The following Fedora 35 Security updates need testing:
Age URL
24
https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c0f58bf07
mysql-connector-java-8.0.27-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2ef35beebf
golang-1.16.11-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a943b03c3f
dr_libs-0-0.7.20211208git49de65c.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-75d5f6c531 ldns-1.8.1-3.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6bc3fe7129
podman-3.4.4-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-f454d8494c
rust-libsqlite3-sys-0.23.2-1.fc35 rust-rusqlite-0.26.3-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0d4b58060d
lapack-3.10.0-4.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-16b848fe79
libolm-3.2.8-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2021-017d19088b
log4j-2.16.0-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
17
https://bodhi.fedoraproject.org/updates/FEDORA-2021-12f6c46ad8 qemu-6.1.0-13.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2021-048f09f74b
guestfs-tools-1.47.3-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2021-80857aeda5
gnome-remote-desktop-41.2-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-252269b598
seabios-1.15.0-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-6b19f7c010
libguestfs-1.46.1-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-86458f8fe1
python3-docs-3.10.1-1.fc35 python3.10-3.10.1-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2021-0fbfd2a9f4
memstrack-0.2.4-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2021-26a84cde8f exo-4.16.3-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1273607c1e
ca-certificates-2021.2.52-1.0.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-c7e97fee34
libvirt-7.6.0-4.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-14ce1d6eba fwupd-1.7.3-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2021-a85e8b6ef3
libinput-1.19.3-1.fc35
The following builds have been pushed to Fedora 35 updates-testing
ansible-collection-community-general-3.8.3-1.fc35
bottles-2021.12.14-1.fc35
elementary-calculator-1.7.2-1.fc35
elementary-camera-6.0.3-1.fc35
elementary-files-6.1.0-1.fc35
elementary-screenshot-tool-6.0.2-1.fc35
elementary-terminal-6.0.1-1.fc35
gap-pkg-float-1.0.2-1.fc35
keepalived-2.2.4-2.fc35
kernel-5.15.8-200.fc35
lorax-35.9-1.fc35
nwg-panel-0.5.2-1.fc35
oscillatord-1.2.12-1.fc35
phan-5.3.1-1.fc35
php-pear-PHP-CodeSniffer-3.6.2-1.fc35
pipewire-0.3.41-1.fc35
python-dotmap-1.3.26-1.fc35
python-gmpy2-2.1.1-1.fc35
rust-ignition-config-0.2.0-1.fc35
rust-rudo-0.9.0-3.fc35
rust-systemd-0.10.0-1.fc35
secvarctl-0.3-1.fc35
tang-11-1.fc35
Details about builds:
================================================================================
ansible-collection-community-general-3.8.3-1.fc35 (FEDORA-2021-566e1d1eb6)
Modules and plugins supported by Ansible community
--------------------------------------------------------------------------------
Update Information:
Changelog:
https://github.com/ansible-
collections/community.general/blob/stable-3/CHANGELOG.rst#v3-8-3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Maxwell G <gotmax(a)e.email> - 3.8.3-1
- Update to 3.8.3.
--------------------------------------------------------------------------------
================================================================================
bottles-2021.12.14-1.fc35 (FEDORA-2021-c374f61906)
Easily manage Wine prefix in a new way
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 2021.12.14-1
- chore(update): 2021.12.14
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2027111 - bottles-2021.12.14-treviso-1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2027111
--------------------------------------------------------------------------------
================================================================================
elementary-calculator-1.7.2-1.fc35 (FEDORA-2021-1f413415b9)
Calculator app designed for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 1.7.2. Release notes:
https://github.com/elementary/calculator/releases/tag/1.7.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 1.7.2-1
- Update to version 1.7.2
--------------------------------------------------------------------------------
================================================================================
elementary-camera-6.0.3-1.fc35 (FEDORA-2021-c90af0556d)
Camera app designed for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 6.0.3. Release notes:
https://github.com/elementary/camera/releases/tag/6.0.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 6.0.3-1
- Update to version 6.0.3
--------------------------------------------------------------------------------
================================================================================
elementary-files-6.1.0-1.fc35 (FEDORA-2021-f31e096e9c)
File manager from elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 6.1.0. Release notes:
https://github.com/elementary/files/releases/tag/6.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 6.1.0-1
- Update to version 6.1.0; Fixes RHBZ#2027565
--------------------------------------------------------------------------------
================================================================================
elementary-screenshot-tool-6.0.2-1.fc35 (FEDORA-2021-d43529366c)
Screenshot tool designed for elementary
--------------------------------------------------------------------------------
Update Information:
Update to version 6.0.2. Release notes:
https://github.com/elementary/screenshot/releases/tag/6.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 6.0.2-1
- Update to version 6.0.2
--------------------------------------------------------------------------------
================================================================================
elementary-terminal-6.0.1-1.fc35 (FEDORA-2021-c6f1a01ea6)
The terminal of the 21st century
--------------------------------------------------------------------------------
Update Information:
Update to version 6.0.1. Release notes:
https://github.com/elementary/terminal/releases/tag/6.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Fabio Valentini <decathorpe(a)gmail.com> 6.0.1-1
- Update to version 6.0.1
--------------------------------------------------------------------------------
================================================================================
gap-pkg-float-1.0.2-1.fc35 (FEDORA-2021-5a2fa5f6da)
GAP access to mpfr, mpfi, mpc, fplll and cxsc
--------------------------------------------------------------------------------
Update Information:
Changes in version 1.0.2: - Fix build issues with cxsc support - Clean up the
C/C++ gymkhana in `mp_poly` - Remove `AX_CC_MAXOPT` from `configure.ac`
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Jerry James <loganjerry(a)gmail.com> - 1.0.2-1
- Version 1.0.2
- Drop upstreamed -cxsc patch
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2032591 - gap-pkg-float-1.0.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2032591
--------------------------------------------------------------------------------
================================================================================
keepalived-2.2.4-2.fc35 (FEDORA-2021-0cda131052)
High Availability monitor built upon LVS, VRRP and service pollers
--------------------------------------------------------------------------------
Update Information:
Fix dbus policy (#2027158, CVE-2021-44225)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Ryan O'Hara <rohara(a)redhat.com> - 2.2.4-2
- Fix dbus policy (#2027158, CVE-2021-44225)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2027158 - CVE-2021-44225 keepalived: dbus access control bypass [fedora-34]
https://bugzilla.redhat.com/show_bug.cgi?id=2027158
--------------------------------------------------------------------------------
================================================================================
kernel-5.15.8-200.fc35 (FEDORA-2021-a9562436ab)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.15.8 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.15-0]
- Enable CONFIG_VFIO_NOIOMMU for Fedora (Justin M. Forbes)
--------------------------------------------------------------------------------
================================================================================
lorax-35.9-1.fc35 (FEDORA-2021-162860bafa)
Tool for creating the anaconda install images
--------------------------------------------------------------------------------
Update Information:
Update pipewire to 0.3.41. Changes in pipewire's dependencies required some
updates to lorax's installer root cleanup code to keep installer image build
working.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Brian C. Lane <bcl(a)redhat.com> 35.9-1
- cleanup: remove binaries from lilv (awilliam(a)redhat.com)
- runtime-cleanup: remove pipewire-related packages (awilliam(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
nwg-panel-0.5.2-1.fc35 (FEDORA-2021-93a940809b)
GTK3-based panel for sway window manager
--------------------------------------------------------------------------------
Update Information:
Update to latest version ---- Update to 0.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.5.2-1
- chore(update): 0.5.2
* Mon Dec 13 2021 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.5.1-1
- chore(update): 0.5.1
--------------------------------------------------------------------------------
================================================================================
oscillatord-1.2.12-1.fc35 (FEDORA-2021-db8beccef6)
Daemon for disciplining an oscillator
--------------------------------------------------------------------------------
Update Information:
Update oscillatord to 1.2.12 Changelog: ``` * sa3x: fix work with pps device *
GNSS: add satellites count information * Monitoring: export satellites count
statistics * Test: - Update ART Integration test suite: Checks if device
exposed by kernel works well + test discplining for 10 minutes straight -
Update comment of monitoring client test ```
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Alexander Bulimov <abulimov(a)fedoraproject.org> 1.2.12-1
- Update to v1.2.12
--------------------------------------------------------------------------------
================================================================================
phan-5.3.1-1.fc35 (FEDORA-2021-7c36fe2fa3)
A static analyzer for PHP
--------------------------------------------------------------------------------
Update Information:
Dec 14 2021, **Phan 5.3.1** New Features(Analysis): - Emit
`PhanDeprecatedPartiallySupportedCallable` for functions that work with
`call_user_func($expr)` but not `$expr()`. The literal strings `'self'`,
`'parent'`, and `'static'` in `'self::methodName'` or
`['self', 'methodName']`
in callables were deprecated in PHP 8.2. - Emit
`PhanDeprecatedPartiallySupportedCallableAlternateScope` for uses of callables
such as `[new SubClass(), 'Base::method']` specifying an alternate scope. - Make
pass-by-ref vars result in a merged union type, not an overwritten one. (#4602)
Plugins: - Update format string message for `PhanPluginUnknownClosureParamType`
and `PhanPluginUnknownFunctionParamType`. Bug fixes: - Avoid crashing when
running in PHP 8.2+ after php 8.2 deprecated dynamic(undeclared) properties on
classes without `#[AllowDynamicProperties]`.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Remi Collet <remi(a)remirepo.net> - 5.3.1-1
- update to 5.3.1
- raise dependency on ast 1.0.16
- raise dependency on sabre/event 5.1.3
--------------------------------------------------------------------------------
================================================================================
php-pear-PHP-CodeSniffer-3.6.2-1.fc35 (FEDORA-2021-6b40b3d61c)
PHP coding standards enforcement tool
--------------------------------------------------------------------------------
Update Information:
**Version 3.6.2** Changelog: - Processing large code bases that use tab
indenting inside comments and strings will now be faster - Thanks to Thiemo
Kreuz for the patch - Fixed bug #3388 : phpcs does not work when run from WSL
drives - Thanks to Juliette Reinders Folmer and Graham Wharton for the patch
- Fixed bug #3422 : Squiz.WhiteSpace.ScopeClosingBrace fixer removes HTML
content when fixing closing brace alignment - Thanks to Juliette Reinders
Folmer for the patch - Fixed bug #3437 : PSR12 does not forbid blank lines at
the start of the class body - Added new PSR12.Classes.OpeningBraceSpace
sniff to enforce this - Fixed bug #3440 : Squiz.WhiteSpace.MemberVarSpacing
false positives when attributes used without docblock - Thanks to Vadim
Borodavko for the patch - Fixed bug #3448 : PHP 8.1 deprecation notice while
generating running time value - Thanks to Juliette Reinders Folmer and Andy
Postnikov for the patch - Fixed bug #3456 :
PSR12.Classes.ClassInstantiation.MissingParentheses false positive using
attributes on anonymous class - Thanks to Juliette Reinders Folmer for the
patch - Fixed bug #3460 : Generic.Formatting.MultipleStatementAlignment false
positive on closure with parameters - Thanks to Juliette Reinders Folmer for
the patch - Fixed bug #3468 : do/while loops are double-counted in
Generic.Metrics.CyclomaticComplexity - Thanks to Mark Baker for the patch -
Fixed bug #3469 : Ternary Operator and Null Coalescing Operator are not counted
in Generic.Metrics.CyclomaticComplexity - Thanks to Mark Baker for the patch
- Fixed bug #3472 : PHP 8 match() expression is not counted in
Generic.Metrics.CyclomaticComplexity - Thanks to Mark Baker for the patch
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Remi Collet <remi(a)remirepo.net> - 3.6.2-1
- update to 3.6.2
--------------------------------------------------------------------------------
================================================================================
pipewire-0.3.41-1.fc35 (FEDORA-2021-162860bafa)
Media Sharing Server
--------------------------------------------------------------------------------
Update Information:
Update pipewire to 0.3.41. Changes in pipewire's dependencies required some
updates to lorax's installer root cleanup code to keep installer image build
working.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Wim Taymans <wtaymans(a)redhat.com> - 0.3.41-1
- Update version to 0.3.41
--------------------------------------------------------------------------------
================================================================================
python-dotmap-1.3.26-1.fc35 (FEDORA-2021-0cd4d1542d)
Dot access dictionary with dynamic hierarchy creation and ordered iteration
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 11 2021 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 1.3.26-1
- Initial package
--------------------------------------------------------------------------------
================================================================================
python-gmpy2-2.1.1-1.fc35 (FEDORA-2021-44485d7073)
Python interface to GMP, MPFR, and MPC
--------------------------------------------------------------------------------
Update Information:
Changes in version 2.1.1: - Fix `mpfr(0.5) ** 2` bug - Fix building with Python
3.11.0a3 - Make `mpq.__pow__` return `NotImplemented` instead of raising
`TypeError`
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Jerry James <loganjerry(a)gmail.com> - 2.1.1-1
- Version 2.1.1
--------------------------------------------------------------------------------
================================================================================
rust-ignition-config-0.2.0-1.fc35 (FEDORA-2021-a9ed18c2c3)
Data structures for reading/writing Ignition configs
--------------------------------------------------------------------------------
Update Information:
New upstream release. See release notes at
https://github.com/coreos/ignition-
config-rs/releases
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 13 2021 Sohan Kunkerkar <skunkerk(a)redhat.com> 0.2.0-1
- Initial import
--------------------------------------------------------------------------------
================================================================================
rust-rudo-0.9.0-3.fc35 (FEDORA-2021-54121bc44b)
Utility to gain privilege access on Unix system with Pam
--------------------------------------------------------------------------------
Update Information:
Update rudo and systemd to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 R��mi Lauzier <remilauzier(a)protonmail.com> 0.9.0-3
- Downgrade clap to 2.33
* Tue Dec 14 2021 R��mi Lauzier <remilauzier(a)protonmail.com> 0.9.0-1
- Update to version 0.9.0; Fixes RHBZ#2032288
--------------------------------------------------------------------------------
================================================================================
rust-systemd-0.10.0-1.fc35 (FEDORA-2021-54121bc44b)
Rust interface to libsystemd/libelogind provided APIs
--------------------------------------------------------------------------------
Update Information:
Update rudo and systemd to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 R��mi Lauzier <remilauzier(a)protonmail.com> 0.10.0-1
- Update to version 0.10.0; Fixes RHBZ#2032178
* Sat Dec 11 2021 R��mi Lauzier <remilauzier(a)protonmail.com> 0.9.3-1
- Update to version 0.9.3; Fixes RHBZ#2030962
--------------------------------------------------------------------------------
================================================================================
secvarctl-0.3-1.fc35 (FEDORA-2021-237e01becc)
A command line tool for managing Secure Boot Variables on POWER
--------------------------------------------------------------------------------
Update Information:
Update to v0.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Nick Child <nnac123(a)linux.vnet.ibm.com> - 0.3-1
- Update to v0.3
--------------------------------------------------------------------------------
================================================================================
tang-11-1.fc35 (FEDORA-2021-1fe489496f)
Network Presence Binding Daemon
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-4076
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 14 2021 Sergio Correia <scorreia(a)redhat.com> - 11-1
- New upstream release - v11.
Resolves: CVE-2021-4076
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2029814 - CVE-2021-4076 tang: private key leak
https://bugzilla.redhat.com/show_bug.cgi?id=2029814
--------------------------------------------------------------------------------