The following Fedora 35 Security updates need testing:
Age URL
107
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9
libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
99
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3edad0ab6 pcre2-10.40-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fda9f1f7bd
plantuml-1.2022.5-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bcc0df5180 plib-1.8.5-30.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-393948cc9e
ignition-2.14.0-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-530fdc5202
moodle-3.11.7-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f09e0d8b0e
rubygem-git-1.11.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-19f4c34184
mingw-pcre2-10.40-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-79bdaa4fbc gdisk-1.0.9-2.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d37f9b1e8b
setup-2.13.10-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3edad0ab6 pcre2-10.40-1.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-74b5a95b5a
guestfs-tools-1.48.1-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c8f748ea90
librsvg2-2.52.9-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5e6670a900
libretls-3.5.2-1.fc35 netcat-1.218-5.fc35 rpki-client-7.8-2.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0147faf370
linux-firmware-20220509-132.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d3c79f71e
osinfo-db-20220516-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e65347ed76
python-blivet-3.4.4-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-83c75c8f72 rsync-3.2.4-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-21d7b52f14
gnutls-3.7.5-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a5af56609e
webkit2gtk3-2.36.2-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-925c18db47
ansible-packaging-1-5.fc35 redhat-rpm-config-201-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8d2c1dc353 glibc-2.34-34.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ef74097151
kernel-5.17.9-200.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-652849acba
anaconda-35.22.2-5.fc35 gtk3-3.24.34-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-174b57a550 zstd-1.5.2-2.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-eb6c837b39
annobin-10.73-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b7ab410b50
pipewire-0.3.51-2.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ffad9aca7a
binutils-2.37-19.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8534a4e671
libguestfs-1.48.2-2.fc35
The following builds have been pushed to Fedora 35 updates-testing
antimicrox-3.2.3-1.fc35
ceph-16.2.9-1.fc35
cinnamon-5.2.7-4.fc35
golang-github-opencontainers-runc-1.1.2-1.fc35
kitty-0.25.0-4.fc35
logstalgia-1.1.3-1.fc35
megatools-1.11.0-6.fc35
mozilla-ublock-origin-1.42.4-1.fc35
perl-WWW-Mechanize-2.07-1.fc35
python-aiohttp-3.7.4-4.fc35
trustedqsl-2.6.2-1.fc35
Details about builds:
================================================================================
antimicrox-3.2.3-1.fc35 (FEDORA-2022-1b65eb21b3)
Graphical program used to map keyboard buttons and mouse controls to a gamepad
--------------------------------------------------------------------------------
Update Information:
3.2.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2022 Gergely Gombos <gombosg(a)disroot.org> - 3.2.3-1
- 3.2.3
--------------------------------------------------------------------------------
================================================================================
ceph-16.2.9-1.fc35 (FEDORA-2022-295c3e94f3)
User space components of the Ceph file system
--------------------------------------------------------------------------------
Update Information:
ceph-16.2.9 GA ---- ceph 16.2.8 GA
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 19 2022 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.2.9-1
- 16.2.9 GA
* Tue May 17 2022 Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.2.8-1
- 16.2.8 GA
--------------------------------------------------------------------------------
================================================================================
cinnamon-5.2.7-4.fc35 (FEDORA-2022-56be68a74e)
Window management and application launching for GNOME
--------------------------------------------------------------------------------
Update Information:
- The calendar-server sub-package isn't noarch due to search paths ---- - Fix
calendar-server sub-package
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2022 Leigh Scott <leigh123linux(a)gmail.com> - 5.2.7-4
- The calendar-server sub-package isn't noarch due to search paths
* Mon May 16 2022 Leigh Scott <leigh123linux(a)gmail.com> - 5.2.7-3
- Fix calendar-server sub-package
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.2.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2086379 - [abrt] cinnamon: require_version():
__init__.py:126:require_version:ValueError: Namespace EDataServer not available
https://bugzilla.redhat.com/show_bug.cgi?id=2086379
[ 2 ] Bug #2088938 - [abrt] cinnamon-calendar-server: require_version():
__init__.py:126:require_version:ValueError: Namespace Cinnamon not available
https://bugzilla.redhat.com/show_bug.cgi?id=2088938
--------------------------------------------------------------------------------
================================================================================
golang-github-opencontainers-runc-1.1.2-1.fc35 (FEDORA-2022-91b747a0d7)
CLI tool for spawning and running containers
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.2. Fixes rhbz#2085287. - Mitigate CVE-2022-29162 / GHSA-f3fp-
gc8g-vw66.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2022 Maxwell G <gotmax(a)e.email> 1.1.2-1
- Update to 1.1.2. Fixes rhbz#2085287.
- Mitigate CVE-2022-29162 / GHSA-f3fp-gc8g-vw66.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2085287 - golang-github-opencontainers-runc-1.1.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2085287
--------------------------------------------------------------------------------
================================================================================
kitty-0.25.0-4.fc35 (FEDORA-2022-5ec5bd54dc)
Cross-platform, fast, feature full, GPU based terminal emulator
--------------------------------------------------------------------------------
Update Information:
Change shebang instead of using __brp_mangle_shebangs_exclude_from
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2022 Yaroslav Sidlovsky <zawertun(a)gmail.com> - 0.25.0-4
- Change shebang instead of using __brp_mangle_shebangs_exclude_from
* Sun May 22 2022 Yaroslav Sidlovsky <zawertun(a)gmail.com> - 0.25.0-3
- Prevent brp-mangle-shebangs rpm script from breaking shebang in askpass.py
* Sat May 21 2022 Yaroslav Sidlovsky <zawertun(a)gmail.com> - 0.25.0-2
- Remain script `askpass.py` executable
- Fixes rhbz#2088828
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2088828 - askpass.py in ssh kitten not executable
https://bugzilla.redhat.com/show_bug.cgi?id=2088828
--------------------------------------------------------------------------------
================================================================================
logstalgia-1.1.3-1.fc35 (FEDORA-2022-3b18cd7607)
Web server access log visualizer
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release logstalgia 1.1.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Terje Rosten <terje.rosten(a)ntnu.no> - 1.1.3-1
- 1.1.3
- boost-filesystem detection don't work on ppc64le
* Thu Feb 10 2022 Orion Poplawski <orion(a)nwra.com> - 1.1.2-11
- Rebuild for glew 2.2
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.2-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2088239 - logstalgia-1.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2088239
--------------------------------------------------------------------------------
================================================================================
megatools-1.11.0-6.fc35 (FEDORA-2022-5fe62596d7)
Command line client for MEGA
--------------------------------------------------------------------------------
Update Information:
Upstream release rhbz#2088522
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 21 2022 Gerald Cox <gbcox(a)fedoraproject.org> - 1.11.0-6
- Upstream release rhbz#2088522
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.11.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1.11.0-4
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2088522 - megatools-1.11.0.20220519 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2088522
--------------------------------------------------------------------------------
================================================================================
mozilla-ublock-origin-1.42.4-1.fc35 (FEDORA-2022-b11b77681f)
An efficient blocker for Firefox
--------------------------------------------------------------------------------
Update Information:
* Need local URL to enabled-by-default quick-fixes list * Handle picture >
source elements in element picker * Use a better value to mark end of sequence
of tokens * Remove MVPS from stock lists due to inactivity * A way to fix
serious filter issues as soon as possible * Add command to toggle cosmetic
filtering * Prevent unset minimal width for popup panel
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 22 2022 Dominik Mierzejewski <dominik(a)greysector.net> - 1.42.4-1
- update to 1.42.4 (#2070185)
- new bundled library: hsluv
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2070185 - mozilla-ublock-origin-1.42.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2070185
--------------------------------------------------------------------------------
================================================================================
perl-WWW-Mechanize-2.07-1.fc35 (FEDORA-2022-3d64d62de3)
Automates web page form & link interaction
--------------------------------------------------------------------------------
Update Information:
Test in the WWW::Mechanize suite fail because of an upstream change in
LWP::UserAgent. This update contains an updated test suite.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 1 2022 Emmanuel Seyman <emmanuel(a)seyman.fr> - 2.07-1
- Update to 2.07
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2080452 - perl-WWW-Mechanize-2.07 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2080452
--------------------------------------------------------------------------------
================================================================================
python-aiohttp-3.7.4-4.fc35 (FEDORA-2022-e7514aa974)
Python HTTP client/server for asyncio
--------------------------------------------------------------------------------
Update Information:
Fix calls with deprecated parameters in Python 3.10
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Thomas Krennwallner <teakay(a)aiven.io> - 3.7.4-4
- Fix calls with deprecated parameters in Python 3.10
--------------------------------------------------------------------------------
================================================================================
trustedqsl-2.6.2-1.fc35 (FEDORA-2022-62c3bd81f8)
Tool for digitally signing Amateur Radio QSO records
--------------------------------------------------------------------------------
Update Information:
Update to version 2.6.2, for release notes see:
http://www.arrl.org/files/file/LoTW%20Instructions/TrustedQSL-2-6-2-relea...
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 20 2022 Richard Shaw <hobbes1069(a)gmail.com> - 2.6.2-1
- Update to 2.6.2.
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.9-2.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Sun Dec 5 2021 Richard Shaw <hobbes1069(a)gmail.com> - 2.5.9-1.1
- Rebuild with fixed OpenSSL 3 patch.
* Sun Dec 5 2021 Richard Shaw <hobbes1069(a)gmail.com> - 2.5.9-1
- Update to 2.5.9.
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 2.5.8-3
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2088230 - trustedqsl-2.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2088230
--------------------------------------------------------------------------------