The following Fedora 36 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3f20cdb0eb booth-1.0-262.2.d0ac26c.git.fc36 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e139f256f6 squirrel-2.2.5-25.fc36 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f94f770b56 ghostscript-9.56.1-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1f829990f0 golang-1.18.5-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8d623b4c3f owncloud-client-2.10.1-1.fc36

The following Fedora 36 Critical Path updates have yet to be approved: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a03bd671af libtirpc-1.3.2-1.rc5.fc36 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-812172b0dc python-rpmautospec-0.3.0-1.fc36 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dccf3bf958 python3-docs-3.10.6-1.fc36 python3.10-3.10.6-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fb77bb803f mesa-22.1.5-2.fc36

The following builds have been pushed to Fedora 36 updates-testing

ansible-collection-community-libvirt-1.2.0-1.fc36 apt-2.5.2-1.fc36 binutils-2.37-32.fc36 cepces-0.3.5-6.fc36 clevis-18-9.fc36 dnstracer-1.10-1.fc36 dpkg-1.21.9-1.fc36 evolution-3.44.4-1.fc36 evolution-data-server-3.44.4-1.fc36 evolution-ews-3.44.4-1.fc36 freeciv-3.0.3-1.fc36 gap-pkg-atlasrep-2.1.3-1.fc36 gnome-software-42.4-1.fc36 golang-github-git-5-5.4.2-2.20220801gitbc1f419.fc36 grpc-1.41.1-20.fc36 ibus-m17n-1.4.10-1.fc36 java-1.8.0-openjdk-1.8.0.345.b01-1.fc36 libadwaita-1.1.4-1.fc36 mimedefang-3.0-1.fc36 minetest-5.6.0-1.fc36 net-snmp-5.9.3-1.fc36 openbgpd-7.5-1.fc36 packit-0.57.0-1.fc36 podman-4.2.0~rc3-2.fc36 python-google-cloud-bigtable-2.11.0-1.fc36 python-pynetdicom-2.0.2-1.fc36 qemu-6.2.0-13.fc36 root-6.26.06-1.fc36 rubygem-rails-html-sanitizer-1.4.3-1.fc36 rust-pq-sys-0.4.7-1.fc36 rust-serde_json-1.0.83-1.fc36 rust-thiserror-1.0.32-1.fc36 rust-thiserror-impl-1.0.32-1.fc36 shadow-utils-4.11.1-3.fc36 skopeo-1.9.2-1.fc36 springlobby-0.273-1.fc36 tortoisehg-6.2.1-1.fc36 trader-7.18-1.fc36 wxsqlite3-4.8.2-1.fc36 yara-4.2.2-2.fc36

Details about builds:

================================================================================ ansible-collection-community-libvirt-1.2.0-1.fc36 (FEDORA-2022-d677d1dc4c) Manages virtual machines supported by libvirt -------------------------------------------------------------------------------- Update Information:

Current upstream maintenance release, with a few bug fixes and enhancements. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Paul Howarth paul@city-fan.org - 1.2.0-1 - Update to 1.2.0 - libvirt: Add extra guest information to inventory (GH#113) - libvirt: Replace the calls to listDomainsID() and listDefinedDomains() with listAllDomains() in find_vm() (GH#117) - virt_net: Fix modify function, which was not idempotent, depending on whether the network was active (GH#107) - virt_pool: It crashed out if pool didn't contain a target path; fix allows this not to be set (GH#129) * Wed Jul 20 2022 Fedora Release Engineering releng@fedoraproject.org - 1.1.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2115747 - ansible-collection-community-libvirt-1.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2115747 --------------------------------------------------------------------------------

================================================================================ apt-2.5.2-1.fc36 (FEDORA-2022-2ea0f1549b) Command-line package manager for Debian packages -------------------------------------------------------------------------------- Update Information:

Update apt to 2.5.2 (#2087682) -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 S��rgio Basto sergio@serjux.com - 2.5.2-1 - Update apt to 2.5.2 (#2087682) * Wed Jul 20 2022 Fedora Release Engineering releng@fedoraproject.org - 2.4.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2087682 - apt-2.5.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2087682 --------------------------------------------------------------------------------

================================================================================ binutils-2.37-32.fc36 (FEDORA-2022-7a51ade8e5) A GNU collection of binary utilities -------------------------------------------------------------------------------- Update Information:

Fix building the binutils for Risc64 and AArch64 ---- - Fix bug in binutils.spec file that was causing the wrong linker flags to be used. - Change the ld man page so that it says that --enable-new-dtags is the default. (#2090818) ---- Stop readelf and objdump from unnecessarily following links. ---- Add support for generating static PIE binaries for the s390x -------------------------------------------------------------------------------- ChangeLog:

* Thu Jun 30 2022 Nick Clifton nickc@redhat.com - 2.37-32 - Fix a problem honouring readelf's -wE and -wN command line options. * Wed Jun 8 2022 Yara Ahmad yahmad@redhat.com - 2.37-31 - Fix bug in binutils.spec file that was causing the wrong linker flags to be used. - Change the ld man page so that it says that --enable-new-dtags is the default. (#2090818) * Sat May 21 2022 Nick Clifton nickc@redhat.comn - 2.37-30 - Stop readelf and objdump from unnecessarily following links. (#2086863) * Thu May 19 2022 Nick Clifton nickc@redhat.comn - 2.37-29 - Add support for generating static PIE binaries for s390x. (#2088331) * Thu May 19 2022 Yara Ahmad yahmad@redhat.com - 2.37-28 - Fix description of gold subpackage so that it does not include the Requires fields. (#2082919) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2086863 - readelf is trying to reach debuginfod remote server? https://bugzilla.redhat.com/show_bug.cgi?id=2086863 --------------------------------------------------------------------------------

================================================================================ cepces-0.3.5-6.fc36 (FEDORA-2022-ae2e48b19f) Certificate Enrollment through CEP/CES -------------------------------------------------------------------------------- Update Information:

New: cepces - Certificate Enrollment through CEP/CES -------------------------------------------------------------------------------- ChangeLog:

* Sun Jul 24 2022 Ding-Yi Chen dchen@redhat.com - 0.3.5-6 - Review comment #16 addressed - It make more sense that -selinux and -certmonger depends on main package, Not the other round - Recommends: logrotate - Supplements: -selinux, -certmonger * Wed Jul 20 2022 Ding-Yi Chen dchen@redhat.com - 0.3.5-5 - Add Pull request #19 - Remove Pull request #17 as it is not accepted - Review comment #13, #14 addressed * Mon Jun 27 2022 Ding-Yi Chen dchen@redhat.com - 0.3.5-4 - Add Pull request #18 - Replaces kerberos with gssapi - Replaces requests_kerberos with requests_gssapi * Fri Jun 24 2022 Ding-Yi Chen dchen@redhat.com - 0.3.5-3 - Review comment #4, #7 addressed * Wed Jun 22 2022 Ding-Yi Chen dchen@redhat.com - 0.3.5-2 - Review comment #1 addressed * Thu Jun 16 2022 Ding-Yi Chen dchen@redhat.com - 0.3.5-1 - Initial import to Fedora - Add logrotate - Applied patch for https://github.com/openSUSE/cepces/issues/15 * Fri Oct 1 2021 Daniel Uvehag daniel.uvehag@gmail.com - 0.3.4-1 - Fix collections deprecation * Fri Oct 1 2021 Daniel Uvehag daniel.uvehag@gmail.com - 0.3.4-1 - Fix collections deprecation -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2097925 - Review Request: cepces - Certificate Enrollment through CEP/CES https://bugzilla.redhat.com/show_bug.cgi?id=2097925 --------------------------------------------------------------------------------

================================================================================ clevis-18-9.fc36 (FEDORA-2022-8e344e931d) Automated decryption framework -------------------------------------------------------------------------------- Update Information:

Simplify sysusers.d fragment by using default 'nologin' shell -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Luca BRUNO lucab@lucabruno.net - 18-9 - Simplify sysusers.d fragment by using default 'nologin' shell --------------------------------------------------------------------------------

================================================================================ dnstracer-1.10-1.fc36 (FEDORA-2022-1cb5784d7f) Trace DNS queries to the source -------------------------------------------------------------------------------- Update Information:

Update to 1.10 ---- Initial release -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Jonathan Wright jonathan@almalinux.org - 1.10-1 - Update to 1.10 * Thu Aug 4 2022 Jonathan Wright jonathan@almalinux.org - 1.9-28 - Push release tag to 28 to supercede old packages * Thu Jul 21 2022 Jonathan Wright jonathan@almalinux.org - 1.9-1 - Initial package build --------------------------------------------------------------------------------

================================================================================ dpkg-1.21.9-1.fc36 (FEDORA-2022-1b59621176) Package maintenance system for Debian Linux -------------------------------------------------------------------------------- Update Information:

Update dpkg to 1.21.9 (#2103155) -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 4 2022 S��rgio Basto sergio@serjux.com - 1.21.9-1 - Update dpkg to 1.21.9 (#2103155) * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.21.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 6 2022 Jitka Plesnikova jplesnik@redhat.com - 1.21.8-2 - Perl 5.36 re-rebuild of bootstrapped packages -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2103155 - dpkg-1.21.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2103155 --------------------------------------------------------------------------------

================================================================================ evolution-3.44.4-1.fc36 (FEDORA-2022-fc3870255b) Mail and calendar client for GNOME -------------------------------------------------------------------------------- Update Information:

Update to 3.44.4 release **evolution-data-server** Bug Fixes: * I#407 - IMAPx: Unsubscribed folder always removed from the UI Miscellaneous: * ESoupAuthBearer: Check for token expiration in e_soup_auth_bearer_is_authenticated() * ESoupSession: Avoid downgrade of Bearer (OAuth2) auth for authentication * Check for non-zero value passed to g_flags_get_first_value() * alarm-notify: Use themed icon instead of file icon for notifications **evolution** Bug Fixes: * I#1961 - Missing divider lines and paddings under GNOME * I#1966 - EColorSchemeWatcher: Verify chosen dark variant theme name exists * I#1968 - ECompEditor: Reminders list is too small * I#1982 - Calendar: The default reminder not always added Miscellaneous: * Change when symbolic icons are forced in the application **evolution-ews** Bug Fixes: * I#191 - Calendar: Fix occurrence index counter -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Milan Crha mcrha@redhat.com - 3.44.4-1 - Update to 3.44.4 --------------------------------------------------------------------------------

================================================================================ evolution-data-server-3.44.4-1.fc36 (FEDORA-2022-fc3870255b) Backend data server for Evolution -------------------------------------------------------------------------------- Update Information:

Update to 3.44.4 release **evolution-data-server** Bug Fixes: * I#407 - IMAPx: Unsubscribed folder always removed from the UI Miscellaneous: * ESoupAuthBearer: Check for token expiration in e_soup_auth_bearer_is_authenticated() * ESoupSession: Avoid downgrade of Bearer (OAuth2) auth for authentication * Check for non-zero value passed to g_flags_get_first_value() * alarm-notify: Use themed icon instead of file icon for notifications **evolution** Bug Fixes: * I#1961 - Missing divider lines and paddings under GNOME * I#1966 - EColorSchemeWatcher: Verify chosen dark variant theme name exists * I#1968 - ECompEditor: Reminders list is too small * I#1982 - Calendar: The default reminder not always added Miscellaneous: * Change when symbolic icons are forced in the application **evolution-ews** Bug Fixes: * I#191 - Calendar: Fix occurrence index counter -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Milan Crha mcrha@redhat.com - 3.44.4-1 - Update to 3.44.4 --------------------------------------------------------------------------------

================================================================================ evolution-ews-3.44.4-1.fc36 (FEDORA-2022-fc3870255b) Evolution extension for Exchange Web Services -------------------------------------------------------------------------------- Update Information:

Update to 3.44.4 release **evolution-data-server** Bug Fixes: * I#407 - IMAPx: Unsubscribed folder always removed from the UI Miscellaneous: * ESoupAuthBearer: Check for token expiration in e_soup_auth_bearer_is_authenticated() * ESoupSession: Avoid downgrade of Bearer (OAuth2) auth for authentication * Check for non-zero value passed to g_flags_get_first_value() * alarm-notify: Use themed icon instead of file icon for notifications **evolution** Bug Fixes: * I#1961 - Missing divider lines and paddings under GNOME * I#1966 - EColorSchemeWatcher: Verify chosen dark variant theme name exists * I#1968 - ECompEditor: Reminders list is too small * I#1982 - Calendar: The default reminder not always added Miscellaneous: * Change when symbolic icons are forced in the application **evolution-ews** Bug Fixes: * I#191 - Calendar: Fix occurrence index counter -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Milan Crha mcrha@redhat.com - 3.44.4-1 - Update to 3.44.4 --------------------------------------------------------------------------------

================================================================================ freeciv-3.0.3-1.fc36 (FEDORA-2022-1c6cf0103e) A multi-player strategy game -------------------------------------------------------------------------------- Update Information:

3.0.3 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Gwyn Ciesla gwync@protonmail.com - 3.0.3-1 - 3.0.3 * Mon Aug 1 2022 Frantisek Zatloukal fzatlouk@redhat.com - 3.0.2-3 - Rebuilt for ICU 71.1 * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 3.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2115563 - freeciv-3.0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2115563 --------------------------------------------------------------------------------

================================================================================ gap-pkg-atlasrep-2.1.3-1.fc36 (FEDORA-2022-d211286bf1) GAP interface to the Atlas of Group Representations -------------------------------------------------------------------------------- Update Information:

Changes in version 2.1.3: - The server address for the core part of the database has changed. - Additional table of contents files are now available, which contain checksums in SHA256 format instead of the checksums computed by `CrcFile` and `CrcString`. Note that the latter values can be interpreted only by GAP. - For 364 representations, the corresponding characters have been identified and can thus be used for accessing these representations with `OneAtlasGeneratingSetInfo` (3.5-6), see `DisplayAtlasInfo` (3.5-1). -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 4 2022 Jerry James loganjerry@gmail.com - 2.1.3-1 - Version 2.1.3 * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 2.1.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ gnome-software-42.4-1.fc36 (FEDORA-2022-a3562a474b) A software center for GNOME -------------------------------------------------------------------------------- Update Information:

Update to 42.4 This is a stable release with the following change: * Fix update detail text, when it contains markup This release also updates translations: * Italian * Serbian -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Milan Crha mcrha@redhat.com - 42.4-1 - Update to 42.4 --------------------------------------------------------------------------------

================================================================================ golang-github-git-5-5.4.2-2.20220801gitbc1f419.fc36 (FEDORA-2022-8ef20c6e65) A highly extensible Git implementation in pure Go -------------------------------------------------------------------------------- Update Information:

Initial import. Ensure doc subpackage is noarch. ---- Initial import - Close: rhbz#2103460 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Maxwell G gotmax@e.email 5.4.2-2 - Make doc subpackage noarch * Mon Aug 1 2022 Robert-Andr�� Mauchin zebob.m@gmail.com 5.4.2-1 - Initial import - Close: rhbz#2103460 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2103460 - Review Request: golang-github-git-5 - A highly extensible Git implementation in pure Go https://bugzilla.redhat.com/show_bug.cgi?id=2103460 --------------------------------------------------------------------------------

================================================================================ grpc-1.41.1-20.fc36 (FEDORA-2022-aab4bd7ce7) RPC library and framework -------------------------------------------------------------------------------- Update Information:

Add a few missing dependencies on `grpc-cpp` and `grpc-plugins`, and ensure they are exactly-versioned. Assorted other trivial packaging improvements. -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 4 2022 Benjamin A. Beasley code@musicinmybrain.net 1.41.1-20 - Add dependency on grpc-plugins from grpc-devel * Thu Aug 4 2022 Benjamin A. Beasley code@musicinmybrain.net 1.41.1-19 - Use new upstream PR#25635 as .pc path fix * Thu Aug 4 2022 Benjamin A. Beasley code@musicinmybrain.net 1.41.1-18 - Add exact-version dependency on grpc-cpp from grpc-cli * Thu Aug 4 2022 Benjamin A. Beasley code@musicinmybrain.net 1.41.1-17 - Trivial typo fixes in spec file comments * Thu Aug 4 2022 Benjamin A. Beasley code@musicinmybrain.net 1.41.1-16 - Improve grpc-1.40.0-python-grpcio-use-system-abseil.patch * Wed Mar 30 2022 Benjamin A. Beasley code@musicinmybrain.net 1.41.1-15 - Add exactly-versioned grpc-cpp subpackage dependencies --------------------------------------------------------------------------------

================================================================================ ibus-m17n-1.4.10-1.fc36 (FEDORA-2022-947bbbd190) The M17N engine for IBus platform -------------------------------------------------------------------------------- Update Information:

Update to 1.4.10 Add language to longname in --xml output to make engines which have exactly the same icon distinguishable in the engine switcher Make the icon of the current engine appear at the left of floating panel of ibus. And also show the full engine name as a tooltip on that icon Before only a generic gear wheel ������ was shown, the same for all engines, so one could not distinguish which engine was selected in the floating panel. Show also the engine name in the title of the setup tool window. I.e. instead of just ���Preferences��� show something like ���Preferences m17n:t:latn-post���. Better icon and a screenshot which can be shown in gnome-software Improvements in m17n.appdata.xml -------------------------------------------------------------------------------- ChangeLog:

* Wed Aug 3 2022 Mike FABIAN mfabian@redhat.com - 1.4.10-1 - Update to 1.4.10 - Add language to longname in --xml output to make engines which have exactly the same icon distinguishable in the engine switcher - Make the icon of the current engine appear at the left of floating panel of ibus. And also show the full engine name as a tooltip on that icon Before only a generic gear wheel ������ was shown, the same for all engines, so one could not distinguish which engine was selected in the floating panel. - Show also the engine name in the title of the setup tool window. I.e. instead of just ���Preferences��� show something like ���Preferences m17n:t:latn-post���. - Better icon and a screenshot which can be shown in gnome-software - Improvements in m17n.appdata.xml --------------------------------------------------------------------------------

================================================================================ java-1.8.0-openjdk-1.8.0.345.b01-1.fc36 (FEDORA-2022-58f0e017b1) OpenJDK 8 Runtime Environment -------------------------------------------------------------------------------- Update Information:

# New in release OpenJDK 8u345 (2022-08-01) * The release announcement can be found at: https://bit.ly/openjdk8u345 * Full release notes are available from: https://builds.shipilev.net/backports-monitor/release-notes-openjdk8u345.txt ## [JDK-8290832](https://bugs.openjdk.org/browse/JDK-8290832): It is no longer possible to change "user.dir" in the JDK8 A change, JDK-8194154, was introduced in the 8u342 release of OpenJDK causing the JDK to ignore attempts to set the `user.dir` property. While this change is suitable for a major release (it was originally introduced in the initial release of OpenJDK 11), changing the behaviour of such a property in an update release creates compatibility issues in software that relies on the behaviour in prior versions of OpenJDK 8. As a result, we have reverted this change in 8u345. -------------------------------------------------------------------------------- ChangeLog:

* Wed Aug 3 2022 Andrew Hughes gnu.andrew@redhat.com - 1:1.8.0.345.b01-1 - Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. --------------------------------------------------------------------------------

================================================================================ libadwaita-1.1.4-1.fc36 (FEDORA-2022-82fdc014c9) Building blocks for modern GNOME applications -------------------------------------------------------------------------------- Update Information:

Update to 1.1.4 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Artem Polishchuk ego.cordatus@gmail.com 1.1.4-1 - chore(update): 1.1.4 --------------------------------------------------------------------------------

================================================================================ mimedefang-3.0-1.fc36 (FEDORA-2022-dfbcd89336) E-mail filtering framework using Sendmail's Milter interface -------------------------------------------------------------------------------- Update Information:

# MIMEDefang 3.0 * Split `mimedefang.pl` code in Perl modules * Add `re_match_in_7zip_directory` to check for files inside 7zip archives * Switch to `Digest::SHA` * Use new Rspamd connection method * Add `anonymize_uri` to remove `utm_*` parameters from URIs * Add `md_dkim_sign` and `md_dkim_verify` to manipulate DKIM signatures * Add `is_public_ip6_address` to check if an IPv6 address is local * Add `md_authres` method to generate a basic Authentication-Results header for the message * Add `md_arc_sign` method to sign email messages with DKIM ARC signatures * Add `md_dkim_verify` method to verify DKIM signatures -------------------------------------------------------------------------------- ChangeLog:

* Sat Aug 6 2022 Robert Scheck robert@fedoraproject.org 3.0-1 - Upgrade to 3.0 (#2097136) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2097136 - mimedefang-3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2097136 --------------------------------------------------------------------------------

================================================================================ minetest-5.6.0-1.fc36 (FEDORA-2022-af700017bf) Multiplayer infinite-world block sandbox with survival mode -------------------------------------------------------------------------------- Update Information:

5.6.0 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Gwyn Ciesla gwync@protonmail.com - 5.6.0-1 - 5.6.0 * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 5.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2115787 - New version of Minetest released https://bugzilla.redhat.com/show_bug.cgi?id=2115787 --------------------------------------------------------------------------------

================================================================================ net-snmp-5.9.3-1.fc36 (FEDORA-2022-3af7a32fc0) A collection of SNMP protocol tools and libraries -------------------------------------------------------------------------------- Update Information:

New upstream release 5.9.3 -------------------------------------------------------------------------------- ChangeLog:

* Thu Aug 4 2022 Josef Ridky jridky@redhat.com - 1:5.9.3-1 - New upstream release 5.9.3 (#2072230) * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 1:5.9.1-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 13 2022 Python Maint python-maint@redhat.com - 1:5.9.1-16 - Rebuilt for Python 3.11 * Mon May 30 2022 Jitka Plesnikova jplesnik@redhat.com - 1:5.9.1-15 - Perl 5.36 rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2072230 - net-snmp-5.9.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2072230 [ 2 ] Bug #2105235 - CVE-2022-24806 net-snmp: : net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously [fedora-36] https://bugzilla.redhat.com/show_bug.cgi?id=2105235 [ 3 ] Bug #2105238 - CVE-2022-24805 net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2105238 [ 4 ] Bug #2105239 - CVE-2022-24807 net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2105239 [ 5 ] Bug #2105240 - CVE-2022-24808 net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2105240 [ 6 ] Bug #2105241 - CVE-2022-24810 net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2105241 [ 7 ] Bug #2105242 - CVE-2022-24809 net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2105242 --------------------------------------------------------------------------------

================================================================================ openbgpd-7.5-1.fc36 (FEDORA-2022-0bda51cc02) OpenBGPD Routing Daemon -------------------------------------------------------------------------------- Update Information:

# OpenBGPD 7.5 * Implement RFC 9234 - Route Leak Prevention and Detection Using Roles in `UPDATE` and `OPEN` Messages. * Full support for RFC 7911 - Advertisement of Multiple Paths in BGP. * Improve `bgpd` FIB code, make it more portable and properly handle IPv6 scoped addresses. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Robert Scheck robert@fedoraproject.org 7.5-1 - Upgrade to 7.5 (#2107606) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2107606 - openbgpd-7.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2107606 --------------------------------------------------------------------------------

================================================================================ packit-0.57.0-1.fc36 (FEDORA-2022-312888de64) A tool for integrating upstream projects with Fedora operating system -------------------------------------------------------------------------------- Update Information:

New upstream release: 0.57.0 ---- New upstream release: 0.56.0 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Packit hello@packit.dev - 0.57.0-1 - BREAKING CHANGE: fixed an issue where the repo was searched for the specfile before checking if 'downstream_package_name' is set, and '<downstream_package_name>.spec' can be used as the 'specfile_path'. (#1663) * Thu Jul 28 2022 Packit hello@packit.dev - 0.56.0-1 - Packit can now build RPMs in mock. For more information see https://packit.dev/docs/cli/build/mock (#1662) - Packit now provides a more helpful error message when it hits a known issue while creating a Bodhi update: fedora-infra/bodhi#4660 (#1660) - Packit now correctly supports `tmt_plan` and `tf_post_install_script` in the configuration. (#1659) - RPM build commands of Packit CLI have been merged into one build subcommand, for more information see the updated documentation at https://packit.dev/docs/cli/build/. We have also introduced a new `--srpm` option to the new build subcommand that can be used to trigger local, Copr or Koji build from an already built SRPM rather than the one implicitly created by Packit. (#1611) --------------------------------------------------------------------------------

================================================================================ podman-4.2.0~rc3-2.fc36 (FEDORA-2022-809531a08d) Manage Pods, Containers and Container Images -------------------------------------------------------------------------------- Update Information:

bump to v4.2.0-rc3 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Lokesh Mandvekar lsm5@fedoraproject.org 4:4.2.0~rc3-2 - fix tarball_tag macro * Fri Aug 5 2022 RH Container Bot rhcontainerbot@fedoraproject.org 4:4.2.0~rc3-1 - auto bump to v4.2.0-rc3 * Wed Aug 3 2022 Lokesh Mandvekar lsm5@fedoraproject.org 4:4.2.0~rc2-1 - Bump to v4.2.0-rc2 --------------------------------------------------------------------------------

================================================================================ python-google-cloud-bigtable-2.11.0-1.fc36 (FEDORA-2022-82495618d3) Python Client for Google Cloud Bigtable API -------------------------------------------------------------------------------- Update Information:

Update to 2.11.0 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Major Hayden major@redhat.com 2.11.0-1 - Update to 2.11.0 rhbz#2115555 --------------------------------------------------------------------------------

================================================================================ python-pynetdicom-2.0.2-1.fc36 (FEDORA-2022-3015ad47c7) A Python implementation of the DICOM networking protocol -------------------------------------------------------------------------------- Update Information:

Update to 2.0.2 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Alessio <alciregi AT fedoraproject DOT org> - 2.0.2-1 - Update to 2.0.2 * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 2.0.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jun 14 2022 Python Maint python-maint@redhat.com - 2.0.1-4 - Rebuilt for Python 3.11 * Wed Mar 16 2022 Benjamin A. Beasley code@musicinmybrain.net - 2.0.1-3 - Python 3.11 patch (fix RHBZ#2062104) - Endianness patch (fix RHBZ#2064737) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2078191 - python-pynetdicom-2.0.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2078191 --------------------------------------------------------------------------------

================================================================================ qemu-6.2.0-13.fc36 (FEDORA-2022-74e684a8a7) QEMU is a FAST! processor emulator -------------------------------------------------------------------------------- Update Information:

vga: avoid crash if no default vga card Resolves: https://gitlab.com/qemu- project/qemu/-/issues/978 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Mauro Matteo Cascella mcascell@redhat.com - 2:6.2.0-13 - vga: avoid crash if no default vga card - Resolves: https://gitlab.com/qemu-project/qemu/-/issues/978 --------------------------------------------------------------------------------

================================================================================ root-6.26.06-1.fc36 (FEDORA-2022-534556e45d) Numerical data analysis framework -------------------------------------------------------------------------------- Update Information:

ROOT 6.26.06 -------------------------------------------------------------------------------- ChangeLog:

* Sat Jul 30 2022 Mattias Ellert mattias.ellert@physics.uu.se - 6.26.06-1 - Update to 6.26.06 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 6.26.04-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jul 18 2022 Mattias Ellert mattias.ellert@physics.uu.se - 6.26.04-4 - Don't use yuicompressor on Fedora (Java no longer available on ix86) * Sun Jul 3 2022 Mattias Ellert mattias.ellert@physics.uu.se - 6.26.04-3 - Backport python 3.11 fixes from upstream - Backport additional python 3.11 fixes from CPyCppyy upstream - Exclude some failing tests on Fedora 37+ (segfaults during Python garbage collection with Python 3.11) - Adjust some test timeouts * Wed Jun 15 2022 Python Maint python-maint@redhat.com - 6.26.04-2 - Rebuilt for Python 3.11 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2112123 - root-6.26.06 is available https://bugzilla.redhat.com/show_bug.cgi?id=2112123 --------------------------------------------------------------------------------

================================================================================ rubygem-rails-html-sanitizer-1.4.3-1.fc36 (FEDORA-2022-974fffb418) This gem is responsible to sanitize HTML fragments in Rails applications -------------------------------------------------------------------------------- Update Information:

Update to rails-html-sanitizer 1.4.3. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 V��t Ondruch vondruch@redhat.com - 1.4.3-1 - Update to rails-html-sanitizer 1.4.3. Resolves: rhbz#2095592 Resolves: rhbz#2101883 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2101882 - CVE-2022-32209 rubygem-rails-html-sanitizer: possible xss with certain configurations https://bugzilla.redhat.com/show_bug.cgi?id=2101882 --------------------------------------------------------------------------------

================================================================================ rust-pq-sys-0.4.7-1.fc36 (FEDORA-2022-d8a49422e7) Auto-generated rust bindings for libpq -------------------------------------------------------------------------------- Update Information:

Update to version 0.4.7. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Fabio Valentini decathorpe@gmail.com 0.4.7-1 - Update to version 0.4.7; Fixes RHBZ#2108194 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 0.4.6-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ rust-serde_json-1.0.83-1.fc36 (FEDORA-2022-39066c0c51) JSON serialization file format -------------------------------------------------------------------------------- Update Information:

Update to version 1.0.83. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Fabio Valentini decathorpe@gmail.com 1.0.83-1 - Update to version 1.0.83; Fixes RHBZ#2114954 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org 1.0.82-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ rust-thiserror-1.0.32-1.fc36 (FEDORA-2022-dd09f8eb88) Derive(Error) -------------------------------------------------------------------------------- Update Information:

Update the thiserror and thiserror-impl crates to version 1.0.32. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Fabio Valentini decathorpe@gmail.com 1.0.32-1 - Update to version 1.0.32; Fixes RHBZ#2114668 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org 1.0.31-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ rust-thiserror-impl-1.0.32-1.fc36 (FEDORA-2022-dd09f8eb88) Implementation detail of the thiserror crate -------------------------------------------------------------------------------- Update Information:

Update the thiserror and thiserror-impl crates to version 1.0.32. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Fabio Valentini decathorpe@gmail.com 1.0.32-1 - Update to version 1.0.32; Fixes RHBZ#2114670 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org 1.0.31-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ shadow-utils-4.11.1-3.fc36 (FEDORA-2022-643c68c2f3) Utilities for managing accounts and shadow password files -------------------------------------------------------------------------------- Update Information:

useradd: modify check ID range for system users. Resolves: #2093692 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Iker Pedrosa ipedrosa@redhat.com - 2:4.11.1-3 - useradd: modify check ID range for system users. Resolves: #2093692 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2093692 - Package installation issue https://bugzilla.redhat.com/show_bug.cgi?id=2093692 --------------------------------------------------------------------------------

================================================================================ skopeo-1.9.2-1.fc36 (FEDORA-2022-e5ee2423d0) Inspect container images and repositories on registries -------------------------------------------------------------------------------- Update Information:

auto bump to v1.9.2 ---- Latest update -------------------------------------------------------------------------------- ChangeLog:

* Tue Aug 2 2022 RH Container Bot rhcontainerbot@fedoraproject.org 1:1.9.2-1 - auto bump to v1.9.2 * Mon Jul 25 2022 RH Container Bot rhcontainerbot@fedoraproject.org 1:1.9.1-1 - auto bump to v1.9.1 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org 1:1.9.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ springlobby-0.273-1.fc36 (FEDORA-2022-6ea99f5fd0) Free cross-platform lobby client for the Spring RTS project -------------------------------------------------------------------------------- Update Information:

Update to latest version -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Artem Polishchuk ego.cordatus@gmail.com 0.273-1 - build(update): 0.273 * Thu Aug 4 2022 Scott Talbert swt@techie.net - 0.271-10 - Rebuild with wxWidgets 3.2 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 0.271-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed May 4 2022 Thomas Rodgers trodgers@redhat.com - 0.271-8 - Rebuilt for Boost 1.78 --------------------------------------------------------------------------------

================================================================================ tortoisehg-6.2.1-1.fc36 (FEDORA-2022-8d47c2f234) Mercurial GUI command line tool thg -------------------------------------------------------------------------------- Update Information:

Bugfix release -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Mads Kiilerich mads@kiilerich.com - 6.2.1-1 - tortoisehg 6.2.1 --------------------------------------------------------------------------------

================================================================================ trader-7.18-1.fc36 (FEDORA-2022-d1f56962bf) Star Traders, a simple game of interstellar trading -------------------------------------------------------------------------------- Update Information:

Update to Star Traders v7.18: fixed two TOCTOU (time-of-check / time-of-use) bugs and one when HOME is empty; also updated Brazilian Portuguese, Norwegian Bokm��l, Swedish, French, Esperanto, Serbian, German and English translations. -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 John Zaitseff J.Zaitseff@zap.org.au - 7.18-1 - Updated the RPM package for a new release of Star Traders: version 7.18. - Added verification of upstream signature. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2114783 - trader-7.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=2114783 --------------------------------------------------------------------------------

================================================================================ wxsqlite3-4.8.2-1.fc36 (FEDORA-2022-6a53e61ef8) C++ wrapper around the SQLite 3.x database -------------------------------------------------------------------------------- Update Information:

Update to 4.8.2-1 -------------------------------------------------------------------------------- ChangeLog:

* Fri Aug 5 2022 Martin Gansser martinkg@fedoraproject.org 4.8.2-1 - Update to 4.8.2 * Thu Aug 4 2022 Scott Talbert swt@techie.net - 4.5.1-7 - Rebuild with wxWidgets 3.2 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 4.5.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ yara-4.2.2-2.fc36 (FEDORA-2022-ecf969b60b) Pattern matching Swiss knife for malware researchers -------------------------------------------------------------------------------- Update Information:

Update to 4.2.2 -------------------------------------------------------------------------------- ChangeLog:

* Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 4.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jul 18 2022 Mikel Olasagasti Uranga mikel@olasagasti.info - 4.2.2-1 - Update to 4.2.2 (#2103444) - BUGFIX: Fix buffer overrun in "dex" module (#1728). - BUGFIX: Wrong offset used when checking Version string of .net metadata (#1708). - BUGFIX: YARA doesn't compile if --with-debug-verbose flag is enabled (#1719). - BUGFIX: Null-pointer dereferences while loading corrupted compiled rules (#1727). * Mon May 23 2022 Michal Ambroz <rebus at, seznam.cz> - 4.2.1-1 - bump to 4.2.1 - adding changes based on proposal of Mikel Olasagasti Uranga: - change to BSD license as yara was relicensed in 2016 - minor changes to spec, like using https for URL - remove old patches - enable checks * Sat Mar 12 2022 Michal Ambroz <rebus at, seznam.cz> - 4.2.0-1 - bump to 4.2.0 * Thu Feb 17 2022 Michal Ambroz <rebus at, seznam.cz> - 4.2.0-0.rc1.1 - bump to 4.2.0-rc1 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2112508 - Update yara to 4.2.2 https://bugzilla.redhat.com/show_bug.cgi?id=2112508 --------------------------------------------------------------------------------