The following Fedora 36 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b50023a180 xen-4.16.1-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e819bd191f gerbv-2.8.2-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3826c8f549
moby-engine-20.10.14-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-930b54aa84
plantuml-1.2022.4-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e99ae504f5 git-2.36.0-1.fc36
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d1452fd421
python-fastapi-0.75.2-1.fc36
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a7ca6ee0cf
ruby-3.1.2-164.fc36
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c8f6a39cf6
stb-0^20210910gitaf1a5bc-0.2.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-88690c6188
epiphany-42.2-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c87bba6546
blender-3.1.2-3.fc36 usd-22.03-8.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4e644865f esh-0.3.2-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0125d9cd29
CuraEngine-4.13.1-2.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e22f1a8c17
zxing-cpp-1.2.0-4.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-59297c8fcd
chromium-100.0.4896.127-1.fc36
The following Fedora 36 Critical Path updates have yet to be approved:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-43488e303c
binutils-2.37-27.fc36
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-50842594a4
mtools-4.0.39-1.fc36
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b50023a180 xen-4.16.1-1.fc36
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1c2b9ed1ee
libguestfs-1.48.1-1.fc36
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1c5b629da0
libnma-1.8.38-1.fc36
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8c9270d57e
NetworkManager-1.37.91-1.fc36
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf82f181ea
fwupd-efi-1.3-1.fc36
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-14e4bfaa27
libnl3-3.6.0-1.fc36
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-42003bf3a9
libsolv-0.7.22-1.fc36
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e99ae504f5 git-2.36.0-1.fc36
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e90643ce61
redhat-rpm-config-217-1.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c616f153bd
langtable-0.0.58-1.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5d880c3988
thunderbird-91.8.0-2.fc36
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d283248368 rtkit-0.11-30.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-794d75ddf5
livecd-tools-29.0-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2ee3305d27 inih-55-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e1c4362e53
libtpms-0.9.4-1.20220425gite4d68670e1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-79ac607029
gnupg2-2.3.6-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e8145fb45
python-rpmautospec-0.2.6-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-35dd99034a
tzdata-2022a-2.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dc48a89918
freerdp-2.7.0-1.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-20a0015416 mesa-22.0.2-2.fc36
The following builds have been pushed to Fedora 36 updates-testing
gpxsee-10.7-1.fc36
jc-1.18.7-1.fc36
nbdkit-1.30.4-1.fc36
oneVPL-2022.1.1-1.fc36
oneVPL-intel-gpu-22.4.0-1.fc36
opensips-3.2.6-1.fc36
perl-DBD-MariaDB-1.22-1.fc36
perl-Perl-Critic-StricterSubs-0.06-1.fc36
perl-local-lib-2.000029-1.fc36
python-sport-activities-features-0.2.15-1.fc36
recutils-1.9-1.fc36
variety-0.8.6-1.fc36
virt-v2v-2.0.4-1.fc36
Details about builds:
================================================================================
gpxsee-10.7-1.fc36 (FEDORA-2022-6bd0d00d9b)
GPS log file viewer and analyzer
--------------------------------------------------------------------------------
Update Information:
**News in version 10.7:** - Multiple IMG maps loading/rendering fixes **News
in version 10.6:** - Improved marine charts rendering **News in version
10.5:** - Improved handling of MBTiles maps with nonconsecutive zoom levels -
Fixed broken loading of some IMG maps - Added a basic IMG nautical charts style
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 25 2022 Nikola Forr�� <nforro(a)redhat.com> - 10.7-1
- Update to version 10.7
resolves: #2069152
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069152 - gpxsee-10.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069152
--------------------------------------------------------------------------------
================================================================================
jc-1.18.7-1.fc36 (FEDORA-2022-145ba02b40)
Serialize the output of CLI tools and file-types to structured JSON
--------------------------------------------------------------------------------
Update Information:
Update to v1.18.7
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.18.7-1
- Update to v1.18.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2078666 - jc-1.18.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2078666
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.30.4-1.fc36 (FEDORA-2022-33a3d1d3dd)
NBD server
--------------------------------------------------------------------------------
Update Information:
New stable version 1.30.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.30.4-1
- New stable version 1.30.4
* Sat Apr 16 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.30.3-1
- New stable version 1.30.3
- Remove dependency on ssh-keygen which was never really used.
* Sat Apr 2 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.30.2-1
- New stable version 1.30.2
--------------------------------------------------------------------------------
================================================================================
oneVPL-2022.1.1-1.fc36 (FEDORA-2022-0143d72580)
oneAPI Video Processing Library
--------------------------------------------------------------------------------
Update Information:
Update oneVPL to 2022.1.1 and oneVPL-intel-gpu to 22.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Simone Caronni <negativo17(a)gmail.com> - 2022.1.1-1
- Update to 2022.1.1.
- Recommend implementations (at least one must be installed).
* Sat Mar 19 2022 Simone Caronni <negativo17(a)gmail.com> - 2022.1.0-1
- Update to 2022.1.0.
* Sun Mar 13 2022 Simone Caronni <negativo17(a)gmail.com> - 2022.0.6-1
- Update to 2022.0.6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2075945 - oneVPL-2022.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075945
--------------------------------------------------------------------------------
================================================================================
oneVPL-intel-gpu-22.4.0-1.fc36 (FEDORA-2022-0143d72580)
Intel oneVPL GPU Runtime
--------------------------------------------------------------------------------
Update Information:
Update oneVPL to 2022.1.1 and oneVPL-intel-gpu to 22.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Simone Caronni <negativo17(a)gmail.com> - 22.4.0-1
- Update to 22.4.0.
* Wed Mar 30 2022 Simone Caronni <negativo17(a)gmail.com> - 22.3.1-2
- Disable AV1 encode/decode where not supported.
- Bump libva requirement (2.12+).
* Sat Mar 19 2022 Simone Caronni <negativo17(a)gmail.com> - 22.3.1-1
- Update to 22.3.1.
* Sun Mar 13 2022 Simone Caronni <negativo17(a)gmail.com> - 22.2.2-1
- Update to 22.2.2.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2075945 - oneVPL-2022.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075945
--------------------------------------------------------------------------------
================================================================================
opensips-3.2.6-1.fc36 (FEDORA-2022-0fcd8beb95)
Open Source SIP Server
--------------------------------------------------------------------------------
Update Information:
OpenSIPS ver. 3.2.6 ---- OpenSIPS ver. 3.1.9
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Peter Lemenkov <lemenkov(a)gmail.com> - 3.2.6-1
- Ver. 3.2.6
- New modules: aaa_diameter, event_kafka, mi_script, prometheus, proto_bins, rtp_relay,
tls_openssl
* Mon Apr 25 2022 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.9-1
- Ver. 3.1.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965629 - opensips-3.2.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1965629
[ 2 ] Bug #1976058 - opensips tmpfiles.d below legacy directory
https://bugzilla.redhat.com/show_bug.cgi?id=1976058
--------------------------------------------------------------------------------
================================================================================
perl-DBD-MariaDB-1.22-1.fc36 (FEDORA-2022-cff57027a5)
MariaDB and MySQL driver for the Perl5 Database Interface (DBI)
--------------------------------------------------------------------------------
Update Information:
1.22 2022-04-22 - Disable usage of libmysqld.a from MySQL 8.x series - Do not
export driver private C functions - Fix compatibility with new MariaDB client
and server versions
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.22-1
- 1.22 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2077704 - perl-DBD-MariaDB-1.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077704
--------------------------------------------------------------------------------
================================================================================
perl-Perl-Critic-StricterSubs-0.06-1.fc36 (FEDORA-2022-901d774743)
Perl::Critic plugin for stricter subroutine checks
--------------------------------------------------------------------------------
Update Information:
This release recognizes disambiguated name package names and removes an
automatically loaded utf8 module from list of requires.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Petr Pisar <ppisar(a)redhat.com> - 0.06-1
- 0.06 bump
- Package the tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2078705 - perl-Perl-Critic-StricterSubs-0.06 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2078705
--------------------------------------------------------------------------------
================================================================================
perl-local-lib-2.000029-1.fc36 (FEDORA-2022-dd1c524538)
Create and use a local lib/ for perl modules
--------------------------------------------------------------------------------
Update Information:
2.000029 - fix taint protection code to delete environment variables rather than
leaving them as an empty string. - fix author test for CPAN.pm's bootstrapping
process to work with new versions
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 25 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 2.000029-1
- 2.000029 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2077027 - perl-local-lib-2.000029 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077027
--------------------------------------------------------------------------------
================================================================================
python-sport-activities-features-0.2.15-1.fc36 (FEDORA-2022-94717ceffd)
A toolbox for extracting features from sport activity files
--------------------------------------------------------------------------------
Update Information:
New release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.2.15-1
- Update to the latest upstream's release
--------------------------------------------------------------------------------
================================================================================
recutils-1.9-1.fc36 (FEDORA-2022-17787e290f)
A set of tools to access GNU recfile databases
--------------------------------------------------------------------------------
Update Information:
- New upstream release (#2075962, #2047809, #2047807, #2047805, #2046941) - Use
%%gpgverify macro - Remove recutils-shared-lib-calls-exit.patch - Install rec-
mode.el from a separate source
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 25 2022 Daiki Ueno <dueno(a)redhat.com> - 1.9-1
- New upstream release (#2075962, #2047809, #2047807, #2047805, #2046941)
- Use %gpgverify macro
- Remove recutils-shared-lib-calls-exit.patch
- Install rec-mode.el from a separate source
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2046941 - recutils: FTBFS in Fedora rawhide/f36
https://bugzilla.redhat.com/show_bug.cgi?id=2046941
[ 2 ] Bug #2047805 - CVE-2021-46021 recutils: use-after-free in rec_record_destroy() at
rec-record.c may lead to DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2047805
[ 3 ] Bug #2047807 - CVE-2021-46022 recutils: use-after-free in rec_mset_elem_destroy()
at rec-mset.c may lead to DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2047807
[ 4 ] Bug #2047809 - CVE-2021-46019 recutils: untrusted pointer dereference in
rec_db_destroy() at rec-db.c may lead to DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2047809
[ 5 ] Bug #2075962 - recutils-1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075962
--------------------------------------------------------------------------------
================================================================================
variety-0.8.6-1.fc36 (FEDORA-2022-7e060e5c3c)
Wallpaper changer that automatically downloads wallpapers
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.6-1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Martin Gansser <martinkg(a)fedoraproject.org> - 0.8.6-1
- Update to 0.8.6
--------------------------------------------------------------------------------
================================================================================
virt-v2v-2.0.4-1.fc36 (FEDORA-2022-dd6707b388)
Convert a virtual machine to run on KVM
--------------------------------------------------------------------------------
Update Information:
New upstream stable branch version 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:2.0.4-1
- New upstream stable branch version 2.0.4
* Tue Apr 12 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:2.0.3-1
- New upstream stable branch version 2.0.3
* Mon Apr 4 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:2.0.2-1
- New upstream stable branch version 2.0.2
--------------------------------------------------------------------------------