The following Fedora 36 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a66124e04f
php-openpsa-universalfeedcreator-1.8.4.1-1.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-08022e9452 plib-1.8.5-30.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e6c09a89eb
plantuml-1.2022.5-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5df5dc8ec5
ignition-2.14.0-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-89bfefbe48
moodle-3.11.7-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1aa40056fc
rubygem-git-1.11.0-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bbb5ec21b2
libarchive-3.5.3-2.fc36
The following Fedora 36 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-14e4bfaa27
libnl3-3.6.0-3.fc36
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c0f800a74a
guestfs-tools-1.48.1-1.fc36
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-68b64ca300
libguestfs-1.48.2-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7d1fed0e6b
libretls-3.5.2-1.fc36 netcat-1.218-5.fc36 rpki-client-7.8-2.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-861b448569
ModemManager-1.18.8-1.fc36 libmbim-1.26.4-1.fc36 libqmi-1.30.6-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f06a827ea1
gnutls-3.7.5-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d5f61a1caa
webkit2gtk3-2.36.2-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-66b21e232f
clutter-gst3-3.0.27-9.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ae3d4f991 qemu-6.2.0-10.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bbb5ec21b2
libarchive-3.5.3-2.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-148223ef3b
selinux-policy-36.9-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d9971c4e47
ostree-2022.3-3.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7fe49a2290 glibc-2.35-9.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ac598ff28e
whois-5.5.13-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d4936254ad
kernel-5.17.9-300.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e0982871f1 zstd-1.5.2-2.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-4ecf3d29d3
annobin-10.73-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-34aa639cd4
pipewire-0.3.51-2.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6b143dffaf
langpacks-3.0-23.fc36
The following builds have been pushed to Fedora 36 updates-testing
NsCDE-2.1-1.fc36
arm-trusted-firmware-2.6-3.fc36
binutils-2.37-29.fc36
cfn-lint-0.60.1-1.fc36
fcft-3.1.2-1.fc36
golang-github-klauspost-compress-1.15.4-1.fc36
intel-undervolt-1.7-12.fc36
lagrange-1.13.5-1.fc36
matrix-synapse-1.59.1-1.fc36
ngspice-37-1.fc36
pcm-202205-1.fc36
perl-Module-Refresh-0.18-1.fc36
perl-Test-WWW-Mechanize-1.58-1.fc36
pstoedit-3.78-4.fc36
python-fido2-0.9.3-1.fc36
python-hatchling-1.1.0-1.fc36
python-molecule-3.6.1-1.fc36
python3.9-3.9.13-1.fc36
remmina-1.4.26-2.fc36
root-6.26.02-3.fc36
Details about builds:
================================================================================
NsCDE-2.1-1.fc36 (FEDORA-2022-c8cc862a8e)
Modern and functional CDE desktop based on FVWM
--------------------------------------------------------------------------------
Update Information:
Latest upstream release, see
https://github.com/NsCDE/NsCDE/releases/tag/2.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 19 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 2.1-1
- Update to 2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2036232 - NsCDE-2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2036232
[ 2 ] Bug #2083654 - NsCDE from repo not works but rpm from github works
https://bugzilla.redhat.com/show_bug.cgi?id=2083654
[ 3 ] Bug #2088326 - Non-responsive maintainer check for dcavalca
https://bugzilla.redhat.com/show_bug.cgi?id=2088326
--------------------------------------------------------------------------------
================================================================================
arm-trusted-firmware-2.6-3.fc36 (FEDORA-2022-d4c8bf6143)
ARM Trusted Firmware
--------------------------------------------------------------------------------
Update Information:
Fix FTB, fix shipping of some bl31s
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 16 2022 Peter Robinson <pbrobinson(a)fedoraproject.org> - 2.6-3
- Enable Allwinner H616 support
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2045205 - arm-trusted-firmware: FTBFS in Fedora rawhide/f36
https://bugzilla.redhat.com/show_bug.cgi?id=2045205
--------------------------------------------------------------------------------
================================================================================
binutils-2.37-29.fc36 (FEDORA-2022-9b7a421c73)
A GNU collection of binary utilities
--------------------------------------------------------------------------------
Update Information:
Add support for generating static PIE binaries for the s390x
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 19 2022 Nick Clifton <nickc(a)redhat.comn> - 2.37-29
- Add support for generating static PIE binaries for s390x. (#2088331)
* Thu May 19 2022 Yara Ahmad <yahmad(a)redhat.com> - 2.37-28
- Fix description of gold subpackage so that it does not include the Requires fields.
(#2082919)
--------------------------------------------------------------------------------
================================================================================
cfn-lint-0.60.1-1.fc36 (FEDORA-2022-d4a0f9044b)
CloudFormation Linter
--------------------------------------------------------------------------------
Update Information:
### v0.60.1 ###### CloudFormation Specifications - Update CloudFormation specs
to `72.0.0` (pull #[2272](https://github.com/aws-cloudformation/cfn-
lint/pull/2272)) ###### Fixes - Don't allow regex expressions that result in a
warning (pull #[2272](https://github.com/aws-cloudformation/cfn-lint/pull/2272))
---- ### v0.60.0 ###### Features - Move null checks from the parsing engine
into rules (pull #[2242](https://github.com/aws-cloudformation/cfn-
lint/pull/2242)) - Add rule [
E4002](https://github.com/aws-cloudformation/cfn-
python-lint/blob/main/docs/rules.md#E4002) to validate metadata config (pull
#[2242](https://github.com/aws-cloudformation/cfn-lint/pull/2242)) - Update rule
[
E2001](https://github.com/aws-cloudformation/cfn-python-
lint/blob/main/docs/rules.md#E2001) to error on null values (pull
#[2242](https://github.com/aws-cloudformation/cfn-lint/pull/2242)) - Update rule
[
E3012](https://github.com/aws-cloudformation/cfn-python-
lint/blob/main/docs/rules.md#E3012) to validate for null values in properties
(pull #[2242](https://github.com/aws-cloudformation/cfn-lint/pull/2242)) ######
CloudFormation Specifications - Update CloudFormation specs to `69.0.0` (pull
#[2261](https://github.com/aws-cloudformation/cfn-lint/pull/2261))
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.60.1-1
- Update to 0.60.1 (close RHBZ#2088569)
* Fri May 13 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.60.0-1
- Update to 0.60.0 (close RHBZ#2085999)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2085999 - cfn-lint-0.60.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2085999
[ 2 ] Bug #2088569 - cfn-lint-0.60.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2088569
--------------------------------------------------------------------------------
================================================================================
fcft-3.1.2-1.fc36 (FEDORA-2022-60e6efef13)
Simple library for font loading and glyph rasterization
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.2 (#2088509)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 3.1.2-1
- Update to 3.1.2 (#2088509)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2088509 - fcft-3.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2088509
--------------------------------------------------------------------------------
================================================================================
golang-github-klauspost-compress-1.15.4-1.fc36 (FEDORA-2022-f70d0b1e59)
Optimized compression packages
--------------------------------------------------------------------------------
Update Information:
* huff0: decompress directly into output by @WojciechMula in #577 * inflate:
Keep dict on stack #581 * zstd: Faster decoding memcopy in asm #583 * zstd: Fix
ignored crc #580 * zstd: Allow to ignore checksum checking by @WojciechMula #572
* s2: Fix incorrect seek for `io.SeekEnd` in #575 * zstd: Add x86-64 assembly
for decompression on streams and blocks. Contributed by @WojciechMula. Typically
2x faster. #528 #531 #545 #537 * zstd: Add options to `ZipDecompressor` and
fixes #539 * s2: Use sorted search for index #555 * Minimum version is Go 1.16,
added CI test on 1.18.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Dominik Mierzejewski <dominik(a)greysector.net> - 1.15.4-1
- update to 1.15.4 (resolves rhbz#2079020)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2079020 - golang-github-klauspost-compress-1.15.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2079020
--------------------------------------------------------------------------------
================================================================================
intel-undervolt-1.7-12.fc36 (FEDORA-2022-d7d9c9d314)
Intel CPU undervolting and throttling configuration tool
--------------------------------------------------------------------------------
Update Information:
build: Drop custom LTO flags override
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 1.7-12
- style: Minor Spec file improvements
* Fri May 20 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.7-9
- build: Drop custom LTO flags override
--------------------------------------------------------------------------------
================================================================================
lagrange-1.13.5-1.fc36 (FEDORA-2022-aba216f0e5)
A Beautiful Gemini Client
--------------------------------------------------------------------------------
Update Information:
## 1.13.5 - Parent navigation assumes directory URL is equivalent to index page
URL (e.g., "/path/" == "/path/index.gmi"): this now only applies to
Gemini URLs,
and checks for "index.gemini", too, as per Gemini Best Practices. - Fixed crash
when determining the name of a ZIP file from a URL. - Fixed misparsing of URL to
form the name of a downloaded file (%23 decoded too early). ## 1.13.4 -
Spartan: Fixed opening URLs in other apps via operating system handlers. -
Updated language strings.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 19 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 1.13.5-1
- Update to 1.13.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2084254 - lagrange-1.13.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2084254
--------------------------------------------------------------------------------
================================================================================
matrix-synapse-1.59.1-1.fc36 (FEDORA-2022-b732855834)
A Matrix reference homeserver written in Python using Twisted
--------------------------------------------------------------------------------
Update Information:
Update to v1.59.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 19 2022 Kai A. Hiller <V02460(a)gmail.com> - 1.59.1-1
- Update to v1.59.1
* Wed May 18 2022 Kai A. Hiller <V02460(a)gmail.com> - 1.59.0-1
- Update to v1.59.0
--------------------------------------------------------------------------------
================================================================================
ngspice-37-1.fc36 (FEDORA-2022-66eb496268)
A mixed level/signal circuit simulator
--------------------------------------------------------------------------------
Update Information:
New version 37 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 37-1
- Update to 37
--------------------------------------------------------------------------------
================================================================================
pcm-202205-1.fc36 (FEDORA-2022-638f0eaeac)
Processor Counter Monitor
--------------------------------------------------------------------------------
Update Information:
update to 202205 upstream version
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
perl-Module-Refresh-0.18-1.fc36 (FEDORA-2022-8b3e3330d8)
Refresh %INC files when updated on disk
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 0.18-1
- Update to 0.18.
- Modernize spec.
--------------------------------------------------------------------------------
================================================================================
perl-Test-WWW-Mechanize-1.58-1.fc36 (FEDORA-2022-0049bed1d7)
Testing-specific WWW::Mechanize subclass
--------------------------------------------------------------------------------
Update Information:
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 19 2022 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 1.58-1
- Update to 1.58.
--------------------------------------------------------------------------------
================================================================================
pstoedit-3.78-4.fc36 (FEDORA-2022-36ad9dc1a0)
Translates PostScript and PDF graphics into other vector formats
--------------------------------------------------------------------------------
Update Information:
- ImageMagick fix
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 S��rgio Basto <sergio(a)serjux.com> - 3.78-4
- ImageMagick is not intended to be on RHEL >= 8 (just on EPEL)
* Wed May 11 2022 S��rgio Basto <sergio(a)serjux.com> - 3.78-3
- Fix commit dfc84e9 but ImageMagick is now available on EPEL 8 and
EPEL 9
--------------------------------------------------------------------------------
================================================================================
python-fido2-0.9.3-1.fc36 (FEDORA-2022-875abe3962)
Functionality for FIDO 2.0, including USB device communication
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.3
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Orion Poplawski <orion(a)nwra.com> - 0.9.3-1
- Update to 0.9.3 (bz#2087023)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2087023 - Please update it to 0.9.3
https://bugzilla.redhat.com/show_bug.cgi?id=2087023
--------------------------------------------------------------------------------
================================================================================
python-hatchling-1.1.0-1.fc36 (FEDORA-2022-d045227683)
The build backend used by Hatch
--------------------------------------------------------------------------------
Update Information:
### [
1.1.0](https://github.com/pypa/hatch/releases/tag/hatchling-v1.1.0) -
2022-05-19 ***Added:*** - Add `uri` and `real` context string formatting
modifiers for file system paths ###
[
1.0.0](https://github.com/pypa/hatch/releases/tag/hatchling-v1.0.0) -
2022-05-17 ***Changed:*** - Drop support for Python 2 ***Added:*** - Improve
error messaging for invalid versions - Update project metadata to reflect
support for Python 3.11 ###
[
0.25.0](https://github.com/pypa/hatch/releases/tag/hatchling-v0.25.0) -
2022-05-15 ***Added:*** - Add `skip-excluded-dirs` build option - Allow build
data to add additional project dependencies for `wheel` and `sdist` build
targets - Add `force_include_editable` build data for the `wheel` build target -
Add `build_hooks` build data - Add support for Mercurial's `.hgignore` files
when using glob syntax - Update project metadata to reflect the adoption by PyPA
***Fixed:*** - Properly use underscores for the name of `force_include` build
data - No longer greedily skip excluded directories by default
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.1.0-1
- Update to 1.1.0 (close RHBZ#2088671)
* Wed May 18 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 1.0.0-1
- Update to 1.0.0 (close RHBZ#2087533)
* Mon May 16 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.25.0-1
- Update to 0.25.0 (close RHBZ#2086373)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2086373 - python-hatchling-0.25.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2086373
[ 2 ] Bug #2087533 - python-hatchling-1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2087533
[ 3 ] Bug #2088671 - python-hatchling-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2088671
--------------------------------------------------------------------------------
================================================================================
python-molecule-3.6.1-1.fc36 (FEDORA-2022-5a57ca7f96)
Molecule is designed to aid in the development and testing of Ansible roles
--------------------------------------------------------------------------------
Update Information:
update to version 3.6.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Chedi Toueiti <chedi.toueiti(a)gmail.com> 3.6.1-1
- update to version 3.6.1-1 (#2051469)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2051469 - python-molecule-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2051469
--------------------------------------------------------------------------------
================================================================================
python3.9-3.9.13-1.fc36 (FEDORA-2022-92030d1375)
Version 3.9 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Update to 3.9.13
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 3.9.13-1
- Update to 3.9.13
--------------------------------------------------------------------------------
================================================================================
remmina-1.4.26-2.fc36 (FEDORA-2022-c8a531f20b)
Remote Desktop Client
--------------------------------------------------------------------------------
Update Information:
Various minor changes. - Add some missing BuildRequires for calrity. -
Correctly disable spice plugin on EL9. ---- * Wed May 18 2022 Phil Wyett
<philip.wyett(a)kathenas.org> - 1.4.26-1 - New upstream version 1.4.26. - New
python plugin enabled. - Drop patches as no longer needed. - EL9 - Disable
avahi-ui and avahi-ui-gtk support. - Disable libappindicator support. -
Disable spice plugin. - Disable x2go plugin.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 19 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 1.4.26-2
- Add some missing BuildRequires for calrity.
- Correctly disable spice plugin on EL9.
* Wed May 18 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 1.4.26-1
- New upstream version 1.4.26.
- New python plugin enabled.
- Drop patches as no longer needed.
- EL9
- Disable avahi-ui and avahi-ui-gtk support.
- Disable libappindicator support.
- Disable spice plugin.
- Disable x2go plugin.
--------------------------------------------------------------------------------
================================================================================
root-6.26.02-3.fc36 (FEDORA-2022-0e2b41606a)
Numerical data analysis framework
--------------------------------------------------------------------------------
Update Information:
Rebuild for gcc 12.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.26.02-3
- Rebuild for gcc 12.1 (Fedora 36)
- Update the root-tmva-threads patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2085106 - root complains of "standard library mismatch"
https://bugzilla.redhat.com/show_bug.cgi?id=2085106
--------------------------------------------------------------------------------