The following Fedora 35 Security updates need testing:
Age URL
209
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e85e6cfc9
libdxfrw-1.0.1-3.fc35 librecad-2.2.0-0.13.rc3.fc35
201
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
34
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d7f95e65dd
booth-1.0-251.3.bfb2f92.git.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ddfeee50c9
webkit2gtk3-2.36.7-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fe1a4e3cf0
libtar-1.2.20-25.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-680ea95f71
tcpreplay-4.4.2-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-de968d1b6c
rubygem-puma-4.3.6-5.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8e1df11a7a
insight-13.0.50.20220502-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1ca1d22165 exim-4.96-2.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
20
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bca7996d14
annobin-10.81-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-48e82b4eda
dbus-broker-32-1.fc35
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-564484bcd4
twolame-0.4.0-1.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e4bd968e45
libreport-2.17.2-1.fc35
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ad62906a26
shadow-utils-4.9-10.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9a3f9767d1 ndctl-74-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-52f71b625b
ethtool-5.19-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-19b61cd789
librepo-1.14.4-1.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-781669c384 glibc-2.34-41.fc35
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ada487682a
tzdata-2022c-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ddfeee50c9
webkit2gtk3-2.36.7-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3a75635d6a
kde-settings-35.2-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c8a55de8c sssd-2.7.4-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f018f2c368 audit-3.0.9-1.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b6f267b811 koji-1.30.0-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5c5e12d1bd
redhat-rpm-config-202-1.fc35
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e5a363e490
binutils-2.37-25.fc35
The following builds have been pushed to Fedora 35 updates-testing
ansible-lint-5.4.0-1.fc35
c4project-0^20220823git9fa06ca-1.fc35
clifm-1.7-2.fc35
dr_libs-0^20220410git15f37e3-0.3.fc35
foot-1.13.1-1.fc35
git-2.37.3-1.fc35
kernel-5.19.6-100.fc35
nwg-panel-0.7.6-1.fc35
perl-FFI-Platypus-2.01-1.fc35
perl-Test2-Harness-1.0.126-1.fc35
python-apprise-1.0.0-1.fc35
python-colcon-cmake-0.2.27-1.fc35
python-colcon-notification-0.2.14-1.fc35
python-rich-12.5.1-2.fc35
quisk-4.2.4-1.fc35
xscreensaver-6.04-2.fc35
zlib-1.2.11-32.fc35
Details about builds:
================================================================================
ansible-lint-5.4.0-1.fc35 (FEDORA-2022-7d3f7f4aec)
Best practices checker for Ansible
--------------------------------------------------------------------------------
Update Information:
Backport python-rich-12.5.1 and ansible-lint-5.4.0 from Fedora 37
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2115195 - Please update it to 12.5.1
https://bugzilla.redhat.com/show_bug.cgi?id=2115195
--------------------------------------------------------------------------------
================================================================================
c4project-0^20220823git9fa06ca-1.fc35 (FEDORA-2022-26b457348a)
Useful CMake scripts
--------------------------------------------------------------------------------
Update Information:
- [fix] regex meta chars in 'RootDir' - [fix] g++12: googlebenchmark needs -Wno-
restrict
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net>
0^20220823git9fa06ca-1
- Update to 9fa06ca
* Wed Aug 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net>
0^20220804gitd99c4be-1
- Update to d99c4be (patch upstreamed)
--------------------------------------------------------------------------------
================================================================================
clifm-1.7-2.fc35 (FEDORA-2022-2e526a73ae)
Shell-like, command line terminal file manager
--------------------------------------------------------------------------------
Update Information:
update package description ---- initial package build
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 16 2022 Jonathan Wright <jonathan(a)almalinux.org> - 1.7-2
- adjust description per upstream request
-
https://github.com/leo-arch/clifm/issues/154#issuecomment-1233102727
* Tue Aug 16 2022 Jonathan Wright <jonathan(a)almalinux.org> - 1.7-1
- Initial package build
- rhbz#2118835
--------------------------------------------------------------------------------
================================================================================
dr_libs-0^20220410git15f37e3-0.3.fc35 (FEDORA-2022-8952fd33fa)
Single-file audio decoding libraries for C/C++
--------------------------------------------------------------------------------
Update Information:
Fix SSE4.1 instructions generated on x86_64
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net>
0^20220410git15f37e3-0.3
- Fix SSE4.1 instructions generated on x86_64
* Wed Aug 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net>
0^20220410git15f37e3-0.2
- Update License field to SPDX
* Wed Aug 31 2022 Benjamin A. Beasley <code(a)musicinmybrain.net>
0^20220410git15f37e3-0.1
- Drop ���forge��� macros to switch to modern snapshot versioning
--------------------------------------------------------------------------------
================================================================================
foot-1.13.1-1.fc35 (FEDORA-2022-48957ac46e)
Fast, lightweight and minimalistic Wayland terminal emulator
--------------------------------------------------------------------------------
Update Information:
Update to 1.13.1 (#2123078)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 1.13.1-1
- Update to 1.13.1 (#2123078)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123078 - foot-1.13.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123078
--------------------------------------------------------------------------------
================================================================================
git-2.37.3-1.fc35 (FEDORA-2022-9cf7976667)
Fast Version Control System
--------------------------------------------------------------------------------
Update Information:
Upstream bugfix release. Refer to the [release
notes](https://github.com/git/git/raw/v2.37.3/Documentation/RelNotes/2.37...
for details.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 30 2022 Todd Zullinger <tmz(a)pobox.com> - 2.37.3-1
- update to 2.37.3
- remove %changelog entries prior to 2020
- tests: try harder to find open ports for apache, git, and svn
* Sun Aug 14 2022 Todd Zullinger <tmz(a)pobox.com> - 2.37.2-2
- consolidate git-archimport removal in %prep
--------------------------------------------------------------------------------
================================================================================
kernel-5.19.6-100.fc35 (FEDORA-2022-6835ddb6d8)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.19.6 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.19.6-0]
- Revert "block: freeze the queue earlier in del_gendisk" (Justin M. Forbes)
- redhat/configs: aarch64: Turn on Apple Silicon configs for Fedora (Eric Curtin)
- redhat/Makefile: Always set UPSTREAM (Prarit Bhargava)
- Linux v5.19.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2122228 - CVE-2022-3028 kernel: race condition in xfrm_probe_algs can lead to
out-of-bounds read/write
https://bugzilla.redhat.com/show_bug.cgi?id=2122228
--------------------------------------------------------------------------------
================================================================================
nwg-panel-0.7.6-1.fc35 (FEDORA-2022-7f283b62fa)
GTK3-based panel for sway window manager
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 29 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 0.7.6-1
- chore(update): 0.7.6
--------------------------------------------------------------------------------
================================================================================
perl-FFI-Platypus-2.01-1.fc35 (FEDORA-2022-8278c0cc3e)
Write Perl bindings to non-Perl libraries with FFI
--------------------------------------------------------------------------------
Update Information:
This release corrects a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Petr Pisar <ppisar(a)redhat.com> - 2.01-1
- 2.01 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2122824 - perl-FFI-Platypus-2.01 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2122824
--------------------------------------------------------------------------------
================================================================================
perl-Test2-Harness-1.0.126-1.fc35 (FEDORA-2022-68557c3d0e)
Test2 Harness designed for the Test2 event system
--------------------------------------------------------------------------------
Update Information:
This release adds a yath resources subcommand to inspect resource usage.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Petr Pisar <ppisar(a)redhat.com> - 1.0.126-1
- 1.000126 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2122787 - perl-Test2-Harness-1.000126 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2122787
--------------------------------------------------------------------------------
================================================================================
python-apprise-1.0.0-1.fc35 (FEDORA-2022-5dc328f101)
A simple wrapper to many popular notification services used today
--------------------------------------------------------------------------------
Update Information:
Updated to v1.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Aug 6 2022 Chris Caron <lead2gold(a)gmail.com> - 1.0.0-1
- Updated to v1.0.0
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Jun 15 2022 Python Maint <python-maint(a)redhat.com> - 0.9.9-2
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
================================================================================
python-colcon-cmake-0.2.27-1.fc35 (FEDORA-2022-f6d01b2319)
Extension for colcon to support CMake packages
--------------------------------------------------------------------------------
Update Information:
Update to `colcon-cmake` 0.2.27
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Scott K Logan <logans(a)cottsay.net> - 0.2.27-1
- Update to 0.2.27 (rhbz#2123074)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123074 - python-colcon-cmake-0.2.27 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123074
--------------------------------------------------------------------------------
================================================================================
python-colcon-notification-0.2.14-1.fc35 (FEDORA-2022-8375b66175)
Extension for colcon to provide status notifications
--------------------------------------------------------------------------------
Update Information:
Update to `colcon-notification` 0.2.14
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Scott K Logan <logans(a)cottsay.net> - 0.2.14-1
- Update to 0.2.14 (rhbz#2123069)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2123069 - python-colcon-notification-0.2.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2123069
--------------------------------------------------------------------------------
================================================================================
python-rich-12.5.1-2.fc35 (FEDORA-2022-7d3f7f4aec)
Render rich text and beautiful formatting in the terminal
--------------------------------------------------------------------------------
Update Information:
Backport python-rich-12.5.1 and ansible-lint-5.4.0 from Fedora 37
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 12.5.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jul 12 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.5.1-1
- local build
* Sat Jul 9 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.4.4-4
- Add %pyproject_check_import to detect runtime errors
* Tue Jun 14 2022 Python Maint <python-maint(a)redhat.com> 12.4.4-3
- Rebuilt for Python 3.11
* Thu Jun 2 2022 Tom���� Hrn��iar <thrnciar(a)redhat.com> 12.4.4-2
- Temporarily disable some test so package builds with Python 3.11
* Tue May 31 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.4.4-1
- local build
* Fri May 13 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.4.1-2
- Remove upstreamed patch
* Fri May 13 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.4.1-1
- local build
* Wed May 11 2022 Charalampos Stratakis <cstratak(a)redhat.com> 12.3.0-2
- Fix a test case with Pygments 2.12.0
* Wed Apr 27 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.3.0-1
- local build
* Tue Apr 12 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.2.0-1
- local build
* Wed Mar 23 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.0.1-1
- local build
* Mon Mar 14 2022 Parag Nemade <pnemade(a)fedoraproject.org> 12.0.0-1
- local build
* Tue Feb 8 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> 11.2.0-1
- Update to 11.2.0 - Closes rhbz#2035874 rhbz#2042308
- Re-enable some tests that now work with Pygments-2.11
- Update homepage URL
* Mon Feb 7 2022 Karolina Surma <ksurma(a)redhat.com> 10.16.1-4
- Fix failing tests with Pygments 2.11 (#2042308)
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> 10.16.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Jan 18 2022 Miro Hron��ok <miro(a)hroncok.cz> 10.16.1-2
- Fix the built package name
* Mon Dec 13 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.16.0-1
- Update to 10.16.0 version (#2031494)
* Mon Dec 6 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.15.2-1
- Update to 10.15.2 version (#2028523)
* Tue Nov 30 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.15.1-1
- Update to 10.15.1 version (#2027489)
* Wed Nov 17 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.14.0-1
- Update to 10.14.0 version (#2023800)
* Mon Nov 8 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.13.0-1
- Update to 10.13.0 version (#2020951)
* Wed Oct 20 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.12.0-1
- Update to 10.12.0 version (#2011373)
* Tue Sep 28 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.11.0-1
- Update to 10.11.0 version (#2007584)
* Sat Sep 18 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.10.0-1
- Update to 10.10.0 version (#2005578)
* Thu Sep 2 2021 Parag Nemade <pnemade AT redhat DOT com> - 10.9.0-1
- Update to 10.9.0 version (#1998751)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2115195 - Please update it to 12.5.1
https://bugzilla.redhat.com/show_bug.cgi?id=2115195
--------------------------------------------------------------------------------
================================================================================
quisk-4.2.4-1.fc35 (FEDORA-2022-b3cc588ca9)
Software Defined Radio (SDR) software
--------------------------------------------------------------------------------
Update Information:
This is new version of quisk. ---- This is new version of quisk.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.2.4-1
- New version
* Tue Aug 30 2022 Jaroslav ��karvada <jskarvad(a)redhat.com> - 4.2.3-1
- New version
Resolves: rhbz#2122301
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.2.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2122301 - quisk-4.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2122301
--------------------------------------------------------------------------------
================================================================================
xscreensaver-6.04-2.fc35 (FEDORA-2022-3ec31e8cac)
X screen saver and locker
--------------------------------------------------------------------------------
Update Information:
With current xscreensaver, even after unblanking, sometimes running hacks got
unkilled and were living forever. This new rpm will fix this issue.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 31 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1:6.04-2
- watchdog_timer: don't relaunch hacks when unblanking
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:6.04-1.1
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
zlib-1.2.11-32.fc35 (FEDORA-2022-0b517a5397)
Compression and decompression library
--------------------------------------------------------------------------------
Update Information:
Fix for the CVE-2022-37434
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2116659 - CVE-2022-37434 zlib: a heap-based buffer over-read or buffer
overflow in inflate in inflate.c via a large gzip header extra field [fedora-35]
https://bugzilla.redhat.com/show_bug.cgi?id=2116659
[ 2 ] Bug #2116663 - CVE-2022-37434 zlib: a heap-based buffer over-read or buffer
overflow in inflate in inflate.c via a large gzip header extra field [fedora-36]
https://bugzilla.redhat.com/show_bug.cgi?id=2116663
--------------------------------------------------------------------------------