The following Fedora 35 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4786825dd expat-2.4.4-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b58d156ab0
ipython-7.26.0-3.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7884684e5a
dotnet6.0-6.0.101-3.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-983a78275c
xstream-1.4.19-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e49dbaa4e5
dotnet-build-reference-packages-0-11.20220201git045b288.fc35 dotnet3.1-3.1.416-2.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9
libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-725db8230b
mingw-gdk-pixbuf-2.42.6-4.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-88f6a3d290
mingw-expat-2.4.4-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-58abb323f0
php-twig2-2.14.11-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7d871d7583
php-twig3-3.3.8-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-da8222a1bc
hostapd-2.10-3.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a0b2a4d594
containerd-1.6.0~rc.2-2.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1033a2718b
python-rencode-1.0.6-17.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9bf751cdf7 xterm-370-3.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2f14ec7663
varnish-6.6.2-2.fc35 varnish-modules-0.18.0-5.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-727e3914e1 xrdp-0.9.18-5.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-737e44718a
zziplib-0.13.72-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4786825dd expat-2.4.4-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-faaf4ebee4
libwacom-1.12.1-2.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c917683ac9
python-blivet-3.4.3-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-310e303f6b pungi-4.3.3-3.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c15897fe7d git-2.35.1-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-25879afa08
rdma-core-39.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-17e7d10dd2
python-cffi-1.15.0-4.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ff8d3feb1
libtool-2.4.6-48.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-33ec204d7d
kernel-5.16.8-200.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ceb71ae38
anaconda-35.22.2-4.fc35
The following builds have been pushed to Fedora 35 updates-testing
AMF-1.4.23-1.fc35
FlightGear-2020.3.12-2.fc35
FlightGear-Atlas-0.5.0-0.75.cvs20141002.fc35
FlightGear-data-2020.3.12-1.fc35
R-flexiblas-3.0.0-5.fc35
SimGear-2020.3.12-1.fc35
aardvark-dns-1.0.0~rc2-1.fc35
borgmatic-1.5.23-1.fc35
bst-external-0.26.0-1.fc35
cbmc-5.50.0-1.fc35
cppcheck-2.7-1.fc35
cyrus-imapd-3.2.8-2.fc35
fedora-upgrade-36.1-1.fc35
fgrun-2016.3.1-48.fc35
gap-pkg-hap-1.35-1.fc35
google-api-python-client-2.37.0-1.fc35
jacoco-0.8.7-1.fc35
julia-1.7.2-1.fc35
knot-3.1.6-1.fc35
libgee-0.20.5-1.fc35
libnbd-1.10.5-1.fc35
libusb1-1.0.25-2.fc35
magic-8.3.266-1.fc35
mesa-21.3.6-1.fc35
mimedefang-2.86-1.fc35
mingw-SDL2_ttf-2.0.18-1.fc35
mingw-spice-gtk-0.40-1.fc35
mingw-spice-protocol-0.14.4-1.fc35
nodejs-16.14.0-2.fc35
oneVPL-2022.0.4-1.fc35
oneVPL-intel-gpu-22.2.0-1.fc35
pango-1.50.4-1.fc35
perl-HTTP-Daemon-6.13-1.fc35
python-SALib-1.4.5-2.fc35
python-google-resumable-media-2.2.1-1.fc35
python-read-roi-1.6.0-1.fc35
python-rpm-macros-3.10-11.fc35
python-trimesh-3.10.0-1.fc35
python-txredisapi-1.4.7-1.fc35
python-xnat-0.4.0-1.fc35
qemu-6.1.0-14.fc35
spice-protocol-0.14.4-1.fc35
spice-vdagent-0.22.0-1.fc35
srain-1.3.2-1.fc35
thermald-2.4.8-3.fc35
tuned-2.18.0-1.fc35
urlscan-0.9.9-1.fc35
virt-v2v-1.45.98-1.fc35
webkit2gtk3-2.34.5-1.fc35
Details about builds:
================================================================================
AMF-1.4.23-1.fc35 (FEDORA-2022-b4af149c27)
Advanced Media Framework (AMF) SDK
--------------------------------------------------------------------------------
Update Information:
New package for Advanced Media Framework SDK.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Simone Caronni <negativo17(a)gmail.com> - 1.4.23-1
- First build.
--------------------------------------------------------------------------------
================================================================================
FlightGear-2020.3.12-2.fc35 (FEDORA-2022-c56108b314)
The FlightGear Flight Simulator
--------------------------------------------------------------------------------
Update Information:
This update provides a new version of FlightGear, the flight simulator.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Orion Poplawski <orion(a)nwra.com> - 2020.3.12-2
- Rebuild for glew 2.2
* Fri Feb 4 2022 Fabrice Bellet <fabrice(a)bellet.info> - 2020.3.12-1
- new upstream release
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
2020.3.11-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Nov 15 2021 Sandro Mani <manisandro(a)gmail.com> - 2020.3.11-2
- Rebuild (OpenSceneGraph)
--------------------------------------------------------------------------------
================================================================================
FlightGear-Atlas-0.5.0-0.75.cvs20141002.fc35 (FEDORA-2022-c56108b314)
Flightgear map tools
--------------------------------------------------------------------------------
Update Information:
This update provides a new version of FlightGear, the flight simulator.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Orion Poplawski <orion(a)nwra.com> - 0.5.0-0.75.cvs20141002
- Rebuild for glew 2.2
* Fri Feb 4 2022 Fabrice Bellet <fabrice(a)bellet.info> - 0.5.0-0.74.cvs20141002
- rebuild with newer SimGear
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.5.0-0.73.cvs20141002
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
FlightGear-data-2020.3.12-1.fc35 (FEDORA-2022-c56108b314)
FlightGear base scenery and data files
--------------------------------------------------------------------------------
Update Information:
This update provides a new version of FlightGear, the flight simulator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 4 2022 Fabrice Bellet <fabrice(a)bellet.info> - 2020.3.12-1
- new upstream release
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
2020.3.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
R-flexiblas-3.0.0-5.fc35 (FEDORA-2022-fa350d2a03)
FlexiBLAS API Interface for R
--------------------------------------------------------------------------------
Update Information:
Fix test
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 3 2022 I��aki ��car <iucar(a)fedoraproject.org> - 3.0.0-5
- Fix test
--------------------------------------------------------------------------------
================================================================================
SimGear-2020.3.12-1.fc35 (FEDORA-2022-c56108b314)
Simulation library components
--------------------------------------------------------------------------------
Update Information:
This update provides a new version of FlightGear, the flight simulator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 4 2022 Fabrice Bellet <fabrice(a)bellet.info> - 2020.3.12-1
- new upstream release
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
2020.3.11-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Nov 15 2021 Sandro Mani <manisandro(a)gmail.com> - 2020.3.11-2
- Rebuild (OpenSceneGraph)
--------------------------------------------------------------------------------
================================================================================
aardvark-dns-1.0.0~rc2-1.fc35 (FEDORA-2022-5869f3225b)
Authoritative DNS server for A/AAAA container records
--------------------------------------------------------------------------------
Update Information:
bump to v1.0.0-rc2 ---- upload source to lookaside cache ---- initial
package
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Lokesh Mandvekar <lsm5(a)fedoraproject.org> 1.0.0~rc2-1
- bump to v1.0.0-rc2
* Thu Feb 3 2022 Lokesh Mandvekar <lsm5(a)fedoraproject.org> 1.0.0~rc1-1
- bump to v1.0.0-rc1
* Thu Jan 27 2022 Lokesh Mandvekar <lsm5(a)fedoraproject.org> 0-1
- Resolves: #2043581 - initial build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2043581 - Review Request: aardvark-dns - Authoritative DNS server for A/AAAA
container records
https://bugzilla.redhat.com/show_bug.cgi?id=2043581
--------------------------------------------------------------------------------
================================================================================
borgmatic-1.5.23-1.fc35 (FEDORA-2022-eb55d09cde)
Simple Python wrapper script for borgbackup
--------------------------------------------------------------------------------
Update Information:
- [#394](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/394): Compact repository segments and free space
with new "borgmatic compact" action. Borg 1.2+ only. Also run
"compact" by
default when no actions are specified, as "prune" in Borg 1.2 no longer
frees up space unless "compact" is run. -
[#394](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/394):
When using the "atime", "bsd_flags", "numeric_owner", or
"remote_rate_limit"
options, tailor the flags passed to Borg depending on the Borg version. -
[#480](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/480),
[#482](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/482):
Fix traceback when a YAML validation error occurs. ---- -
[#288](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/288):
Add database dump hook for MongoDB. -
[#470](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/470):
Move mysqldump options to the beginning of the command due to MySQL bug 30994. -
[#471](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/471):
When command-line configuration override produces a parse error, error cleanly
instead of tracebacking. -
[#476](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/476):
Fix unicode error when restoring particular MySQL databases. - Drop support
for Python 3.6, which has been end-of-lifed. - Add support for Python 3.10.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Felix Kaechele <felix(a)kaechele.ca> - 1.5.23-1
- update to 1.5.23
* Fri Feb 4 2022 Felix Kaechele <felix(a)kaechele.ca> - 1.5.22-2
- fix sed on systemd unit to only replace the path
* Fri Feb 4 2022 Felix Kaechele <felix(a)kaechele.ca> - 1.5.22-1
- update to 1.5.22
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.21-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2037158 - borgmatic-1.5.22 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2037158
[ 2 ] Bug #2053244 - borgmatic-1.5.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2053244
--------------------------------------------------------------------------------
================================================================================
bst-external-0.26.0-1.fc35 (FEDORA-2022-8b9e548b3f)
Additional BuildStream plugins
--------------------------------------------------------------------------------
Update Information:
Update to 0.26.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.26.0-1
- chore(update): 0.26.0
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.25.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2052298 - bst-external-0.26.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2052298
--------------------------------------------------------------------------------
================================================================================
cbmc-5.50.0-1.fc35 (FEDORA-2022-37244ad542)
Bounded Model Checker for ANSI-C and C++ programs
--------------------------------------------------------------------------------
Update Information:
new upstream release and implementation of "--add-cmd-line-arg" option.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Vincent Mihalkovic <vmihalko(a)redhat.com> - 5.50.0-1
- New upstream release of cbmc and also cbmc-utils
- Add "--add-cmd-line-arg" option for goto-instrument
--------------------------------------------------------------------------------
================================================================================
cppcheck-2.7-1.fc35 (FEDORA-2022-75d05798ad)
Tool for static C/C++ code analysis
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 8 2022 Wolfgang St��ggl <c72578(a)yahoo.de> - 2.7-1
- Update to 2.7.
--------------------------------------------------------------------------------
================================================================================
cyrus-imapd-3.2.8-2.fc35 (FEDORA-2022-c30b1a8aa3)
A high-performance email, contacts and calendar server
--------------------------------------------------------------------------------
Update Information:
New version 3.2.8 Security fix for CVE-2021-33582 Security fix for
CVE-2021-32056
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Martin Osvald <mosvald(a)redhat.com> - 3.2.8-1
- New version 3.2.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1959138 - CVE-2021-32056 cyrus-imapd: remote authenticated users could bypass
intended access restrictions on certain server annotations
https://bugzilla.redhat.com/show_bug.cgi?id=1959138
[ 2 ] Bug #1993232 - CVE-2021-33582 cyrus-imapd: Denial of service via string hashing
algorithm collisions
https://bugzilla.redhat.com/show_bug.cgi?id=1993232
--------------------------------------------------------------------------------
================================================================================
fedora-upgrade-36.1-1.fc35 (FEDORA-2022-bd7e9b853f)
Upgrade Fedora to next version using dnf upgrade (unofficial tool)
--------------------------------------------------------------------------------
Update Information:
Added new subpackage remove-retired-packages as part of
https://fedoraproject.org/wiki/Changes/RetiredPackages
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Miroslav Such�� <msuchy(a)redhat.com> 36.1-1
- add upgrade to Feodora 36
- failure during reset of services preset should not be fatal
* Tue Nov 9 2021 Miroslav Such�� <msuchy(a)redhat.com> 35.3-1
- do not test prerelease during upgrade to F35
- note fedora-remove-old-gpg-keys in fedora-upgrade man page
- print whole list before asking on individual packages
- add fedora 33 gpg keys to remove
- add fedora 32 gpg keys to remove
- add fedora-remove-old-gpg-key
- fail if something fail, or when user interrupt
- grammar edits
- work on list of removed packages rather than components
- Small changes to reduce dependencies
* Thu Sep 23 2021 Miroslav Such�� <msuchy(a)redhat.com> 35.2-1
- add remove-retired-packages
--------------------------------------------------------------------------------
================================================================================
fgrun-2016.3.1-48.fc35 (FEDORA-2022-c56108b314)
Graphical front-end for launching FlightGear flight simulator
--------------------------------------------------------------------------------
Update Information:
This update provides a new version of FlightGear, the flight simulator.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 4 2022 Fabrice Bellet <fabrice(a)bellet.info> - 2016.3.1-48
- rebuild with newer SimGear
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
2016.3.1-47
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Nov 15 2021 Sandro Mani <manisandro(a)gmail.com> - 2016.3.1-46
- Rebuild (OpenSceneGraph)
--------------------------------------------------------------------------------
================================================================================
gap-pkg-hap-1.35-1.fc35 (FEDORA-2022-feeb65a6e7)
Homological Algebra Programming for GAP
--------------------------------------------------------------------------------
Update Information:
Changes in version 1.35: - Added functions for non-free resolutions - Make
`StarGraph` an operation, with hidden attribute `StarGraphAttr`
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Jerry James <loganjerry(a)gmail.com> - 1.35-1
- Version 1.35
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.34-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2053110 - gap-pkg-hap-1.35 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2053110
--------------------------------------------------------------------------------
================================================================================
google-api-python-client-2.37.0-1.fc35 (FEDORA-2022-984a4bdebd)
Google APIs Client Library for Python
--------------------------------------------------------------------------------
Update Information:
Update to 2.37.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 2:2.37.0-1
- Update to 2.37.0
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2:2.36.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Wed Jan 19 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 2:2.36.0-1
- Update to 2.36.0 - Closes rhbz#2042177
--------------------------------------------------------------------------------
================================================================================
jacoco-0.8.7-1.fc35 (FEDORA-2022-21b036fd5a)
Java Code Coverage for Eclipse
--------------------------------------------------------------------------------
Update Information:
* Add a patch due to update of maven-reporting-api 3.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 18 2021 Didik Supriadi <didiksupriadi41(a)fedoraproject.org> - 0.8.7-1
- New upstream release 0.8.7
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.3-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
julia-1.7.2-1.fc35 (FEDORA-2022-9ab3606fcf)
High-level, high-performance dynamic language for technical computing
--------------------------------------------------------------------------------
Update Information:
New upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Milan Bouchet-Valat <nalimilan(a)club.fr> - 1.7.2-1
- New upstream release.
--------------------------------------------------------------------------------
================================================================================
knot-3.1.6-1.fc35 (FEDORA-2022-e7889d21c7)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
Update to upstream 3.1.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.1.6-1
- Update to 3.1.6
- Add dbus config
- Use _sharedstatedir for home
--------------------------------------------------------------------------------
================================================================================
libgee-0.20.5-1.fc35 (FEDORA-2022-563105d083)
GObject collection library
--------------------------------------------------------------------------------
Update Information:
Update to 0.20.5
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 David King <amigadave(a)amigadave.com> - 0.20.5-1
- Update to 0.20.5
--------------------------------------------------------------------------------
================================================================================
libnbd-1.10.5-1.fc35 (FEDORA-2022-2fa5931425)
NBD client library in userspace
--------------------------------------------------------------------------------
Update Information:
New upstream stable branch version 1.10.5 ---- New upstream stable branch
version 1.10.4 Fixes: CVE-2022-0485 nbdcopy may create corrupted destination
image
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.10.5-1
- New upstream stable branch version 1.10.5
* Sat Feb 5 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1.10.4-1
- New upstream stable branch version 1.10.4
- Fixes: CVE-2022-0485 nbdcopy may create corrupted destination image
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2050325 - CVE-2022-0485 libnbd: nbdcopy: missing error handling may create
corrupted destination image [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2050325
--------------------------------------------------------------------------------
================================================================================
libusb1-1.0.25-2.fc35 (FEDORA-2022-ca13cbc97f)
Library for accessing USB devices
--------------------------------------------------------------------------------
Update Information:
-Fix a crash after libusb_exit API has been misused
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Benjamin Berg <bberg(a)redhat.com> 1.0.25-2
- Fix a crash after libusb_exit API has been misused
* Wed Feb 2 2022 Benjamin Berg <bberg(a)redhat.com> 1.0.25-1
- Update to 1.0.25
--------------------------------------------------------------------------------
================================================================================
magic-8.3.266-1.fc35 (FEDORA-2022-ff90ef86b8)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.3.266 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.3.266-1
- 8.3.263
--------------------------------------------------------------------------------
================================================================================
mesa-21.3.6-1.fc35 (FEDORA-2022-d271efea8b)
Mesa graphics libraries
--------------------------------------------------------------------------------
Update Information:
Update 21.3.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Pete Walter <pwalter(a)fedoraproject.org> 21.3.6-1
- Update to 21.3.6
* Mon Jan 31 2022 Lyude Paul <lyude(a)redhat.com> 21.3.5-2
- Add missing attributions for 21.3.4-3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2052727 - mesa-21.3.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2052727
--------------------------------------------------------------------------------
================================================================================
mimedefang-2.86-1.fc35 (FEDORA-2022-55edec2408)
E-Mail filtering framework using Sendmail's Milter interface
--------------------------------------------------------------------------------
Update Information:
# MIMEDefang 2.86 * Rspamd support by forking `rspamc(1)` binary is now
deprecated, added Rspamd support by implementing its protocol * Fallback to
plaintext when `md_check_against_smtp_server()` fails SSL connection for unknown
reasons
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 11 2022 Robert Scheck <robert(a)fedoraproject.org> 2.86-1
- Upgrade to 2.86 (#2033718, #2053245)
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.85-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2033718 - mimedefang-2.86 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2033718
[ 2 ] Bug #2053245 - Please upgrade to mimedefang 2.86 or pull fix to non-ASCII
characters in dropped attachment file names
https://bugzilla.redhat.com/show_bug.cgi?id=2053245
--------------------------------------------------------------------------------
================================================================================
mingw-SDL2_ttf-2.0.18-1.fc35 (FEDORA-2022-98615e0fb1)
MinGW Windows port of the TrueType font handling library for SDL2
--------------------------------------------------------------------------------
Update Information:
Update to v2.0.18
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 2.0.18-1
- Update to v2.0.18
--------------------------------------------------------------------------------
================================================================================
mingw-spice-gtk-0.40-1.fc35 (FEDORA-2022-0201bf5a75)
A GTK+ widget for SPICE clients
--------------------------------------------------------------------------------
Update Information:
Update to 0.40
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Victor Toso <victortoso(a)redhat.com> - 0.40-1
- Update to 0.40
--------------------------------------------------------------------------------
================================================================================
mingw-spice-protocol-0.14.4-1.fc35 (FEDORA-2022-8af6f312d5)
Spice protocol header files
--------------------------------------------------------------------------------
Update Information:
Update spice-protocol to version 0.14.4
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Victor Toso <victortoso(a)redhat.com> - 0.14.4-1
- Update spice-protocol to version 0.14.4
--------------------------------------------------------------------------------
================================================================================
nodejs-16.14.0-2.fc35 (FEDORA-2022-97b214b298)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
## 2022-02-08, Version 16.14.0 'Gallium' (LTS), @danielleadams ### Notable
changes #### Importing JSON modules now requires experimental import assertions
syntax This release adds experimental support for the import assertions stage 3
proposal. To keep Node.js ESM implementation as compatible as possible with the
HTML spec, import assertions are now required to import JSON modules (still
behind the `--experimental-json-modules` CLI flag): ```mjs import info from
'./package.json' assert { type: 'json' }; ``` Or use dynamic import:
```mjs
const info = await import('./package.json', { assert: { type: 'json' } });
```
Contributed by Antoine du Hamel and Geoffrey Booth
[#40250](https://github.com/nodejs/node/pull/40250) #### Other notable changes
* **async\_hooks**: * **(SEMVER-MINOR)** expose async\_wrap providers (Rafael
Gonzaga) [#40760](https://github.com/nodejs/node/pull/40760) *
**child\_process**: * **(SEMVER-MINOR)** add support for URL to `cp.fork`
(Antoine du Hamel) [#41225](https://github.com/nodejs/node/pull/41225) *
**doc**: * add @Mesteery to collaborators (Mestery)
[#41543](https://github.com/nodejs/node/pull/41543) * add @bnb as a
collaborator (Tierney Cyren) [#41100](https://github.com/nodejs/node/pull/41100)
* **esm**: * **(SEMVER-MINOR)** graduate capturerejections to supported (James
M Snell) [#41267](https://github.com/nodejs/node/pull/41267) * **(SEMVER-
MINOR)** add EventEmitterAsyncResource to core (James M Snell)
[#41246](https://github.com/nodejs/node/pull/41246) * **events**: * **(SEMVER-
MINOR)** propagate weak option for kNewListener (James M Snell)
[#40899](https://github.com/nodejs/node/pull/40899) * **fs**: * **(SEMVER-
MINOR)** accept URL as argument for `fs.rm` and `fs.rmSync` (Antoine du Hamel)
[#41132](https://github.com/nodejs/node/pull/41132) * **lib**: * **(SEMVER-
MINOR)** make AbortSignal cloneable/transferable (James M Snell)
[#41050](https://github.com/nodejs/node/pull/41050) * **(SEMVER-MINOR)** add
AbortSignal.timeout (James M Snell)
[#40899](https://github.com/nodejs/node/pull/40899) * **(SEMVER-MINOR)** add
reason to AbortSignal (James M Snell)
[#40807](https://github.com/nodejs/node/pull/40807) * **(SEMVER-MINOR)** add
unsubscribe method to non-active DC channels (simon-id)
[#40433](https://github.com/nodejs/node/pull/40433) * **(SEMVER-MINOR)** add
return value for DC channel.unsubscribe (simon-id)
[#40433](https://github.com/nodejs/node/pull/40433) * **loader**: * **(SEMVER-
MINOR)** return package format from defaultResolve if known (Gabriel Bota)
[#40980](https://github.com/nodejs/node/pull/40980) * **perf\_hooks**: *
**(SEMVER-MINOR)** multiple fixes for Histogram (James M Snell)
[#41153](https://github.com/nodejs/node/pull/41153) * **process**: *
**(SEMVER-MINOR)** add `getActiveResourcesInfo()` (Darshan Sen)
[#40813](https://github.com/nodejs/node/pull/40813) * **src**: * **(SEMVER-
MINOR)** add x509.fingerprint512 to crypto module (3nprob)
[#39809](https://github.com/nodejs/node/pull/39809) * **(SEMVER-MINOR)** add
flags for controlling process behavior (Cheng Zhao)
[#40339](https://github.com/nodejs/node/pull/40339) * **stream**: * **(SEMVER-
MINOR)** add filter method to readable (Benjamin Gruenbaum)
[#41354](https://github.com/nodejs/node/pull/41354) * **(SEMVER-MINOR)** add
isReadable helper (Robert Nagy)
[#41199](https://github.com/nodejs/node/pull/41199) * **(SEMVER-MINOR)** add
map method to Readable (Benjamin Gruenbaum)
[#40815](https://github.com/nodejs/node/pull/40815) * deprecate thenable
support (Antoine du Hamel) [#40860](https://github.com/nodejs/node/pull/40860) *
**util**: * **(SEMVER-MINOR)** pass through the inspect function to custom
inspect functions (Ruben Bridgewater)
[#41019](https://github.com/nodejs/node/pull/41019) * **(SEMVER-MINOR)** add
numericSeparator to util.inspect (Ruben Bridgewater)
[#41003](https://github.com/nodejs/node/pull/41003) * **(SEMVER-MINOR)**
always visualize cause property in errors during inspection (Ruben Bridgewater)
[#41002](https://github.com/nodejs/node/pull/41002) * **timers**: * **(SEMVER-
MINOR)** add experimental scheduler api (James M Snell)
[#40909](https://github.com/nodejs/node/pull/40909) * **v8**: * **(SEMVER-
MINOR)** multi-tenant promise hook api (Stephen Belanger)
[#39283](https://github.com/nodejs/node/pull/39283) ---- Fix for
CVE-2021-43616
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Zuzana Svetlikova <zsvetlik(a)redhat.com> - 1:16.14.0-2
- Replace explicit version of npm in %check with variable and make build fail if it
doesn't match
* Tue Feb 8 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1:16.14.0-1
- Update to Node.js 16.14.0
* Thu Feb 3 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1:16.13.2-8
- Update npm to 8.3.1 (CVE-2021-43616)
* Wed Feb 2 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1:16.13.2-7
- Fix incorrect version Provides: for npm (bz#2049873)
* Mon Jan 31 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1:16.13.2-6
- Rebuild for more architectures
* Mon Jan 31 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1:16.13.2-5
- Tweak some dependencies on EPEL 7 (bz2048589)
- Add Provides: bundled(zlib)
* Wed Jan 19 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1:16.13.2-3
- Bundle zlib on EPEL 7
* Mon Jan 17 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1:16.13.2-2
- Add support for building on EPEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2050282 - CVE-2021-43616 npm: npm ci succeeds when package-lock.json
doesn't match package.json
https://bugzilla.redhat.com/show_bug.cgi?id=2050282
--------------------------------------------------------------------------------
================================================================================
oneVPL-2022.0.4-1.fc35 (FEDORA-2022-7fa10dd9d6)
oneAPI Video Processing Library
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 8 2022 Simone Caronni <negativo17(a)gmail.com> - 2022.0.4-1
- Update to 2022.0.4.
* Mon Feb 7 2022 Simone Caronni <negativo17(a)gmail.com> - 2022.0.0-2
- Enable Python binding.
* Sat Feb 5 2022 Simone Caronni <negativo17(a)gmail.com> - 2022.0.0-1
- First build.
--------------------------------------------------------------------------------
================================================================================
oneVPL-intel-gpu-22.2.0-1.fc35 (FEDORA-2022-7fa10dd9d6)
Intel oneVPL GPU Runtime
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 8 2022 Simone Caronni <negativo17(a)gmail.com> - 2022.2.0-1
- First build.
--------------------------------------------------------------------------------
================================================================================
pango-1.50.4-1.fc35 (FEDORA-2022-c31b57056e)
System for layout and rendering of internationalized text
--------------------------------------------------------------------------------
Update Information:
Update to 1.50.4 * Tweak synthetic space sizes * itemize: Try harder to avoid
NULL fonts * docs: Some additions * Pass synthetic slant to harfbuzz * Make
sloped carets work with uneven scales * Fix serialiation on arm * Avoid an
uninitialized variable warning * Reinstate previous behavior of
pango_attr_list_splice * Deprecated pango_coverage_ref/unref * Fix serialization
on non-glibc systems * Fix allow-breaks handling
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 David King <amigadave(a)amigadave.com> - 1.50.4-1
- Update to 1.50.4
--------------------------------------------------------------------------------
================================================================================
perl-HTTP-Daemon-6.13-1.fc35 (FEDORA-2022-d9d2b8c5eb)
Simple HTTP server class
--------------------------------------------------------------------------------
Update Information:
Changes: 6.13 2022-02-09 20:39:12Z - Bump minimum IO::Socket::IP
version to 0.32 (GH#50) (Olaf Alders)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Michal Josef ��pa��ek <mspacek(a)redhat.com> - 6.13-1
- 6.13 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2052745 - perl-HTTP-Daemon-6.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2052745
--------------------------------------------------------------------------------
================================================================================
python-SALib-1.4.5-2.fc35 (FEDORA-2022-ee485ac8d0)
Sensitivity Analysis Library
--------------------------------------------------------------------------------
Update Information:
Update to latest release ---- Update to newest patch release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 1.4.5-2
- chore: bump for branch
* Mon Feb 7 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 1.4.5-1
- feat: update to 1.4.5
* Mon Feb 7 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 1.4.4-5
- chore: use correct py3 macro
* Mon Feb 7 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 1.4.4-4
- feat: drop sphinx documentation
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2001189 - python-SALib-1.4.6b0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2001189
--------------------------------------------------------------------------------
================================================================================
python-google-resumable-media-2.2.1-1.fc35 (FEDORA-2022-9e3277501d)
Utilities for Google media downloads and resumable uploads
--------------------------------------------------------------------------------
Update Information:
Update to 2.2.1 ---- Update to 2.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Major Hayden <major(a)mhtx.net> 2.2.1-1
- Update to 2.2.1
* Mon Feb 7 2022 Major Hayden <major(a)mhtx.net> 2.2.0-1
- Update to 2.2.0
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.1.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2051656 - python-google-resumable-media-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2051656
[ 2 ] Bug #2052754 - python-google-resumable-media-2.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2052754
--------------------------------------------------------------------------------
================================================================================
python-read-roi-1.6.0-1.fc35 (FEDORA-2022-94e1653bc4)
Read ROI files .zip or .roi generated with imagej
--------------------------------------------------------------------------------
Update Information:
New package! python-read-roi
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 9 2021 Adeleye Opeyemi <adebola786 AT gmail DOT com> - 1.6.0-2
-updated spec file
* Thu Oct 28 2021 Adeleye Opeyemi <adebola786 AT gmail DOT com> - 1.6.0-1
-initial rpm
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2018238 - Review Request: python-read-roi - Read ROI files .zip or .roi
generated with ImageJ.
https://bugzilla.redhat.com/show_bug.cgi?id=2018238
--------------------------------------------------------------------------------
================================================================================
python-rpm-macros-3.10-11.fc35 (FEDORA-2022-fc961066b5)
The common Python RPM macros
--------------------------------------------------------------------------------
Update Information:
Set $RPM_BUILD_ROOT in %{python3_...} macros to allow selecting alternate
sysconfig install scheme based on that variable (needed for Python 3.11+)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 7 2022 Miro Hron��ok <mhroncok(a)redhat.com> - 3.10-11
- Set $RPM_BUILD_ROOT in %{python3_...} macros
to allow selecting alternate sysconfig install scheme based on that variable
--------------------------------------------------------------------------------
================================================================================
python-trimesh-3.10.0-1.fc35 (FEDORA-2022-132ffcab37)
Import, export, process, analyze and view triangular meshes
--------------------------------------------------------------------------------
Update Information:
Update to 3.10.0: bug fixes and minor features
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.10.0-1
- Update to 3.10.0 (close RHBZ#2046501)
* Thu Feb 10 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.9.43-1
- Update to 3.9.43 ���fix build���
* Thu Feb 10 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.9.42-2
- Restore mapbox-earcut dependency in ���all��� extra
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2046501 - python-trimesh-3.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2046501
--------------------------------------------------------------------------------
================================================================================
python-txredisapi-1.4.7-1.fc35 (FEDORA-2022-f1a2a59123)
Non-blocking Redis client for Python
--------------------------------------------------------------------------------
Update Information:
Update to v1.4.7
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Kai A. Hiller <V02460(a)gail.com.com> - 1.4.7-1
- Update to v1.4.7
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.4-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-xnat-0.4.0-1.fc35 (FEDORA-2022-7bd1104574)
A new XNAT client that exposes XNAT objects/functions as python objects/functions.
--------------------------------------------------------------------------------
Update Information:
Update to new minor release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 0.4.0-1
- feat: update to 4.0.1 (fixes rhbz#2018060)
--------------------------------------------------------------------------------
================================================================================
qemu-6.1.0-14.fc35 (FEDORA-2022-3a60c34473)
QEMU is a FAST! processor emulator
--------------------------------------------------------------------------------
Update Information:
virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) ----
Fix iovec limits with scsi-generic
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Eduardo Lima (Etrunko) <etrunko(a)redhat.com> - 6.1.0-14
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358)
Resolves: rhbz#2044863
* Thu Nov 25 2021 Daniel P. Berrang�� <berrange(a)redhat.com> - 6.1.0-13
- Fix iovec limits with scsi-generic
- Define STAP_SDT_ARG_CONSTRAINT=g on %{arm}, workaround for:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103395
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2044863 - CVE-2022-0358 QEMU: virtiofsd: potential privilege escalation via
CVE-2018-13405
https://bugzilla.redhat.com/show_bug.cgi?id=2044863
--------------------------------------------------------------------------------
================================================================================
spice-protocol-0.14.4-1.fc35 (FEDORA-2022-db6cae5da6)
Spice protocol header files
--------------------------------------------------------------------------------
Update Information:
Update to 0.14.4 release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Victor Toso <victortoso(a)redhat.com> - 0.14.4-1
- Update to 0.14.4 release
--------------------------------------------------------------------------------
================================================================================
spice-vdagent-0.22.0-1.fc35 (FEDORA-2022-3581bfb038)
Agent for Spice guests
--------------------------------------------------------------------------------
Update Information:
Update to spice-vdagent 0.22.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Victor Toso <victortoso(a)redhat.com> 0.22.0-1
- Update to spice-vdagent 0.22.0
--------------------------------------------------------------------------------
================================================================================
srain-1.3.2-1.fc35 (FEDORA-2022-ddf7011312)
Modern, beautiful IRC client written in GTK+ 3
--------------------------------------------------------------------------------
Update Information:
Update to 1.3.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.3.2-1
- chore(update): 1.3.2
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
thermald-2.4.8-3.fc35 (FEDORA-2022-7208209d22)
Thermal Management daemon
--------------------------------------------------------------------------------
Update Information:
Pull in adaptive fixes/improvements and p-p-d integration
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Benjamin Berg <bberg(a)redhat.com> 2.4.8-3
- Pull in adaptive fixes/improvements and p-p-d integration
--------------------------------------------------------------------------------
================================================================================
tuned-2.18.0-1.fc35 (FEDORA-2022-e63c0c5310)
A dynamic adaptive system tuning daemon
--------------------------------------------------------------------------------
Update Information:
This is new TuneD release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Jaroslav ��karvada <jskarvad(a)redhat.com> - 2.18.0-1
- new release
- rebased tuned to latest upstream
related: rhbz#2003833
- tuned-gui: fixed creation of new profile
--------------------------------------------------------------------------------
================================================================================
urlscan-0.9.9-1.fc35 (FEDORA-2022-fdff5b0689)
Extract and browse the URLs contained in an email (urlview replacement)
--------------------------------------------------------------------------------
Update Information:
Update to latest patch release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> 0.9.9-1
- feat: update to 0.9.9 (fixes rhbz#2048042)
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
virt-v2v-1.45.98-1.fc35 (FEDORA-2022-5bafd045ca)
Convert a virtual machine to run on KVM
--------------------------------------------------------------------------------
Update Information:
New upstream development version 1.45.98 (preview of 2.0)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 10 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.45.98-1
- New upstream development version 1.45.98 (preview of 2.0)
* Fri Feb 4 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:1.45.97-3
- OCaml 4.13.1 rebuild to remove package notes
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:1.45.97-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
webkit2gtk3-2.34.5-1.fc35 (FEDORA-2022-cbd155f714)
GTK Web content engine library
--------------------------------------------------------------------------------
Update Information:
Update to 2.34.5: * Improve VP8 codec selection when using GStreamer 1.20. *
Fix connecting to the accessibility bus when using the Bubblewrap sandbox. *
Fix links being incorrectly activated when starting a pinch zoom gesture. * Fix
touch-based scrolling. * Fix several crashes and rendering issues. * Security
fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 9 2022 Michael Catanzaro <mcatanzaro(a)redhat.com> 2.34.5-1
- Update to WebKitGTK 2.34.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2053180 - CVE-2022-22589 webkit2gtk3: webkitgtk: Processing a maliciously
crafted mail message may lead to running arbitrary javascript [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2053180
[ 2 ] Bug #2053182 - CVE-2022-22590 webkit2gtk3: webkitgtk: Processing maliciously
crafted web content may lead to arbitrary code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2053182
[ 3 ] Bug #2053186 - CVE-2022-22592 webkit2gtk3: webkitgtk: Processing maliciously
crafted web content may prevent Content Security Policy from being enforced [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2053186
--------------------------------------------------------------------------------