The following Fedora 34 Security updates need testing:
Age URL
25
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6aba96e1b8
radare2-5.6.4-1.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9e88b5d8d7
openssl-1.1.1n-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6748ae617b rsh-0.17-98.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-47da296f2b
unrealircd-5.2.4-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-194c3da292
swaylock-1.6-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ad2b0ad61b
cobbler-3.2.2-11.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2558f14c58
389-ds-base-2.0.15-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1f981071eb
ghc-cmark-gfm-0.2.3-1.fc34 ghc-hakyll-4.13.4.0-5.1.fc34 gitit-0.13.0.0-5.1.fc34
pandoc-2.9.2.1-10.fc34 pandoc-citeproc-0.17.0.1-5.fc34 patat-0.8.6.1-1.1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b86459467d
vim-8.2.4621-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6043a7b938
skopeo-1.7.0-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-29c30bc7ef
phoronix-test-suite-10.8.2-1.fc34
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3f78aabf8c
seamonkey-2.53.11.1-1.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
355
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
115
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be
annobin-9.79-3.fc34
77
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3b891fe11 gdb-11.1-7.fc34
25
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8f3103b973
hwdata-0.357-1.fc34
15
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7a7ce77afe
go-rpm-macros-3.0.15-1.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9e88b5d8d7
openssl-1.1.1n-1.fc34
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ba2d302f05 gjs-1.68.6-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5ca2bb2654
gnome-desktop3-40.9-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-88abd9154c
libretls-3.5.1-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b170c2690
webkit2gtk3-2.36.0-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bb9b2a715b bluez-5.64-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-abe3e0d83e pytz-2022.1-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-026d7123e8
firefox-98.0-3.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-70a77aed6a
coreutils-8.32-32.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dab75a01b8
gnome-shell-40.10-1.fc34 gnome-shell-extensions-40.7-1.fc34 mutter-40.10-1.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-aeb8049f08
web-assets-5-14.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-96fef79f96
tzdata-2022a-1.fc34
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-92087bf4a6 krb5-1.19.2-3.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c9f2e00cd5
python3-docs-3.9.12-1.fc34 python3.9-3.9.12-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b86459467d
vim-8.2.4621-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1ad7595a8d
squashfs-tools-4.5.1-1.fc34
The following builds have been pushed to Fedora 34 updates-testing
bacula-11.0.6-2.fc34
baresip-2.0.1-1.fc34
cups-filters-1.28.13-1.fc34
expat-2.4.7-1.fc34
gutenprint-5.3.4-8.fc34
hwinfo-21.80-1.fc34
igt-gpu-tools-1.26-1.20220328git37ec3b8.fc34
jacktrip-1.5.3-1.fc34
kernel-5.16.18-100.fc34
koji-osbuild-5-0.fc34
libre-2.2.0-1.fc34
librem-2.0.0-2.fc34
libx86emu-3.5-1.fc34
mingw-fribidi-1.0.10-5.fc34
mingw-openexr-2.5.5-6.fc34
mingw-openjpeg2-2.4.0-4.fc34
mingw-python-pillow-8.1.2-6.fc34
netatalk-3.1.13-1.fc34
openjpeg2-2.4.0-4.fc34
plasma-wallpapers-dynamic-4.0.0~git20220328.d37f412-1.fc34
python-ast-monitor-0.1.2-1.fc34
python-kiwisolver-1.4.1-1.fc34
python-myrepos-utils-0.0.1.1-1.fc34
python-pillow-8.1.2-7.fc34
remmina-1.4.25-2.fc34
rust-1.59.0-4.fc34
rust-zram-generator-1.1.2-1.fc34
salt-3004.1-1.fc34
sdl-telnet-1.0.0-5.20220328gite0e2a91.fc34
solaar-1.1.2-1.fc34
wayland-1.20.0-4.fc34
Details about builds:
================================================================================
bacula-11.0.6-2.fc34 (FEDORA-2022-879672892d)
Cross platform network backup for Linux, Unix, Mac and Windows
--------------------------------------------------------------------------------
Update Information:
Bacula 11.0.6 bugfix release.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 26 2022 Simone Caronni <negativo17(a)gmail.com> - 11.0.6-2
- Update/reorganize patches.
* Fri Mar 25 2022 Simone Caronni <negativo17(a)gmail.com> - 11.0.6-1
- Update to 11.0.6.
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 11.0.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 11.0.5-3
- Rebuilt with OpenSSL 3.0.0
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 11.0.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1999436 - [F36FTBFS]: bacula fails to build from source in Fedora Rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=1999436
[ 2 ] Bug #2018891 - bacula: FTBFS with OpenSSL 3.0.0
https://bugzilla.redhat.com/show_bug.cgi?id=2018891
[ 3 ] Bug #2045215 - bacula: FTBFS in Fedora rawhide/f36
https://bugzilla.redhat.com/show_bug.cgi?id=2045215
--------------------------------------------------------------------------------
================================================================================
baresip-2.0.1-1.fc34 (FEDORA-2022-1d549a1eb0)
Modular SIP user-agent with audio and video support
--------------------------------------------------------------------------------
Update Information:
# Baresip 2.0.1 (2022-03-27) - audio: fix `rx_thread` (adaptive jitter
buffer) - test: init fixture - test: refactoring of
`test_account_uri_complete` - mk: check also if `extensions/XShm.h` is present
- menu: support custom SIP headers - menu: use new `sdp_dir_decode` - menu:
avoid multiple hash entries with same key - menu: support audio file config
value "none" - intercom: add video preview call # libre v2.2.0 (2022-03-28)
- tls: fix coverity defect - http/client: `read_file` check `ftell` return
value - udp: fix coverity defect - cmake: add detection of `HAVE_ARC4RANDOM`
- Fix coverity issues - Support adding CRLs - json/decode: fix possible out
of bound access, if code changes - tls/tls_add_crlpem: use `const` - udp:
fix coverity defect - dns: fix Coverity Defect - tls: use `const` pointer
for `tls_add_capem()` - srtp/srtcp: add sanity check for `rtcp->tag_len` -
shim: new module from rew - Trice module - retest trice - Add `try_into`
conversion helper and drop gcc 4.8 support - rtp: fix signed/unsigned warning
on WIN32 - fix build error on openbsd arm64 (raspberry pi) - cmake: disable
C extensions (like `make`) - fmt: add bool decode from `struct pl` - sdp: a
utility function for decoding SDP direction - sa/sa_ntop: check `inet_ntop()`
return value - sa_pton: use `sa_addrinfo` for interface suffix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 2.0.1-1
- Upgrade to 2.0.1 (#2068919)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068919 - baresip-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2068919
[ 2 ] Bug #2069304 - libre-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069304
[ 3 ] Bug #2069439 - F34FailsToInstall: Multiple packages built from baresip
https://bugzilla.redhat.com/show_bug.cgi?id=2069439
--------------------------------------------------------------------------------
================================================================================
cups-filters-1.28.13-1.fc34 (FEDORA-2022-f131ebd20b)
OpenPrinting CUPS filters and backends
--------------------------------------------------------------------------------
Update Information:
1.28.13
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.28.13-1
- 1.28.13
--------------------------------------------------------------------------------
================================================================================
expat-2.4.7-1.fc34 (FEDORA-2022-aac057a550)
An XML parser library
--------------------------------------------------------------------------------
Update Information:
Rebase to version 2.4.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 7 2022 Tomas Korbar <tkorbar(a)redhat.com> - 2.4.7-1
- Rebase to version 2.4.7
- Resolves: rhbz#2061005
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2061005 - expat-2.4.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2061005
--------------------------------------------------------------------------------
================================================================================
gutenprint-5.3.4-8.fc34 (FEDORA-2022-22af30e355)
Printer Drivers Package
--------------------------------------------------------------------------------
Update Information:
2055504 - Set gutenprint53+usb backend to use the default USB context
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 5.3.4-8
- 2055504 - Set gutenprint53+usb backend to use the default USB context
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.3.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2055504 - Set gutenprint53+usb backend to use the default USB context
https://bugzilla.redhat.com/show_bug.cgi?id=2055504
--------------------------------------------------------------------------------
================================================================================
hwinfo-21.80-1.fc34 (FEDORA-2022-476a1aec26)
Hardware information tool
--------------------------------------------------------------------------------
Update Information:
Update to 21.80
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Andrey Ponomarenko <andrewponomarenko(a)yandex.ru> - 21.80-1
- Update to 21.80
--------------------------------------------------------------------------------
================================================================================
igt-gpu-tools-1.26-1.20220328git37ec3b8.fc34 (FEDORA-2022-88a0160b9d)
Test suite and tools for DRM drivers
--------------------------------------------------------------------------------
Update Information:
New git snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Lyude Paul <lyude(a)redhat.com> - 1.26-1.20220328git37ec3b8
- New git snapshot
--------------------------------------------------------------------------------
================================================================================
jacktrip-1.5.3-1.fc34 (FEDORA-2022-2d65efffe4)
A system for high-quality audio network performance over the Internet
--------------------------------------------------------------------------------
Update Information:
Update to 1.5.3 (#2069182)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 I��aki ��car <iucar(a)fedoraproject.org> - 1.5.3-1
- Update to 1.5.3 (#2069182)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069182 - jacktrip-1.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069182
--------------------------------------------------------------------------------
================================================================================
kernel-5.16.18-100.fc34 (FEDORA-2022-8e3ac65667)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.16.18 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.16.18-0]
- Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus
Torvalds)
- Fix RHDISTGIT for Fedora (Justin M. Forbes)
- Fix up changelog (Justin M. Forbes)
* Wed Mar 23 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.16.17-0]
- Linux v5.16.17
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2066706 - CVE-2022-1048 kernel: race condition in snd_pcm_hw_free leading to
use-after-free
https://bugzilla.redhat.com/show_bug.cgi?id=2066706
--------------------------------------------------------------------------------
================================================================================
koji-osbuild-5-0.fc34 (FEDORA-2022-94cea28528)
Koji integration for osbuild composer
--------------------------------------------------------------------------------
Update Information:
Update koji-osbuild to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Packit Service <user-cont-team+packit-service(a)redhat.com> - 5-0
CHANGES WITH 5:
----------------
* builder: rename gpg_key field to gpgkey for repos (#91)
* builder: fix type annotations (#92)
* Add GitHub Action to create upstream tag (#90)
* docs: fix error in hacking.md (#85)
* build(deps): bump actions/checkout from 2 to 3 (#86)
* spec: don't push tests into Fedora (#89)
* test/builder: drop misleading quotes from config (#88)
* builder: use correct secret when fetching token (#87)
* packit: Push directly to dist-git (#84)
Contributions from: Christian Kellner, Ond��ej Budai, Simon Steinbeiss, Stephen Coady,
dependabot[bot]
��� Somewhere on the Internet, 2022-03-28
--------------------------------------------------------------------------------
================================================================================
libre-2.2.0-1.fc34 (FEDORA-2022-1d549a1eb0)
Library for real-time communications and SIP stack
--------------------------------------------------------------------------------
Update Information:
# Baresip 2.0.1 (2022-03-27) - audio: fix `rx_thread` (adaptive jitter
buffer) - test: init fixture - test: refactoring of
`test_account_uri_complete` - mk: check also if `extensions/XShm.h` is present
- menu: support custom SIP headers - menu: use new `sdp_dir_decode` - menu:
avoid multiple hash entries with same key - menu: support audio file config
value "none" - intercom: add video preview call # libre v2.2.0 (2022-03-28)
- tls: fix coverity defect - http/client: `read_file` check `ftell` return
value - udp: fix coverity defect - cmake: add detection of `HAVE_ARC4RANDOM`
- Fix coverity issues - Support adding CRLs - json/decode: fix possible out
of bound access, if code changes - tls/tls_add_crlpem: use `const` - udp:
fix coverity defect - dns: fix Coverity Defect - tls: use `const` pointer
for `tls_add_capem()` - srtp/srtcp: add sanity check for `rtcp->tag_len` -
shim: new module from rew - Trice module - retest trice - Add `try_into`
conversion helper and drop gcc 4.8 support - rtp: fix signed/unsigned warning
on WIN32 - fix build error on openbsd arm64 (raspberry pi) - cmake: disable
C extensions (like `make`) - fmt: add bool decode from `struct pl` - sdp: a
utility function for decoding SDP direction - sa/sa_ntop: check `inet_ntop()`
return value - sa_pton: use `sa_addrinfo` for interface suffix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 2.2.0-1
- Upgrade to 2.2.0 (#2069304)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068919 - baresip-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2068919
[ 2 ] Bug #2069304 - libre-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069304
[ 3 ] Bug #2069439 - F34FailsToInstall: Multiple packages built from baresip
https://bugzilla.redhat.com/show_bug.cgi?id=2069439
--------------------------------------------------------------------------------
================================================================================
librem-2.0.0-2.fc34 (FEDORA-2022-1d549a1eb0)
Library for real-time audio and video processing
--------------------------------------------------------------------------------
Update Information:
# Baresip 2.0.1 (2022-03-27) - audio: fix `rx_thread` (adaptive jitter
buffer) - test: init fixture - test: refactoring of
`test_account_uri_complete` - mk: check also if `extensions/XShm.h` is present
- menu: support custom SIP headers - menu: use new `sdp_dir_decode` - menu:
avoid multiple hash entries with same key - menu: support audio file config
value "none" - intercom: add video preview call # libre v2.2.0 (2022-03-28)
- tls: fix coverity defect - http/client: `read_file` check `ftell` return
value - udp: fix coverity defect - cmake: add detection of `HAVE_ARC4RANDOM`
- Fix coverity issues - Support adding CRLs - json/decode: fix possible out
of bound access, if code changes - tls/tls_add_crlpem: use `const` - udp:
fix coverity defect - dns: fix Coverity Defect - tls: use `const` pointer
for `tls_add_capem()` - srtp/srtcp: add sanity check for `rtcp->tag_len` -
shim: new module from rew - Trice module - retest trice - Add `try_into`
conversion helper and drop gcc 4.8 support - rtp: fix signed/unsigned warning
on WIN32 - fix build error on openbsd arm64 (raspberry pi) - cmake: disable
C extensions (like `make`) - fmt: add bool decode from `struct pl` - sdp: a
utility function for decoding SDP direction - sa/sa_ntop: check `inet_ntop()`
return value - sa_pton: use `sa_addrinfo` for interface suffix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 2.0.0-2
- Rebuilt for libre 2.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068919 - baresip-2.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2068919
[ 2 ] Bug #2069304 - libre-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069304
[ 3 ] Bug #2069439 - F34FailsToInstall: Multiple packages built from baresip
https://bugzilla.redhat.com/show_bug.cgi?id=2069439
--------------------------------------------------------------------------------
================================================================================
libx86emu-3.5-1.fc34 (FEDORA-2022-d1e1550bb5)
x86 emulation library
--------------------------------------------------------------------------------
Update Information:
Update to 3.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Andrey Ponomarenko <andrewponomarenko(a)yandex.ru> - 3.5-1
- Update to 3.5
--------------------------------------------------------------------------------
================================================================================
mingw-fribidi-1.0.10-5.fc34 (FEDORA-2022-56942dc7c5)
MinGW Windows fribidi library
--------------------------------------------------------------------------------
Update Information:
Backport patches for CVE-2022-{25308,25309,25310}.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Sandro Mani <manisandro(a)gmail.com> - 1.0.10-5
- Backport patches for CVE-2022-25310, CVE-2022-25309, CVE-2022-25308
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.10-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2067040 - CVE-2022-25308 mingw-fribidi: fribidi: Stack based buffer overflow
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2067040
[ 2 ] Bug #2067042 - CVE-2022-25309 mingw-fribidi: fribidi: Heap-buffer-overflow in
fribidi_cap_rtl_to_unicode [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2067042
[ 3 ] Bug #2067046 - CVE-2022-25310 mingw-fribidi: fribidi: SEGV in
fribidi_remove_bidi_marks [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2067046
--------------------------------------------------------------------------------
================================================================================
mingw-openexr-2.5.5-6.fc34 (FEDORA-2022-b0a85ed1b3)
MinGW Windows openexr library
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2021-45942.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Sandro Mani <manisandro(a)gmail.com> - 2.5.5-6
- Backport fix for CVE-2021-45942
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2051598 - CVE-2021-45942 mingw-openexr: OpenEXR: heap-based buffer overflow
in Imf_3_1:LineCompositeTask:execute [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2051598
--------------------------------------------------------------------------------
================================================================================
mingw-openjpeg2-2.4.0-4.fc34 (FEDORA-2022-2d112d4480)
MinGW Windows openjpeg2 library
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2022-1122.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Sandro Mani <manisandro(a)gmail.com> - 2.4.0-4
- Backport fix for CVE-2022-1122
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069370 - CVE-2022-1122 mingw-openjpeg2: openjpeg: segmentation fault in
opj2_decompress due to uninitialized pointer [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2069370
[ 2 ] Bug #2069371 - CVE-2022-1122 openjpeg2: openjpeg: segmentation fault in
opj2_decompress due to uninitialized pointer [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2069371
--------------------------------------------------------------------------------
================================================================================
mingw-python-pillow-8.1.2-6.fc34 (FEDORA-2022-ee15b98ea1)
MinGW Windows Python pillow library
--------------------------------------------------------------------------------
Update Information:
Backport fix for CVE-2022-24303.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Sandro Mani <manisandro(a)gmail.com> - 8.1.2-6
- Backport fix for CVE-2022-24303
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2052683 - CVE-2022-24303 mingw-python-pillow: python-pillow: temporary
directory with a space character allows removal of unrelated file after im.show() and
related actions [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2052683
--------------------------------------------------------------------------------
================================================================================
netatalk-3.1.13-1.fc34 (FEDORA-2022-833a04d004)
Open Source Apple Filing Protocol(AFP) File Server
--------------------------------------------------------------------------------
Update Information:
3.1.13 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 22 2022 Andrew Bauer <zonexpertconsulting(a)outlook.com> - 5:3.1.13-1
- 3.1.13 release
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-28
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 5:3.1.12-27
- Rebuilt with OpenSSL 3.0.0
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-26
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 5:3.1.12-25
- Perl 5.34 rebuild
* Wed May 19 2021 Michal Josef ��pa��ek <mspacek(a)redhat.com> - 5:3.1.12-24
- Rewrite deprecated perl dependency (IO::Socket::INET6)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2067083 - None
https://bugzilla.redhat.com/show_bug.cgi?id=2067083
--------------------------------------------------------------------------------
================================================================================
openjpeg2-2.4.0-4.fc34 (FEDORA-2022-2d112d4480)
C-Library for JPEG 2000
--------------------------------------------------------------------------------
Update Information:
Fix CVE-2022-1122.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Sandro Mani <manisandro(a)gmail.com> - 2.4.0-4
- Backport fix for CVE-2022-1122
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069370 - CVE-2022-1122 mingw-openjpeg2: openjpeg: segmentation fault in
opj2_decompress due to uninitialized pointer [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2069370
[ 2 ] Bug #2069371 - CVE-2022-1122 openjpeg2: openjpeg: segmentation fault in
opj2_decompress due to uninitialized pointer [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2069371
--------------------------------------------------------------------------------
================================================================================
plasma-wallpapers-dynamic-4.0.0~git20220328.d37f412-1.fc34 (FEDORA-2022-11cf15720f)
Dynamic wallpaper plugin for KDE Plasma
--------------------------------------------------------------------------------
Update Information:
Bump snapshot, fixes a crash when creating a preview ---- Initial package for
Fedora
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 I��aki ��car <iucar(a)fedoraproject.org> -
4.0.0~git20220328.d37f412-1
- Bump snapshot, fixes a crash when creating a preview
* Sun Mar 27 2022 Neal Gompa <ngompa(a)fedoraproject.org> -
4.0.0~git20220327.ca7b129-1
- Bump to snapshot version using AVIF instead HEIF
- Modernize spec
- Add checks for appstream metainfo and desktop files
* Wed Feb 9 2022 RPM Fusion Release Engineering <sergiomb(a)rpmfusion.org> - 3.3.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Aug 3 2021 RPM Fusion Release Engineering <leigh123linux(a)gmail.com> -
3.3.9-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Sat Jun 5 2021 I��aki ��car <iucar(a)fedoraproject.org> - 3.3.9-1
- Update to v3.3.9
* Sat Nov 14 2020 I��aki ��car <iucar(a)fedoraproject.org> - 3.3.5-1
- Initial packaging for Fedora
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068907 - Review Request: plasma-wallpapers-dynamic - Dynamic wallpaper
plugin for KDE Plasma
https://bugzilla.redhat.com/show_bug.cgi?id=2068907
--------------------------------------------------------------------------------
================================================================================
python-ast-monitor-0.1.2-1.fc34 (FEDORA-2022-06f5e8a14e)
AST-Monitor is a wearable Raspberry Pi computer for cyclists
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 1 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.1.2-1
- Initial package
--------------------------------------------------------------------------------
================================================================================
python-kiwisolver-1.4.1-1.fc34 (FEDORA-2022-9e90bbad54)
A fast implementation of the Cassowary constraint solver
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 1.4.1-1
- Update to latest version (#2068926)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068926 - python-kiwisolver-1.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2068926
--------------------------------------------------------------------------------
================================================================================
python-myrepos-utils-0.0.1.1-1.fc34 (FEDORA-2022-9fed8a33a0)
Additional utilities for myrepos
--------------------------------------------------------------------------------
Update Information:
Initial Fedora release of myrepos-utils
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 0.0.1.1-1
- Initial Fedora package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068623 - Review Request: python-myrepos-utils - Additional utilities for
myrepos
https://bugzilla.redhat.com/show_bug.cgi?id=2068623
--------------------------------------------------------------------------------
================================================================================
python-pillow-8.1.2-7.fc34 (FEDORA-2022-ee15b98ea1)
Python image processing library
--------------------------------------------------------------------------------
Update Information:
Backport fix for CVE-2022-24303.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Sandro Mani <manisandro(a)gmail.com> - 8.1.2-7
- Backport patch for CVE-2022-24303
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2052683 - CVE-2022-24303 mingw-python-pillow: python-pillow: temporary
directory with a space character allows removal of unrelated file after im.show() and
related actions [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2052683
--------------------------------------------------------------------------------
================================================================================
remmina-1.4.25-2.fc34 (FEDORA-2022-edba857107)
Remote Desktop Client
--------------------------------------------------------------------------------
Update Information:
Bugfix release. - Add patch: 0001_vnc_close_all_close_git_55e2324a.patch - Add
patch: 0002_rdp_possible_segv_git_3620efda.patch
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 1.4.25-2
- Add patch: 0001_vnc_close_all_close_git_55e2324a.patch
- Add patch: 0002_rdp_possible_segv_git_3620efda.patch
--------------------------------------------------------------------------------
================================================================================
rust-1.59.0-4.fc34 (FEDORA-2022-b584fae935)
The Rust Programming Language
--------------------------------------------------------------------------------
Update Information:
Fix wasm32-wasi's static archives.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 25 2022 Josh Stone <jistone(a)redhat.com> - 1.59.0-4
- Fix the archive index for wasm32-wasi's libc.a
* Fri Mar 4 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1.59.0-3
- Rebuild against the bootstrapped build
* Fri Mar 4 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1.59.0-2.1
- Bootstrapping for Fedora ELN
--------------------------------------------------------------------------------
================================================================================
rust-zram-generator-1.1.2-1.fc34 (FEDORA-2022-c7f28019a2)
Systemd unit generator for zram swap devices
--------------------------------------------------------------------------------
Update Information:
Minor bugfix update for the linked bug.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> 1.1.2-1
- Version 1.1.2
* Mon Mar 28 2022 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> 1.1.1-3
- Use correct path in Recommends (rhbz#2068983)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2037392 - zram generaor with writeback device - permission denied
https://bugzilla.redhat.com/show_bug.cgi?id=2037392
[ 2 ] Bug #2069090 - rust-zram-generator-1.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069090
--------------------------------------------------------------------------------
================================================================================
salt-3004.1-1.fc34 (FEDORA-2022-7ed0806d9e)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Update to CVE release 3004.1-1 for Python 3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Salt Project Packaging <saltproject-packaging(a)vmware.com> -
3004.1-1
- Update to CVE release 3004.1-1 for Python 3
* Tue Oct 19 2021 Salt Project Packaging <saltproject-packaging(a)vmware.com> -
3004-1
- Update to feature release 3004-1 for Python 3
--------------------------------------------------------------------------------
================================================================================
sdl-telnet-1.0.0-5.20220328gite0e2a91.fc34 (FEDORA-2022-805b4ac2aa)
Simple RFC-compliant TELNET implementation for SDL-Hercules-390
--------------------------------------------------------------------------------
Update Information:
Update summary and description to make it clear this is a fork
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> -
1.0.0-5.20220328gite0e2a91
- Update summary and description to make it clear this is a fork
- Update to e0e2a91 git snapshot
- Drop f32 logic and tidy up the specfile
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0.0-4.20210321git2aca101
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1.0.0-3.20210321git2aca101
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
solaar-1.1.2-1.fc34 (FEDORA-2022-756ff9dda0)
Device manager for a wide range of Logitech devices
--------------------------------------------------------------------------------
Update Information:
# 1.1.2 * Update documentation on supported devices and translations * Include
evdev as a dependency * Try to use uinput for fake input if XTest extension not
available * Add Nano receiver C542 for M190 mice * Broaden range of HID++
Bluetooth devices * Add setting to divert gestures * Rule editor can edit all
rule components * Configuation via solaar config takes effect in Solaar UI if it
is running * Add setting to disable Onboard Profiles and decouple from Polling
Rate setting * Add setting for PERSISTENT_REMAPPABLE_ACTION, common keyboard and
mouse cases only * Split Test rule condition into Test and TestBytes and support
in rule editor * Fix bug in speed-change setting * Support Backlight3 feature *
Ensure that settings are pushed in resume * Update German, Polish, and zh_CN
translations * Determine device number for direct-connected devices from
protocol * fix bug in add and delete button actions in rule editor * dispose of
no-op notifications quickly * add rule condition for checking device settings *
use local file for conversion from key names to keysyms * get keyboard group and
use to get correct keycodes (X11 only) * improve how rules work under Wayland *
add settings for M-Key LEDs and MR-Key LED * fix bug in unpacking M and MR key
notification * add G815 keyboard and MX518 mouse * add new special keys for
recent keyboards * track M and MR keys for use in rules * make sure that device
is online when searching for devices in solaar show * don't check for device
kind in dpi sliding setting * fix problem with devices that report 0 DPI *
handle missing divert-setting in action RW for settings * add id property
(unitId or serial) and don't use ? for unknown serial * fix contains for
NamedInts and eliminate use of has_element * check for xtest and disable
modifier checking if not available * improve determination of gesture
information * add Set rules to rule GUI * add gesture params to Set rules * hide
system tray when there are no devices to control * add G733 headset, G9 mouse,
G502 Hero mouse * Use greyscale solaar icon in tray when using symbolic icons *
Fix bugs in solaar config * Use classes for settings to hep with modularity *
Accept '~' and Toggle for toggling boolean settings in cli and rules * handle
errors when writing to devices * refactor config_panel.py to use classes for
widgets * add rules action to set Solaar settings * decrease amount of logging
at each debug level * don't stretch toggles in settings * use key structure for
key remapping setting * optimize ReprogrammableKey implementation * keep track
of settings that are absent from device * add G512 keyboard and G402 mouse *
reformat descriptors.py * use feature numbers for reprogrammable key versions *
don't use new_from_icon_set in menu as it is deprecated
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 27 2022 Dominik Mierzejewski <rpm(a)greysector.net> - 1.1.2-1
- update to 1.1.2 (#2068769)
- patch to lower evdev version requirement
- add explicit build dependency on setuptools
- sort build dependencies
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068769 - solaar-1.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2068769
--------------------------------------------------------------------------------
================================================================================
wayland-1.20.0-4.fc34 (FEDORA-2022-9d2bca3d15)
Wayland Compositor Infrastructure
--------------------------------------------------------------------------------
Update Information:
Close file descriptors not needed
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 21 2022 Olivier Fourdan <ofourdan(a)redhat.com> - 1.20.0-4
- Close file descriptors not needed
rhbz#2062030
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.20.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Sat Jan 8 2022 Miro Hron��ok <mhroncok(a)redhat.com> - 1.20.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Changes/LIBFFI34
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2062030 - Xwayland fails with "wl_display@1: error 1: invalid arguments
for wl_shm(a)6.create_pool"
https://bugzilla.redhat.com/show_bug.cgi?id=2062030
--------------------------------------------------------------------------------