The following Fedora 35 Security updates need testing:
Age URL
240
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-58055cb1ef
nodejs-16.17.1-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c68d90efc3 expat-2.4.9-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1454bee2fa
thunderbird-102.3.1-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c170581b99
seamonkey-2.53.14-3.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6da143f1a2
rubygem-pdfkit-0.8.7-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f8ec1c06a3
poppler-21.08.0-3.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b8b34e62ab
python3.6-3.6.15-6.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c9c086b06f
wavpack-5.5.0-2.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-85a85c84b3
mod_security-2.9.6-1.fc35 mod_security_crs-3.3.4-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2ff503c5d4
apptainer-1.1.2-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
59
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bca7996d14
annobin-10.81-1.fc35
23
https://bodhi.fedoraproject.org/updates/FEDORA-2022-97f6c4fd2a
libblockdev-2.28-2.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-38bd922ff7
libbluray-1.3.3-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-17a4844b47
tzdata-2022d-1.fc35
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-cd0501fc8f
ima-evm-utils-1.3.2-4.fc35
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-53d671cb30 rsync-3.2.6-2.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1454bee2fa
thunderbird-102.3.1-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bdc70ae90d
linux-firmware-20220913-140.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c68d90efc3 expat-2.4.9-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-55648ecee1
samba-4.15.10-0.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-008f09ea1f
ansible-2.9.27-4.fc35 ansible-packaging-1-8.1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-790d59287e
libmaxminddb-1.7.1-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-41293eb782
hwdata-0.363-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c8ba391ec2 glibc-2.34-43.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-53a5ba99d4
chkconfig-1.21-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f8ec1c06a3
poppler-21.08.0-3.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fbfafc9885
ipset-7.15-5.fc35.1
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f02122afc2
firefox-105.0.2-1.fc35
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c9c086b06f
wavpack-5.5.0-2.fc35
The following builds have been pushed to Fedora 35 updates-testing
AMF-1.4.26-1.fc35
desktopfolder-1.1.3-1.fc35
distribution-gpg-keys-1.78-1.fc35
flat-remix-theme-0.0.20220627-1.fc35
gnome-games-40.0-6.fc35
golang-github-armon-circbuf-0-0.14.20190420git5111143.fc35
golang-github-aws-smithy-1.13.3-1.fc35
golang-github-containerd-cni-1.1.7-1.fc35
golang-github-containerd-console-1.0.3-3.fc35
libolm-3.2.13-1.fc35
naev-0.9.4-1.fc35
naev-data-0.9.4-1.fc35
perl-Finance-Quote-1.53-1.fc35
python-argon2-cffi-21.1.0-1.fc35
python-limits-2.7.0-1.fc35
rust-reqwest-0.11.12-2.fc35
vdr-skinenigmang-0.1.4-1.fc35
yt-dlp-2022.10.04-1.fc35
Details about builds:
================================================================================
AMF-1.4.26-1.fc35 (FEDORA-2022-91ccf0d125)
Advanced Media Framework (AMF) SDK
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.26.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Simone Caronni <negativo17(a)gmail.com> - 1.4.26-1
- Update to 1.4.26.
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.24-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
desktopfolder-1.1.3-1.fc35 (FEDORA-2022-1acc33d0a2)
Bring your desktop back to life
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 1.1.3-1
- build(update): 1.1.3
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.78-1.fc35 (FEDORA-2022-bae41418ff)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
updated copr keys
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 10 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.78-1
- update copr keys
- change license to spdx
--------------------------------------------------------------------------------
================================================================================
flat-remix-theme-0.0.20220627-1.fc35 (FEDORA-2022-d231bb02f0)
Pretty simple theme inspired on material design
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 10 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 0.0.20220627-1
- chore(update): To latest version
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org>
0.0.20220527-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gnome-games-40.0-6.fc35 (FEDORA-2022-6697cf5b29)
Simple game launcher for GNOME
--------------------------------------------------------------------------------
Update Information:
build: Add Meson 0.60 patch
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 10 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 40.0-6
- build: Add Meson 0.60 patch
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 40.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 40.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2113247 - gnome-games: FTBFS in Fedora rawhide/f37
https://bugzilla.redhat.com/show_bug.cgi?id=2113247
--------------------------------------------------------------------------------
================================================================================
golang-github-armon-circbuf-0-0.14.20190420git5111143.fc35 (FEDORA-2022-a5a82c7f3b)
Golang circular (ring) buffer
--------------------------------------------------------------------------------
Update Information:
SPEC cleanup
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0-0.14
- SPEC cleanup
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.27
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 0-0.26
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.25
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-github-aws-smithy-1.13.3-1.fc35 (FEDORA-2022-477c23176f)
Smithy code generators for Go (in development)
--------------------------------------------------------------------------------
Update Information:
Update to 1.13.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.13.3-1
- Update to 1.13.3
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.8.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jun 17 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.8.0-3
- Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
CVE-2022-27191, CVE-2022-29526, CVE-2022-30629
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.8.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Sun Aug 29 2021 Fabian Affolter <mail(a)fabian-affolter.ch> 1.8.0-1
- Update to latest upstream release 1.8.0 (closes rhbz#1998714)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016591 - golang-github-aws-smithy-1.13.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016591
--------------------------------------------------------------------------------
================================================================================
golang-github-containerd-cni-1.1.7-1.fc35 (FEDORA-2022-ae3db57bce)
Generic CNI library to provide APIs for CNI plugin interactions
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.1.7-1
- Update to 1.1.7
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.1.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2109722 - golang-github-containerd-cni-1.1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2109722
--------------------------------------------------------------------------------
================================================================================
golang-github-containerd-console-1.0.3-3.fc35 (FEDORA-2022-5ea543967a)
Console package for Go
--------------------------------------------------------------------------------
Update Information:
SPEC cleanup
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.0.3-3
- SPEC cleanup
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libolm-3.2.13-1.fc35 (FEDORA-2022-b580b542be)
Double Ratchet cryptographic library
--------------------------------------------------------------------------------
Update Information:
Updated to version 3.2.13.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Vitaly Zaitsev <vitaly(a)easycoding.org> - 3.2.13-1
- Updated to version 3.2.13.
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.12-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 3.2.12-2
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
================================================================================
naev-0.9.4-1.fc35 (FEDORA-2022-5f799146bf)
2d action, RPG space game
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.4 with fixes for mission bugs
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Jonathan Dieter <jdieter(a)gmail.com> - 0.9.4-1
- Update to 0.9.4
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1968272 - naev-0.9.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1968272
[ 2 ] Bug #2109259 - New upstream version is available.
https://bugzilla.redhat.com/show_bug.cgi?id=2109259
--------------------------------------------------------------------------------
================================================================================
naev-data-0.9.4-1.fc35 (FEDORA-2022-5f799146bf)
Data files for NAEV
--------------------------------------------------------------------------------
Update Information:
Update to 0.9.4 with fixes for mission bugs
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Jonathan Dieter <jdieter(a)gmail.com> - 0.9.4-1
- Update to 0.9.4
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1968272 - naev-0.9.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1968272
[ 2 ] Bug #2109259 - New upstream version is available.
https://bugzilla.redhat.com/show_bug.cgi?id=2109259
--------------------------------------------------------------------------------
================================================================================
perl-Finance-Quote-1.53-1.fc35 (FEDORA-2022-0d956e603a)
A Perl module that retrieves stock and mutual fund quotes
--------------------------------------------------------------------------------
Update Information:
Current upstream maintenance release. A few modules updated and fixed.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Paul Howarth <paul(a)city-fan.org> - 1.53-1
- Update to 1.53 (rhbz#2133215)
- Changed bug tracker to
https://github.com/finance-quote/finance-quote/issues
- DWS.pm - Set $info{$symbol, 'symbol'} to $symbol
- Union.pm - Reworked for a different CSV file (GH#231)
- CurrencyRates/AlphaVantage.pm - API CURRENCY_EXCHANGE_RATE no longer
accepts free API keys: changed to use FX_DAILY API (GH#229, GH#230)
- Set minimum version for LWP::UserAgent to honor redirects
- CurrencyRates/AlphaVantage.pm - Added logic to account for empty JSON
returned from currency exchange fetch
- Bourso.pm - Added Europe and France back as failover methods
- Tradeville.pm - Changed hostname in URL to tradeville.ro, and added logic
to better account for the symbol not being found
- YahooJSON.pm - Account for symbols with '&' (GH#202)
- Minor change to isoTime function in Quote.pm
- TSP.pm - Update URL and handling of dates (GH#227)
- Use SPDX-format license tag
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.52-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2133215 - perl-Finance-Quote-1.53 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2133215
--------------------------------------------------------------------------------
================================================================================
python-argon2-cffi-21.1.0-1.fc35 (FEDORA-2022-0d3ef549e9)
The secure Argon2 password hashing algorithm
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 10 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 21.1.0-1
- build(update): 21.1.0
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.1.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 20.1.0-9
- Rebuilt for Python 3.11
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 20.1.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-limits-2.7.0-1.fc35 (FEDORA-2022-8cc5b34598)
Utilities to implement rate limiting using various strategies
--------------------------------------------------------------------------------
Update Information:
Initial package for Fedora 35
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.7.0-1
- Support F36 and F35 (close RHBZ#2133279)
- Don���t loosen Sphinx version bound on releases where we don���t have to do so
- Update to 2.7.0 (close RHBZ#2107863)
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jul 8 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.6.3-1
- Update to 2.6.3 (
https://github.com/alisaifee/limits/releases/tag/2.6.3)
- Restore sphinxext-opengraph doc dependency; it is now packaged
- Backport upstream support for Sphinx 5 (fix RHBZ#2105292)
* Tue Jun 14 2022 Python Maint <python-maint(a)redhat.com> - 2.6.2-2
- Rebuilt for Python 3.11
* Tue May 24 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.6.2-1
- Update to 2.6.2
- Add extras metapackages where dependencies are available
- Use more generated BuildRequires
- Enable some tests
- Build the PDF documentation
* Wed May 11 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 2.6.1-1
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2107863 - python-limits-2.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2107863
[ 2 ] Bug #2133279 - Build python-limits for Fedora 35 + 36
https://bugzilla.redhat.com/show_bug.cgi?id=2133279
--------------------------------------------------------------------------------
================================================================================
rust-reqwest-0.11.12-2.fc35 (FEDORA-2022-4014a3ea4e)
Higher level HTTP client library
--------------------------------------------------------------------------------
Update Information:
Regenerate packaging with fix for
https://pagure.io/fedora-
rust/rust2rpm/issue/220 ---- Update to version 0.11.12.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 9 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.11.12-2
- Don't drop the serde_json dependency from the json feature
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.11.12-1
- Update to version 0.11.12; Fixes RHBZ#2128505
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.11.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
vdr-skinenigmang-0.1.4-1.fc35 (FEDORA-2022-22f82fc974)
A skin for VDR based on the Enigma text2skin add on
--------------------------------------------------------------------------------
Update Information:
Update to 0.1.4-1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 10 2022 Martin Gansser <martinkg(a)fedoraproject.org> - 0.1.4-1
- Update to new URL
- Update to 0.1.4
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.3-23.20180501git995b108
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sat Feb 5 2022 Martin Gansser <martinkg(a)fedoraproject.org> -
0.1.3-22.20180501git995b108
- Rebuilt for new VDR API version
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.1.3-21.20180501git995b108
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Dec 30 2021 Martin Gansser <martinkg(a)fedoraproject.org> -
0.1.3-20.20180501git995b108
- Rebuilt for new VDR API version
--------------------------------------------------------------------------------
================================================================================
yt-dlp-2022.10.04-1.fc35 (FEDORA-2022-9d0f700961)
A command-line program to download videos from online video platforms
--------------------------------------------------------------------------------
Update Information:
Update to 2022.10.04. Fixes rhbz#2132726.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 8 2022 Maxwell G <gotmax(a)e.email> - 2022.10.04-1
- Update to 2022.10.04. Fixes rhbz#2132726.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2132726 - yt-dlp-2022.10.04 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2132726
--------------------------------------------------------------------------------