The following Fedora 34 Security updates need testing:
Age URL
75
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6aba96e1b8
radare2-5.6.4-1.fc34
27
https://bodhi.fedoraproject.org/updates/FEDORA-2022-63de6726ce
libinput-1.19.4-1.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5e45671294
freetype-2.10.4-6.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9ce9716352
thunderbird-91.9.0-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-0e5d64ce65
rubygem-nokogiri-1.11.7-3.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-52777fea3c
pidgin-2.14.1-4.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e718888c8b
microcode_ctl-2.1-46.3.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8277bef335
curl-7.76.1-16.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-256d559f0c
dotnet6.0-6.0.105-1.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-44f5e9e219
php-openpsa-universalfeedcreator-1.8.4.1-1.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1cf3c9578f plib-1.8.5-30.fc34
The following Fedora 34 Critical Path updates have yet to be approved:
Age URL
405
https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34
ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34
sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34
127
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3b891fe11 gdb-11.1-7.fc34
75
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8f3103b973
hwdata-0.357-1.fc34
56
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dab75a01b8
gnome-shell-40.10-1.fc34 gnome-shell-extensions-40.7-1.fc34 mutter-40.10-1.fc34
42
https://bodhi.fedoraproject.org/updates/FEDORA-2022-eb1d10aba3 libldb-2.3.3-1.fc34
samba-4.14.13-0.fc34
27
https://bodhi.fedoraproject.org/updates/FEDORA-2022-63de6726ce
libinput-1.19.4-1.fc34
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-5e45671294
freetype-2.10.4-6.fc34
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9ce9716352
thunderbird-91.9.0-1.fc34
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9434036d03
firefox-100.0-4.fc34
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-8277bef335
curl-7.76.1-16.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b9a676a6de
libretls-3.5.2-1.fc34 netcat-1.218-5.fc34 rpki-client-7.8-2.fc34
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-4f0b4a4d73
linux-firmware-20220509-132.fc34
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b0dc7b54f5
kernel-5.17.8-100.fc34
The following builds have been pushed to Fedora 34 updates-testing
distribution-gpg-keys-1.71-1.fc34
gnutls-3.7.5-1.fc34
ignition-2.14.0-1.fc34
magic-8.3.304-1.fc34
netatalk-3.1.13-3.fc34
openrgb-0.7-4.fc34
orca-40.3-1.fc34
python-paramiko-2.11.0-1.fc34
python-regex-2022.4.24-1.fc34
python-steam-1.3.0-1.fc34
qownnotes-22.5.2-1.fc34
rsync-3.2.4-1.fc34
Details about builds:
================================================================================
distribution-gpg-keys-1.71-1.fc34 (FEDORA-2022-66ff37a5f9)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
added AlmaLinux 9 ---- - update copr keys - Add RHEL9 keys - Add RPM Fusion
keys for Fedora 38 ---- update Copr key add EL9 Rpmfusion key
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.71-1
- Refresh AlmaLinux keys to add AlmaLinux 9 key
* Tue May 10 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.70-1
- update copr keys
- Add RHEL9 keys
- Add RPM Fusion keys for Fedora 38
* Mon May 2 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.69-1
- update copr keys
- Add RPM Fusion keys for EL 9
--------------------------------------------------------------------------------
================================================================================
gnutls-3.7.5-1.fc34 (FEDORA-2022-9ea855c65c)
A TLS protocol implementation
--------------------------------------------------------------------------------
Update Information:
Rebase gnutls to version 3.7.5
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 Zoltan Fridrich <zfridric(a)redhat.com> 3.7.5-1
- [packit] 3.7.5 upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2084825 - gnutls-3.7.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2084825
--------------------------------------------------------------------------------
================================================================================
ignition-2.14.0-1.fc34 (FEDORA-2022-7846cac830)
First boot installer and configuration tool
--------------------------------------------------------------------------------
Update Information:
New upstream release for v2.14.0 See release notes at
[
NEWS](https://github.com/coreos/ignition/blob/main/NEWS).
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 16 2022 Steven Presti <spresti(a)redhat.com> - 2.14.0-1
- New release
- Add ignition-apply symlink
- Add ignition-rmcfg symlink and ignition-delete-config.service
--------------------------------------------------------------------------------
================================================================================
magic-8.3.304-1.fc34 (FEDORA-2022-b45ba11c9f)
A very capable VLSI layout tool
--------------------------------------------------------------------------------
Update Information:
New version 8.3.304 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 8.3.304-1
- 8.3.304
--------------------------------------------------------------------------------
================================================================================
netatalk-3.1.13-3.fc34 (FEDORA-2022-da649d6eb7)
Open Source Apple Filing Protocol(AFP) File Server
--------------------------------------------------------------------------------
Update Information:
apply latest pr174 as possible fix for bz 2074586
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 Andrew Bauer <zonexpertconsulting(a)outlook.com> - 5:3.1.13-3
- apply latest pr174 as possible fix for bz 2074586
* Fri Apr 15 2022 Andrew Bauer <zonexpertconsulting(a)outlook.com> - 5:3.1.13-2
- possible fix for bz 2074586
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074586 - After update from 3.1.12-14 to 3.1.13-1 client can't connect
anymore
https://bugzilla.redhat.com/show_bug.cgi?id=2074586
--------------------------------------------------------------------------------
================================================================================
openrgb-0.7-4.fc34 (FEDORA-2022-bddd38d243)
Open source RGB lighting control
--------------------------------------------------------------------------------
Update Information:
build: Add upstream patch to fix LTO issue
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 11 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 0.7-4
- build: Add upstream patch to fix LTO issue
--------------------------------------------------------------------------------
================================================================================
orca-40.3-1.fc34 (FEDORA-2022-2fae59b4ec)
Assistive technology for people with visual impairments
--------------------------------------------------------------------------------
Update Information:
Update to 40.3
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 David King <amigadave(a)amigadave.com> - 40.3-1
- Update to 40.3
--------------------------------------------------------------------------------
================================================================================
python-paramiko-2.11.0-1.fc34 (FEDORA-2022-70cd07a599)
SSH2 protocol library for python
--------------------------------------------------------------------------------
Update Information:
This update includes fixes for better compatibility with OpenSSH and removes the
deprecated Blowfish algorithm from the "preferred algorithms" list.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 Paul Howarth <paul(a)city-fan.org> - 2.11.0-1
- Update to 2.11.0
- Align signature verification algorithm with OpenSSH re: zero-padding
signatures that don't match their nominal size/length; this shouldn't
affect most users, but will help Paramiko-implemented SSH servers handle
poorly behaved clients such as PuTTY (GH#1933)
- OpenSSH 7.7 and older has a bug preventing it from understanding how to
perform SHA2 signature verification for RSA certificates (specifically
certs - not keys), so when we added SHA2 support it broke all clients using
RSA certificates with these servers; this has been fixed in a manner similar
to what OpenSSH's own client does - a version check is performed and the
algorithm used is downgraded if needed (GH#2017)
- Recent versions of Cryptography have deprecated Blowfish algorithm support;
in lieu of an easy method for users to remove it from the list of
algorithms Paramiko tries to import and use, we've decided to remove it
from our "preferred algorithms" list, which will both discourage use of a
weak algorithm, and avoid warnings (GH#2038, GH#2039)
- Windows-native SSH agent support as merged in 2.10 could encounter
'Errno 22' 'OSError' exceptions in some scenarios (e.g. server not
cleanly
closing a relevant named pipe); this has been worked around and should be
less problematic (GH#2008, GH#2010)
- Add SSH config token expansion (eg '%h', '%p') when parsing
'ProxyJump'
directives (GH#1951)
- Apply unittest 'skipIf' to tests currently using SHA1 in their critical
path, to avoid failures on systems starting to disable SHA1 outright in
their crypto backends (e.g. RHEL 9) (GH#2004, GH#2011)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2087206 - python-paramiko-2.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2087206
--------------------------------------------------------------------------------
================================================================================
python-regex-2022.4.24-1.fc34 (FEDORA-2022-07abe2d860)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update python-regex to the latest release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 18 2022 Thomas Moschny <thomas.moschny(a)gmx.de> - 2022.4.24-1
- Update to 2022.4.24.
--------------------------------------------------------------------------------
================================================================================
python-steam-1.3.0-1.fc34 (FEDORA-2022-aa28490877)
Python package for interacting with Steam
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 1.3.0-1
- chore(update): 1.3.0
--------------------------------------------------------------------------------
================================================================================
qownnotes-22.5.2-1.fc34 (FEDORA-2022-8a18e0068a)
Plain-text file markdown note taking with Nextcloud integration
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 22.5.2-1
- chore(update): 22.5.2
* Mon May 16 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 22.5.1-1
- chore(update): 22.5.1
--------------------------------------------------------------------------------
================================================================================
rsync-3.2.4-1.fc34 (FEDORA-2022-43cfd2bbc1)
A program for synchronizing files over a network
--------------------------------------------------------------------------------
Update Information:
New version 3.2.4
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 17 2022 Michal Ruprich <mruprich(a)redhat.com> - 3.2.4-1
- New version 3.2.4
--------------------------------------------------------------------------------