The following Fedora 35 Security updates need testing: Age URL 40 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c0f58bf07 mysql-connector-java-8.0.27-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-17a9cdcf98 quaternion-0.0.95.1-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c6f471ce0f log4j-2.17.1-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-22594d9eb0 chromium-96.0.4664.110-3.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a7a558062e kernel-5.15.12-200.fc35
The following Fedora 35 Critical Path updates have yet to be approved: Age URL 33 https://bodhi.fedoraproject.org/updates/FEDORA-2021-12f6c46ad8 qemu-6.1.0-13.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fd774f1eaf libguestfs-1.46.2-1.fc35 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-86827209fd v4l-utils-1.22.1-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a7a558062e kernel-5.15.12-200.fc35
The following builds have been pushed to Fedora 35 updates-testing
golang-github-tdewolff-minify-2.9.26-1.fc35 gwenhywfar-5.8.1-1.fc35 jacoco-0.8.7-3.fc35 jmol-14.32.6-1.fc35 kalendar-0.4.0-1.fc35 magic-8.3.245-1.fc35 mediawiki-1.36.3-1.fc35 mesa-21.3.3-1.fc35 nwg-panel-0.5.3-1.fc35 openfst-1.8.1-1.fc35 python-pyphen-0.12.0-1.fc35 python-samloader-0-1.20211229git8203752.fc35 vdr-live-3.1.4-0.2.20211228git0fbd9b3.fc35
Details about builds:
================================================================================ golang-github-tdewolff-minify-2.9.26-1.fc35 (FEDORA-2021-20f77c99fe) Go minifiers for web formats -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 30 2021 Elliott Sales de Andrade quantum.analyst@gmail.com 2.9.26-1 - Update to latest version (#2036224) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2036224 - golang-github-tdewolff-minify-2.9.26 is available https://bugzilla.redhat.com/show_bug.cgi?id=2036224 --------------------------------------------------------------------------------
================================================================================ gwenhywfar-5.8.1-1.fc35 (FEDORA-2021-b527d8d854) A multi-platform helper library for other libraries -------------------------------------------------------------------------------- Update Information:
5.8.1 -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 30 2021 Gwyn Ciesla gwync@protonmail.com - 5.8.1-1 - 5.8.1 * Tue Dec 28 2021 Gwyn Ciesla gwync@protonmail.com - 5.8.0-1 - 5.8.0 * Tue Sep 14 2021 Sahana Prasad sahana@redhat.com - 5.6.0-3 - Rebuilt with OpenSSL 3.0.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2036206 - gwenhywfar-5.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2036206 --------------------------------------------------------------------------------
================================================================================ jacoco-0.8.7-3.fc35 (FEDORA-2021-5f1c86ec99) Java Code Coverage for Eclipse -------------------------------------------------------------------------------- Update Information:
Changelog ``` * Wed Dec 22 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 0.8.7-3 - Redefined properties defined with beanshell-maven-plugin, which was removed - Add wrapper scripts for jacococli ``` -------------------------------------------------------------------------------- ChangeLog:
* Wed Dec 22 2021 Didik Supriadi didiksupriadi41@fedoraproject.org - 0.8.7-3 - Redefined properties defined with beanshell-maven-plugin, which was removed - Add wrapper scripts for jacococli --------------------------------------------------------------------------------
================================================================================ jmol-14.32.6-1.fc35 (FEDORA-2021-59b5b4ac1b) Java viewer for chemical structures in 3D -------------------------------------------------------------------------------- Update Information:
Changes in version 14.32.6: - Extensive changes and documentation for the modelkit feature. See the documentation. - bug fix: (JavaScript only) insignificant script processing error reported in JavaScript console - bug fix: `show INCHI` broken in 14.32.5 - new feature: hack added for reading invalid CIF files created by Materials Studio - Apache Log4J vulnerability checked (not applicable) - bug fix: InChI for deutero compounds not working - bug fix: InChI failure should show "?" not SMILES -------------------------------------------------------------------------------- ChangeLog:
* Wed Dec 29 2021 Jerry James loganjerry@gmail.com - 14.32.6-1 - Version 14.32.6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2027743 - jmol-14.32.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2027743 --------------------------------------------------------------------------------
================================================================================ kalendar-0.4.0-1.fc35 (FEDORA-2021-475cc4c43d) A calendar application using Akonadi to sync with external services -------------------------------------------------------------------------------- Update Information:
Version 0.4.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Dec 26 2021 Justin Zobel justin@1707.io - 0.4.0-1 - Verison bump to 0.4.0 --------------------------------------------------------------------------------
================================================================================ magic-8.3.245-1.fc35 (FEDORA-2021-7dcf9d7e89) A very capable VLSI layout tool -------------------------------------------------------------------------------- Update Information:
New version 8.3.245 is released. -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 30 2021 Mamoru TASAKA mtasaka@fedoraproject.org - 8.3.245-1 - 8.3.245 --------------------------------------------------------------------------------
================================================================================ mediawiki-1.36.3-1.fc35 (FEDORA-2021-bef1126908) A wiki engine -------------------------------------------------------------------------------- Update Information:
https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3 -------------------------------------------------------------------------------- ChangeLog:
* Wed Dec 29 2021 Michael Cronenworth mike@cchtml.com - 1.36.3-1 - Update to 1.36.3 - https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2036080 - CVE-2021-45471 mediawiki: blocked IP addresses are allowed to edit EntitySchema items [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036080 [ 2 ] Bug #2036083 - CVE-2021-45472 mediawiki: XSS in Wikibase using formatter URL [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036083 [ 3 ] Bug #2036088 - CVE-2021-45473 mediawiki: XSS on page information Wikibase central description [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036088 [ 4 ] Bug #2036090 - CVE-2021-45474 mediawiki: XSS in Special:ImportFile URL [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036090 --------------------------------------------------------------------------------
================================================================================ mesa-21.3.3-1.fc35 (FEDORA-2021-1d89099e0a) Mesa graphics libraries -------------------------------------------------------------------------------- Update Information:
Update to 21.3.3 -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 30 2021 Pete Walter pwalter@fedoraproject.org 21.3.3-1 - Update to 21.3.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2036141 - mesa-21.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2036141 --------------------------------------------------------------------------------
================================================================================ nwg-panel-0.5.3-1.fc35 (FEDORA-2021-011516d057) GTK3-based panel for sway window manager -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 30 2021 Artem Polishchuk ego.cordatus@gmail.com - 0.5.3-1 - chore(update): 0.5.3 --------------------------------------------------------------------------------
================================================================================ openfst-1.8.1-1.fc35 (FEDORA-2021-046ab1798b) Weighted finite-state transducer library -------------------------------------------------------------------------------- Update Information:
New upstream version -------------------------------------------------------------------------------- ChangeLog:
* Wed Dec 15 2021 W. Michael Petullo mike@flyn.org - 1.8.1-1 - New upstream version --------------------------------------------------------------------------------
================================================================================ python-pyphen-0.12.0-1.fc35 (FEDORA-2021-1183cb54ff) Pure Python module to hyphenate text -------------------------------------------------------------------------------- Update Information:
update to 0.12.0, official Python 3.10 compatibility -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 30 2021 Felix Schwarz fschwarz@fedoraproject.org - 0.12.0-1 - update to 0.12.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2035917 - python-pyphen-0.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2035917 --------------------------------------------------------------------------------
================================================================================ python-samloader-0-1.20211229git8203752.fc35 (FEDORA-2021-2c1127f4f7) Download Samsung firmware from official servers -------------------------------------------------------------------------------- Update Information:
Initial import; Fixes: RHBZ#2035504 -------------------------------------------------------------------------------- ChangeLog:
* Wed Dec 29 2021 Davide Cavalca dcavalca@fedoraproject.org 0-1 - Initial import; Fixes: RHBZ#2035504 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2035504 - Review Request: python-samloader - Download Samsung firmware from official servers https://bugzilla.redhat.com/show_bug.cgi?id=2035504 --------------------------------------------------------------------------------
================================================================================ vdr-live-3.1.4-0.2.20211228git0fbd9b3.fc35 (FEDORA-2021-7040f1615d) An interactive web interface with HTML5 live stream support for VDR -------------------------------------------------------------------------------- Update Information:
- Rebuilt for new VDR API version - Build compatibility to g++11 ---- Update to 3.1.4-0.1.20211228git0fbd9b3 -------------------------------------------------------------------------------- ChangeLog:
* Thu Dec 30 2021 Martin Gansser martinkg@fedoraproject.org - 3.1.4-0.2.20211228git0fbd9b3 - Build compatibility to g++11 * Tue Dec 28 2021 Martin Gansser martinkg@fedoraproject.org - 3.1.4-0.1.20211228git0fbd9b3 - Replace obsolete pcre by pcre2 - Update to 3.1.4-0.1.20211228git0fbd9b3 --------------------------------------------------------------------------------