The following Fedora 35 Security updates need testing: Age URL 40 https://bodhi.fedoraproject.org/updates/FEDORA-2021-4c0f58bf07 mysql-connector-java-8.0.27-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-17a9cdcf98 quaternion-0.0.95.1-1.fc35 1 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c6f471ce0f log4j-2.17.1-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-22594d9eb0 chromium-96.0.4664.110-3.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a7a558062e kernel-5.15.12-200.fc35 The following Fedora 35 Critical Path updates have yet to be approved: Age URL 33 https://bodhi.fedoraproject.org/updates/FEDORA-2021-12f6c46ad8 qemu-6.1.0-13.fc35 5 https://bodhi.fedoraproject.org/updates/FEDORA-2021-fd774f1eaf libguestfs-1.46.2-1.fc35 2 https://bodhi.fedoraproject.org/updates/FEDORA-2021-86827209fd v4l-utils-1.22.1-1.fc35 0 https://bodhi.fedoraproject.org/updates/FEDORA-2021-a7a558062e kernel-5.15.12-200.fc35 The following builds have been pushed to Fedora 35 updates-testing golang-github-tdewolff-minify-2.9.26-1.fc35 gwenhywfar-5.8.1-1.fc35 jacoco-0.8.7-3.fc35 jmol-14.32.6-1.fc35 kalendar-0.4.0-1.fc35 magic-8.3.245-1.fc35 mediawiki-1.36.3-1.fc35 mesa-21.3.3-1.fc35 nwg-panel-0.5.3-1.fc35 openfst-1.8.1-1.fc35 python-pyphen-0.12.0-1.fc35 python-samloader-0-1.20211229git8203752.fc35 vdr-live-3.1.4-0.2.20211228git0fbd9b3.fc35 Details about builds: ================================================================================ golang-github-tdewolff-minify-2.9.26-1.fc35 (FEDORA-2021-20f77c99fe) Go minifiers for web formats -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 30 2021 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> 2.9.26-1 - Update to latest version (#2036224) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2036224 - golang-github-tdewolff-minify-2.9.26 is available https://bugzilla.redhat.com/show_bug.cgi?id=2036224 -------------------------------------------------------------------------------- ================================================================================ gwenhywfar-5.8.1-1.fc35 (FEDORA-2021-b527d8d854) A multi-platform helper library for other libraries -------------------------------------------------------------------------------- Update Information: 5.8.1 -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 30 2021 Gwyn Ciesla <gwync@xxxxxxxxxxxxxx> - 5.8.1-1 - 5.8.1 * Tue Dec 28 2021 Gwyn Ciesla <gwync@xxxxxxxxxxxxxx> - 5.8.0-1 - 5.8.0 * Tue Sep 14 2021 Sahana Prasad <sahana@xxxxxxxxxx> - 5.6.0-3 - Rebuilt with OpenSSL 3.0.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2036206 - gwenhywfar-5.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2036206 -------------------------------------------------------------------------------- ================================================================================ jacoco-0.8.7-3.fc35 (FEDORA-2021-5f1c86ec99) Java Code Coverage for Eclipse -------------------------------------------------------------------------------- Update Information: Changelog ``` * Wed Dec 22 2021 Didik Supriadi <didiksupriadi41@xxxxxxxxxxxxxxxxx> - 0.8.7-3 - Redefined properties defined with beanshell-maven-plugin, which was removed - Add wrapper scripts for jacococli ``` -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 22 2021 Didik Supriadi <didiksupriadi41@xxxxxxxxxxxxxxxxx> - 0.8.7-3 - Redefined properties defined with beanshell-maven-plugin, which was removed - Add wrapper scripts for jacococli -------------------------------------------------------------------------------- ================================================================================ jmol-14.32.6-1.fc35 (FEDORA-2021-59b5b4ac1b) Java viewer for chemical structures in 3D -------------------------------------------------------------------------------- Update Information: Changes in version 14.32.6: - Extensive changes and documentation for the modelkit feature. See the documentation. - bug fix: (JavaScript only) insignificant script processing error reported in JavaScript console - bug fix: `show INCHI` broken in 14.32.5 - new feature: hack added for reading invalid CIF files created by Materials Studio - Apache Log4J vulnerability checked (not applicable) - bug fix: InChI for deutero compounds not working - bug fix: InChI failure should show "?" not SMILES -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 29 2021 Jerry James <loganjerry@xxxxxxxxx> - 14.32.6-1 - Version 14.32.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2027743 - jmol-14.32.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2027743 -------------------------------------------------------------------------------- ================================================================================ kalendar-0.4.0-1.fc35 (FEDORA-2021-475cc4c43d) A calendar application using Akonadi to sync with external services -------------------------------------------------------------------------------- Update Information: Version 0.4.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 26 2021 Justin Zobel <justin@xxxxxxx> - 0.4.0-1 - Verison bump to 0.4.0 -------------------------------------------------------------------------------- ================================================================================ magic-8.3.245-1.fc35 (FEDORA-2021-7dcf9d7e89) A very capable VLSI layout tool -------------------------------------------------------------------------------- Update Information: New version 8.3.245 is released. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 30 2021 Mamoru TASAKA <mtasaka@xxxxxxxxxxxxxxxxx> - 8.3.245-1 - 8.3.245 -------------------------------------------------------------------------------- ================================================================================ mediawiki-1.36.3-1.fc35 (FEDORA-2021-bef1126908) A wiki engine -------------------------------------------------------------------------------- Update Information: https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 29 2021 Michael Cronenworth <mike@xxxxxxxxxx> - 1.36.3-1 - Update to 1.36.3 - https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2036080 - CVE-2021-45471 mediawiki: blocked IP addresses are allowed to edit EntitySchema items [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036080 [ 2 ] Bug #2036083 - CVE-2021-45472 mediawiki: XSS in Wikibase using formatter URL [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036083 [ 3 ] Bug #2036088 - CVE-2021-45473 mediawiki: XSS on page information Wikibase central description [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036088 [ 4 ] Bug #2036090 - CVE-2021-45474 mediawiki: XSS in Special:ImportFile URL [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2036090 -------------------------------------------------------------------------------- ================================================================================ mesa-21.3.3-1.fc35 (FEDORA-2021-1d89099e0a) Mesa graphics libraries -------------------------------------------------------------------------------- Update Information: Update to 21.3.3 -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 30 2021 Pete Walter <pwalter@xxxxxxxxxxxxxxxxx> 21.3.3-1 - Update to 21.3.3 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2036141 - mesa-21.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2036141 -------------------------------------------------------------------------------- ================================================================================ nwg-panel-0.5.3-1.fc35 (FEDORA-2021-011516d057) GTK3-based panel for sway window manager -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 30 2021 Artem Polishchuk <ego.cordatus@xxxxxxxxx> - 0.5.3-1 - chore(update): 0.5.3 -------------------------------------------------------------------------------- ================================================================================ openfst-1.8.1-1.fc35 (FEDORA-2021-046ab1798b) Weighted finite-state transducer library -------------------------------------------------------------------------------- Update Information: New upstream version -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 15 2021 W. Michael Petullo <mike@xxxxxxxx> - 1.8.1-1 - New upstream version -------------------------------------------------------------------------------- ================================================================================ python-pyphen-0.12.0-1.fc35 (FEDORA-2021-1183cb54ff) Pure Python module to hyphenate text -------------------------------------------------------------------------------- Update Information: update to 0.12.0, official Python 3.10 compatibility -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 30 2021 Felix Schwarz <fschwarz@xxxxxxxxxxxxxxxxx> - 0.12.0-1 - update to 0.12.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2035917 - python-pyphen-0.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2035917 -------------------------------------------------------------------------------- ================================================================================ python-samloader-0-1.20211229git8203752.fc35 (FEDORA-2021-2c1127f4f7) Download Samsung firmware from official servers -------------------------------------------------------------------------------- Update Information: Initial import; Fixes: RHBZ#2035504 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 29 2021 Davide Cavalca <dcavalca@xxxxxxxxxxxxxxxxx> 0-1 - Initial import; Fixes: RHBZ#2035504 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2035504 - Review Request: python-samloader - Download Samsung firmware from official servers https://bugzilla.redhat.com/show_bug.cgi?id=2035504 -------------------------------------------------------------------------------- ================================================================================ vdr-live-3.1.4-0.2.20211228git0fbd9b3.fc35 (FEDORA-2021-7040f1615d) An interactive web interface with HTML5 live stream support for VDR -------------------------------------------------------------------------------- Update Information: - Rebuilt for new VDR API version - Build compatibility to g++11 ---- Update to 3.1.4-0.1.20211228git0fbd9b3 -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 30 2021 Martin Gansser <martinkg@xxxxxxxxxxxxxxxxx> - 3.1.4-0.2.20211228git0fbd9b3 - Build compatibility to g++11 * Tue Dec 28 2021 Martin Gansser <martinkg@xxxxxxxxxxxxxxxxx> - 3.1.4-0.1.20211228git0fbd9b3 - Replace obsolete pcre by pcre2 - Update to 3.1.4-0.1.20211228git0fbd9b3 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/test@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure