The following Fedora 35 Security updates need testing: Age URL 58 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9 libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35 51 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11 mysql-connector-java-8.0.28-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e85e37206b gdal-3.3.3-1.fc35 mingw-gdal-3.3.3-3.fc35 mingw-python3-3.10.4-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8c2af4ba24 mingw-fribidi-1.0.10-5.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-64332f2a7c mingw-python-pillow-8.3.2-3.fc35 python-pillow-8.3.2-3.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f2e0d16c90 mingw-openexr-3.1.4-1.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e960d7e1b6 chromium-99.0.4844.84-1.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-224a93852c buildah-1.23.3-2.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d230620a58 fribidi-1.0.11-3.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f6d46280da unrealircd-6.0.3-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dce04a5adf libretls-3.5.1-1.fc35 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-925ac7bfff gnome-shell-41.5-1.fc35 mutter-41.5-1.fc35 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c1b7acba94 web-assets-5-15.fc35 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-86964650b4 tzdata-2022a-1.fc35 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e4bdc8e27f squashfs-tools-4.5.1-1.fc35 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-832155a719 xorg-x11-xinit-1.4.0-14.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a03f1ef4d7 evolution-data-server-3.42.4-2.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8d297421fd xdg-desktop-portal-1.12.3-1.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b375b6a0f7 evolution-3.42.4-2.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b745df25e3 annobin-10.59-1.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d549b6ed57 perl-5.34.1-486.fc35 perl-PAR-Packer-1.052-5.fc35 polymake-4.5-2.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f22a8e8cec ostree-2022.2-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d230620a58 fribidi-1.0.11-3.fc35
The following builds have been pushed to Fedora 35 updates-testing
Thunar-4.16.11-1.fc35 bletchmame-2.14-1.fc35 containerd-1.6.2-1.fc35 dmlite-1.15.2-1.fc35 fish-3.4.1-1.fc35 fotoxx-22.15-1.fc35 gnote-41.3-1.fc35 goaccess-1.5.6-1.fc35 golang-github-containerd-imgcrypt-1.1.4-1.fc35 libdxflib-3.26.4-2.fc35 mame-0.242-2.fc35 mycli-1.25.0-1.fc35 openttd-12.2-1.fc35 polybar-3.6.2-1.fc35 python-celery-5.2.5-1.fc35 python-nixio-1.5.3-1.fc35 python-specfile-0.2.0-1.fc35 qjackctl-0.9.7-1.fc35 qsynth-0.9.7-1.fc35 xfce4-terminal-1.0.0-1.fc35
Details about builds:
================================================================================ Thunar-4.16.11-1.fc35 (FEDORA-2022-9a272fb111) Thunar File Manager -------------------------------------------------------------------------------- Update Information:
- Update Thunar to version 4.16.11 -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Mukundan Ragavan nonamedotc@gmail.com 4.16.11-1 - Update Thunar to 4.16.11 * Wed Jan 19 2022 Fedora Release Engineering releng@fedoraproject.org - 4.16.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ bletchmame-2.14-1.fc35 (FEDORA-2022-1689b3c126) MAME emulator frontend -------------------------------------------------------------------------------- Update Information:
Update to 2.14; Fixes: RHBZ#2068762 -------------------------------------------------------------------------------- ChangeLog:
* Sat Mar 26 2022 Davide Cavalca dcavalca@fedoraproject.org 2.14-1 - Update to 2.14; Fixes: RHBZ#2068762 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2068762 - bletchmame-2.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=2068762 --------------------------------------------------------------------------------
================================================================================ containerd-1.6.2-1.fc35 (FEDORA-2022-e9a09c1a7d) Open and reliable container runtime -------------------------------------------------------------------------------- Update Information:
Update to 1.6.2 (rhbz#2068277). Mitigates CVE-2022-24769 / GHSA-c9cp-9c75-9v8c. -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Maxwell G gotmax@e.email 1.6.2-1 - Update to 1.6.2 (rhbz#2068277). Mitigates CVE-2022-24769 / GHSA-c9cp-9c75-9v8c. --------------------------------------------------------------------------------
================================================================================ dmlite-1.15.2-1.fc35 (FEDORA-2022-6c6c29ab1e) Lcgdm grid data management and storage framework -------------------------------------------------------------------------------- Update Information:
- Fix DB upgrade script database port - Fix puppet managed MySQL config issue on EL8 - Improve migration script calculation of missing checksums -------------------------------------------------------------------------------- ChangeLog:
* Mon Mar 28 2022 Petr Vokac petr.vokac@cern.ch - 1.15.2-1 - Fix DB upgrade script database port - Fix puppet managed MySQL config issue on EL8 - Improve migration script calculation of missing checksums --------------------------------------------------------------------------------
================================================================================ fish-3.4.1-1.fc35 (FEDORA-2022-cd2c5e0634) Friendly interactive shell -------------------------------------------------------------------------------- Update Information:
Update to 3.4.1 -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Igor Raits igor.raits@gmail.com 3.4.1-1 - Update to 3.4.1 * Sun Mar 13 2022 Igor Raits igor.raits@gmail.com 3.4.0-1 - Update to 3.4.0 * Mon Feb 21 2022 Igor Raits igor.raits@gmail.com 3.3.1^1075ge0bc944d5c5-1 - Update to 3.3.1-1075-ge0bc944d5 * Sun Feb 6 2022 Igor Raits igor.raits@gmail.com 3.3.1^1034g964b7a729a7-1 - Update to 3.3.1-1034-g964b7a729 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org 3.3.1^803g76a336d647e-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Dec 29 2021 Igor Raits igor.raits@gmail.com 3.3.1^803g76a336d647e-2 - Add missing BuildRequires for tests * Wed Dec 29 2021 Igor Raits igor.raits@gmail.com 3.3.1^803g76a336d647e-1 - Update to 3.3.1-803-g76a336d64 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2064332 - CVE-2022-20001 fish: Arbitrary Code Execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2064332 [ 2 ] Bug #2068710 - fish-3.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2068710 --------------------------------------------------------------------------------
================================================================================ fotoxx-22.15-1.fc35 (FEDORA-2022-bdc46b0677) Photo editor -------------------------------------------------------------------------------- Update Information:
Update fotoxx to 22.15 -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 S��rgio Basto sergio@serjux.com - 22.15-1 - Update fotoxx to 22.15 * Thu Mar 3 2022 Gwyn Ciesla gwync@protonmail.com - 22.14-1 - 22.14 --------------------------------------------------------------------------------
================================================================================ gnote-41.3-1.fc35 (FEDORA-2022-bd4461a75b) Note-taking application -------------------------------------------------------------------------------- Update Information:
Update to 41.3 Updates translations -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 David King amigadave@amigadave.com - 41.3-1 - Update to 41.3 --------------------------------------------------------------------------------
================================================================================ goaccess-1.5.6-1.fc35 (FEDORA-2022-2614ead767) Real-time web log analyzer and interactive viewer -------------------------------------------------------------------------------- Update Information:
v1.5.6 -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Fabio Alessandro Locati fale@fedoraproject.org - 1.5.6-1 - Update to 1.5.6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2070212 - goaccess-1.5.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2070212 --------------------------------------------------------------------------------
================================================================================ golang-github-containerd-imgcrypt-1.1.4-1.fc35 (FEDORA-2022-5f746c8e5b) OCI Image Encryption Package -------------------------------------------------------------------------------- Update Information:
Update to 1.1.4 (rhbz#2068719). Mitigates CVE-2022-24778 (rhbz#2069368, rhbz#2069369). -------------------------------------------------------------------------------- ChangeLog:
* Sat Apr 2 2022 Maxwell G gotmax@e.email 1.1.4-1 - Update to 1.1.4 (rhbz#2068719). Mitigates CVE-2022-24778 (rhbz#2069368, rhbz#2069369) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2069368 - CVE-2022-24778 imgcrypt: Unauthorized access to encryted container image on a shared system due to missing check in CheckAuthorization() code path https://bugzilla.redhat.com/show_bug.cgi?id=2069368 --------------------------------------------------------------------------------
================================================================================ libdxflib-3.26.4-2.fc35 (FEDORA-2022-7721fef542) A C++ library for reading and writing DXF files -------------------------------------------------------------------------------- Update Information:
Update to 3.26.4, with bug fixes. Package class documentation and examples. The following probably-relevant entries are drawn from the [QCAD Changelog](https://www.qcad.org/en/documentation/changelog): ### 3.22.1 (2019/05/22) **Fixes** - [FS#1866 - DXF: EXTMIN/EXTMAX interchanged](https://qcad.org/bugtracker/index.php?do=details&task_id=1866) ### 3.21.1 (2018/06/29) **Fixes** - [FS#1180 - dxflib cannot open files with international characters in path or file name](https://qcad.org/bugtracker/index.php?do=details&task_id=1180) ### 3.18.0 (2017/09/22) **Fixes** - [FS#1631 - dxflib: wrong definition of DL_POLYLINE3D flag](https://qcad.org/bugtracker/index.php?do=details&task_id=1631) ### 3.17.2 (2017/06/27) **Fixes** - [FS#1572 - Dimension font not set to "Standard" when importing through dxflib](https://qcad.org/bugtracker/index.php?do=details&task_id=1572) -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Benjamin A. Beasley code@musicinmybrain.net 3.26.4-2 - Package documentation and examples * Sun Apr 3 2022 Benjamin A. Beasley code@musicinmybrain.net 3.26.4-1 - Update to 3.26.4 (close RHBZ#1996851) * Sun Apr 3 2022 Benjamin A. Beasley code@musicinmybrain.net 3.17.0-18 - Build with qmake from Qt6 instead of Qt4 * Sun Apr 3 2022 Benjamin A. Beasley code@musicinmybrain.net 3.17.0-17 - General spec file cleanup -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1996851 - libdxflib-3.26.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1996851 --------------------------------------------------------------------------------
================================================================================ mame-0.242-2.fc35 (FEDORA-2022-d8de94e60f) Multiple Arcade Machine Emulator -------------------------------------------------------------------------------- Update Information:
Work around bgfx initialization error ---- Update to the latest upstream release: * https://www.mamedev.org/?p=511 -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Julian Sikorski belegdol@fedoraproject.org 0.242-2 - Workaround bgfx initialisation issue until better fix is available from upstream * Fri Apr 1 2022 Julian Sikorski belegdol@fedoraproject.org 0.242-1 - Update to 0.242 --------------------------------------------------------------------------------
================================================================================ mycli-1.25.0-1.fc35 (FEDORA-2022-bb9a245490) Interactive CLI for MySQL Database with auto-completion and syntax highlighting -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release myclu 1.25.0. -------------------------------------------------------------------------------- ChangeLog:
* Sat Apr 2 2022 Terje Rosten terje.rosten@ntnu.no - 1.25.0-1 - 1.25.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2069884 - mycli-1.25.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2069884 --------------------------------------------------------------------------------
================================================================================ openttd-12.2-1.fc35 (FEDORA-2022-a6ad50a6d1) Transport system simulation game -------------------------------------------------------------------------------- Update Information:
# 12.2 (2022-04-02) - Feature: Remember the last-used signal between games (#9792) - Change: [MacOS] Allow touchbar usage on all supported OS versions (#9776) - Change: Add a timestamp in name of crash files (#9761) - Fix #9736: Duplicate multiplayer window opens upon canceling password entry (#9842) - Fix: Removing long roads doesn't prioritise refusal of local authority over other errors (#9831) - Fix #9020: Glitchy station coverage highlight when changing selection (#9825) - Fix: Correct some Romanian town names (#9819) - Fix: Original music playback rate was slightly too fast (#9814) - Fix #9811: Use the NewGRF-defined vehicle center when dragging ships and aircraft (#9812) - Fix: Do not let shares in the company taking over another company disappear (#9808) - Fix #9802: Crash when using lots of NewGRF waypoint types (#9803) - Fix #9766: Don't write uninitialised data in config file (#9767) - Fix #9743: [MacOS] Don't try to render touchbar sprites with invalid zoom level (#9776) - Fix #9774: Building roadstop in estimation mode updates station acceptance (#9775) - Fix: If vehicles only refit to cargo-slots >= 32, the default cargo was wrong (#9744) - Fix #9735: Possible desync when replacing a depot on same tile (#9738) - Fix #9730: [Network] Connections can use an invalid socket due to a race condition (#9731) - Fix: Don't show sign edit window for GS-owned signs (#9716) - Fix #9702: Display order window for vehicle group on ctrl- click only when using shared orders (#9704) - Fix #9680: Crash when loading really old savegames with aircraft in certain places (#9699) - Fix: Update last servicing dates when using the date cheat (#9694) - Fix: Error message shows about missing glyphs while suitable fallback font is found (#9692) -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Felix Kaechele felix@kaechele.ca - 12.2-1 - update to 12.2 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 12.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2071348 - openttd-12.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2071348 --------------------------------------------------------------------------------
================================================================================ polybar-3.6.2-1.fc35 (FEDORA-2022-ad5eb7365f) Fast and easy-to-use status bar -------------------------------------------------------------------------------- Update Information:
Update to 3.6.2 -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Artem Polishchuk ego.cordatus@gmail.com - 3.6.2-1 - chore(update): 3.6.2 --------------------------------------------------------------------------------
================================================================================ python-celery-5.2.5-1.fc35 (FEDORA-2022-f0f176003d) Distributed Task Queue -------------------------------------------------------------------------------- Update Information:
- celery 5.2.5: https://github.com/celery/celery/blob/master/Changelog.rst#525 -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Frantisek Zatloukal fzatlouk@redhat.com - 5.2.5-1 - Celery 5.2.5 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 5.2.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ python-nixio-1.5.3-1.fc35 (FEDORA-2022-766003bc42) Python bindings for NIX -------------------------------------------------------------------------------- Update Information:
Update to new patch release -------------------------------------------------------------------------------- ChangeLog:
* Sat Apr 2 2022 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 1.5.3-1 - Update to latest release * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.5.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ python-specfile-0.2.0-1.fc35 (FEDORA-2022-5c6a270b1d) A library for parsing and manipulating RPM spec files -------------------------------------------------------------------------------- Update Information:
**News in version 0.2.0:** - Enabled Zuul CI (#8) - Switched from git:// to https:// for rebase hook (#22) - Updated pre-commit configuration and adapted to type changes brought by new version of mypy (#24) - Non-lowercase section names are now supported (#26) - Added `Sections.get()` convenience method (#29) - Added packit configuration and enabled packit (#25) - Fixed infinite recursion when deep-copying instances of `Sections` and `Tags` (#30) - Updated Fedora and EPEL spec files (#32) - Fixed issues caused by older versions of dependencies on EPEL 8 (#33) - Implemented high-level manipulation of sources and patches (#20, #36) - It is now possible to parse spec files with missing local sources (#23) -------------------------------------------------------------------------------- ChangeLog:
* Thu Mar 31 2022 Packit hello@packit.dev - 0.2.0-1 - Enabled Zuul CI (#8) - Switched from git:// to https:// for rebase hook (#22) - Updated pre-commit configuration and adapted to type changes brought by new version of mypy (#24) - Non-lowercase section names are now supported (#26) - Added `Sections.get()` convenience method (#29) - Added packit configuration and enabled packit (#25) - Fixed infinite recursion when deep-copying instances of `Sections` and `Tags` (#30) - Updated Fedora and EPEL spec files (#32) - Fixed issues caused by older versions of dependencies on EPEL 8 (#33) - Implemented high-level manipulation of sources and patches (#20, #36) - It is now possible to parse spec files with missing local sources (#23) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2070734 - python-specfile-0.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2070734 --------------------------------------------------------------------------------
================================================================================ qjackctl-0.9.7-1.fc35 (FEDORA-2022-442dbccb19) Qt based JACK control application -------------------------------------------------------------------------------- Update Information:
Update to version 0.9.7 -------------------------------------------------------------------------------- ChangeLog:
* Sat Apr 2 2022 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 0.9.7-1 - Update to version 0.9.7 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 0.9.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2071246 - qjackctl-0.9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2071246 --------------------------------------------------------------------------------
================================================================================ qsynth-0.9.7-1.fc35 (FEDORA-2022-e6bce42453) Qt based Fluidsynth GUI front end -------------------------------------------------------------------------------- Update Information:
Update to version 0.9.7 -------------------------------------------------------------------------------- ChangeLog:
* Sat Apr 2 2022 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 0.9.7-1 - Update to version 0.9.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2071247 - qsynth-0.9.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2071247 --------------------------------------------------------------------------------
================================================================================ xfce4-terminal-1.0.0-1.fc35 (FEDORA-2022-ca1c272295) Terminal Emulator for the Xfce Desktop environment -------------------------------------------------------------------------------- Update Information:
- update xfce4-terminal to v1.0.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Apr 3 2022 Mukundan Ragavan nonamedotc@gmail.com 1.0.0-1 - update xfce4-terminal to 1.0.0 * Mon Feb 7 2022 Ali Erdinc Koroglu aekoroglu@fedoraproject.org - 0.9.2-1 - Update to 0.9.2 * Sat Jan 22 2022 Fedora Release Engineering releng@fedoraproject.org - 0.8.10-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
-
updates＠fedoraproject.org