The following Fedora 34 Security updates need testing: Age URL 31 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6aba96e1b8 radare2-5.6.4-1.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b86459467d vim-8.2.4621-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-aac057a550 expat-2.4.7-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-56942dc7c5 mingw-fribidi-1.0.10-5.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ee15b98ea1 mingw-python-pillow-8.1.2-6.fc34 python-pillow-8.1.2-7.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b0a85ed1b3 mingw-openexr-2.5.5-6.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d112d4480 mingw-openjpeg2-2.4.0-4.fc34 openjpeg2-2.4.0-4.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-cffca5dbf4 gdal-3.2.2-3.fc34 mingw-gdal-3.2.2-3.fc34 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ba2c5339d4 chromium-99.0.4844.84-1.fc34 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e6388650ea buildah-1.23.3-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-10fd054d40 crun-1.4.4-1.fc34 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-764c8c6b1c fribidi-1.0.11-3.fc34

The following Fedora 34 Critical Path updates have yet to be approved: Age URL 361 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34 ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34 sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34 121 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be annobin-9.79-3.fc34 83 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3b891fe11 gdb-11.1-7.fc34 31 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8f3103b973 hwdata-0.357-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5ca2bb2654 gnome-desktop3-40.9-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-88abd9154c libretls-3.5.1-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b170c2690 webkit2gtk3-2.36.0-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bb9b2a715b bluez-5.64-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-abe3e0d83e pytz-2022.1-1.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-70a77aed6a coreutils-8.32-32.fc34 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dab75a01b8 gnome-shell-40.10-1.fc34 gnome-shell-extensions-40.7-1.fc34 mutter-40.10-1.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-aeb8049f08 web-assets-5-14.fc34 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-96fef79f96 tzdata-2022a-1.fc34 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-92087bf4a6 krb5-1.19.2-3.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c9f2e00cd5 python3-docs-3.9.12-1.fc34 python3.9-3.9.12-1.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b86459467d vim-8.2.4621-1.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1ad7595a8d squashfs-tools-4.5.1-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d112d4480 mingw-openjpeg2-2.4.0-4.fc34 openjpeg2-2.4.0-4.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d2bca3d15 wayland-1.20.0-4.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-aac057a550 expat-2.4.7-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c7f28019a2 rust-zram-generator-1.1.2-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-02900a53e7 evolution-3.40.4-4.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6a9fba03f9 firefox-98.0.2-1.fc34 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-764c8c6b1c fribidi-1.0.11-3.fc34

The following builds have been pushed to Fedora 34 updates-testing

containerd-1.6.2-2.fc34 fotoxx-22.15-1.fc34 goaccess-1.5.6-1.fc34 golang-github-containerd-imgcrypt-1.1.4-1.fc34 libdxflib-3.26.4-2.fc34 mame-0.242-2.fc34 mycli-1.25.0-1.fc34 openttd-12.2-1.fc34 polybar-3.6.2-1.fc34

Details about builds:

================================================================================ containerd-1.6.2-2.fc34 (FEDORA-2022-ed53f2439a) Open and reliable container runtime -------------------------------------------------------------------------------- Update Information:

Update to 1.6.2 (rhbz#2068277). Mitigates CVE-2022-24769 / GHSA-c9cp-9c75-9v8c. -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 3 2022 Maxwell G gotmax@e.email 1.6.2-1 - Update to 1.6.2 (rhbz#2068277). Mitigates CVE-2022-24769 / GHSA-c9cp-9c75-9v8c. --------------------------------------------------------------------------------

================================================================================ fotoxx-22.15-1.fc34 (FEDORA-2022-c61e74f105) Photo editor -------------------------------------------------------------------------------- Update Information:

Update fotoxx to 22.15 -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 3 2022 S��rgio Basto sergio@serjux.com - 22.15-1 - Update fotoxx to 22.15 * Thu Mar 3 2022 Gwyn Ciesla gwync@protonmail.com - 22.14-1 - 22.14 * Fri Feb 4 2022 Gwyn Ciesla gwync@protonmail.com - 22.12-1 - 22.12 * Thu Jan 27 2022 Gwyn Ciesla gwync@protonmail.com - 22.11-1 - 22.11 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 22.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Jan 4 2022 Gwyn Ciesla gwync@protonmail.com - 22.1-1 - 22.1 --------------------------------------------------------------------------------

================================================================================ goaccess-1.5.6-1.fc34 (FEDORA-2022-92959cd62c) Real-time web log analyzer and interactive viewer -------------------------------------------------------------------------------- Update Information:

v1.5.6 -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 3 2022 Fabio Alessandro Locati fale@fedoraproject.org - 1.5.6-1 - Update to 1.5.6 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2070212 - goaccess-1.5.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2070212 --------------------------------------------------------------------------------

================================================================================ golang-github-containerd-imgcrypt-1.1.4-1.fc34 (FEDORA-2022-de0f8beeb0) OCI Image Encryption Package -------------------------------------------------------------------------------- Update Information:

Update to 1.1.4 (rhbz#2068719). Mitigates CVE-2022-24778 (rhbz#2069368, rhbz#2069369). -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 2 2022 Maxwell G gotmax@e.email 1.1.4-1 - Update to 1.1.4 (rhbz#2068719). Mitigates CVE-2022-24778 (rhbz#2069368, rhbz#2069369) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2069368 - CVE-2022-24778 imgcrypt: Unauthorized access to encryted container image on a shared system due to missing check in CheckAuthorization() code path https://bugzilla.redhat.com/show_bug.cgi?id=2069368 --------------------------------------------------------------------------------

================================================================================ libdxflib-3.26.4-2.fc34 (FEDORA-2022-694b3426dc) A C++ library for reading and writing DXF files -------------------------------------------------------------------------------- Update Information:

Update to 3.26.4, with bug fixes. Package class documentation and examples. The following probably-relevant entries are drawn from the [QCAD Changelog](https://www.qcad.org/en/documentation/changelog): ### 3.22.1 (2019/05/22) **Fixes** - [FS#1866 - DXF: EXTMIN/EXTMAX interchanged](https://qcad.org/bugtracker/index.php?do=details&task_id=1866) ### 3.21.1 (2018/06/29) **Fixes** - [FS#1180 - dxflib cannot open files with international characters in path or file name](https://qcad.org/bugtracker/index.php?do=details&task_id=1180) ### 3.18.0 (2017/09/22) **Fixes** - [FS#1631 - dxflib: wrong definition of DL_POLYLINE3D flag](https://qcad.org/bugtracker/index.php?do=details&task_id=1631) ### 3.17.2 (2017/06/27) **Fixes** - [FS#1572 - Dimension font not set to "Standard" when importing through dxflib](https://qcad.org/bugtracker/index.php?do=details&task_id=1572) -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 3 2022 Benjamin A. Beasley code@musicinmybrain.net 3.26.4-2 - Package documentation and examples * Sun Apr 3 2022 Benjamin A. Beasley code@musicinmybrain.net 3.26.4-1 - Update to 3.26.4 (close RHBZ#1996851) * Sun Apr 3 2022 Benjamin A. Beasley code@musicinmybrain.net 3.17.0-17 - Build with qmake from Qt6 instead of Qt4 * Sun Apr 3 2022 Benjamin A. Beasley code@musicinmybrain.net 3.17.0-16 - General spec file cleanup -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1996851 - libdxflib-3.26.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1996851 --------------------------------------------------------------------------------

================================================================================ mame-0.242-2.fc34 (FEDORA-2022-80d92b2d2c) Multiple Arcade Machine Emulator -------------------------------------------------------------------------------- Update Information:

Work around bgfx initialization error ---- Update to the latest upstream release: * https://www.mamedev.org/?p=511 -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 3 2022 Julian Sikorski belegdol@fedoraproject.org 0.242-2 - Workaround bgfx initialisation issue until better fix is available from upstream * Fri Apr 1 2022 Julian Sikorski belegdol@fedoraproject.org 0.242-1 - Update to 0.242 --------------------------------------------------------------------------------

================================================================================ mycli-1.25.0-1.fc34 (FEDORA-2022-d88f28c421) Interactive CLI for MySQL Database with auto-completion and syntax highlighting -------------------------------------------------------------------------------- Update Information:

Update to latest upstream release myclu 1.25.0. -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 2 2022 Terje Rosten terje.rosten@ntnu.no - 1.25.0-1 - 1.25.0 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2069884 - mycli-1.25.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2069884 --------------------------------------------------------------------------------

================================================================================ openttd-12.2-1.fc34 (FEDORA-2022-b75ce23b76) Transport system simulation game -------------------------------------------------------------------------------- Update Information:

# 12.2 (2022-04-02) - Feature: Remember the last-used signal between games (#9792) - Change: [MacOS] Allow touchbar usage on all supported OS versions (#9776) - Change: Add a timestamp in name of crash files (#9761) - Fix #9736: Duplicate multiplayer window opens upon canceling password entry (#9842) - Fix: Removing long roads doesn't prioritise refusal of local authority over other errors (#9831) - Fix #9020: Glitchy station coverage highlight when changing selection (#9825) - Fix: Correct some Romanian town names (#9819) - Fix: Original music playback rate was slightly too fast (#9814) - Fix #9811: Use the NewGRF-defined vehicle center when dragging ships and aircraft (#9812) - Fix: Do not let shares in the company taking over another company disappear (#9808) - Fix #9802: Crash when using lots of NewGRF waypoint types (#9803) - Fix #9766: Don't write uninitialised data in config file (#9767) - Fix #9743: [MacOS] Don't try to render touchbar sprites with invalid zoom level (#9776) - Fix #9774: Building roadstop in estimation mode updates station acceptance (#9775) - Fix: If vehicles only refit to cargo-slots >= 32, the default cargo was wrong (#9744) - Fix #9735: Possible desync when replacing a depot on same tile (#9738) - Fix #9730: [Network] Connections can use an invalid socket due to a race condition (#9731) - Fix: Don't show sign edit window for GS-owned signs (#9716) - Fix #9702: Display order window for vehicle group on ctrl- click only when using shared orders (#9704) - Fix #9680: Crash when loading really old savegames with aircraft in certain places (#9699) - Fix: Update last servicing dates when using the date cheat (#9694) - Fix: Error message shows about missing glyphs while suitable fallback font is found (#9692) -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 3 2022 Felix Kaechele felix@kaechele.ca - 12.2-1 - update to 12.2 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 12.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2071348 - openttd-12.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2071348 --------------------------------------------------------------------------------

================================================================================ polybar-3.6.2-1.fc34 (FEDORA-2022-0fbf024117) Fast and easy-to-use status bar -------------------------------------------------------------------------------- Update Information:

Update to 3.6.2 -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 3 2022 Artem Polishchuk ego.cordatus@gmail.com - 3.6.2-1 - chore(update): 3.6.2 --------------------------------------------------------------------------------