The following Fedora 35 Security updates need testing:
Age URL
235
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-204ee3da84
unbound-1.16.3-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-58055cb1ef
nodejs-16.17.1-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-afdea1c747 php-8.0.24-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e0a87993b8
booth-1.0-251.4.bfb2f92.git.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-4490a4772d
php-twig-1.44.7-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d39b2a755b
php-twig2-2.15.3-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e915614918
php-twig3-3.4.3-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c68d90efc3 expat-2.4.9-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1454bee2fa
thunderbird-102.3.1-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-847c67b3cd
dotnet3.1-3.1.423-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c170581b99
seamonkey-2.53.14-3.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6da143f1a2
rubygem-pdfkit-0.8.7-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
54
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bca7996d14
annobin-10.81-1.fc35
18
https://bodhi.fedoraproject.org/updates/FEDORA-2022-97f6c4fd2a
libblockdev-2.28-2.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-68ba1f1566
appstream-data-35-8.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ece971e713
langtable-0.0.60-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-204ee3da84
unbound-1.16.3-1.fc35
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-642c095091
dnf-plugins-core-4.3.1-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-38bd922ff7
libbluray-1.3.3-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-17a4844b47
tzdata-2022d-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-cd0501fc8f
ima-evm-utils-1.3.2-4.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-53d671cb30 rsync-3.2.6-2.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1454bee2fa
thunderbird-102.3.1-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bdc70ae90d
linux-firmware-20220913-140.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c68d90efc3 expat-2.4.9-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-55648ecee1
samba-4.15.10-0.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-008f09ea1f
ansible-2.9.27-4.fc35 ansible-packaging-1-8.1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-790d59287e
libmaxminddb-1.7.1-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-41293eb782
hwdata-0.363-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8c066873cc
firefox-105.0.1-2.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c8ba391ec2 glibc-2.34-43.fc35
The following builds have been pushed to Fedora 35 updates-testing
chkconfig-1.21-1.fc35
cppmyth-2.14.7-1.fc35
emacs-json-reformat-0.0.7-1.fc35
emacs-s-1.13.0-1.fc35
osbuild-68-1.fc35
osbuild-composer-65-1.fc35
pmbootstrap-1.47.0-1.fc35
poppler-21.08.0-3.fc35
rust-cascade-1.0.1-1.fc35
rust-console-0.15.2-1.fc35
rust-ctr-0.9.2-1.fc35
rust-mac_address-1.1.4-1.fc35
rust-os_pipe-1.1.1-1.fc35
rust-os_type-2.6.0-1.fc35
rust-read-process-memory-0.1.5-1.fc35
rust-rustc_tools_util-0.2.1-1.fc35
rust-smallvec-1.10.0-1.fc35
rust-time-0.3.15-1.fc35
sane-backends-1.1.1-8.fc35
waylandpp-0.2.10-1.fc35
Details about builds:
================================================================================
chkconfig-1.21-1.fc35 (FEDORA-2022-53a5ba99d4)
A system tool for maintaining the /etc/rc*.d hierarchy
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Jan Macku <jamacku(a)redhat.com> - 1.21-1
- ci: Add CodeQL to replace LGTM
- alternatives: replace master/slave with leader/follower
- chkconfig: use correct cmp function
- Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
- ci: Add Shell linter - Differential ShellCheck
- ci: Use more inclusive terminology in workflows
- ci: Update workflows, packit and dependabot
- Translated using Weblate (Friulian)
- Translated using Weblate (Swedish)
- Translated using Weblate (Estonian)
- Translated using Weblate (Georgian)
- Translated using Weblate (Polish)
- Translated using Weblate (Korean)
- Translated using Weblate (Czech)
- Translations update from Fedora Weblate (#77)
- Translations update from Fedora Weblate (#75)
- Translations update from Fedora Weblate (#74)
- Translations update from Fedora Weblate (#73)
- Translated using Weblate (Ukrainian)
- Update translation files
- Family mentioned for --set in both man and help
- Translated using Weblate (French)
- build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
- Translated using Weblate (German)
- Add LGTM badges to README
- Merge remote-tracking branch 'weblate/master'
- Translated using Weblate (Indonesian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Korean)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Turkish)
- Translated using Weblate (Polish)
- Translated using Weblate (Norwegian Nynorsk)
- Update translation files
- Translated using Weblate (Finnish)
- Translated using Weblate (Czech)
- Translated using Weblate (Swedish)
- Translated using Weblate (Italian)
- Translated using Weblate (Spanish)
- Translated using Weblate (Chinese (Simplified))
* Wed Jul 28 2021 Jan Macku <jamacku(a)redhat.com> - 1.20-1
- spec: Replace not working awk command with sed (#62)
--------------------------------------------------------------------------------
================================================================================
cppmyth-2.14.7-1.fc35 (FEDORA-2022-7390babd17)
Client interface for the MythTV backend
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 2.14.7-1
- Update to 2.14.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2037504 - cppmyth-2.14.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2037504
--------------------------------------------------------------------------------
================================================================================
emacs-json-reformat-0.0.7-1.fc35 (FEDORA-2022-1851d65023)
Reformatting tool for JSON
--------------------------------------------------------------------------------
Update Information:
* Mark custom variables as safe for local variables
([
GH-29](https://github.com/gongo/json-reformat/pull/29)) * Replace deprecated
'cl package by 'cl-lib ([
GH-42](https://github.com/gongo/json-reformat/pull/42))
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 4 2022 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 0.0.7-1
- Update to 0.0.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2124436 - emacs-json-reformat-0.0.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2124436
--------------------------------------------------------------------------------
================================================================================
emacs-s-1.13.0-1.fc35 (FEDORA-2022-c12c3e71a6)
The long lost Emacs string manipulation library
--------------------------------------------------------------------------------
Update Information:
Emacs version support notice * compatibility support reduced to 24.1 * added
* s-spaced-words * s-chop-left * s-chop-right * bugfix *
s-replace-all [#138](https://github.com/magnars/s.el/issues/138) * fix
declare position [#145](https://github.com/magnars/s.el/issues/145) *
silence docstring compiler warnings (Emacs 29.1)
[#147](https://github.com/magnars/s.el/issues/147)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 1.13.0-1
- Update to 1.13.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2122280 - emacs-s-1.13.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2122280
--------------------------------------------------------------------------------
================================================================================
osbuild-68-1.fc35 (FEDORA-2022-165e4dd521)
A build system for OS images
--------------------------------------------------------------------------------
Update Information:
Update to the latest version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 28 2022 Packit <hello(a)packit.dev> - 68-1
Changes with 68
----------------
* manifest-db: propage the osbuild SHA on manifest-db (#1124)
* packit: Enable Bodhi updates for unstable Fedoras (#1128)
* packit: add epel-9 to copr_build (#1118)
* selinux: Update based on latest packaging guide (#1127)
* stages/greenboot: avoid new pylint suppressions (#1114)
* test/src: improve file enumeration (#1106)
Contributions from: David Rheinsberg, Ond��ej Budai, Simon Steinbeiss, Thomas Lavocat, Vit
Mojzis
��� Somewhere on the Internet, 2022-09-28
--------------------------------------------------------------------------------
================================================================================
osbuild-composer-65-1.fc35 (FEDORA-2022-80c8ca98a2)
An image building service based on osbuild
--------------------------------------------------------------------------------
Update Information:
New upstream release: 65
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Packit <hello(a)packit.dev> - 65-1
Changes with 65
----------------
* Appsre cleanups (#3024)
* Fix blueprint commit message (#3026)
* Update Fedora IoT Installer definition (#3020)
* [main] distro/rhel9: edge images default to LVM (#2861)
* app-sre: Update AMIs to rhel-9.0 (#3019)
* build(deps): bump
cloud.google.com/go/compute from 1.9.0 to 1.10.0 (#2998)
* build(deps): bump
github.com/aws/aws-sdk-go from 1.44.104 to 1.44.108 (#3034)
* build(deps): bump
github.com/google/go-cmp from 0.5.8 to 0.5.9 (#3003)
* build(deps): bump
google.golang.org/api from 0.96.0 to 0.97.0 (#3012)
* build(deps): bump
google.golang.org/api from 0.97.0 to 0.98.0 (#3027)
* dbjobqueue: Backoff after listener error (#3036)
* packer: add fedora 36 (#3008)
* packer: remove Fedora 35 (#3035)
* packit: Enable Bodhi updates for unstable Fedoras (#3017)
* spec: bump osbuild dep to >= 65 (#3007)
* tagging a blueprint wasn't working correctly (#3031)
* templates/composer.yml: update splunk port for splunk cloud (#3009)
* templates/packer: Allow token url to be set by cloud-init vars (#3010)
* test: add CIV tool to azure.sh (#2923)
* test: get correct CIV tag in azure.sh (#3043)
* worker: log error details on job failure (#3025)
Contributions from: Achilleas Koutsou, Antonio Murdaca, Brian C. Lane, Diaa Sami, Irene
Diez, Juan Abia, Ond��ej Budai, Sanne Raymaekers, Simon Steinbeiss, Xiaofeng Wang,
dependabot[bot]
��� Somewhere on the Internet, 2022-10-05
--------------------------------------------------------------------------------
================================================================================
pmbootstrap-1.47.0-1.fc35 (FEDORA-2022-389b06416d)
A sophisticated chroot/build/flash tool to develop and install postmarketOS
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.47.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> 1.47.0-1
- New upstream release 1.47.0, fixes rhbz#2118414
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.45.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2118414 - pmbootstrap-1.47.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2118414
--------------------------------------------------------------------------------
================================================================================
poppler-21.08.0-3.fc35 (FEDORA-2022-f8ec1c06a3)
PDF rendering library
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-38784
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Marek Kasik <mkasik(a)redhat.com> - 21.08.0-3
- Check for overflow when computing number of symbols
- in JBIG2 text region
- Resolves: #2124530
* Wed Jun 15 2022 Marek Kasik <mkasik(a)redhat.com> - 21.08.0-2
- Don't run out of file for Hints
- Resolves: #2090965
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2124527 - CVE-2022-38784 poppler: integer overflow in JBIG2 decoder using
malformed files
https://bugzilla.redhat.com/show_bug.cgi?id=2124527
--------------------------------------------------------------------------------
================================================================================
rust-cascade-1.0.1-1.fc35 (FEDORA-2022-65ee8c08a4)
Dart-like cascade macro for Rust
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.0.1-1
- Update to version 1.0.1; Fixes RHBZ#2131507
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-console-0.15.2-1.fc35 (FEDORA-2022-d53d2734af)
Terminal and console abstraction for Rust
--------------------------------------------------------------------------------
Update Information:
Update to version 0.15.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.15.2-1
- Update to version 0.15.2; Fixes RHBZ#2130589
--------------------------------------------------------------------------------
================================================================================
rust-ctr-0.9.2-1.fc35 (FEDORA-2022-c87ece6ede)
CTR block modes of operation
--------------------------------------------------------------------------------
Update Information:
Update to version 0.9.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.9.2-1
- Update to version 0.9.2; Fixes RHBZ#2131122
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 0.9.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-mac_address-1.1.4-1.fc35 (FEDORA-2022-e50a0c8e48)
Cross-platform retrieval of a network interface MAC address
--------------------------------------------------------------------------------
Update Information:
New version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Jan Macku <jamacku(a)redhat.com> 1.1.4-1
- 1.1.4
--------------------------------------------------------------------------------
================================================================================
rust-os_pipe-1.1.1-1.fc35 (FEDORA-2022-9a2cab2177)
Cross-platform library for opening OS pipes
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.1.1-1
- Update to version 1.1.1; Fixes RHBZ#2131494
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-os_type-2.6.0-1.fc35 (FEDORA-2022-72ba912eff)
Detect the operating system type
--------------------------------------------------------------------------------
Update Information:
Update to version 2.6.0.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 2.6.0-1
- Update to version 2.6.0; Fixes RHBZ#2130396
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.4.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 2.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-read-process-memory-0.1.5-1.fc35 (FEDORA-2022-596e07ca8e)
Read memory from another process
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.5.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.1.5-1
- Update to version 0.1.5; Fixes RHBZ#2131620
--------------------------------------------------------------------------------
================================================================================
rust-rustc_tools_util-0.2.1-1.fc35 (FEDORA-2022-67056d3d5d)
Small helper to generate version information for git packages
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.1.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.2.1-1
- Update to version 0.2.1; Fixes RHBZ#2131467
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-smallvec-1.10.0-1.fc35 (FEDORA-2022-8fcde791d2)
Store up to a small number of items on the stack
--------------------------------------------------------------------------------
Update Information:
Update to version 1.10.0.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 1.10.0-1
- Update to version 1.10.0; Fixes RHBZ#2131625
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 1.9.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-time-0.3.15-1.fc35 (FEDORA-2022-8a1b038e85)
Date and time library
--------------------------------------------------------------------------------
Update Information:
Update to version 0.3.15.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Fabio Valentini <decathorpe(a)gmail.com> 0.3.15-1
- Update to version 0.3.15; Fixes RHBZ#2131915
--------------------------------------------------------------------------------
================================================================================
sane-backends-1.1.1-8.fc35 (FEDORA-2022-09c3050921)
Scanner access software
--------------------------------------------------------------------------------
Update Information:
2130997 - rpm -Va reports error on /etc/sane.d/epsonds.conf
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 4 2022 Zdenek Dohnal <zdohnal(a)redhat.com> - 1.1.1-8
- 2130997 - rpm -Va reports error on /etc/sane.d/epsonds.conf
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2130997 - rpm -Va reports error on /etc/sane.d/epsonds.conf
https://bugzilla.redhat.com/show_bug.cgi?id=2130997
--------------------------------------------------------------------------------
================================================================================
waylandpp-0.2.10-1.fc35 (FEDORA-2022-0d1c09f631)
Wayland C++ bindings
--------------------------------------------------------------------------------
Update Information:
Version 0.2.9 accidentally did break the ABI. The responsible commit has been
reverted in this Version. Also, C++20 keywords have been added to the scanner.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 5 2022 Mohamed El Morabity <melmorabity(a)fedoraproject.org> - 0.2.10-1
- Update to 0.2.10
--------------------------------------------------------------------------------