The following Fedora 35 Security updates need testing:
Age URL
40
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c0f58bf07
mysql-connector-java-8.0.27-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-17a9cdcf98
quaternion-0.0.95.1-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c6f471ce0f
log4j-2.17.1-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-22594d9eb0
chromium-96.0.4664.110-3.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a7a558062e
kernel-5.15.12-200.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
33
https://bodhi.fedoraproject.org/updates/FEDORA-2021-12f6c46ad8 qemu-6.1.0-13.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-fd774f1eaf
libguestfs-1.46.2-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-86827209fd
v4l-utils-1.22.1-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a7a558062e
kernel-5.15.12-200.fc35
The following builds have been pushed to Fedora 35 updates-testing
golang-github-tdewolff-minify-2.9.26-1.fc35
gwenhywfar-5.8.1-1.fc35
jacoco-0.8.7-3.fc35
jmol-14.32.6-1.fc35
kalendar-0.4.0-1.fc35
magic-8.3.245-1.fc35
mediawiki-1.36.3-1.fc35
mesa-21.3.3-1.fc35
nwg-panel-0.5.3-1.fc35
openfst-1.8.1-1.fc35
python-pyphen-0.12.0-1.fc35
python-samloader-0-1.20211229git8203752.fc35
vdr-live-3.1.4-0.2.20211228git0fbd9b3.fc35
Details about builds:
================================================================================
golang-github-tdewolff-minify-2.9.26-1.fc35 (FEDORA-2021-20f77c99fe)
Go minifiers for web formats
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 30 2021 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 2.9.26-1
- Update to latest version (#2036224)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2036224 - golang-github-tdewolff-minify-2.9.26 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2036224
--------------------------------------------------------------------------------
================================================================================
gwenhywfar-5.8.1-1.fc35 (FEDORA-2021-b527d8d854)
A multi-platform helper library for other libraries
--------------------------------------------------------------------------------
Update Information:
5.8.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 30 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 5.8.1-1
- 5.8.1
* Tue Dec 28 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 5.8.0-1
- 5.8.0
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 5.6.0-3
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2036206 - gwenhywfar-5.8.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2036206
--------------------------------------------------------------------------------
================================================================================
jacoco-0.8.7-3.fc35 (FEDORA-2021-5f1c86ec99)
Java Code Coverage for Eclipse
--------------------------------------------------------------------------------
Update Information:
Changelog ``` * Wed Dec 22 2021 Didik Supriadi
<didiksupriadi41(a)fedoraproject.org> - 0.8.7-3 - Redefined properties defined
with beanshell-maven-plugin, which was removed - Add wrapper scripts for
jacococli ```
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 22 2021 Didik Supriadi <didiksupriadi41(a)fedoraproject.org> - 0.8.7-3
- Redefined properties defined with beanshell-maven-plugin, which was removed
- Add wrapper scripts for jacococli
--------------------------------------------------------------------------------
================================================================================
jmol-14.32.6-1.fc35 (FEDORA-2021-59b5b4ac1b)
Java viewer for chemical structures in 3D
--------------------------------------------------------------------------------
Update Information:
Changes in version 14.32.6: - Extensive changes and documentation for the
modelkit feature. See the documentation. - bug fix: (JavaScript only)
insignificant script processing error reported in JavaScript console - bug fix:
`show INCHI` broken in 14.32.5 - new feature: hack added for reading invalid CIF
files created by Materials Studio - Apache Log4J vulnerability checked (not
applicable) - bug fix: InChI for deutero compounds not working - bug fix: InChI
failure should show "?" not SMILES
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 29 2021 Jerry James <loganjerry(a)gmail.com> - 14.32.6-1
- Version 14.32.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2027743 - jmol-14.32.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2027743
--------------------------------------------------------------------------------
================================================================================
kalendar-0.4.0-1.fc35 (FEDORA-2021-475cc4c43d)
A calendar application using Akonadi to sync with external services
--------------------------------------------------------------------------------
Update Information:
Version 0.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 26 2021 Justin Zobel <justin(a)1707.io> - 0.4.0-1
- Verison bump to 0.4.0
--------------------------------------------------------------------------------
================================================================================
magic-8.3.245-1.fc35 (FEDORA-2021-7dcf9d7e89)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.3.245 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 30 2021 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.3.245-1
- 8.3.245
--------------------------------------------------------------------------------
================================================================================
mediawiki-1.36.3-1.fc35 (FEDORA-2021-bef1126908)
A wiki engine
--------------------------------------------------------------------------------
Update Information:
https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 29 2021 Michael Cronenworth <mike(a)cchtml.com> - 1.36.3-1
- Update to 1.36.3
-
https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2036080 - CVE-2021-45471 mediawiki: blocked IP addresses are allowed to edit
EntitySchema items [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2036080
[ 2 ] Bug #2036083 - CVE-2021-45472 mediawiki: XSS in Wikibase using formatter URL
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2036083
[ 3 ] Bug #2036088 - CVE-2021-45473 mediawiki: XSS on page information Wikibase central
description [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2036088
[ 4 ] Bug #2036090 - CVE-2021-45474 mediawiki: XSS in Special:ImportFile URL
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2036090
--------------------------------------------------------------------------------
================================================================================
mesa-21.3.3-1.fc35 (FEDORA-2021-1d89099e0a)
Mesa graphics libraries
--------------------------------------------------------------------------------
Update Information:
Update to 21.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 30 2021 Pete Walter <pwalter(a)fedoraproject.org> 21.3.3-1
- Update to 21.3.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2036141 - mesa-21.3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2036141
--------------------------------------------------------------------------------
================================================================================
nwg-panel-0.5.3-1.fc35 (FEDORA-2021-011516d057)
GTK3-based panel for sway window manager
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 30 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.5.3-1
- chore(update): 0.5.3
--------------------------------------------------------------------------------
================================================================================
openfst-1.8.1-1.fc35 (FEDORA-2021-046ab1798b)
Weighted finite-state transducer library
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 15 2021 W. Michael Petullo <mike(a)flyn.org> - 1.8.1-1
- New upstream version
--------------------------------------------------------------------------------
================================================================================
python-pyphen-0.12.0-1.fc35 (FEDORA-2021-1183cb54ff)
Pure Python module to hyphenate text
--------------------------------------------------------------------------------
Update Information:
update to 0.12.0, official Python 3.10 compatibility
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 30 2021 Felix Schwarz <fschwarz(a)fedoraproject.org> - 0.12.0-1
- update to 0.12.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2035917 - python-pyphen-0.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2035917
--------------------------------------------------------------------------------
================================================================================
python-samloader-0-1.20211229git8203752.fc35 (FEDORA-2021-2c1127f4f7)
Download Samsung firmware from official servers
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#2035504
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 29 2021 Davide Cavalca <dcavalca(a)fedoraproject.org> 0-1
- Initial import; Fixes: RHBZ#2035504
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2035504 - Review Request: python-samloader - Download Samsung firmware from
official servers
https://bugzilla.redhat.com/show_bug.cgi?id=2035504
--------------------------------------------------------------------------------
================================================================================
vdr-live-3.1.4-0.2.20211228git0fbd9b3.fc35 (FEDORA-2021-7040f1615d)
An interactive web interface with HTML5 live stream support for VDR
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for new VDR API version - Build compatibility to g++11 ---- Update
to 3.1.4-0.1.20211228git0fbd9b3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 30 2021 Martin Gansser <martinkg(a)fedoraproject.org> -
3.1.4-0.2.20211228git0fbd9b3
- Build compatibility to g++11
* Tue Dec 28 2021 Martin Gansser <martinkg(a)fedoraproject.org> -
3.1.4-0.1.20211228git0fbd9b3
- Replace obsolete pcre by pcre2
- Update to 3.1.4-0.1.20211228git0fbd9b3
--------------------------------------------------------------------------------