The following Fedora 35 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-421e65c5d4 usbview-3.0-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d02441b24
util-linux-2.37.3-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-914fa8641a
phpMyAdmin-5.1.2-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9421366d9c glibc-2.34-21.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b670788a8d
strongswan-5.9.5-2.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1bc7decc9
mingw-python-pillow-8.3.2-2.fc35 python-pillow-8.3.2-2.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-420bf9fc1e xen-4.15.1-5.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c0c11c4776
perl-Image-ExifTool-12.38-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7f67e9e695
trojita-0.7.0.1-0.13.20220117git266c757.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5770dad5f8
keylime-6.3.0-2.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1e29b8997a
mingw-qt5-qtsvg-5.15.2-6.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-51067372d7
stratisd-3.0.2-2.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
64
https://bodhi.fedoraproject.org/updates/FEDORA-2021-12f6c46ad8 qemu-6.1.0-13.fc35
22
https://bodhi.fedoraproject.org/updates/FEDORA-2022-39ffce84e3 gdb-11.1-6.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-02e49867f7
tigervnc-1.12.0-4.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9421366d9c glibc-2.34-21.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-850adec1a6
initscripts-10.14-1.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d02441b24
util-linux-2.37.3-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-001c2215a6 bolt-0.9.2-1.fc35
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-420bf9fc1e xen-4.15.1-5.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-542f81973a mesa-21.3.5-1.fc35
The following builds have been pushed to Fedora 35 updates-testing
ImageMagick-6.9.12.37-1.fc35
cool-retro-term-1.2.0-1.fc35
distrobox-1.2.12-1.fc35
golang-github-yuin-goldmark-highlighting-0-0.9.20220130git9216f9c.fc35
ibus-typing-booster-2.15.16-1.fc35
kernel-5.15.18-200.fc35
liblxi-1.15-1.fc35
mame-0.240-1.fc35
matrix-synapse-1.51.0-1.fc35
miniupnpc-2.2.3-2.fc35
opensips-3.1.7-2.fc35
pcm-202201-1.fc35
picom-8.2-6.fc35
primesieve-7.8-1.fc35
python-kubernetes-21.7.0-1.fc35
qmltermwidget-0.2.0-8.20220109git6322802.fc35
qownnotes-22.1.12-1.fc35
rubygem-rspec-mocks-3.10.3-1.fc35
shotwell-0.31.3-8.fc35
Details about builds:
================================================================================
ImageMagick-6.9.12.37-1.fc35 (FEDORA-2022-fc3e808731)
An X application for displaying and manipulating images
--------------------------------------------------------------------------------
Update Information:
Latest stable release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 29 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:6.9.12.37-1
- Update to 6.9.12.37 (#2034280)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1378891 - TIFF output does not preserve input depth
https://bugzilla.redhat.com/show_bug.cgi?id=1378891
--------------------------------------------------------------------------------
================================================================================
cool-retro-term-1.2.0-1.fc35 (FEDORA-2022-d8fb24d37c)
Terminal emulator mimicking a CRT display
--------------------------------------------------------------------------------
Update Information:
Update cool-retro-term to v1.2.0, using the latest git snapshot of qmltermwidget
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.2.0-1
- Update to v1.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2038833 - cool-retro-term-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2038833
--------------------------------------------------------------------------------
================================================================================
distrobox-1.2.12-1.fc35 (FEDORA-2022-52b6173a07)
Another tool for containerized command line environments on Linux
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.12
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 22 2022 alciregi <alciregi(a)fedoraproject.org> 1.2.12-1
- Update to 1.2.12
--------------------------------------------------------------------------------
================================================================================
golang-github-yuin-goldmark-highlighting-0-0.9.20220130git9216f9c.fc35
(FEDORA-2022-02771fac73)
A Syntax highlighting extension for the goldmark markdown parser
--------------------------------------------------------------------------------
Update Information:
Update to latest commit Fix tests with latest chroma
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 0-0.9
- Add patch for chroma 0.10.0
* Sun Jan 30 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 0-0.8
- Update to commit 9216f9c5aa010c549cc9fc92bb2593ab299f90d4
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.15.16-1.fc35 (FEDORA-2022-48737e8ddc)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.15.16
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Mike FABIAN <mfabian(a)redhat.com> - 2.15.16-1
- Update to 2.15.16
- Ignore MOD3_MASK (���Usually��� Scroll Lock) when matching key bindings
(Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/270)
- When a Modifier key release matches a hotkey command, return False not True.
(Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/269)
- Update emoji annotations from CLDR
- Update UnicodeData.txt UnicodeData-15.0.0d3.txt
--------------------------------------------------------------------------------
================================================================================
kernel-5.15.18-200.fc35 (FEDORA-2022-a39015bec2)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.15.18 stable kernel update contains fixes for a number of issues across
the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 29 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [5.15.18-0]
- Linux v5.15.18 (Justin M. Forbes)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2042404 - CVE-2022-0330 kernel: possible privileges escalation due to missing
TLB flush
https://bugzilla.redhat.com/show_bug.cgi?id=2042404
--------------------------------------------------------------------------------
================================================================================
liblxi-1.15-1.fc35 (FEDORA-2022-e03e23af24)
Library with simple API for communication with LXI devices
--------------------------------------------------------------------------------
Update Information:
# liblxi v1.15 * Fix meson libtirpc dependency Remove the hardcoded
include patch to libtirpc and replace it with one dynamically resolved via `pkg-
config`. The reason for implementing the meson dependency check this way is
to avoid linking with libtirpc because it is broken with regards to its Sun RPC
implementation so instead we link with the RPC implementation which still reside
in glibc. However, glibc removed their RPC header files so we need the headers
from libtirpc. Further investigation is required to find and fix the bug in
the libtirpc RPC implementation so we can get back to normal. They changed
something moving it out of glibc and they shouldn't have.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 23 2022 Robert Scheck <robert(a)fedoraproject.org> 1.15-1
- Upgrade to 1.15 (#2043963)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2043963 - liblxi-1.15 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2043963
--------------------------------------------------------------------------------
================================================================================
mame-0.240-1.fc35 (FEDORA-2022-567269a3b3)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
An update to the latest upstream release: *
https://www.mamedev.org/?p=509
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Julian Sikorski <belegdol(a)fedoraproject.org> 0.240-1
- Update to 0.240
--------------------------------------------------------------------------------
================================================================================
matrix-synapse-1.51.0-1.fc35 (FEDORA-2022-7f5f011ec0)
A Matrix reference homeserver written in Python using Twisted
--------------------------------------------------------------------------------
Update Information:
Update to v1.51.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 27 2022 Kai A. Hiller <V02460(a)gmail.com> - 1.51.0-1
- Update to v1.51.0
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.49.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
miniupnpc-2.2.3-2.fc35 (FEDORA-2022-26801eeb49)
Library and tool to control NAT in UPnP-enabled routers
--------------------------------------------------------------------------------
Update Information:
- Update to 2.2.3. - Update SPEC file (license, tabs/spaces, trim changelog,
etc.) - Switch to CMake build. - Drop static libraries. - Drop test client and
obsolete documentation. - Do not use static library when building Python module.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jan 29 2022 Simone Caronni <negativo17(a)gmail.com> - 2.2.3-2
- Build fixes.
* Fri Jan 28 2022 Simone Caronni <negativo17(a)gmail.com> - 2.2.3-1
- Update to 2.2.3.
- Update SPEC file (license, tabs/spaces, trim changelog, etc.)
- Switch to CMake build.
- Drop static libraries.
- Drop test client and obsolete documentation.
- Do not use static library when building Python module.
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1909534 - miniupnpc-2.2.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1909534
[ 2 ] Bug #2044861 - Allow building miniupnpc on EPEL 8+
https://bugzilla.redhat.com/show_bug.cgi?id=2044861
--------------------------------------------------------------------------------
================================================================================
opensips-3.1.7-2.fc35 (FEDORA-2022-d354d6a4a9)
Open Source SIP Server
--------------------------------------------------------------------------------
Update Information:
OpenSIPS 3.1.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.7-2
- Fix FTBFS with a recent gcc on x86_64 (rhbz #2008777).
* Sat Jan 29 2022 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.7-1
- Ver. 3.1.7
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Wed Oct 20 2021 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.6-1
- Ver. 3.1.6
* Sun Sep 26 2021 Peter Lemenkov <lemenkov(a)gmail.com> - 3.1.5-1
- Ver. 3.1.5
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 3.1.2-5
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
================================================================================
pcm-202201-1.fc35 (FEDORA-2022-476e80002d)
Processor Counter Monitor
--------------------------------------------------------------------------------
Update Information:
update to upstream 202201 version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 202112-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
picom-8.2-6.fc35 (FEDORA-2022-b182131b51)
Lightweight compositor for X11 (previously a compton fork)
--------------------------------------------------------------------------------
Update Information:
fix: FTBFS 36 and building with docs
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 8.2-6
- fix: FTBFS 36 and building with docs
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 8.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Dec 24 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 8.2-4
- Rebuild(uthash)
--------------------------------------------------------------------------------
================================================================================
primesieve-7.8-1.fc35 (FEDORA-2022-556b737d73)
Fast prime number generator
--------------------------------------------------------------------------------
Update Information:
Update to primesieve-7.8
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Kim Walisch <walki(a)fedoraproject.org> - 7.8-1
- Update to primesieve-7.8
- Improved pre-sieving, up to 10% speedup
- Improved primesieve::iterator, up to 15% speedup
--------------------------------------------------------------------------------
================================================================================
python-kubernetes-21.7.0-1.fc35 (FEDORA-2022-edab6e53bc)
Python client for the kubernetes API.
--------------------------------------------------------------------------------
Update Information:
Update to 21.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Jason Montleon <jmontleo(a)redhat.com> - 1:21.7.0-1
- Update to 21.7.0
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:18.20.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2006150 - python-kubernetes-21.7.0b1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2006150
--------------------------------------------------------------------------------
================================================================================
qmltermwidget-0.2.0-8.20220109git6322802.fc35 (FEDORA-2022-d8fb24d37c)
A port of QTermWidget to QML
--------------------------------------------------------------------------------
Update Information:
Update cool-retro-term to v1.2.0, using the latest git snapshot of qmltermwidget
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Artur Frenszek-Iwicki <fedora(a)svgames.pl> -
0.2.0-8.20220109git6322802
- Update to latest git snapshot (required by cool-retro-term)
- Drop Patch0 (issue fixed upstream)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2038833 - cool-retro-term-1.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2038833
--------------------------------------------------------------------------------
================================================================================
qownnotes-22.1.12-1.fc35 (FEDORA-2022-92989f3ed5)
Plain-text file markdown note taking with Nextcloud integration
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.1.12-1
- chore(update): 22.1.12
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 21.9.13-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rubygem-rspec-mocks-3.10.3-1.fc35 (FEDORA-2022-2c32088bcc)
RSpec's 'test double' framework (mocks and stubs)
--------------------------------------------------------------------------------
Update Information:
New version 3.10.3 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 3.10.3-1
- 3.10.3
* Sun Jan 30 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 3.10.2-3
- BR: rubygem(rake) for check
* Thu Jan 20 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 3.10.2-2
- Execute cucumber test
--------------------------------------------------------------------------------
================================================================================
shotwell-0.31.3-8.fc35 (FEDORA-2022-f755b31430)
A photo organizer for the GNOME desktop
--------------------------------------------------------------------------------
Update Information:
Add upstream patches to fix broken import from memory cards.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 30 2022 Thomas Moschny <thomas.moschny(a)gmx.de> - 0.31.3-8
- Cherry-pick upstream patches to fix broken image import (bz#2010178).
- Cherry-pick upstream patches to fix FTBFS with vala 0.55.
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31.3-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2010178 - Unable to import photos/videos from memory cards
https://bugzilla.redhat.com/show_bug.cgi?id=2010178
--------------------------------------------------------------------------------