The following Fedora 35 Security updates need testing:
Age URL
153
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9
libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
146
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b3d7f6973 curl-7.79.1-5.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ffe7dba2cb
golang-1.16.15-3.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b9c2a3a2b7
libtiff-4.4.0-2.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6b749525f3
webkit2gtk3-2.36.4-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-13cc09ecf2
subversion-1.14.2-5.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1124e5882d
gnupg2-2.3.4-2.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-2022-57015a1d06
binutils-2.37-20.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0365f6a0b4
elfutils-0.187-4.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b246f3a2b
ethtool-5.18-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-590034bcdd
annobin-10.76-3.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b3d7f6973 curl-7.79.1-5.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-12d41537af
freeipa-4.9.10-2.fc35 libldb-2.4.3-1.fc35 samba-4.15.8-0.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-37913de00f rpm-4.17.1-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-336f54d470
libtpms-0.9.5-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6b749525f3
webkit2gtk3-2.36.4-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a80aa3becb
wireplumber-0.4.11-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b9c2a3a2b7
libtiff-4.4.0-2.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1f6883991
hwdata-0.361-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0ce968f910
gnome-shell-41.8.1-1.fc35 mutter-41.8-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1124e5882d
gnupg2-2.3.4-2.fc35
The following builds have been pushed to Fedora 35 updates-testing
ansible-freeipa-1.8.1-1.fc35
conserver-8.2.6-5.fc35
ddnet-16.2-1.fc35
firewalld-1.0.5-2.fc35
ibus-typing-booster-2.17.0-1.fc35
kernel-5.18.10-100.fc35
libgphoto2-2.5.30-2.fc35
openssl-1.1.1q-1.fc35
perl-Text-Bidi-2.18-1.fc35
picard-2.8.2-1.fc35
pipewire-0.3.54-1.fc35
pspg-5.5.5-1.fc35
rust-async-task-4.3.0-1.fc35
rust-cxx-1.0.71-1.fc35
rust-cxx-build-1.0.71-1.fc35
rust-cxx-gen-0.7.71-1.fc35
rust-cxxbridge-flags-1.0.71-1.fc35
rust-cxxbridge-macro-1.0.71-1.fc35
rust-darling-0.13.4-1.fc35
rust-darling_core-0.13.4-1.fc35
rust-darling_macro-0.13.4-1.fc35
shim-15.6-2
shim-unsigned-aarch64-15.6-2
solaar-1.1.4-1.fc35
speexdsp-1.2.1-1.fc35
xen-4.15.3-2.fc35
Details about builds:
================================================================================
ansible-freeipa-1.8.1-1.fc35 (FEDORA-2022-62b3f534ea)
Roles and playbooks to deploy FreeIPA servers, replicas and clients
--------------------------------------------------------------------------------
Update Information:
- Update to version 1.8.1
https://github.com/freeipa/ansible-
freeipa/releases/tag/v1.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Thomas Woerner <twoerner(a)redhat.com> - 1.8.1-1
- Update to version 1.8.1
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
--------------------------------------------------------------------------------
================================================================================
conserver-8.2.6-5.fc35 (FEDORA-2022-371a0b289c)
Serial console server daemon/client
--------------------------------------------------------------------------------
Update Information:
* Fix broken GSSAPI support
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Luk���� Zaoral <lzaoral(a)redhat.com> - 8.2.6-5
- Fix broken GSSAPI support
--------------------------------------------------------------------------------
================================================================================
ddnet-16.2-1.fc35 (FEDORA-2022-f63ca08299)
DDraceNetwork, a cooperative racing mod of Teeworlds
--------------------------------------------------------------------------------
Update Information:
Update ddnet to 16.2 (#2066872)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 S��rgio Basto <sergio(a)serjux.com> - 16.2-1
- Update ddnet to 16.2 (#2066872)
* Fri Jul 1 2022 S��rgio Basto <sergio(a)serjux.com> - 16.2~rc7-1
- Update to ddnet-16.2-rc7 (#2066872)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2066872 - ddnet-16.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2066872
--------------------------------------------------------------------------------
================================================================================
firewalld-1.0.5-2.fc35 (FEDORA-2022-d4af24a9e1)
A firewall daemon with D-Bus interface providing a dynamic firewall
--------------------------------------------------------------------------------
Update Information:
enable forward for Fedora zones ---- rebase package to v1.0.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Eric Garver <eric(a)garver.life> - 1.0.5-2
- enable forward for Fedora zones
* Wed Jul 6 2022 Eric Garver <eric(a)garver.life> - 1.0.5-1
- rebase package to v1.0.5
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.17.0-1.fc35 (FEDORA-2022-84f5f0017e)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.17.0; Improve ���Automatically select the best candidate��� (Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/285)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Mike FABIAN <mfabian(a)redhat.com> - 2.17.0-1
- Update to 2.17.0
- Improve ���Automatically select the best candidate���
(Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/285)
- Translation update from Weblate
(de (100%), pl (100%), pt (30.3%), tr (100%), uk (100%))
* Mon Jul 4 2022 Mike FABIAN <mfabian(a)redhat.com> - 2.16.10-1
- Update to 2.16.10
- Improve ���Automatically select the best candidate���
(Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/285)
--------------------------------------------------------------------------------
================================================================================
kernel-5.18.10-100.fc35 (FEDORA-2022-b47003a52b)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.18.10 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.18.10-0]
- netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso)
- Revert "Revert "smb3: use netname when available on secondary
channels"" (Justin M. Forbes)
- Revert "Revert "smb3: fix empty netname context on secondary
channels"" (Justin M. Forbes)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2104423 - kernel: heap overflow in nft_set_elem_init()
https://bugzilla.redhat.com/show_bug.cgi?id=2104423
--------------------------------------------------------------------------------
================================================================================
libgphoto2-2.5.30-2.fc35 (FEDORA-2022-8872a0a78f)
Library for accessing digital cameras
--------------------------------------------------------------------------------
Update Information:
New upstream release 2.5.30
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Josef Ridky <jridky(a)redhat.com> - 2.5.30-2
- Spec bump
* Thu Jul 7 2022 Josef Ridky <jridky(a)redhat.com> - 2.5.30-1
- New upstream release 2.5.30 (#2103339)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103339 - libgphoto2-2.5.30 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2103339
--------------------------------------------------------------------------------
================================================================================
openssl-1.1.1q-1.fc35 (FEDORA-2022-41890e9e44)
Utilities from the general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
**Changelog** ``` * Thu Jul 07 2022 Clemens Lang <cllang(a)redhat.com> -
1:1.1.1q-1 - Upgrade to 1.1.1q Resolves: CVE-2022-2097 ``` ---- ``` * Thu
Jun 30 2022 Clemens Lang <cllang(a)redhat.com> - 1:1.1.1p-1 - Upgrade to 1.1.1p
Resolves: CVE-2022-2068 Related: rhbz#2099975 ``` Security fix for
CVE-2022-2068
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Clemens Lang <cllang(a)redhat.com> - 1:1.1.1q-1
- Upgrade to 1.1.1q
Resolves: CVE-2022-2097
* Thu Jun 30 2022 Clemens Lang <cllang(a)redhat.com> - 1:1.1.1p-1
- Upgrade to 1.1.1p
Resolves: CVE-2022-2068
Related: rhbz#2099975
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2097310 - CVE-2022-2068 openssl: the c_rehash script allows command
injection
https://bugzilla.redhat.com/show_bug.cgi?id=2097310
--------------------------------------------------------------------------------
================================================================================
perl-Text-Bidi-2.18-1.fc35 (FEDORA-2022-c36997f342)
Unicode bidirectional algorithm using libfribidi
--------------------------------------------------------------------------------
Update Information:
This release cleans up the tests.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Petr Pisar <ppisar(a)redhat.com> - 2.18-1
- 2.18 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103763 - perl-Text-Bidi-2.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2103763
--------------------------------------------------------------------------------
================================================================================
picard-2.8.2-1.fc35 (FEDORA-2022-516f8da122)
MusicBrainz-based audio tagger
--------------------------------------------------------------------------------
Update Information:
Upstream release - rhbz#2104856
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Gerald Cox <gbcox(a)member.fsf.org> - 2.8.2-1
- Upstream release - rhbz#2104856
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 2.8.1-2
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2104856 - picard-2.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2104856
--------------------------------------------------------------------------------
================================================================================
pipewire-0.3.54-1.fc35 (FEDORA-2022-b21f7c9c9d)
Media Sharing Server
--------------------------------------------------------------------------------
Update Information:
new upstream bugfix ---- Add channel remap patch. ---- Add patch to fix
speaker-test.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Wim Taymans <wtaymans(a)redhat.com> - 0.3.54-1
- Update version to 0.3.54
* Mon Jul 4 2022 Wim Taymans <wtaymans(a)redhat.com> - 0.3.53-4
- Add channel remap patch.
* Mon Jul 4 2022 Wim Taymans <wtaymans(a)redhat.com> - 0.3.53-3
- Add patch to fix speaker-test.
- Add patch to fix noise in resampler.
--------------------------------------------------------------------------------
================================================================================
pspg-5.5.5-1.fc35 (FEDORA-2022-ada3e7e3f0)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release
https://github.com/okbob/pspg/releases/tag/5.5.4
https://github.com/okbob/pspg/releases/tag/5.5.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Pavel Raiskup <praiskup(a)redhat.com> - 5.5.5-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.5.4
https://github.com/okbob/pspg/releases/tag/5.5.5
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.5.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2056840 - pspg-5.5.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2056840
--------------------------------------------------------------------------------
================================================================================
rust-async-task-4.3.0-1.fc35 (FEDORA-2022-5a5e9f3fd3)
Task abstraction for building executors
--------------------------------------------------------------------------------
Update Information:
Update to version 4.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 4.3.0-1
- Update to version 4.3.0; Fixes RHBZ#2104989
--------------------------------------------------------------------------------
================================================================================
rust-cxx-1.0.71-1.fc35 (FEDORA-2022-d764af4a34)
Safe interop between Rust and C++
--------------------------------------------------------------------------------
Update Information:
Update the cxx stack to version 1.0.71.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.0.71-1
- Update to version 1.0.71; Fixes RHBZ#2098329
--------------------------------------------------------------------------------
================================================================================
rust-cxx-build-1.0.71-1.fc35 (FEDORA-2022-d764af4a34)
C++ code generator for integrating cxx crate into a Cargo build
--------------------------------------------------------------------------------
Update Information:
Update the cxx stack to version 1.0.71.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.0.71-1
- Update to version 1.0.71; Fixes RHBZ#2098332
--------------------------------------------------------------------------------
================================================================================
rust-cxx-gen-0.7.71-1.fc35 (FEDORA-2022-d764af4a34)
C++ code generator for integrating cxx crate into higher level tools
--------------------------------------------------------------------------------
Update Information:
Update the cxx stack to version 1.0.71.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.7.71-1
- Update to version 0.7.71; Fixes RHBZ#2098333
--------------------------------------------------------------------------------
================================================================================
rust-cxxbridge-flags-1.0.71-1.fc35 (FEDORA-2022-d764af4a34)
Compiler configuration of the cxx crate
--------------------------------------------------------------------------------
Update Information:
Update the cxx stack to version 1.0.71.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.0.71-1
- Update to version 1.0.71; Fixes RHBZ#2098330
--------------------------------------------------------------------------------
================================================================================
rust-cxxbridge-macro-1.0.71-1.fc35 (FEDORA-2022-d764af4a34)
Implementation detail of the cxx crate
--------------------------------------------------------------------------------
Update Information:
Update the cxx stack to version 1.0.71.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.0.71-1
- Update to version 1.0.71; Fixes RHBZ#2098331
--------------------------------------------------------------------------------
================================================================================
rust-darling-0.13.4-1.fc35 (FEDORA-2022-997744a718)
Proc-macro library for reading attributes into structs
--------------------------------------------------------------------------------
Update Information:
Update the darling, darling_macro, and darling_core crates to version 0.13.4.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.13.4-1
- Update to version 0.13.4
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.13.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-darling_core-0.13.4-1.fc35 (FEDORA-2022-997744a718)
Helper crate for proc-macro library for reading attributes into structs
--------------------------------------------------------------------------------
Update Information:
Update the darling, darling_macro, and darling_core crates to version 0.13.4.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.13.4-1
- Update to version 0.13.4
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.13.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-darling_macro-0.13.4-1.fc35 (FEDORA-2022-997744a718)
Internal support for a proc-macro library for reading attributes into structs
--------------------------------------------------------------------------------
Update Information:
Update the darling, darling_macro, and darling_core crates to version 0.13.4.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.13.4-1
- Update to version 0.13.4
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.13.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
shim-15.6-2 (FEDORA-2022-e0fa7e16a2)
First-stage UEFI bootloader
--------------------------------------------------------------------------------
Update Information:
- aarch64 only: fix relocation crash in fallback
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Robbie Harwood <rharwood(a)redhat.com> - 15.6-2
- Update aarch64 (only) with relocation fixes
- Resolves: #2101248
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2101248 - Fallback mode crashing in some cases with shim 15.6
https://bugzilla.redhat.com/show_bug.cgi?id=2101248
--------------------------------------------------------------------------------
================================================================================
shim-unsigned-aarch64-15.6-2 (FEDORA-2022-e0fa7e16a2)
First-stage UEFI bootloader
--------------------------------------------------------------------------------
Update Information:
- aarch64 only: fix relocation crash in fallback
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Robbie Harwood <rharwood(a)redhat.com> - 15.6-2
- Add pjones's aarch64 relocation fix
- Resolves: #2101248
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2101248 - Fallback mode crashing in some cases with shim 15.6
https://bugzilla.redhat.com/show_bug.cgi?id=2101248
--------------------------------------------------------------------------------
================================================================================
solaar-1.1.4-1.fc35 (FEDORA-2022-555011e8d9)
Device manager for a wide range of Logitech devices
--------------------------------------------------------------------------------
Update Information:
* Update Croatian translation * Handle unanticipated values for persistent
remappable action as default * Improve system tray interface documentation *
Remove blank lines from system tray popup * Update Polish translation * Add
depress and release options to KeyPress rule action * Only close existing
devices for receiver * Differentiate debug messages for different setting types
* Implement packed range setting in config panel * Only produce warning for
unimplemented display of setting * Add sidetone and equalizer settings for
headsets * Add packed ranges setting * Use built-ins for conversions between int
and byte string * Don't add HI_RES wheel ecodes to evdev device codes * Handle
null key in persistent remappable actions when device does not respond * Consult
polling rate feature for polling rate * Eliminate extra file handles * Close
file handles for receiver-connected devices * Access to more keys in KeyPress
rule action when in other keyboard groups * Update Turkish translation * Put
battery levels in tray menu labels * Reduce warnings for inaccessible keys in
KeyPress rule action * Better determination of keycodes and insert needed shifts
in KeyPress actions. * Be careful when processing notifications for partly set
up devices. * Clear out fields for empty persistent remappable action. * Fix
message generation when device is offline. * Fix bug in feature lookup. * Add
support for G533 Headset and G502 Gaming Mouse * Improve device features
handling. * Keep trying settings that have worked in the past. * Store None in
persisters for non-persisting settings. * Only create configuration entries for
off-line devices if they have a serial number.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Dominik Mierzejewski <dominik(a)greysector.net> - 1.1.4-1
- update to 1.1.4 (#2103752)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103752 - solaar-1.1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2103752
--------------------------------------------------------------------------------
================================================================================
speexdsp-1.2.1-1.fc35 (FEDORA-2022-e6f3b4d482)
A voice compression format (DSP)
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 David King <amigadave(a)amigadave.com> - 1.2.1-1
- Update to 1.2.1 (#2098129)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2098129 - speexdsp-1.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2098129
--------------------------------------------------------------------------------
================================================================================
xen-4.15.3-2.fc35 (FEDORA-2022-2c9f8224f8)
Xen is a virtual machine monitor
--------------------------------------------------------------------------------
Update Information:
Linux disk/nic frontends data leaks [XSA-403, CVE-2022-26365, CVE-2022-33740,
CVE-2022-33741, CVE-2022-33742] (#2104747) ---- update to xen-4.15.3 x86: MMIO
Stale Data vulnerabilities (not applied in 4.15.2-5) ---- x86: MMIO Stale Data
vulnerabilities [XSA-404, CVE-2022-21123, CVE-2022-21125, CVE-2022-21166] ----
x86 pv: Race condition in typeref acquisition [XSA-401, CVE-2022-26362] x86 pv:
Insufficient care with non-coherent mappings [ XSA-402, CVE-2022-26363,
CVE-2022-26364]
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 7 2022 Michael Young <m.a.young(a)durham.ac.uk> - 4.15.3-2
- Linux disk/nic frontends data leaks [XSA-403, CVE-2022-26365,
CVE-2022-33740, CVE-2022-33741, CVE-2022-33742] (#2104747)
* Fri Jul 1 2022 Michael Young <m.a.young(a)durham.ac.uk> - 4.15.3-1
- update to xen-4.15.3
remove or adjust patches now included or superceded upstream
- x86: MMIO Stale Data vulnerabilities (not applied in 4.15.2-5)
* Wed Jun 22 2022 Michael Young <m.a.young(a)durham.ac.uk> - 4.15.2-5
- x86: MMIO Stale Data vulnerabilities [XSA-404, CVE-2022-21123,
CVE-2022-21125, CVE-2022-21166]
* Thu Jun 9 2022 Michael Young <m.a.young(a)durham.ac.uk> - 4.15.2-4
- x86 pv: Race condition in typeref acquisition [XSA-401, CVE-2022-26362]
- x86 pv: Insufficient care with non-coherent mappings [ XSA-402,
CVE-2022-26363, CVE-2022-26364]
- additional patches so above applies cleanly
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2104746 - CVE-2022-26365 CVE-2022-33740 CVE-2022-33741 CVE-2022-33742 xen:
Linux disk/nic frontends data leaks
https://bugzilla.redhat.com/show_bug.cgi?id=2104746
--------------------------------------------------------------------------------