The following Fedora 35 Security updates need testing:
Age URL
106
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9
libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
99
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3edad0ab6 pcre2-10.40-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fda9f1f7bd
plantuml-1.2022.5-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bcc0df5180 plib-1.8.5-30.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-393948cc9e
ignition-2.14.0-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-530fdc5202
moodle-3.11.7-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f09e0d8b0e
rubygem-git-1.11.0-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-79bdaa4fbc gdisk-1.0.9-2.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d37f9b1e8b
setup-2.13.10-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d5d6b61663 icu-69.1-6.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1d746fb606
dnf-plugins-core-4.2.0-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-767f37bebd
libdnf-0.67.0-2.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e0e85658f gdb-12.1-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e97f69b5b
librepo-1.14.3-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-063307d879
createrepo_c-0.20.0-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c04a2637f hexedit-1.6-1.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-74b5a95b5a
guestfs-tools-1.48.1-1.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3edad0ab6 pcre2-10.40-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5e6670a900
libretls-3.5.2-1.fc35 netcat-1.218-5.fc35 rpki-client-7.8-2.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0147faf370
linux-firmware-20220509-132.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c8f748ea90
librsvg2-2.52.9-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-83c75c8f72 rsync-3.2.4-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-21d7b52f14
gnutls-3.7.5-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d3c79f71e
osinfo-db-20220516-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e65347ed76
python-blivet-3.4.4-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a5af56609e
webkit2gtk3-2.36.2-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-925c18db47
ansible-packaging-1-5.fc35 redhat-rpm-config-201-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8d2c1dc353 glibc-2.34-34.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ef74097151
kernel-5.17.9-200.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-652849acba
anaconda-35.22.2-5.fc35 gtk3-3.24.34-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-174b57a550 zstd-1.5.2-2.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-eb6c837b39
annobin-10.73-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b7ab410b50
pipewire-0.3.51-2.fc35
The following builds have been pushed to Fedora 35 updates-testing
beaker-28.3-1.fc35
binutils-2.37-19.fc35
diffoscope-213-1.fc35
kitty-0.25.0-2.fc35
libguestfs-1.48.2-2.fc35
mingw-pcre2-10.40-1.fc35
natural-earth-map-data-5.1.2-1.fc35
qcad-3.27.6.0-1.fc35
rust-ubyte-0.10.2-1.fc35
Details about builds:
================================================================================
beaker-28.3-1.fc35 (FEDORA-2022-ab4c442a2f)
Full-stack software and hardware integration testing system
--------------------------------------------------------------------------------
Update Information:
Upstream update #2088909
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Martin Styk <mart.styk(a)gmail.com> - 28.3-1
- Update to 28.3 (#2088909)
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 28.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2088909 - beaker-28.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2088909
--------------------------------------------------------------------------------
================================================================================
binutils-2.37-19.fc35 (FEDORA-2022-ffad9aca7a)
A GNU collection of binary utilities
--------------------------------------------------------------------------------
Update Information:
Stop readelf and objdump from unnecessarily following links. ---- Add
support for generating static PIE binaries for the s390x
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Nick Clifton <nickc(a)redhat.comn> - 2.37-19
- Stop readelf and objdump from unnecessarily following links. (#2086863)
* Thu May 19 2022 Nick Clifton <nickc(a)redhat.comn> - 2.37-18
- Add support for generating static PIE binaries for s390x. (#2088331)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2086863 - readelf is trying to reach debuginfod remote server?
https://bugzilla.redhat.com/show_bug.cgi?id=2086863
--------------------------------------------------------------------------------
================================================================================
diffoscope-213-1.fc35 (FEDORA-2022-d8a3614c4c)
In-depth comparison of files, archives, and directories
--------------------------------------------------------------------------------
Update Information:
Latest upstream version, mostly bugfixes.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> 213-1
- Version 213
--------------------------------------------------------------------------------
================================================================================
kitty-0.25.0-2.fc35 (FEDORA-2022-cbafc64d38)
Cross-platform, fast, feature full, GPU based terminal emulator
--------------------------------------------------------------------------------
Update Information:
Remain script `askpass.py` executable
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Yaroslav Sidlovsky <zawertun(a)gmail.com> - 0.25.0-2
- Remain script `askpass.py` executable
- Fixes rhbz#2088828
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2088828 - askpass.py in ssh kitten not executable
https://bugzilla.redhat.com/show_bug.cgi?id=2088828
--------------------------------------------------------------------------------
================================================================================
libguestfs-1.48.2-2.fc35 (FEDORA-2022-8534a4e671)
Access and modify virtual machine disk images
--------------------------------------------------------------------------------
Update Information:
Add upstream patch which helps debugging appliance generation. ---- New
upstream stable branch version 1.48.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.48.2-2
- Add upstream patch which helps debugging appliance generation.
* Thu May 12 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.48.2-1
- New upstream stable branch version 1.48.2
--------------------------------------------------------------------------------
================================================================================
mingw-pcre2-10.40-1.fc35 (FEDORA-2022-19f4c34184)
MinGW Windows pcre2 library
--------------------------------------------------------------------------------
Update Information:
Update to pcre2-10.40, see
https://github.com/PCRE2Project/pcre2/blob/pcre2-10.40/NEWS for details.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 1 2022 Sandro Mani <manisandro(a)gmail.com> - 10.40-1
- Update to 10.40
* Fri Mar 25 2022 Sandro Mani <manisandro(a)gmail.com> - 10.39-3
- Rebuild with mingw-gcc-12
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.39-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Nov 5 2021 Sandro Mani <manisandro(a)gmail.com> - 10.39-1
- Update to 10.39
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2081957 - CVE-2022-1586 mingw-pcre2: pcre2: Out-of-bounds read in
compile_xclass_matchingpath in pcre2_jit_compile.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2081957
[ 2 ] Bug #2081976 - CVE-2022-1587 mingw-pcre2: pcre2: Out-of-bounds read in
get_recurse_data_length in pcre2_jit_compile.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2081976
--------------------------------------------------------------------------------
================================================================================
natural-earth-map-data-5.1.2-1.fc35 (FEDORA-2022-381ccf04db)
Free vector and raster map data at 1:10m, 1:50m, and 1:110m scales
--------------------------------------------------------------------------------
Update Information:
Update to latest version: 1. Adds support for alternate points of view in
admin-0 related themes with `fclass_*` properties (like `fclass_iso`).
2. Provides easy alternate download of ne_10m_admin_0_countries themes
preassembled for the 31 different viewpoints, like
"ne_10m_admin_0_countries_arg" for Argentina. 3. Expands the name
localization added in v4.1 to 26 languages (up from 21). 4. Renames admin-0
Macedonia features to North Macedonia to keep up with current events. 5.
Renames admin-0 Swaziland features to Eswatini to keep up with current events.
6. Add top-level-country (TLC) point-of-view (POV) with shapefile, add
shapefile export for ISO point-of-view
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 5.1.2-1
- Update to latest version
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
qcad-3.27.6.0-1.fc35 (FEDORA-2022-7aae4408b2)
Powerful 2D CAD system
--------------------------------------------------------------------------------
Update Information:
- Release 3.27.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Antonio Trande <sagitter(a)fedoraproject.org> - 3.27.6.0-1
- Release 3.27.6.0
* Tue May 10 2022 Antonio Trande <sagitter(a)fedoraproject.org> - 3.27.5.0-1
- Release 3.27.5.0
--------------------------------------------------------------------------------
================================================================================
rust-ubyte-0.10.2-1.fc35 (FEDORA-2022-43f6249e4e)
Rust no_std library for byte units
--------------------------------------------------------------------------------
Update Information:
update to 0.10.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Jan Baudisch <jan(a)baudisch.xyz> 0.10.2-1
- update to 0.10.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2086997 - rust-ubyte-0.10.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2086997
--------------------------------------------------------------------------------