The following Fedora 35 Security updates need testing:
Age URL
81
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9
libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
73
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-db16b42897 gh-2.8.0-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3759ebabd2 git-2.35.3-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3a63897745
bettercap-2.28-9.fc35 chisel-1.7.7-2.fc35 commit-stream-0.1.2-6.fc35
containerd-1.6.2-2.fc35 doctl-1.73.0-2.fc35 gh-2.7.0-2.fc35 gobuster-3.1.0-2.fc35
golang-contrib-opencensus-resource-0.1.2-6.fc35 golang-gioui-0-7.20201225git18d4dbf.fc35
golang-github-appc-docker2aci-0.17.2-8.fc35 golang-github-appc-goaci-0.1.1-10.fc35
golang-github-appc-spec-0.8.11-13.fc35 golang-github-containerd-continuity-0.2.2-2.fc35
golang-github-containerd-stargz-snapshotter-0.7.0-4.fc35
golang-github-coredns-corefile-migration-1.0.11-5.fc35
golang-github-envoyproxy-protoc-gen-validate-0.4.1-5.fc35
golang-github-francoispqt-gojay-1.2.13-6.fc35 golang-github-gogo-googleapis-1.4.1-3.fc35
golang-github-gohugoio-testmodbuilder-0-0.9.20201030git72e1e0c.fc35
golang-github-google-slothfs-0-0.10.20200727git59c1163.fc35
golang-github-googleapis-gnostic-0.5.3-5.fc35
golang-github-googlecloudplatform-cloudsql-proxy-1.19.1-5.fc35 golang-github-grpc-e
cosystem-gateway-2-2.7.3-3.fc35 golang-github-haproxytech-client-native-2.5.3-2.fc35
golang-github-haproxytech-dataplaneapi-2.4.4-3.fc35
golang-github-instrumenta-kubeval-0.15.0-7.fc35 golang-github-intel-goresctrl-0.2.0-4.fc35
golang-github-oklog-0.3.2-9.20190701gitca7cdf5.fc35
golang-github-pact-foundation-1.5.1-5.fc35 golang-github-prometheus-2.32.1-4.fc35
golang-github-prometheus-alertmanager-0.23.0-8.fc35
golang-github-prometheus-node-exporter-1.3.1-7.fc35
golang-github-redteampentesting-monsoon-0.6.0-5.fc35
golang-github-spf13-cobra-1.4.0-2.fc35
golang-github-theupdateframework-notary-0.7.0-4.fc35
golang-github-xordataexchange-crypt-0.0.2-11.20190412gitb2862e3.fc35
golang-gopkg-src-d-git-4-4.13.1-7.fc35 golang-k8s-apiextensions-apiserver-1.22.0-5.fc35
golang-k8s-code-generator-1.22.0-3.fc35 golang-k8s-kube-aggregator-1.22.0-3.fc35
golang-k8s-sample-apiserver-1.22.0-4.fc35 golang-k8s-sample-controller-1.22.0-3.fc35
golang-mongodb-mongo-driver-1.4.5-5.fc35 golang-storj-drpc-0.0.
16-5.fc35 golang-x-perf-0-0.14.20210123gitbdcc622.fc35 gopass-1.13.1-2.fc35
grpcurl-1.8.6-2.fc35 onionscan-0.2-6.fc35 shellz-1.5.0-6.fc35 shhgit-0.2-6.fc35
snowcrash-0-0.6.20201119git49b99ad.fc35 xq-0.0.7-3.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fe84314a8e
stb-0^20210910gitaf1a5bc-0.2.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8cf0124add
ruby-3.0.4-152.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c87047f163
podman-3.4.7-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ad26447c98
epiphany-41.4-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-61f6ee6353 usd-21.11-11.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f6e24d96b6 esh-0.3.2-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bc606b86f4
CuraEngine-4.13.1-2.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0f14e2308e
chromium-100.0.4896.127-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
35
https://bodhi.fedoraproject.org/updates/FEDORA-2022-925ac7bfff
gnome-shell-41.5-1.fc35 mutter-41.5-1.fc35
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-59b61235bf
binutils-2.37-17.fc35
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-20c77a3dce
mtools-4.0.39-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-17ba61ca06
libguestfs-1.48.1-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c355d4e9b
fwupd-efi-1.3-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3759ebabd2 git-2.35.3-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fff31008f6
langtable-0.0.58-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fd04a43eb1 rtkit-0.11-30.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-15778e49e1
libhandy-1.4.1-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-193031a230
livecd-tools-29.0-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-54bb9337da
annobin-10.66-2.fc35 gcc-11.3.1-2.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-13c66e33b1 inih-55-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bdfcd4f5d3
libtpms-0.9.4-0.20220425gite4d68670e1.fc35.0
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0c44eb0df4
python-rpmautospec-0.2.6-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3e03a200b
freerdp-2.7.0-1.fc35
The following builds have been pushed to Fedora 35 updates-testing
gpxsee-10.7-1.fc35
jc-1.18.7-1.fc35
nbdkit-1.28.8-1.fc35
notmuch-0.36-1.fc35
oneVPL-2022.1.1-1.fc35
oneVPL-intel-gpu-22.4.0-1.fc35
perl-Perl-Critic-StricterSubs-0.06-1.fc35
python-google-auth-2.6.6-1.fc35
python-paramiko-2.10.4-1.fc35
recutils-1.9-1.fc35
variety-0.8.6-1.fc35
vdr-epg-daemon-1.2.3-1.fc35
virt-v2v-2.0.4-1.fc35
Details about builds:
================================================================================
gpxsee-10.7-1.fc35 (FEDORA-2022-18e0d45649)
GPS log file viewer and analyzer
--------------------------------------------------------------------------------
Update Information:
**News in version 10.7:** - Multiple IMG maps loading/rendering fixes **News
in version 10.6:** - Improved marine charts rendering **News in version
10.5:** - Improved handling of MBTiles maps with nonconsecutive zoom levels -
Fixed broken loading of some IMG maps - Added a basic IMG nautical charts style
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 25 2022 Nikola Forr�� <nforro(a)redhat.com> - 10.7-1
- Update to version 10.7
resolves: #2069152
* Tue Mar 22 2022 Jan Grulich <jgrulich(a)redhat.com> - 10.4-2
- Rebuild (qt5)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069152 - gpxsee-10.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069152
--------------------------------------------------------------------------------
================================================================================
jc-1.18.7-1.fc35 (FEDORA-2022-800d618f87)
Serialize the output of CLI tools and file-types to structured JSON
--------------------------------------------------------------------------------
Update Information:
Update to v1.18.7
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.18.7-1
- Update to v1.18.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2078666 - jc-1.18.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2078666
--------------------------------------------------------------------------------
================================================================================
nbdkit-1.28.8-1.fc35 (FEDORA-2022-369a1c2fe3)
NBD server
--------------------------------------------------------------------------------
Update Information:
New upstream stable branch version 1.28.8
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.28.8-1
- New upstream stable branch version 1.28.8
--------------------------------------------------------------------------------
================================================================================
notmuch-0.36-1.fc35 (FEDORA-2022-724cf61020)
System for indexing, searching, and tagging email
--------------------------------------------------------------------------------
Update Information:
rebase with upstream release 0.36 (bz #2075939)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 25 2022 Michael J Gruber <mjg(a)fedoraproject.org> 0.36-1
- rebase with upstream release 0.36 (bz #2075939)
* Sun Apr 17 2022 Michael J Gruber <mjg(a)fedoraproject.org> 0.36~rc1-1
- rebase with upstream release candidate 0.36~rc1 (bz #2075939)
* Fri Apr 15 2022 Michael J Gruber <mjg(a)fedoraproject.org> 0.36~rc0-1
- rebase with upstream release candidate 0.36~rc0 (bz #2075813)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2075939 - notmuch-0.36 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075939
--------------------------------------------------------------------------------
================================================================================
oneVPL-2022.1.1-1.fc35 (FEDORA-2022-4f38c86465)
oneAPI Video Processing Library
--------------------------------------------------------------------------------
Update Information:
Update oneVPL to 2022.1.1 and oneVPL-intel-gpu to 22.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Simone Caronni <negativo17(a)gmail.com> - 2022.1.1-1
- Update to 2022.1.1.
- Recommend implementations (at least one must be installed).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2075945 - oneVPL-2022.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075945
--------------------------------------------------------------------------------
================================================================================
oneVPL-intel-gpu-22.4.0-1.fc35 (FEDORA-2022-4f38c86465)
Intel oneVPL GPU Runtime
--------------------------------------------------------------------------------
Update Information:
Update oneVPL to 2022.1.1 and oneVPL-intel-gpu to 22.4.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Simone Caronni <negativo17(a)gmail.com> - 22.4.0-1
- Update to 22.4.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2075945 - oneVPL-2022.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075945
--------------------------------------------------------------------------------
================================================================================
perl-Perl-Critic-StricterSubs-0.06-1.fc35 (FEDORA-2022-da0f45d444)
Perl::Critic plugin for stricter subroutine checks
--------------------------------------------------------------------------------
Update Information:
This release recognizes disambiguated name package names and removes an
automatically loaded utf8 module from list of requires.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Petr Pisar <ppisar(a)redhat.com> - 0.06-1
- 0.06 bump
- Package the tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2078705 - perl-Perl-Critic-StricterSubs-0.06 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2078705
--------------------------------------------------------------------------------
================================================================================
python-google-auth-2.6.6-1.fc35 (FEDORA-2022-2a2b346b6d)
Google Auth Python Library
--------------------------------------------------------------------------------
Update Information:
Update python-google-auth to 2.6.6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 22 2022 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1:2.6.6-1
- Update to 2.6.6 (#2077788)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2077788 - python-google-auth-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2077788
--------------------------------------------------------------------------------
================================================================================
python-paramiko-2.10.4-1.fc35 (FEDORA-2022-9aebedc65c)
SSH2 protocol library for python
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release, with bug fixes relating to private key
comparisons and host key verification.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Paul Howarth <paul(a)city-fan.org> - 2.10.4-1
- Update to 2.10.4
- Update 'camelCase' method calls against the 'threading' module to be
'snake_case'; this and related tweaks should fix some deprecation warnings
under Python 3.10 (GH#1838, GH#1870, GH#2028)
- '~paramiko.pkey.PKey' instances' '__eq__' did not have the usual
safety
guard in place to ensure they were being compared to another 'PKey' object,
causing occasional spurious 'BadHostKeyException', among other things
(GH#1964, GH#2023, GH#2024)
- Servers offering certificate variants of hostkey algorithms (e.g.
'ssh-rsa-cert-v01(a)openssh.com') could not have their host keys verified by
Paramiko clients, as it only ever considered non-cert key types for that
part of connection handshaking (GH#2035)
* Mon Mar 21 2022 Paul Howarth <paul(a)city-fan.org> - 2.10.3-2
- Skip tests that would fail without SHA-1 signing support in backend, such as
on EL-9 (GH#2011)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2078861 - python-paramiko-2.10.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2078861
--------------------------------------------------------------------------------
================================================================================
recutils-1.9-1.fc35 (FEDORA-2022-4e6bd7ca62)
A set of tools to access GNU recfile databases
--------------------------------------------------------------------------------
Update Information:
- New upstream release (#2075962, #2047809, #2047807, #2047805, #2046941) - Use
%%gpgverify macro - Remove recutils-shared-lib-calls-exit.patch - Install rec-
mode.el from a separate source
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 25 2022 Daiki Ueno <dueno(a)redhat.com> - 1.9-1
- New upstream release (#2075962, #2047809, #2047807, #2047805, #2046941)
- Use %gpgverify macro
- Remove recutils-shared-lib-calls-exit.patch
- Install rec-mode.el from a separate source
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2046941 - recutils: FTBFS in Fedora rawhide/f36
https://bugzilla.redhat.com/show_bug.cgi?id=2046941
[ 2 ] Bug #2047805 - CVE-2021-46021 recutils: use-after-free in rec_record_destroy() at
rec-record.c may lead to DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2047805
[ 3 ] Bug #2047807 - CVE-2021-46022 recutils: use-after-free in rec_mset_elem_destroy()
at rec-mset.c may lead to DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2047807
[ 4 ] Bug #2047809 - CVE-2021-46019 recutils: untrusted pointer dereference in
rec_db_destroy() at rec-db.c may lead to DoS [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2047809
[ 5 ] Bug #2075962 - recutils-1.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2075962
--------------------------------------------------------------------------------
================================================================================
variety-0.8.6-1.fc35 (FEDORA-2022-6db39c7566)
Wallpaper changer that automatically downloads wallpapers
--------------------------------------------------------------------------------
Update Information:
Update to 0.8.6-1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Martin Gansser <martinkg(a)fedoraproject.org> - 0.8.6-1
- Update to 0.8.6
* Sat Mar 26 2022 Martin Gansser <martinkg(a)fedoraproject.org> - 0.8.5-8
- Add Add_Dark_Wallpaper_Support_for_Gnome42.patch
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
vdr-epg-daemon-1.2.3-1.fc35 (FEDORA-2022-f614478432)
A daemon to download EPG data from internet and manage it in a mysql database
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.3-1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.3-1
- Update to 1.2.3
* Fri Feb 4 2022 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.2-3
- Rebuilt for new VDR API version
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
virt-v2v-2.0.4-1.fc35 (FEDORA-2022-0d4ed4d8b0)
Convert a virtual machine to run on KVM
--------------------------------------------------------------------------------
Update Information:
New upstream stable branch version 2.0.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 26 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:2.0.4-1
- New upstream stable branch version 2.0.4
--------------------------------------------------------------------------------