The following Fedora 35 Security updates need testing: Age URL 165 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9 libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35 158 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11 mysql-connector-java-8.0.28-1.fc35 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1124e5882d gnupg2-2.3.4-2.fc35 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2c9f8224f8 xen-4.15.3-2.fc35 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-41890e9e44 openssl-1.1.1q-1.fc35 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c45aa090a oci-seccomp-bpf-hook-1.2.6-1.fc35 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d7a58e376 vim-9.0.049-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2a5de7cb8b git-2.37.1-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-573714ca6b xorg-x11-server-1.20.14-7.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8e787b2a5c xorg-x11-server-Xwayland-21.1.4-2.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-99d17387ea osbuild-composer-57-1.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-85aa8e5706 python-notebook-6.4.0-4.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7e7ce7df2e moodle-3.11.8-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved: Age URL 39 https://bodhi.fedoraproject.org/updates/FEDORA-2022-57015a1d06 binutils-2.37-20.fc35 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1124e5882d gnupg2-2.3.4-2.fc35 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4af24a9e1 firewalld-1.0.5-2.fc35 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-41890e9e44 openssl-1.1.1q-1.fc35 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2c9f8224f8 xen-4.15.3-2.fc35 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-65b9d4a999 alsa-lib-1.2.7.2-1.fc35 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3bee8e2cf1 unbound-1.16.0-4.fc35 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf929f5402 koji-1.29.1-1.fc35 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d7a58e376 vim-9.0.049-1.fc35 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ede0ab42f9 annobin-10.78-1.fc35 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-37913de00f rpm-4.17.1-2.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-76e3f59c27 libidn2-2.3.3-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-be979081b2 inih-56-1.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8e787b2a5c xorg-x11-server-Xwayland-21.1.4-2.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-573714ca6b xorg-x11-server-1.20.14-7.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a540c39ed0 wireplumber-0.4.11-2.fc35 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2a5de7cb8b git-2.37.1-1.fc35 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4b3c2b910c boost-1.76.0-5.fc35 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-45b56e5c67 appstream-data-35-7.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-daa7f3dd9a zenity-3.41.0-2.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4959d44f65 fedora-release-35-37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4dc0e29a1a sssd-2.7.3-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d32aab1a2a linux-firmware-20220708-136.fc35
The following builds have been pushed to Fedora 35 updates-testing
btop-1.2.8-1.fc35 ca-certificates-2022.2.54-1.0.fc35 chromium-103.0.5060.114-1.fc35 dotnet3.1-3.1.421-1.fc35 fmf-1.2.0-1.fc35 gnupg1-1.4.23-18.fc35 golang-github-rabbitmq-amqp091-1.4.0-1.fc35 golang-x-mobile-0-0.12.20220719git8578da9.fc35 google-benchmark-1.6.2-1.fc35 hplip-3.22.6-1.fc35 ibus-table-chinese-1.8.9-1.fc35 ibus-typing-booster-2.18.0-1.fc35 java-1.8.0-openjdk-1.8.0.332.b09-2.fc35 libffado-2.4.6-1.fc35 libxcvt-0.1.2-1.fc35 lua-5.4.4-3.fc35 osmo-0.4.4-2.fc35 perl-Image-ExifTool-12.42-1.fc35 pipewire-0.3.56-1.fc35 python-dbusmock-0.28.4-1.fc35 python-trimesh-3.12.9-1.fc35 qpress-11-1.fc35 rust-json5-0.4.1-1.fc35 sdrangel-7.5.1-1.fc35 xfce4-panel-4.16.4-3.fc35
Details about builds:
================================================================================ btop-1.2.8-1.fc35 (FEDORA-2022-4afebe200d) Modern and colorful command line resource monitor that shows usage and stats -------------------------------------------------------------------------------- Update Information:
Initial package build -------------------------------------------------------------------------------- ChangeLog:
* Thu Jul 14 2022 Jonathan Wright jonathan@almalinux.org - 1.2.8-1 - Initial version of package --------------------------------------------------------------------------------
================================================================================ ca-certificates-2022.2.54-1.0.fc35 (FEDORA-2022-4fe37ead8d) The Mozilla CA root certificate bundle -------------------------------------------------------------------------------- Update Information:
Update to ca-certificates 2.54 Include code signing certs for .net -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 15 2022 Bob Relyea rrelyea@redhat.com - 2022.2.54-1.0 - Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "DST Root CA X3" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020" - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA ���������������" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Ra��z Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - # Certificate "ANCERT Certificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorit�� Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) F��tan��s��tv��ny" - # Certificate "AC Ra��z Certic��mara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "T��B��TAK UEKAE K��k Sertifika Hizmet Sa��lay��c��s�� - S��r��m 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "T��RKTRUST Elektronik Sertifika Hizmet Sa��lay��c��s��" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Ra��z Certic��mara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" --------------------------------------------------------------------------------
================================================================================ chromium-103.0.5060.114-1.fc35 (FEDORA-2022-0102ccc2a2) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information:
Update to 103.0.5060.114. Fixes: CVE-2022-2156 CVE-2022-2157 CVE-2022-2158 CVE-2022-2160 CVE-2022-2161 CVE-2022-2162 CVE-2022-2163 CVE-2022-2164 CVE-2022-2165 CVE-2022-2294 CVE-2022-2295 CVE-2022-2296 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 13 2022 Tom Callaway spot@fedoraproject.org - 103.0.5060.114-1 - update to 103.0.5060.114 * Wed Jun 22 2022 Tom Callaway spot@fedoraproject.org - 103.0.5060.53-1 - update to 103.0.5060.53 * Thu Jun 16 2022 Tom Callaway spot@fedoraproject.org - 102.0.5005.115-2 - fix minizip Requires for EL9 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2099947 - CVE-2022-2156 chromium-browser: Use after free in Base https://bugzilla.redhat.com/show_bug.cgi?id=2099947 [ 2 ] Bug #2099948 - CVE-2022-2157 chromium-browser: Use after free in Interest groups https://bugzilla.redhat.com/show_bug.cgi?id=2099948 [ 3 ] Bug #2099949 - CVE-2022-2158 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=2099949 [ 4 ] Bug #2099950 - CVE-2022-2160 chromium-browser: Insufficient policy enforcement in DevTools https://bugzilla.redhat.com/show_bug.cgi?id=2099950 [ 5 ] Bug #2099951 - CVE-2022-2161 chromium-browser: Use after free in WebApp Provider https://bugzilla.redhat.com/show_bug.cgi?id=2099951 [ 6 ] Bug #2099952 - CVE-2022-2162 chromium-browser: Insufficient policy enforcement in File System API https://bugzilla.redhat.com/show_bug.cgi?id=2099952 [ 7 ] Bug #2099953 - CVE-2022-2163 chromium-browser: Use after free in Cast UI and Toolbar https://bugzilla.redhat.com/show_bug.cgi?id=2099953 [ 8 ] Bug #2099954 - CVE-2022-2164 chromium-browser: Inappropriate implementation in Extensions API https://bugzilla.redhat.com/show_bug.cgi?id=2099954 [ 9 ] Bug #2099955 - CVE-2022-2165 chromium-browser: Insufficient data validation in URL formatting https://bugzilla.redhat.com/show_bug.cgi?id=2099955 [ 10 ] Bug #2103854 - CVE-2022-2294 chromium-browser: Heap buffer overflow in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=2103854 [ 11 ] Bug #2103855 - CVE-2022-2295 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=2103855 [ 12 ] Bug #2103856 - CVE-2022-2296 chromium-browser: Use after free in Chrome OS Shell https://bugzilla.redhat.com/show_bug.cgi?id=2103856 --------------------------------------------------------------------------------
================================================================================ dotnet3.1-3.1.421-1.fc35 (FEDORA-2022-61648ac486) .NET Core Runtime and SDK -------------------------------------------------------------------------------- Update Information:
This is the July 2022 monthly update for .NET Core 3.1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 18 2022 Omair Majid omajid@redhat.com - 3.1.421-1 - Update to .NET SDK 3.1.421 and Runtime 3.1.27 --------------------------------------------------------------------------------
================================================================================ fmf-1.2.0-1.fc35 (FEDORA-2022-0163a90b43) Flexible Metadata Format -------------------------------------------------------------------------------- Update Information:
Release fmf-1.2.0 - Shallow git clone if no reference is used - Select by the source of object - Enable the flake8 check, fix detected issues - Make when in adjust optional, add true|false expr. - Version as fmf flag and module attribute -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Luk���� Zachar lzachar@redhat.com - 1.2.0-1 - Shallow git clone if no reference is used - Select by the source of object - Enable the flake8 check, fix detected issues - Make when in adjust optional, add true|false expr. - Version as fmf flag and module attribute --------------------------------------------------------------------------------
================================================================================ gnupg1-1.4.23-18.fc35 (FEDORA-2022-0dbfb7e270) A GNU utility for secure communication and data storage -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2022-34903 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Brian C. Lane bcl@redhat.com - 1.4.23-18 - g10/status.c: Backport fix for status buffer overrun Resolves: rhbz#2108445 - Note that this includes the fix for [CVE-2022-34903] * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 1.4.23-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2102868 - CVE-2022-34903 gpg: Signature spoofing via status line injection https://bugzilla.redhat.com/show_bug.cgi?id=2102868 --------------------------------------------------------------------------------
================================================================================ golang-github-rabbitmq-amqp091-1.4.0-1.fc35 (FEDORA-2022-70509011de) An AMQP 0-9-1 Go client maintained by the RabbitMQ team -------------------------------------------------------------------------------- Update Information:
update to v1.4.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Mark E. Fuller fuller@fedoraproject.org 1.4.0-1 - update to v1.4.0 --------------------------------------------------------------------------------
================================================================================ golang-x-mobile-0-0.12.20220719git8578da9.fc35 (FEDORA-2022-98f555f3f2) Go support for Mobile devices -------------------------------------------------------------------------------- Update Information:
Update to latest commit as of 20220719 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Mikel Olasagasti Uranga mikel@olasagasti.info - 0-0.12.20220719git8578da9 - Bump to 8578da9835fd365e78a6e63048c103b27a53a82c. Fixes rhbz#2045669. * Sat Jun 18 2022 Robert-Andr�� Mauchin zebob.m@gmail.com - 0-0.11 - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 0-0.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ google-benchmark-1.6.2-1.fc35 (FEDORA-2022-dc905014b6) A microbenchmark support library -------------------------------------------------------------------------------- Update Information:
Updated to version 1.6.2. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Vitaly Zaitsev vitaly@easycoding.org - 1.6.2-1 - Updated to version 1.6.2. * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 1.6.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Mon Jan 17 2022 Vitaly Zaitsev vitaly@easycoding.org - 1.6.1-2 - Disabled skip_with_error_test test on Fedora 36 due to GCC 12 regression. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2108586 - google-benchmark-1.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2108586 --------------------------------------------------------------------------------
================================================================================ hplip-3.22.6-1.fc35 (FEDORA-2022-9da87a00dc) HP Linux Imaging and Printing Project -------------------------------------------------------------------------------- Update Information:
recommend libsane-hpaio - duplicated scanners are better than no scanner 2101790 - hplip-3.22.6 is available -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Zdenek Dohnal zdohnal@redhat.com - 3.22.6-1 - 2101790 - hplip-3.22.6 is available * Mon Jul 18 2022 Zdenek Dohnal zdohnal@redhat.com - 3.22.4-3 - recommend libsane-hpaio - duplicated scanners are better than no scanner * Mon Jun 13 2022 Python Maint python-maint@redhat.com - 3.22.4-2 - Rebuilt for Python 3.11 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2101790 - hplip-3.22.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2101790 --------------------------------------------------------------------------------
================================================================================ ibus-table-chinese-1.8.9-1.fc35 (FEDORA-2022-e238505312) Chinese input tables for IBus -------------------------------------------------------------------------------- Update Information:
Update to 1.8.9; Add tones to Jyutping.txt table (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/6) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 13 2022 Mike FABIAN mfabian@redhat.com - 1.8.9-1 - Update to 1.8.9 - Add tones to Jyutping.txt table (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/6) Tonal markers according to https://github.com/rime/rime-cantonese/blob/main/README-en.md#tonal-markers were added: 1. v: High level, e.g. siv ��� ���; High level checked, e.g. sikv ��� ��� 2. x: Medium rising, e.g. six ��� ��� 3. q: Medium level, e.g. siq��� ���; Medium level checked, e.g. sekq ��� ��� 4. vv: Low falling, e.g. sivv ��� ��� 5. xx: Low rising, e.g. sixx ��� ��� 6. qq: Low level, e.g. siqq��� ���; Low level checked, e.g. sikqq ��� ��� --------------------------------------------------------------------------------
================================================================================ ibus-typing-booster-2.18.0-1.fc35 (FEDORA-2022-a08c414198) A completion input method -------------------------------------------------------------------------------- Update Information:
Update to 2.18.0; Optionally show flags in the candidate list for dictionary matches (Resolves: https://github.com/mike-fabian/ibus-typing- booster/issues/343) ---- Update to 2.17.1; Translation update from Weblate (pt updated to 100%) ---- Update to 2.17.0; Improve ���Automatically select the best candidate��� (Resolves: https://github.com/mike-fabian/ibus-typing- booster/issues/285) -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 18 2022 Mike FABIAN mfabian@redhat.com - 2.18.0-1 - Update to 2.18.0 - Optionally show flags in the candidate list for dictionary matches (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/343) - Update emoji annotations from CLDR - Translation update from Weblate (de (100%), es (93.7%), pl (100%), tr (100%), uk (100%)) * Wed Jul 13 2022 Mike FABIAN mfabian@redhat.com - 2.17.1-1 - Update to 2.17.1 - Translation update from Weblate (pt updated to 100%) * Thu Jul 7 2022 Mike FABIAN mfabian@redhat.com - 2.17.0-1 - Update to 2.17.0 - Improve ���Automatically select the best candidate��� (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/285) - Translation update from Weblate (de (100%), pl (100%), pt (30.3%), tr (100%), uk (100%)) * Mon Jul 4 2022 Mike FABIAN mfabian@redhat.com - 2.16.10-1 - Update to 2.16.10 - Improve ���Automatically select the best candidate��� (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/285) --------------------------------------------------------------------------------
================================================================================ java-1.8.0-openjdk-1.8.0.332.b09-2.fc35 (FEDORA-2022-4d338824b7) OpenJDK 8 Runtime Environment -------------------------------------------------------------------------------- Update Information:
# FIPS Update for OpenJDK 8 * [RH2007331](https://bugzilla.redhat.com/show_bug.cgi?id=2007331): SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode * [RH2051605](https://bugzilla.redhat.com/show_bug.cgi?id=2051605): Detect NSS at Runtime for FIPS detection * [RH2036462](https://bugzilla.redhat.com/show_bug.cgi?id=2036462): sun.security.pkcs11.wrapper.PKCS11.getInstance breakage * [RH2090378](https://bugzilla.redhat.com/show_bug.cgi?id=2090378): Revert to disabling system security properties and FIPS mode support together * Depend on `crypto-policies` package at build-time and run-time * Add javaver- and origin- specific javadoc and javadoczip alternatives (thanks to FeRD (Frank Dana) ferdnyc@gmail.com) -------------------------------------------------------------------------------- ChangeLog:
* Sun Jul 17 2022 Andrew Hughes gnu.andrew@redhat.com - 1:1.8.0.332.b09-2 - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository - * RH2051605: Detect NSS at Runtime for FIPS detection - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage - * RH2090378: Revert to disabling system security properties and FIPS mode support together - Turn off build-time NSS linking and go back to an explicit Requires on NSS - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk - Enable system security properties in the RPM (now disabled by default in the FIPS repo) - Improve security properties test to check both enabled and disabled behaviour - Run security properties test with property debugging on - Exclude x86 from builds as the bootstrap JDK is now completely broken and unusable * Thu Jul 14 2022 Andrew Hughes gnu.andrew@redhat.com - 1:1.8.0.332.b09-2 - Explicitly require crypto-policies during build and runtime for system security properties * Thu Jul 14 2022 FeRD (Frank Dana) ferdnyc@gmail.com - 1:1.8.0.332.b09-2 - Add javaver- and origin-specific javadoc and javadoczip alternatives. * Fri Jul 1 2022 Stephan Bergmann sbergman@redhat.com - 1:1.8.0.332.b09-2 - Disable copy-jdk-configs for Flatpak builds - Fix flatpak builds by exempting them from bootstrap * Thu Jun 30 2022 Francisco Ferrari Bihurriet fferrari@redhat.com - 1:1.8.0.332.b09-2 - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2036462 - rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() https://bugzilla.redhat.com/show_bug.cgi?id=2036462 --------------------------------------------------------------------------------
================================================================================ libffado-2.4.6-1.fc35 (FEDORA-2022-e430d8b9c3) Free firewire audio driver library -------------------------------------------------------------------------------- Update Information:
This update fixes more type-related issues in ffado-mixer, see the [upstream release announcement](http://ffado.org/posts/ffado-2.4.6-release/). -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 18 2022 Nils Philippsen nils@tiptoe.de - 2.4.6-1 - Version 2.4.6 * Mon Jun 13 2022 Python Maint python-maint@redhat.com - 2.4.5-3 - Rebuilt for Python 3.11 --------------------------------------------------------------------------------
================================================================================ libxcvt-0.1.2-1.fc35 (FEDORA-2022-846afda9a7) VESA CVT standard timing modelines generator -------------------------------------------------------------------------------- Update Information:
fixes a regression with mode 1360x768. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Olivier Fourdan ofourdan@redhat.com - 0.1.2-1 - Update to 0.1.2 * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 0.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ lua-5.4.4-3.fc35 (FEDORA-2022-5b5889f43a) Powerful light-weight programming language -------------------------------------------------------------------------------- Update Information:
Update to the latest bugfixes (1-5) against 5.4.4. Includes fixes for CVE-2022-28805 and CVE-2022-33099. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Tom Callaway spot@fedoraproject.org - 5.4.4-3 - upstream bug fixes (3,4,5) including fix for CVE-2022-33099 * Tue Apr 5 2022 Tom Callaway spot@fedoraproject.org - 5.4.4-2 - upstream bug fixes -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2073884 - CVE-2022-28805 lua: heap buffer overread https://bugzilla.redhat.com/show_bug.cgi?id=2073884 [ 2 ] Bug #2104427 - CVE-2022-33099 lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling https://bugzilla.redhat.com/show_bug.cgi?id=2104427 --------------------------------------------------------------------------------
================================================================================ osmo-0.4.4-2.fc35 (FEDORA-2022-e57547c384) Personal organizer -------------------------------------------------------------------------------- Update Information:
removes phishing site as URL, and updates to new. explicitly BuildRequires gcc -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Ranjan Maitra <aarem AT fedoraproject DOT org> - 0.4.4-2 - Changed URL to http://osmo-pim.sourceforge.net/, which is *only* official OSMO web page. - Addresses BZ #2108423 - Explicitly BuildRequires gcc * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 0.4.4-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Mon Sep 27 2021 Ranjan Maitra <aarem AT fedoraproject DOT org> - 0.4.4-0.1 - update to version 0.4.4 - Several compilation problems fixed - Replaced compiled-in graphics with resource images - Many bug fixes and cleanups -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2108424 - osmo: point to a phishing site [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2108424 --------------------------------------------------------------------------------
================================================================================ perl-Image-ExifTool-12.42-1.fc35 (FEDORA-2022-7ae67244f7) Utility for reading and writing image meta info -------------------------------------------------------------------------------- Update Information:
Update to latest stable (12.42). New package for EPEL9. -------------------------------------------------------------------------------- ChangeLog:
* Wed Jul 13 2022 Tom Callaway spot@fedoraproject.org - 12.42-1 - update to latest stable (12.42) * Mon May 30 2022 Jitka Plesnikova jplesnik@redhat.com - 12.38-2 - Perl 5.36 rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2096301 - Upgrade perl-Image-ExifTool to 12.42 https://bugzilla.redhat.com/show_bug.cgi?id=2096301 [ 2 ] Bug #2103364 - please build perl-Image-ExifTool for EPEL9 https://bugzilla.redhat.com/show_bug.cgi?id=2103364 --------------------------------------------------------------------------------
================================================================================ pipewire-0.3.56-1.fc35 (FEDORA-2022-51d317b54a) Media Sharing Server -------------------------------------------------------------------------------- Update Information:
Update version to 0.3.56 ---- Add patch to avoid crash in JACK. ---- Update version to 0.3.55 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Wim Taymans wtaymans@redhat.com - 0.3.56-1 - Update version to 0.3.56 * Tue Jul 12 2022 Wim Taymans wtaymans@redhat.com - 0.3.55-2 - Add patch to avoid crash in JACK. * Tue Jul 12 2022 Wim Taymans wtaymans@redhat.com - 0.3.55-1 - Update version to 0.3.55 --------------------------------------------------------------------------------
================================================================================ python-dbusmock-0.28.4-1.fc35 (FEDORA-2022-2950ea211e) Mock D-Bus objects -------------------------------------------------------------------------------- Update Information:
- setup.py: Fix ModuleNotFoundError - ofono template: Fix conversion to f-strings (Debian #1015286) - Ship FMF tests in release tarballs ---- - Bring back dbusmock.__version__ -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Packit hello@packit.dev - 0.28.4-1 <!-- generated by eloquent/github-release-action --> <!-- original source: - setup.py: Fix ModuleNotFoundError - ofono template: Fix conversion to f-strings (Debian #1015286) - Ship FMF tests in release tarballs -->
<ul> <li>setup.py: Fix ModuleNotFoundError</li> <li>ofono template: Fix conversion to f-strings (Debian #1015286)</li> <li>Ship FMF tests in release tarballs</li> </ul> * Sun Jul 17 2022 Packit hello@packit.dev - 0.28.3-1 <!-- generated by eloquent/github-release-action --> <!-- original source: - Bring back dbusmock.__version__ -->
<ul> <li>Bring back dbusmock.<strong>version</strong> </li> </ul> * Sat Jul 16 2022 Packit hello@packit.dev - 0.28.2-1 <!-- generated by eloquent/github-release-action --> <!-- original source: - Dynamically compute version with setuptools-scm - tests: Adjust to libnotify 0.8 (Debian #1015068) - tests: Only run pylint on current Fedora release -->
<ul> <li>Dynamically compute version with setuptools-scm</li> <li>tests: Adjust to libnotify 0.8 (Debian #1015068)</li> <li>tests: Only run pylint on current Fedora release</li> </ul> --------------------------------------------------------------------------------
================================================================================ python-trimesh-3.12.9-1.fc35 (FEDORA-2022-ca8ee8cebd) Import, export, process, analyze and view triangular meshes -------------------------------------------------------------------------------- Update Information:
Update to 3.12.9 (close RHBZ#2103265) https://github.com/mikedh/trimesh/compare/3.12.6...3.12.9 -------------------------------------------------------------------------------- ChangeLog:
* Mon Jul 18 2022 Benjamin A. Beasley code@musicinmybrain.net 3.12.9-1 - Update to 3.12.9 (close RHBZ#2103265) * Mon Jul 18 2022 Benjamin A. Beasley code@musicinmybrain.net 3.12.6-2 - Update spec file comments about missing optional dependencies -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2103265 - python-trimesh-3.12.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2103265 --------------------------------------------------------------------------------
================================================================================ qpress-11-1.fc35 (FEDORA-2022-fd80b5c096) A portable file archiver using QuickLZ -------------------------------------------------------------------------------- Update Information:
Initial import; Fixes: RHBZ#1985573 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Davide Cavalca dcavalca@fedoraproject.org 11-1 - Initial import; Fixes: RHBZ#1985573 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1985573 - Review Request: qpress - A portable file archiver using QuickLZ https://bugzilla.redhat.com/show_bug.cgi?id=1985573 --------------------------------------------------------------------------------
================================================================================ rust-json5-0.4.1-1.fc35 (FEDORA-2022-efc61530ce) Rust JSON5 serializer and deserializer which speaks Serde -------------------------------------------------------------------------------- Update Information:
New package -------------------------------------------------------------------------------- ChangeLog:
* Sun Jul 17 2022 Peter Robinson pbrobinson@gmail.com 0.4.1-1 - initial import --------------------------------------------------------------------------------
================================================================================ sdrangel-7.5.1-1.fc35 (FEDORA-2022-c7e5542866) Software defined radio (SDR) and signal analyzer frontend to various hardware -------------------------------------------------------------------------------- Update Information:
This is new version of sdrangel. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Jaroslav ��karvada jskarvad@redhat.com - 7.5.1-1 - New version Resolves: rhbz#2108379 * Mon Jul 11 2022 Jaroslav ��karvada jskarvad@redhat.com - 7.4.0-3 - Rebuilt for new airspyone_host * Sat Jul 9 2022 Richard Shaw hobbes1069@gmail.com - 7.4.0-2 - Rebuild for codec2 1.0.4. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2108379 - sdrangel-7.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2108379 --------------------------------------------------------------------------------
================================================================================ xfce4-panel-4.16.4-3.fc35 (FEDORA-2022-aa4e2857e4) Next generation panel for Xfce -------------------------------------------------------------------------------- Update Information:
- fix panel crash under certain cases -------------------------------------------------------------------------------- ChangeLog:
* Tue Jul 19 2022 Mukundan Ragavan nonamedotc@gmail.com 4.16.4-3 - patch to avoid panel crashes (rhbz#2107816) * Sun May 15 2022 Mukundan Ragavan nonamedotc@gmail.com 4.16.4-2 - make libdbusmenu conditional for Fedora --------------------------------------------------------------------------------