149f25489)
Application for Scientific Data Analysis and Visualization
--------------------------------------------------------------------------------
Update Information:
Update to version 2.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Alexander Ploumistos <alexpl(a)fedoraproject.org> - 2.9.0-1
- Update to 2.9.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2075360 - scidavis-2.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075360
--------------------------------------------------------------------------------
================================================================================
setup-2.13.10-1.fc35 (FEDORA-2022-d37f9b1e8b)
A set of system configuration and setup files
--------------------------------------------------------------------------------
Update Information:
New version 2.13.10 Move /var/log/lastlog ownership to systemd (#1798685) tcsh
sets variable p to /usr/sbin from /etc/csh.login (#2019874) 'history -a'
doesn't
belong in /etc/bashrc (#1871744) localhost.localdomain in wrong order /etc/hosts
(#1724539)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 7 2022 Martin Osvald <mosvald(a)redhat.com> - 2.13.10-1
- Move /var/log/lastlog ownership to systemd (#1798685)
- tcsh sets variable p to /usr/sbin from /etc/csh.login (#2019874)
- 'history -a' doesn't belong in /etc/bashrc (#1871744)
- localhost.localdomain in wrong order /etc/hosts (#1724539)
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.13.9.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1724539 - localhost.localdomain in wrong order /etc/hosts
https://bugzilla.redhat.com/show_bug.cgi?id=1724539
[ 2 ] Bug #1871744 - 'history -a' doesn't belong in /etc/bashrc
https://bugzilla.redhat.com/show_bug.cgi?id=1871744
[ 3 ] Bug #2019874 - tcsh sets variable p to /usr/sbin from /etc/csh.login
https://bugzilla.redhat.com/show_bug.cgi?id=2019874
--------------------------------------------------------------------------------
================================================================================
srain-1.4.0-2.fc35 (FEDORA-2022-1557175629)
Modern, beautiful IRC client written in GTK+ 3
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 8 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.4.0-1
- chore(update): 1.4.0
--------------------------------------------------------------------------------