The following Fedora 34 Security updates need testing: Age URL 30 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6aba96e1b8 radare2-5.6.4-1.fc34 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b86459467d vim-8.2.4621-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-29c30bc7ef phoronix-test-suite-10.8.2-1.fc34 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3f78aabf8c seamonkey-2.53.11.1-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-aac057a550 expat-2.4.7-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-56942dc7c5 mingw-fribidi-1.0.10-5.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ee15b98ea1 mingw-python-pillow-8.1.2-6.fc34 python-pillow-8.1.2-7.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b0a85ed1b3 mingw-openexr-2.5.5-6.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d112d4480 mingw-openjpeg2-2.4.0-4.fc34 openjpeg2-2.4.0-4.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-cffca5dbf4 gdal-3.2.2-3.fc34 mingw-gdal-3.2.2-3.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ba2c5339d4 chromium-99.0.4844.84-1.fc34 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e6388650ea buildah-1.23.3-1.fc34 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-10fd054d40 crun-1.4.4-1.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-764c8c6b1c fribidi-1.0.11-3.fc34 The following Fedora 34 Critical Path updates have yet to be approved: Age URL 360 https://bodhi.fedoraproject.org/updates/FEDORA-2021-1300e131b6 ddpt-0.96-4.fc34 ledmon-0.95-4.fc34 libgpod-0.8.3-38.fc34 libzfcphbaapi-2.2.0-12.fc34 lsvpd-1.7.11-6.fc34 sg3_utils-1.46-1.fc34 udisks-1.0.5-18.fc34 120 https://bodhi.fedoraproject.org/updates/FEDORA-2021-c8f226c8be annobin-9.79-3.fc34 82 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3b891fe11 gdb-11.1-7.fc34 30 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8f3103b973 hwdata-0.357-1.fc34 20 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7a7ce77afe go-rpm-macros-3.0.15-1.fc34 13 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ba2d302f05 gjs-1.68.6-1.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5ca2bb2654 gnome-desktop3-40.9-1.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-88abd9154c libretls-3.5.1-1.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1b170c2690 webkit2gtk3-2.36.0-1.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bb9b2a715b bluez-5.64-1.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-abe3e0d83e pytz-2022.1-1.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-70a77aed6a coreutils-8.32-32.fc34 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dab75a01b8 gnome-shell-40.10-1.fc34 gnome-shell-extensions-40.7-1.fc34 mutter-40.10-1.fc34 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-aeb8049f08 web-assets-5-14.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-96fef79f96 tzdata-2022a-1.fc34 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-92087bf4a6 krb5-1.19.2-3.fc34 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c9f2e00cd5 python3-docs-3.9.12-1.fc34 python3.9-3.9.12-1.fc34 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b86459467d vim-8.2.4621-1.fc34 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1ad7595a8d squashfs-tools-4.5.1-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2d112d4480 mingw-openjpeg2-2.4.0-4.fc34 openjpeg2-2.4.0-4.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d2bca3d15 wayland-1.20.0-4.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-aac057a550 expat-2.4.7-1.fc34 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c7f28019a2 rust-zram-generator-1.1.2-1.fc34 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-02900a53e7 evolution-3.40.4-4.fc34 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6a9fba03f9 firefox-98.0.2-1.fc34 0 https://bodhi.fedoraproject.org/updates/FEDORA-2022-764c8c6b1c fribidi-1.0.11-3.fc34 The following builds have been pushed to Fedora 34 updates-testing golang-github-gobuffalo-flect-0.2.5-1.fc34 golang-github-tdewolff-minify-2.10.0-1.fc34 inxi-3.3.14-1.fc34 libmediainfo-22.03-1.fc34 lutris-0.5.10-1.fc34 mame-0.242-1.fc34 mediaconch-22.03-1.fc34 mediainfo-22.03-1.fc34 spectre-meltdown-checker-0.45-1.fc34 touchegg-2.0.14-1.fc34 wine-dxvk-1.10.1-1.fc34 Details about builds: ================================================================================ golang-github-gobuffalo-flect-0.2.5-1.fc34 (FEDORA-2022-3deb3617b0) Inflection engine for Golang -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 2 2022 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> 0.2.5-1 - Update to latest version (#2071309) * Thu Jan 20 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> 0.2.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2071309 - golang-github-gobuffalo-flect-0.2.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2071309 -------------------------------------------------------------------------------- ================================================================================ golang-github-tdewolff-minify-2.10.0-1.fc34 (FEDORA-2022-250f620436) Go minifiers for web formats -------------------------------------------------------------------------------- Update Information: Update to latest version -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 29 2022 Elliott Sales de Andrade <quantum.analyst@xxxxxxxxx> 2.10.0-1 - Update to latest version (#2042248) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2042248 - golang-github-tdewolff-minify-2.10.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2042248 -------------------------------------------------------------------------------- ================================================================================ inxi-3.3.14-1.fc34 (FEDORA-2022-243fd5db31) A full featured system information script -------------------------------------------------------------------------------- Update Information: Update to 3.3.14. -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 2 2022 Vasiliy N. Glazov <vascom2@xxxxxxxxx> - 3.3.14-1 - Update to 3.3.14 -------------------------------------------------------------------------------- ================================================================================ libmediainfo-22.03-1.fc34 (FEDORA-2022-e8c3f93d36) Library for supplies technical and tag information about a video or audio file -------------------------------------------------------------------------------- Update Information: Update to 22.03. -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 2 2022 Vasiliy N. Glazov <vascom2@xxxxxxxxx> - 22.03-1 - Update to 22.03 * Thu Jan 20 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 21.09-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ lutris-0.5.10-1.fc34 (FEDORA-2022-debd82e4b4) Install and play any video game easily -------------------------------------------------------------------------------- Update Information: Initial release of version 0.5.10. Changelog: -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 1 2022 Steve Cossette <farchord@xxxxxxxxx> - 0.5.10-1 - Initial release of version 0.5.10. Changelog: - Add new window to add games to Lutris, with searches from the website, scanning a folder for previously installed games, installing a Windows game from a setup file, installing from a YAML script or configuring a single game manually. - Move the search for Lutris installers from a tab in the Lutris service to the window for adding games. - Add option to add a Lutris game to Steam - Add a coverart format - Add integration with EA Origin - Add integration with Ubisoft Connect - Download missing media on startup - Remove Winesteam runner (install Steam for Windows in Lutris instead) - PC (Linux and Windows) games have their own dedicated Nvidia shader cache - Add dgvoodoo2 option - Add option to enable BattleEye anti-cheat support - Default to Retroarch cores in ~/.config/retroarch/cores if available - Add support for downloading patches and DLC for GOG games - Add --export and --import command line flags to export a game a lutris game and re-import it (requires --dest for the destination path, feature still experimental) - Add command line flags to manage runners: --install-runner, --uninstall-runners, --list-runners, --list-wine-versions - Change behavior of the "Stop" button, remove "Kill all Wine processes" action - Gamescope option is now disabled on Nvidia GPUs - Enable F-Sync by default -------------------------------------------------------------------------------- ================================================================================ mame-0.242-1.fc34 (FEDORA-2022-9991db326c) Multiple Arcade Machine Emulator -------------------------------------------------------------------------------- Update Information: Update to the latest upstream release: * https://www.mamedev.org/?p=511 -------------------------------------------------------------------------------- ChangeLog: * Fri Apr 1 2022 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> 0.242-1 - Update to 0.242 -------------------------------------------------------------------------------- ================================================================================ mediaconch-22.03-1.fc34 (FEDORA-2022-e8c3f93d36) Most relevant technical and tag data for video and audio files (CLI) -------------------------------------------------------------------------------- Update Information: Update to 22.03. -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 2 2022 Vasiliy N. Glazov <vascom2@xxxxxxxxx> - 22.03-1 - Update to 22.03 * Thu Jan 20 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 18.03.2-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 18.03.2-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ mediainfo-22.03-1.fc34 (FEDORA-2022-e8c3f93d36) Supplies technical and tag information about a video or audio file (CLI) -------------------------------------------------------------------------------- Update Information: Update to 22.03. -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 2 2022 Vasiliy N. Glazov <vascom2@xxxxxxxxx> - 22.03-1 - Update to 22.03 * Thu Jan 20 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 21.09-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ spectre-meltdown-checker-0.45-1.fc34 (FEDORA-2022-8af4facd27) Spectre & Meltdown vulnerability/mitigation checker for Linux -------------------------------------------------------------------------------- Update Information: An intermediary release with preparatory work needed to integrate support for new vulns BHI and intra-mode BTI (Spectre V2-like), along with other changes that were in the pipe in the last few months: * feat: add `--cpu`, to conduct MSR read/writes and cpuinfo checks on a given CPU/core number. By default, the first core is used (id 0). `--cpu all` is also supported, to query all cores and report whether there is discrepancies between cores * feat: hardware check: add `IPRED_CTRL`, `RRSBA_CTRL`, and `BHI_CTRL` feature bits checks in cpuinfo, these are needed to mitigate BHI and Intra-mode BTI ([https://www.intel.com/content/www/us/en/developer/articles/technical/software- security-guidance/technical-documentation/branch-history-injection.html](https:/ /www.intel.com/content/www/us/en/developer/articles/technical/software-security- guidance/technical-documentation/branch-history-injection.html)) * feat: add subleaf (ecx) != 0 support for `read_cpuid`, needed to query support of new bits in the `IA32_SPEC_CTRL` MSR * feat: add `--allow-msr-write`, and no longer write to MSRs by default, to avoid spurious messages in kernel logs, as more and more distros default having `msr.allow_writes` to `default` (allow but log a warning) or even `off`, which prevents writing from userspace altogether. This also fixes [#385](https://github.com/speed47/spectre-meltdown-checker/issues/385). When the cpuid bit indicating the presence of a write-only MSR is set, we'll now make the assumption that it exists, unless `--allow-msr-write` is specified, in which case we'll also check that. * feat: bsd: for unimplemented CVEs, at least report when CPU is not affected * feat: bsd: implement mitigation detection for the MCEPSC vulnerability * feat: arm: add Cortex A77 and Neoverse-N1 (fixes [#371](https://github.com/speed47/spectre-meltdown-checker/issues/371)) * feat: arm64: phytium: Add CPU Implementer Phytium * feat: arm64: variant 4: detect ssbd mitigation from kernel img, system.map or kconfig * feat: Android: autodetect a better suitable default `TMPDIR` ([#415](https://github.com/speed47/spectre-meltdown-checker/issues/415) [#424](https://github.com/speed47/spectre-meltdown-checker/issues/424)) * fix: retpoline: detection on 5.15.28+ ([#420](https://github.com/speed47/spectre- meltdown-checker/issues/420)) * fix: has_vmm false positive with pcp ([#394](https://github.com/speed47/spectre-meltdown-checker/issues/394)) * fix: is_ucode_blacklisted: fix some model names * fix: refuse to run under MacOS and ESXi ([#398](https://github.com/speed47/spectre-meltdown-checker/issues/398)) * fix: variant4: added case where prctl ssbd status is tagged as 'unknown' * fix: `extract_kernel`: don't overwrite `kernel_err` if already set * chore: only attempt to load `msr` and `cpuid` modules once * chore: `read_cpuid`/`read_msr`/`write_msr`: use named constants for better maintainability * chore: wording: model not vulnerable -> model not affected * chore: update Intel Family 6 models * chore: ensure vars are set before being de-referenced (set -u compat) * chore: update `fwdb` to `v222+i20220208` -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 2 2022 Reto Gantenbein <reto.gantenbein@xxxxxxxxxxxx> - 0.45-1 - Update to 0.45 * Sat Jan 22 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.44-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jul 23 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 0.44-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ touchegg-2.0.14-1.fc34 (FEDORA-2022-414bfa97ea) Multi-touch gesture recognizer -------------------------------------------------------------------------------- Update Information: Update to 2.0.14. Release Notes: https://github.com/JoseExposito/touchegg/releases/tag/2.0.14 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 2 2022 Maxwell G <gotmax@e.email> - 2.0.14-1 - Update to 2.0.14. * Sat Jan 22 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.0.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ wine-dxvk-1.10.1-1.fc34 (FEDORA-2022-8ec4624f1c) Vulkan-based D3D11 and D3D10 implementation for Linux / Wine -------------------------------------------------------------------------------- Update Information: - wine-dxvk-1.10.1: https://github.com/doitsujin/dxvk/releases/tag/v1.10.1 -------------------------------------------------------------------------------- ChangeLog: * Sat Apr 2 2022 Frantisek Zatloukal <fzatlouk@xxxxxxxxxx> - 1.10.1-1 - Release 1.10.1 -------------------------------------------------------------------------------- _______________________________________________ test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/test@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
