The following Fedora 35 Security updates need testing:
Age URL
104
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9
libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
96
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3edad0ab6 pcre2-10.40-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d69fee9f38
dotnet6.0-6.0.105-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-59f0ad964c
php-openpsa-universalfeedcreator-1.8.4.1-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fda9f1f7bd
plantuml-1.2022.5-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bcc0df5180 plib-1.8.5-30.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-393948cc9e
ignition-2.14.0-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
18
https://bodhi.fedoraproject.org/updates/FEDORA-2022-01079468a3
systemd-249.12-3.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d5d6b61663 icu-69.1-6.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b296d34f96
ostree-2022.3-2.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1d746fb606
dnf-plugins-core-4.2.0-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-767f37bebd
libdnf-0.67.0-2.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e0e85658f gdb-12.1-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e97f69b5b
librepo-1.14.3-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-063307d879
createrepo_c-0.20.0-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c04a2637f hexedit-1.6-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-79bdaa4fbc gdisk-1.0.9-2.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d37f9b1e8b
setup-2.13.10-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3edad0ab6 pcre2-10.40-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-74b5a95b5a
guestfs-tools-1.48.1-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf36c475ce
libguestfs-1.48.2-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c8f748ea90
librsvg2-2.52.9-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5e6670a900
libretls-3.5.2-1.fc35 netcat-1.218-5.fc35 rpki-client-7.8-2.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0147faf370
linux-firmware-20220509-132.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d3c79f71e
osinfo-db-20220516-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e65347ed76
python-blivet-3.4.4-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-83c75c8f72 rsync-3.2.4-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-21d7b52f14
gnutls-3.7.5-1.fc35
The following builds have been pushed to Fedora 35 updates-testing
ardour6-6.9.0-10.fc35
epson-inkjet-printer-escpr-1.7.18-1.1lsb3.2.fc35
epson-inkjet-printer-escpr2-1.1.48-1.1lsb3.2.fc35
flexiblas-3.2.0-2.fc35
ghc-rpm-nvr-0.1.2-1.fc35
google-api-python-client-2.48.0-1.fc35
koji-tool-0.8.5-1.fc35
linux-system-roles-1.18.1-2.fc35
moodle-3.11.7-1.fc35
pkgtreediff-0.5.0-4.fc35
pmbootstrap-1.43.1-1.fc35
python-azure-core-1.21.1-3.fc35
python-dns-lexicon-3.11.2-1.fc35
python-libusb1-1.9.3-1.fc35
python-whois-0.9.15-1.fc35
rust-lev_distance-0.1.1-1.fc35
syncthing-1.20.1-1.fc35
timidity++-2.15.0-3.fc35
urw-base35-fonts-20200910-11.fc35
vim-8.2.4975-1.fc35
webkit2gtk3-2.36.2-1.fc35
winetricks-20220411-1.fc35
Details about builds:
================================================================================
ardour6-6.9.0-10.fc35 (FEDORA-2022-65135db61b)
Digital Audio Workstation
--------------------------------------------------------------------------------
Update Information:
This update moves the backend plugins into the main package and fixes default
search paths for VST plugins on 64-bit architectures.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Nils Philippsen <nils(a)tiptoe.de> 6.9.0-10
- Look for VST plugins in lib64 paths on 64-bit
* Wed May 18 2022 BrunoVernay <BrunoVern.a(a)gmail.com> 6.9.0-9
- Use HTTPS links
* Tue May 17 2022 Mads Kiilerich <mads(a)kiilerich.com> 6.9.0-8
- Drop ardour6-backend-pulseaudio - include the PulseAudio backend in the
main package.
* Tue May 17 2022 Mads Kiilerich <mads(a)kiilerich.com> 6.9.0-7
- Drop ardour6-backend-jack - include the JACK backend in the main package.
* Tue May 17 2022 Mads Kiilerich <mads(a)kiilerich.com> 6.9.0-6
- Drop ardour6-backend-alsa - include the ALSA backend in the main package.
* Tue May 17 2022 Mads Kiilerich <mads(a)kiilerich.com> 6.9.0-5
- Drop ardour6-backend-dummy - include the dummy backend in the main
package.
* Tue May 17 2022 Mads Kiilerich <mads(a)kiilerich.com> 6.9.0-4
- Generate explicit %exclude for /usr/lib/ardour6/backends/*
* Tue May 17 2022 Mads Kiilerich <mads(a)kiilerich.com> 6.9.0-3
- Drop ardour5 upgrades - Fedora 33 is very dead
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 6.9.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1972105 - Add /usr/lib64/vst and vst3 path in the list of paths to plugins
https://bugzilla.redhat.com/show_bug.cgi?id=1972105
--------------------------------------------------------------------------------
================================================================================
epson-inkjet-printer-escpr-1.7.18-1.1lsb3.2.fc35 (FEDORA-2022-d5d4a971a2)
Drivers for Epson inkjet printers
--------------------------------------------------------------------------------
Update Information:
Update Epson inkjet drivers to newest version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Susi Lehtola <jussilehtola(a)fedoraproject.org> -
1:1.7.18-1.1lsb3.2
- Update to 1.7.18.
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:1.7.10-3.1lsb3.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1960975 - Please update to latest version
https://bugzilla.redhat.com/show_bug.cgi?id=1960975
--------------------------------------------------------------------------------
================================================================================
epson-inkjet-printer-escpr2-1.1.48-1.1lsb3.2.fc35 (FEDORA-2022-d5d4a971a2)
Drivers for Epson inkjet printers
--------------------------------------------------------------------------------
Update Information:
Update Epson inkjet drivers to newest version.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Susi Lehtola <jussilehtola(a)fedoraproject.org> - 1.1.48-1.1lsb3.2
- Update to 1.1.48.
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.1.24-4.1lsb3.2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1960975 - Please update to latest version
https://bugzilla.redhat.com/show_bug.cgi?id=1960975
--------------------------------------------------------------------------------
================================================================================
flexiblas-3.2.0-2.fc35 (FEDORA-2022-1e133b9e51)
A BLAS/LAPACK wrapper library with runtime exchangeable backends
--------------------------------------------------------------------------------
Update Information:
Undefine _ld_as_needed to fix underlinking issue (BZ 2058840)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 I��aki ��car <iucar(a)fedoraproject.org> - 3.2.0-2
- Undefine _ld_as_needed to fix underlinking issue (BZ 2058840)
* Tue May 17 2022 I��aki ��car <iucar(a)fedoraproject.org> - 3.2.0-1
- Update to 3.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2087111 - flexiblas-3.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2087111
--------------------------------------------------------------------------------
================================================================================
ghc-rpm-nvr-0.1.2-1.fc35 (FEDORA-2022-0cd0056e7a)
RPM package name-version-release data types
--------------------------------------------------------------------------------
Update Information:
koji-tool: - Install: completely rework logic using installed status and NVRA
etc - install: '--no-reinstall' replaces '--reinstall-nvrs' - install:
determine
package name from child or parent task - Install: confirm for --all and
--exclude, respecting --yes - tasks: parse taskid as arg and drop --task and
--children - Tasks: print parent Task taskid compactly and then its children -
improve parsing of package names from koji build requests - when parsing koji
build request fields, detect git hash and fork builds rpm-nvr: - improved
parsing of package names from koji build requests
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 10 2022 Jens Petersen <petersen(a)redhat.com> - 0.1.2-1
- better NVR and NVRA string validation to prevent empty names
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
google-api-python-client-2.48.0-1.fc35 (FEDORA-2022-37e57d086f)
Google APIs Client Library for Python
--------------------------------------------------------------------------------
Update Information:
Update to 2.48.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 2:2.48.0-1
- Update to 2.48.0 - Closes rhbz#2087691
--------------------------------------------------------------------------------
================================================================================
koji-tool-0.8.5-1.fc35 (FEDORA-2022-0cd0056e7a)
Koji CLI tool for querying tasks and installing builds
--------------------------------------------------------------------------------
Update Information:
koji-tool: - Install: completely rework logic using installed status and NVRA
etc - install: '--no-reinstall' replaces '--reinstall-nvrs' - install:
determine
package name from child or parent task - Install: confirm for --all and
--exclude, respecting --yes - tasks: parse taskid as arg and drop --task and
--children - Tasks: print parent Task taskid compactly and then its children -
improve parsing of package names from koji build requests - when parsing koji
build request fields, detect git hash and fork builds rpm-nvr: - improved
parsing of package names from koji build requests
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 10 2022 Jens Petersen <petersen(a)redhat.com> - 0.8.5-1
- use rpm-nvr-0.1.2 for better NVR and NVRA parsing ensuring non-empty names
- when parsing koji build request fields, detect git hash and fork builds
* Mon May 9 2022 Jens Petersen <petersen(a)redhat.com> - 0.8.4-1
- install: complete rework of logic using installed status and NVRA etc
- install: '--no-reinstall' replaces '--reinstall-nvrs'
- Install: confirm for --all and --exclude, respecting --yes
- tasks: parse taskid as arg and drop --task and --children
- Tasks: print parent Task taskid compactly and then its children
--------------------------------------------------------------------------------
================================================================================
linux-system-roles-1.18.1-2.fc35 (FEDORA-2022-25c619bdc5)
Set of interfaces for unified system management
--------------------------------------------------------------------------------
Update Information:
sshd - recurse into tests and examples sub-directories when replacing string in
files the sshd role latest version added sub-directories under tests that need
role name replacement - so just use find ---- storage - mount_options fix;
sshd - include directory handling
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Rich Megginson <rmeggins(a)redhat.com> - 1.18.1-2
- sshd - recurse into tests and examples sub-directories when replacing string in files
the sshd role latest version added sub-directories under tests that need
role name replacement - so just use find
* Mon May 16 2022 Rich Megginson <rmeggins(a)redhat.com> - 1.18.1-1
- sshd - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has
"Include > /etc/ssh/sshd_config.d/*.conf"
Resolves: rhbz#2086934 (8.7.0)
Resolves: rhbz#2052081 (9.1.0)
- sshd - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL
9
Resolves: rhbz#2086935 (8.7.0)
Resolves: rhbz#2052086 (9.1.0)
- storage - storage role cannot set mount_options for volumes
Resolves: rhbz#2083378 (8.7.0)
Resolves: rhbz#2083376 (9.1.0)
--------------------------------------------------------------------------------
================================================================================
moodle-3.11.7-1.fc35 (FEDORA-2022-530fdc5202)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
Multiple CVE fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Gwyn Ciesla <gwync(a)protonmail.com> - 3.11.7-1
- 3.11.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2087632 - CVE-2022-30596 moodle: Stored XSS in assignment bulk marker
allocation form via user ID number [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2087632
[ 2 ] Bug #2087633 - CVE-2022-30597 moodle: Description field hidden by user policies
(hiddenuserfields) is still visible [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2087633
[ 3 ] Bug #2087634 - CVE-2022-30599 moodle: SQL injection risk in badge award criteria
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2087634
[ 4 ] Bug #2087635 - CVE-2022-30600 moodle: Failed login attempts counted incorrectly
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2087635
[ 5 ] Bug #2087636 - CVE-2022-30598 moodle: global search results reveal authors of
content unexpectedly for some activities [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2087636
--------------------------------------------------------------------------------
================================================================================
pkgtreediff-0.5.0-4.fc35 (FEDORA-2022-0cd0056e7a)
RPM package tree diff tool
--------------------------------------------------------------------------------
Update Information:
koji-tool: - Install: completely rework logic using installed status and NVRA
etc - install: '--no-reinstall' replaces '--reinstall-nvrs' - install:
determine
package name from child or parent task - Install: confirm for --all and
--exclude, respecting --yes - tasks: parse taskid as arg and drop --task and
--children - Tasks: print parent Task taskid compactly and then its children -
improve parsing of package names from koji build requests - when parsing koji
build request fields, detect git hash and fork builds rpm-nvr: - improved
parsing of package names from koji build requests
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 12 2022 Jens Petersen <petersen(a)redhat.com> - 0.5.0-4
- rebuild
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Sat Jan 8 2022 Miro Hron��ok <mhroncok(a)redhat.com> - 0.5.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Changes/LIBFFI34
--------------------------------------------------------------------------------
================================================================================
pmbootstrap-1.43.1-1.fc35 (FEDORA-2022-4a63872601)
A sophisticated chroot/build/flash tool to develop and install postmarketOS
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.43.1 ---- New upstream release 1.43.0 && add missing
requires git & openssl
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 1.43.1-1
- New upstream release 1.43.1, fixzes rhbz#2086325
* Sat May 14 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 1.43.0-2
- Add missing requires git & openssl, fixes rhbz#2086087
* Sat May 14 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 1.43.0-1
- New upstream release 1.43.0, fixes rhbz#2085295, rhbz#2075447
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2075447 - pmbootstrap-1.43.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075447
[ 2 ] Bug #2085295 - pmbootstrap is out-of-date.
https://bugzilla.redhat.com/show_bug.cgi?id=2085295
[ 3 ] Bug #2086087 - The rpm-package of pmbootstrap is not dependent upon openssl.
https://bugzilla.redhat.com/show_bug.cgi?id=2086087
[ 4 ] Bug #2086325 - pmbootstrap-1.43.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2086325
--------------------------------------------------------------------------------
================================================================================
python-azure-core-1.21.1-3.fc35 (FEDORA-2022-effccd334d)
Azure Core shared client library for Python
--------------------------------------------------------------------------------
Update Information:
Fixing FTBFS
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 11 2022 Major Hayden <major(a)mhtx.net> 2:1.21.1-3
- Fix azure-sdk-tools BuildRequires
* Wed May 11 2022 Major Hayden <major(a)mhtx.net> 2:1.21.1-1
- Downgrade to 1.21.1
* Fri May 6 2022 Major Hayden <major(a)mhtx.net> 1:1.24.0-1
- ���� Update to 1.24.0
* Mon Apr 25 2022 Major Hayden <major(a)mhtx.net> 1:1.21.1-4
- Disable tests due to network connectivity limitations
* Mon Apr 25 2022 Major Hayden <major(a)mhtx.net> 1:1.21.1-3
- Disable tests in EPEL due to missing backports
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1:1.21.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-dns-lexicon-3.11.2-1.fc35 (FEDORA-2022-b3e530812e)
Manipulate DNS records on various DNS providers in a standardized/agnostic way
--------------------------------------------------------------------------------
Update Information:
Update to 3.11.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Christian Schuermann <spike(a)fedoraproject.org> 3.11.2-1
- Update to 3.11.2
- Disable OciInstancePrincipalProviderTests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2086336 - python-dns-lexicon-3.11.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2086336
--------------------------------------------------------------------------------
================================================================================
python-libusb1-1.9.3-1.fc35 (FEDORA-2022-2d9c4fedba)
Pure-python wrapper for libusb-1.0
--------------------------------------------------------------------------------
Update Information:
Updated to 1.9.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Jonny Heggheim <hegjon(a)gmail.com> - 1.9.3-1
- Updated to 1.9.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2086555 - Please update it to 1.9.3
https://bugzilla.redhat.com/show_bug.cgi?id=2086555
--------------------------------------------------------------------------------
================================================================================
python-whois-0.9.15-1.fc35 (FEDORA-2022-442361482b)
Python module for retrieving WHOIS information of domains
--------------------------------------------------------------------------------
Update Information:
Update to v0.9.15
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 0.9.15-1
- Update to version 0.9.15
--------------------------------------------------------------------------------
================================================================================
rust-lev_distance-0.1.1-1.fc35 (FEDORA-2022-cb7e9f67ee)
Copy of Levenshtein distance implementation from Rust Compiler
--------------------------------------------------------------------------------
Update Information:
rust-lev_distance new package
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 laiot <carmelo.sarta.main(a)gmail.com> 0.1.1-1
- Added sources
--------------------------------------------------------------------------------
================================================================================
syncthing-1.20.1-1.fc35 (FEDORA-2022-03a644c52e)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 1.20.1. Release notes: - 1.20.0:
https://github.com/syncthing/syncthing/releases/tag/v1.20.0 - 1.20.1:
https://github.com/syncthing/syncthing/releases/tag/v1.20.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.20.1-1
- Update to version 1.20.1; Fixes RHBZ#2081813
--------------------------------------------------------------------------------
================================================================================
timidity++-2.15.0-3.fc35 (FEDORA-2022-9231f67092)
A software wavetable MIDI synthesizer
--------------------------------------------------------------------------------
Update Information:
- Disable LTO to workaround LTO causing an alsa output (-Os) crash
(rhbz#1993671)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Hans de Goede <hdegoede(a)redhat.com> - 2.15.0-3
- Disable LTO to workaround LTO causing an alsa output (-Os) crash (rhbz#1993671)
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.15.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Nov 15 2021 Hans de Goede <hdegoede(a)redhat.com> - 2.15.0-1
- New upstream release 2.15.0 (rhbz#1951906)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1993671 - timidity segfaults in Fedora 34 but not in Fedora 33
https://bugzilla.redhat.com/show_bug.cgi?id=1993671
--------------------------------------------------------------------------------
================================================================================
urw-base35-fonts-20200910-11.fc35 (FEDORA-2022-81cf5ced22)
Core Font Set containing 35 freely distributable fonts from (URW)++
--------------------------------------------------------------------------------
Update Information:
Substituted badly monospaced Nimbus Mono PS with Dejavu Sans Mono (#2021366)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Richard Lescak <rlescak(a)redhat.com> 20200910-11
- Substituted badly monospaced Nimbus Mono PS with Dejavu Sans Mono (#2021366)
- added substitution for Century
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
20200910-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2021366 - Nimbus Mono PS font should not fc-match Courier, as certain letter
combinations are not monospaced
https://bugzilla.redhat.com/show_bug.cgi?id=2021366
--------------------------------------------------------------------------------
================================================================================
vim-8.2.4975-1.fc35 (FEDORA-2022-74b9e404c1)
The VIM editor
--------------------------------------------------------------------------------
Update Information:
Security fixes for CVE-2022-1769, CVE-2022-1733 ---- The newest upstream
commit Security fix for CVE-2022-1674
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.2.4975-1
- patchlevel 4975
* Tue May 17 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 2:8.2.4969-1
- patchlevel 4969
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2085393 - CVE-2022-1674 vim: NULL pointer dereference in vim_regexec_string()
of regexp.c
https://bugzilla.redhat.com/show_bug.cgi?id=2085393
[ 2 ] Bug #2087594 - CVE-2022-1769 vim: a buffer over-read found in scriptfile.c
https://bugzilla.redhat.com/show_bug.cgi?id=2087594
[ 3 ] Bug #2087600 - CVE-2022-1733 vim: Heap-based Buffer Overflow in cindent.c
https://bugzilla.redhat.com/show_bug.cgi?id=2087600
--------------------------------------------------------------------------------
================================================================================
webkit2gtk3-2.36.2-1.fc35 (FEDORA-2022-a5af56609e)
GTK Web content engine library
--------------------------------------------------------------------------------
Update Information:
Update to WebKitGTK 2.36.2, fixing several crashes and rendering issues.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Michael Catanzaro <mcatanzaro(a)redhat.com> 2.36.2-1
- Update to 2.36.2
--------------------------------------------------------------------------------
================================================================================
winetricks-20220411-1.fc35 (FEDORA-2022-92148265fe)
Work around common problems in Wine
--------------------------------------------------------------------------------
Update Information:
- Update to 20220411
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 20220411-1
- Update to 20220411
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
20210825-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------