The following Fedora 35 Security updates need testing:
Age URL
291
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dfc6924a11
mysql-connector-java-8.0.28-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-003403ec6b
samba-4.15.12-0.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-14f11bfc73
ntfs-3g-2022.10.3-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-927df621df
thunderbird-102.5.0-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-53a4a5dd11 xen-4.15.4-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-df2f4923ea
libetpan-1.9.4-9.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ce9378e90 grub2-2.06-14.fc35
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-99c00af79f
advancecomp-2.4-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0ff8149aad
qpress-20220819-1.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ec48d2c1b4
firefox-107.0-4.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-cb7084ae1c
moodle-3.11.11-1.fc35
The following Fedora 35 Critical Path updates have yet to be approved:
Age URL
110
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bca7996d14
annobin-10.81-1.fc35
74
https://bodhi.fedoraproject.org/updates/FEDORA-2022-97f6c4fd2a
libblockdev-2.28-2.fc35
17
https://bodhi.fedoraproject.org/updates/FEDORA-2022-43fa48ce4e
python-rpmautospec-0.3.1-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-53a4a5dd11 xen-4.15.4-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-927df621df
thunderbird-102.5.0-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-14f11bfc73
ntfs-3g-2022.10.3-1.fc35
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-003403ec6b
samba-4.15.12-0.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7184211fc4 koji-1.31.0-1.fc35
8
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b29661d86 vim-9.0.915-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-32e69d01a9
libbsd-0.11.7-1.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7ce9378e90 grub2-2.06-14.fc35
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9fde12c816 gcc-11.3.1-4.fc35
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ec48d2c1b4
firefox-107.0-4.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-ae162c4397
libxcrypt-4.4.33-3.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a644404329
appstream-data-35-9.fc35
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6299256f20
langtable-0.0.61-2.fc35
The following builds have been pushed to Fedora 35 updates-testing
copr-backend-1.162-1.fc35
copr-cli-1.104-1.fc35
copr-dist-git-0.58-1.fc35
copr-frontend-1.192-1.fc35
copr-keygen-1.86-1.fc35
copr-messaging-0.7-1.fc35
copr-rpmbuild-0.62-1.fc35
kpcli-3.8.1-2.fc35
mrack-1.12.1-1.fc35
php-symfony4-4.4.49-1.fc35
python-copr-1.124-1.fc35
python-copr-common-0.17-1.fc35
xournalpp-1.1.3-1.fc35
Details about builds:
================================================================================
copr-backend-1.162-1.fc35 (FEDORA-2022-7efc820a00)
Backend for Copr
--------------------------------------------------------------------------------
Update Information:
### Frontend - allow arbitrary creation of :pr:<ID> directories - custom
repositories with custom webhook - move to GitHub home page - use shlex.quote
instead of pipes.quote - add route for a new distgit dispatcher - expand repos
for custom SRPM - process external repos for custom build - support LDAP groups
for Kerberos users - add version to the bitbucket webhook tag name - loosen the
rules of package matching in webhook tags - add optional argument pkg_name to
webhooks API - no delay after large SRPM upload - name the import log
"import.log" in web-UI - show import log to everyone, not just admin - log
webhook calls - cache the queue sizes for one minute - log manage.py commands
### Backend - use OpenPGP v4 signatures - migrate from pipes to shlex - require
redis.service to be started - move to GitHub home page - add resultdir cleaner -
move dispatcher and background workers to copr-common - de-prio IO for the
analyze-results script - don't traceback when there are no files in the S3
storage - allow devel instance to remove access files - send non-CDN hitcounter
hits in chunks - copr-backend-unknown-resalloc-tickets script - work with
multiple CDN hostnames per instance - move setup_script_logger to copr-common
### DistGit - require redis.service to be started - move to GitHub home page -
fair processing of task from multiple sandboxes - use dispatcher and background
workers ### Keygen - move to GitHub home page - logging shouldn't affect
stdout - add logging for the gpg-copr script ### copr-common - move to GitHub
home page - logging shouldn't affect stdout - move dispatcher and background
workers to copr-common - scripts should log also timestamps etc when logging
into file - move setup_script_logger to copr-common
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 1.162-1
- use OpenPGP v4 signatures
- migrate from pipes to shlex
- require redis.service to be started
- move to GitHub home page
- add resultdir cleaner
- move dispatcher and background workers to copr-common
- de-prio IO for the analyze-results script
- don't traceback when there are no files in the S3 storage
- allow devel instance to remove access files
- send non-CDN hitcounter hits in chunks
- copr-backend-unknown-resalloc-tickets script
- work with multiple CDN hostnames per instance
- move setup_script_logger to copr-common
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2099704 - python-copr-common-0.15-1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2099704
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.104-1.fc35 (FEDORA-2022-1a40ad831a)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
### copr-cli - move to GitHub home page - add parameter for custom method repos
### python-copr - move to GitHub home page - add external repos for custom
build - don't play with sessions if using ApiToken
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 1.104-1
- move to GitHub home page
- add parameter for custom method repos
--------------------------------------------------------------------------------
================================================================================
copr-dist-git-0.58-1.fc35 (FEDORA-2022-7efc820a00)
Copr services for Dist Git server
--------------------------------------------------------------------------------
Update Information:
### Frontend - allow arbitrary creation of :pr:<ID> directories - custom
repositories with custom webhook - move to GitHub home page - use shlex.quote
instead of pipes.quote - add route for a new distgit dispatcher - expand repos
for custom SRPM - process external repos for custom build - support LDAP groups
for Kerberos users - add version to the bitbucket webhook tag name - loosen the
rules of package matching in webhook tags - add optional argument pkg_name to
webhooks API - no delay after large SRPM upload - name the import log
"import.log" in web-UI - show import log to everyone, not just admin - log
webhook calls - cache the queue sizes for one minute - log manage.py commands
### Backend - use OpenPGP v4 signatures - migrate from pipes to shlex - require
redis.service to be started - move to GitHub home page - add resultdir cleaner -
move dispatcher and background workers to copr-common - de-prio IO for the
analyze-results script - don't traceback when there are no files in the S3
storage - allow devel instance to remove access files - send non-CDN hitcounter
hits in chunks - copr-backend-unknown-resalloc-tickets script - work with
multiple CDN hostnames per instance - move setup_script_logger to copr-common
### DistGit - require redis.service to be started - move to GitHub home page -
fair processing of task from multiple sandboxes - use dispatcher and background
workers ### Keygen - move to GitHub home page - logging shouldn't affect
stdout - add logging for the gpg-copr script ### copr-common - move to GitHub
home page - logging shouldn't affect stdout - move dispatcher and background
workers to copr-common - scripts should log also timestamps etc when logging
into file - move setup_script_logger to copr-common
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.58-1
- require redis.service to be started
- move to GitHub home page
- fair processing of task from multiple sandboxes
- use dispatcher and background workers
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2099704 - python-copr-common-0.15-1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2099704
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.192-1.fc35 (FEDORA-2022-7efc820a00)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
### Frontend - allow arbitrary creation of :pr:<ID> directories - custom
repositories with custom webhook - move to GitHub home page - use shlex.quote
instead of pipes.quote - add route for a new distgit dispatcher - expand repos
for custom SRPM - process external repos for custom build - support LDAP groups
for Kerberos users - add version to the bitbucket webhook tag name - loosen the
rules of package matching in webhook tags - add optional argument pkg_name to
webhooks API - no delay after large SRPM upload - name the import log
"import.log" in web-UI - show import log to everyone, not just admin - log
webhook calls - cache the queue sizes for one minute - log manage.py commands
### Backend - use OpenPGP v4 signatures - migrate from pipes to shlex - require
redis.service to be started - move to GitHub home page - add resultdir cleaner -
move dispatcher and background workers to copr-common - de-prio IO for the
analyze-results script - don't traceback when there are no files in the S3
storage - allow devel instance to remove access files - send non-CDN hitcounter
hits in chunks - copr-backend-unknown-resalloc-tickets script - work with
multiple CDN hostnames per instance - move setup_script_logger to copr-common
### DistGit - require redis.service to be started - move to GitHub home page -
fair processing of task from multiple sandboxes - use dispatcher and background
workers ### Keygen - move to GitHub home page - logging shouldn't affect
stdout - add logging for the gpg-copr script ### copr-common - move to GitHub
home page - logging shouldn't affect stdout - move dispatcher and background
workers to copr-common - scripts should log also timestamps etc when logging
into file - move setup_script_logger to copr-common
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 1.192-1
- allow arbitrary creation of :pr:<ID> directories
- custom repositories with custom webhook
- move to GitHub home page
- use shlex.quote instead of pipes.quote
- add route for a new distgit dispatcher
- expand repos for custom SRPM
- process external repos for custom build
- support LDAP groups for Kerberos users
- add version to the bitbucket webhook tag name
- loosen the rules of package matching in webhook tags
- add optional argument pkg_name to webhooks API
- no delay after large SRPM upload
- name the import log "import.log" in web-UI
- show import log to everyone, not just admin
- log webhook calls
- cache the queue sizes for one minute
- log manage.py commands
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2099704 - python-copr-common-0.15-1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2099704
--------------------------------------------------------------------------------
================================================================================
copr-keygen-1.86-1.fc35 (FEDORA-2022-7efc820a00)
Part of Copr build system. Aux service that generate keys for signd
--------------------------------------------------------------------------------
Update Information:
### Frontend - allow arbitrary creation of :pr:<ID> directories - custom
repositories with custom webhook - move to GitHub home page - use shlex.quote
instead of pipes.quote - add route for a new distgit dispatcher - expand repos
for custom SRPM - process external repos for custom build - support LDAP groups
for Kerberos users - add version to the bitbucket webhook tag name - loosen the
rules of package matching in webhook tags - add optional argument pkg_name to
webhooks API - no delay after large SRPM upload - name the import log
"import.log" in web-UI - show import log to everyone, not just admin - log
webhook calls - cache the queue sizes for one minute - log manage.py commands
### Backend - use OpenPGP v4 signatures - migrate from pipes to shlex - require
redis.service to be started - move to GitHub home page - add resultdir cleaner -
move dispatcher and background workers to copr-common - de-prio IO for the
analyze-results script - don't traceback when there are no files in the S3
storage - allow devel instance to remove access files - send non-CDN hitcounter
hits in chunks - copr-backend-unknown-resalloc-tickets script - work with
multiple CDN hostnames per instance - move setup_script_logger to copr-common
### DistGit - require redis.service to be started - move to GitHub home page -
fair processing of task from multiple sandboxes - use dispatcher and background
workers ### Keygen - move to GitHub home page - logging shouldn't affect
stdout - add logging for the gpg-copr script ### copr-common - move to GitHub
home page - logging shouldn't affect stdout - move dispatcher and background
workers to copr-common - scripts should log also timestamps etc when logging
into file - move setup_script_logger to copr-common
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 1.86-1
- move to GitHub home page
- logging shouldn't affect stdout
- add logging for the gpg-copr script
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2099704 - python-copr-common-0.15-1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2099704
--------------------------------------------------------------------------------
================================================================================
copr-messaging-0.7-1.fc35 (FEDORA-2022-b691dccc78)
Abstraction for Copr messaging listeners/publishers
--------------------------------------------------------------------------------
Update Information:
- move to GitHub home page - sync tooling with other sub-projects
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.7-1
- move to GitHub home page
- sync tooling with other sub-projects
--------------------------------------------------------------------------------
================================================================================
copr-rpmbuild-0.62-1.fc35 (FEDORA-2022-814722fce2)
Run COPR build tasks
--------------------------------------------------------------------------------
Update Information:
- migrate from pipes to shlex - move to GitHub home page - use repos from task
for custom method - switch to template for custom method - strip trailing / from
clone url
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.62-1
- migrate from pipes to shlex
- move to GitHub home page
- use repos from task for custom method
- switch to template for custom method
- strip trailing / from clone url
--------------------------------------------------------------------------------
================================================================================
kpcli-3.8.1-2.fc35 (FEDORA-2022-71a7e16687)
KeePass Command Line Interface (CLI) / interactive shell
--------------------------------------------------------------------------------
Update Information:
Bump to build/update older branches
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 29 2022 Charles R. Anderson <cra(a)alum.wpi.edu> - 3.8.1-2
- Bump to build/update older branches
* Sat Jul 23 2022 Charles R. Anderson <cra(a)alum.wpi.edu> - 3.8.1-1
- Update to 3.8.1
- Rename README to README.txt to match upstream
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon May 30 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.6-7
- Perl 5.36 rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mrack-1.12.1-1.fc35 (FEDORA-2022-6b9467602c)
Multicloud use-case based multihost async provisioner
--------------------------------------------------------------------------------
Update Information:
updates mrack to latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 24 2022 Tibor Dudl��k <tdudlak(a)redhat.com> - 1.12.1-1
- Released upstream version 1.12.1
--------------------------------------------------------------------------------
================================================================================
php-symfony4-4.4.49-1.fc35 (FEDORA-2022-80891447cb)
Symfony PHP framework (version 4)
--------------------------------------------------------------------------------
Update Information:
**Version 4.4.49** (2022-11-28) * bug #48273 [HttpKernel] Fix message for
unresovable arguments of invokable controllers (fancyweb) * bug #48224
[DependencyInjection] Process bindings in `ServiceLocatorTagPass` (MatTheCat) *
bug #48198 [Messenger] Fix time-limit check exception (alamirault) * bug #48122
[PhpUnitBridge] Fix language deprecations incorrectly marked as direct (wouterj)
* bug #48085 [Messenger] Tell about messenger:consume invalid limit options
(MatTheCat) * bug #48120 [Messenger] Do not throw 'no handlers' exception when
skipping handlers due to duplicate handling (wouterj) * bug #48112
[HttpFoundation] Compare cookie with null value as empty string in
ResponseCookieValueSame (fancyweb) * bug #48119 [FrameworkBundle][Lock] Allow
to disable lock without defining a resource (MatTheCat) * bug #48093
[DependencyInjection] don't move locator tag for service subscriber (RobertMe)
* bug #48075 [Mailer] Stream timeout not detected fgets returns false (Sezil) *
bug #48092 Fix the notification email theme for asynchronously dispatched emails
(krisbuist) * bug #48103 [HttpClient] Do not set http_version instead of
setting it to null (Tetragramat) * bug #48050 [HttpFoundation] Check IPv6 is
valid before comparing it (PhilETaylor)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 29 2022 Remi Collet <remi(a)remirepo.net> - 4.4.49-1
- update to 4.4.49
--------------------------------------------------------------------------------
================================================================================
python-copr-1.124-1.fc35 (FEDORA-2022-1a40ad831a)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
### copr-cli - move to GitHub home page - add parameter for custom method repos
### python-copr - move to GitHub home page - add external repos for custom
build - don't play with sessions if using ApiToken
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 1.124-1
- move to GitHub home page
- add external repos for custom build
- don't play with sessions if using ApiToken
--------------------------------------------------------------------------------
================================================================================
python-copr-common-0.17-1.fc35 (FEDORA-2022-7efc820a00)
Python code used by Copr
--------------------------------------------------------------------------------
Update Information:
### Frontend - allow arbitrary creation of :pr:<ID> directories - custom
repositories with custom webhook - move to GitHub home page - use shlex.quote
instead of pipes.quote - add route for a new distgit dispatcher - expand repos
for custom SRPM - process external repos for custom build - support LDAP groups
for Kerberos users - add version to the bitbucket webhook tag name - loosen the
rules of package matching in webhook tags - add optional argument pkg_name to
webhooks API - no delay after large SRPM upload - name the import log
"import.log" in web-UI - show import log to everyone, not just admin - log
webhook calls - cache the queue sizes for one minute - log manage.py commands
### Backend - use OpenPGP v4 signatures - migrate from pipes to shlex - require
redis.service to be started - move to GitHub home page - add resultdir cleaner -
move dispatcher and background workers to copr-common - de-prio IO for the
analyze-results script - don't traceback when there are no files in the S3
storage - allow devel instance to remove access files - send non-CDN hitcounter
hits in chunks - copr-backend-unknown-resalloc-tickets script - work with
multiple CDN hostnames per instance - move setup_script_logger to copr-common
### DistGit - require redis.service to be started - move to GitHub home page -
fair processing of task from multiple sandboxes - use dispatcher and background
workers ### Keygen - move to GitHub home page - logging shouldn't affect
stdout - add logging for the gpg-copr script ### copr-common - move to GitHub
home page - logging shouldn't affect stdout - move dispatcher and background
workers to copr-common - scripts should log also timestamps etc when logging
into file - move setup_script_logger to copr-common
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jakub Kadlcik <frostyx(a)email.cz> 0.17-1
- move to GitHub home page
- logging shouldn't affect stdout
- move dispatcher and background workers to copr-common
- scripts should log also timestamps etc when logging into file
- move setup_script_logger to copr-common
* Thu Oct 27 2022 Jakub Kadlcik <frostyx(a)email.cz> - 0.16.2.dev-1
- Add background_worker.py from backend
- Add get_redis_connection function
- Add Dispatcher, WorkerManager, and QueueTask classes
- Add WorkerLimit, PredicateWorkerLimit, and GroupWorkerLimit classes
* Sun Oct 2 2022 Jakub Kadlcik <frostyx(a)email.cz> - 0.16-1
- Add setup_script_logger function
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2099704 - python-copr-common-0.15-1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2099704
--------------------------------------------------------------------------------
================================================================================
xournalpp-1.1.3-1.fc35 (FEDORA-2022-a8901d194b)
Handwriting note-taking software with PDF annotation support
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 29 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> 1.1.3-1
- Update to 1.1.3
* Sun Oct 30 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> 1.1.2-1
- Update to 1.1.2 (#2136012)
* Wed Mar 16 2022 Luya Tshimbalanga <luya(a)fedoraproject.org> 1.1.1-1
- Update to 1.1.1 (#1983495)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2149051 - xournalpp-1.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2149051
--------------------------------------------------------------------------------