The following Fedora 37 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-798fd95813 subscription-manager-cockpit-4-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-44a20bba43 libtar-1.2.20-25.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d31a521866 tcpreplay-4.4.2-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7c8b29195f rubygem-puma-5.6.5-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b38fbc239b mingw-jasper-3.0.6-2.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b2db61249b autotrace-0.31.9-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c28ae0cd8 zlib-1.2.12-5.fc37
The following Fedora 37 Critical Path updates have yet to be approved: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3f68f0bd6 shadow-utils-4.12.3-1.fc37 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b831e8c890 ipset-7.15-5.fc37 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2e35029140 gjs-1.73.2-3.fc37 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b602b4ea68 libglvnd-1.5.0-1.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8c0f360335 wireplumber-0.4.11-4.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b8bf4bd4a7 elfutils-0.187-8.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-225a92f1bb ndctl-74-1.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e7e6478fb6 initscripts-10.17-1.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-998e1e9603 uboot-tools-2022.10-0.4.rc3.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9d486a7bf9 librepo-1.14.4-1.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-70bcc97183 nfs-utils-2.6.2-1.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-59a7796ddf glibc-2.36-2.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b71ca4bcc6 fonts-rpm-macros-2.0.5-9.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a44193cad0 highlight-4.2-1.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-144d336a5d libwpe-1.13.90-1.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f384dddffd pinentry-1.2.1-1.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-352d9d75bb qt5-qtbase-5.15.5-4.fc37 qt5-qtquickcontrols2-5.15.5-3.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-645497fb95 curl-7.84.0-3.fc37 nghttp2-1.49.0-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-34f4127d7d sssd-2.7.4-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-469cacc230 glib2-2.73.3-2.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-10d21445e7 NetworkManager-1.40.0-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ab16432cdc pungi-4.3.6-1.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d76c99c58d librsvg2-2.54.5-1.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2173cbd1cf gdisk-1.0.9-4.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b30e72fb6c audit-3.0.9-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8a6c6a7211 koji-1.30.0-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2ea081121f libxslt-1.1.37-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c4b11298b fwupd-1.8.4-2.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-69b8c2960d rest-0.9.1-5.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d08633ab93 osinfo-db-20220830-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0c7f533222 lv2-1.18.8-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a055aba94b cracklib-2.9.7-30.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e1a2b7a6e7 libcdio-2.1.0-8.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-268ff3dd3a perl-5.36.0-492.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4ed66607e libXau-1.0.10-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1a82d26d37 python-pip-22.2.2-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-82b7a84be3 git-2.37.3-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c28ae0cd8 zlib-1.2.12-5.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fc10a6de2b gettext-0.21-18.0.20220203.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d107d3fdb7 libinput-1.21.0-3.fc37
The following builds have been pushed to Fedora 37 updates-testing
389-ds-base-2.2.3-1.fc37 FAudio-22.09-1.fc37 OpenImageIO-2.3.19.0-1.fc37 anaconda-37.12.2-1.fc37 anjuta-3.34.0-15.fc37 archlinux-keyring-20220831-3.fc37 baresip-2.7.0-1.fc37 bluez-5.65-3.fc37 castxml-0.4.6-1.fc37 chrony-4.3-1.fc37 firefox-104.0.1-1.fc37 fotoxx-22.31-1.fc37 gnome-shell-extension-pop-shell-1.2.0^8.4520e78-1.fc37 golang-github-uber-tally-4.1.2-2.fc37 gsi-openssh-8.8p1-3.fc37 hatch-1.5.0-1.fc37 ibus-typing-booster-2.18.10-1.fc37 kernel-5.19.6-300.fc37 kernel-headers-5.19.4-300.fc37 kernel-tools-5.19.4-300.fc37 kpeoplevcard-0.1-1.fc37 legendary-0.20.28-1.fc37 libre-2.7.0-1.fc37 librem-2.7.0-1.fc37 maildir-utils-1.8.9-1.fc37 mediawiki-1.38.2-1.fc37 muffin-5.4.6-2.fc37 perl-Acme-Alien-DontPanic2-2.650.0-1.fc37 perl-Dist-Zilla-6.025-1.fc37 perl-Net-Netmask-2.0002-1.fc37 perl-Test-File-Contents-0.242-1.fc37 perl-Test2-Harness-1.0.127-1.fc37 pygame-2.1.2-6.fc37 python-gnupg-0.5.0-1.fc37 python-janus-1.0.0-2.fc37 python-ovh-1.0.0-2.fc37 python-zmq-23.2.0-1.fc37 qt5-qtwebengine-5.15.10-1.fc37 rust-wezterm-dynamic-0.1.0-1.fc37 thunderbird-102.2.1-1.fc37 vcftools-0.1.16-15.fc37 vim-9.0.348-1.fc37
Details about builds:
================================================================================ 389-ds-base-2.2.3-1.fc37 (FEDORA-2022-2269bbf393) 389 Directory Server (base) -------------------------------------------------------------------------------- Update Information:
Bump verrsion to 2.2.3 -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Mark Reynolds mreynolds@redhat.com - 2.2.3-1 - Bump verrsion to 2.2.3 - Issue 5012 - Migrate pcre to pcre2 - remove match limit - Update CI tests - Issue 5356 - Make Rust non-optional and update default password storage scheme - Issue 5012 - Migrate pcre to pcre2 - Issue 5428 - Fix regression with nscpEntryWsi computation - Fix missing 'not' in description (closes #5423) (#5424) - Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422) - Issue 3903 - fix repl keep alive event interval - Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420) - Issue 5415 - Hostname when set to localhost causing failures in other tests - Issue 5412 - lib389 - do not set backend name to lowercase - Issue 5407 - sync_repl crashes if enabled while dynamic plugin is enabled (#5411) - Issue 5385 - LMDB - import crash in rdncache_add_elem (#5406) - Issue 5403 - Memory leak in conntection table mulit list (#5404) - Issue 3903 - keep alive update event starts too soon - Issue 5397 - Fix various memory leaks - Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400) - Issue 3903 - Supplier should do periodic updates - Issue 5377 - Code cleanup: Fix Covscan invalid reference (#5393) - Issue 5394 - configure doesn't check for lmdb and json-c - Issue 5392 - dscreate fails when using alternative ports in the SELinux hi_reserved_port_t label range - Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387) - Issue 5388 - fix use-after-free and deadcode - Issue 5383 - UI - Various fixes and RFE's for UI - Issue 4656 - Remove problematic language from source code - Issue 5380 - Separate cleanAllRUV code into new file - Issue 5322 - optime & wtime on rejected connections is not properly set - Issue 5335 - RFE - Add Security Audit Log - Issue 5375 - CI - disable TLS hostname checking - Issue 981 - Managed Entries betxnpreoperation - transaction not aborted on managed entry failure (#5369) - Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function - Issue 5371 - Update npm and cargo packages - Issue 3069 - Support ECDSA private keys for TLS (#5365) - Issue 5290 - Importing certificate chain files via "import-server-key-cert" no longer works (#5293) --------------------------------------------------------------------------------
================================================================================ FAudio-22.09-1.fc37 (FEDORA-2022-1ecc2c4f50) FNA is a reimplementation of the Microsoft XNA Game Studio 4.0 Refresh libraries -------------------------------------------------------------------------------- Update Information:
New Features: Update to SDL 2.24. This has been made a hard requirement, as it fixes/adds way too much to ignore: 2.1 and 4.1 audio is now supported On Windows, we now prioritize DirectSound over WASAPI The PulseAudio samples hack has been removed The non-power-of-two samples hack for Emscripten/OSS has also been removed GetDeviceDetails(0) now uses SDL_GetDefaultAudioInfo, obsoleting our hack -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Michael Cronenworth mike@cchtml.com - 22.09-1 - Update to 22.09 * Thu Aug 25 2022 Michael Cronenworth mike@cchtml.com - 22.08-2 - Include MinGW debuginfo packages -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123511 - FAudio-22.09 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123511 --------------------------------------------------------------------------------
================================================================================ OpenImageIO-2.3.19.0-1.fc37 (FEDORA-2022-7ece82261c) Library for reading and writing images -------------------------------------------------------------------------------- Update Information:
See release notes: https://github.com/OpenImageIO/oiio/releases/tag/v2.3.19.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Richard Shaw hobbes1069@gmail.com - 2.3.19.0-1 - Update to 2.3.19.0. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123296 - OpenImageIO-2.3.19.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123296 --------------------------------------------------------------------------------
================================================================================ anaconda-37.12.2-1.fc37 (FEDORA-2022-6d44eb9c78) Graphical system installer -------------------------------------------------------------------------------- Update Information:
Run yelp under liveuser if possible (vslavik) -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Martin Kolman mkolman@redhat.com - 37.12.2-1 - Run yelp under liveuser if possible (vslavik) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2118832 - anaconda help shows up blank on live images since Fedora-37-20220814.n.0 https://bugzilla.redhat.com/show_bug.cgi?id=2118832 --------------------------------------------------------------------------------
================================================================================ anjuta-3.34.0-15.fc37 (FEDORA-2022-d3d61b9563) GNOME IDE for various programming languages (including C/C++, Python, Vala and JavaScript) -------------------------------------------------------------------------------- Update Information:
Fix for webkit -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Gwyn Ciesla gwync@protonmail.com - 1:3.34.0-15 - Update webkit patch. * Thu Aug 4 2022 Gwyn Ciesla gwync@protonmail.com - 1:3.34.0-14 - libgda rebuild --------------------------------------------------------------------------------
================================================================================ archlinux-keyring-20220831-3.fc37 (FEDORA-2022-8d9aa1ece7) GPG keys used by Arch distribution to sign packages -------------------------------------------------------------------------------- Update Information:
Version 20220831 (#2122898) -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Frantisek Sumsal frantisek@sumsal.cz 20220831-3 - Actually build-require systemd * Thu Sep 1 2022 Frantisek Sumsal frantisek@sumsal.cz 20220831-2 - Build-require systemd-rpm-macros for %{_unitdir} * Thu Sep 1 2022 Frantisek Sumsal frantisek@sumsal.cz 20220831-1 - Version 20220831 (#2122898) * Thu Sep 1 2022 Frantisek Sumsal frantisek@sumsal.cz 20220727-2 - version-update: allow overriding the default FAS username --------------------------------------------------------------------------------
================================================================================ baresip-2.7.0-1.fc37 (FEDORA-2022-a0748b927d) Modular SIP user-agent with audio and video support -------------------------------------------------------------------------------- Update Information:
# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference - call: remember media dir for established state - avformat: fix ffmpeg `channel_layout` deprecation - cmake: add multicast module - play: ring tone fixes if `file_ausrc` is set - add peerconnection and mediatrack - main,test: close re async before `tmr_debug` - http: new file for HTTP functions - http: add `http_reply_json()` - play: `tmr_polling` has to check if `ausrc` is used - cmake: use object instead of static for modules - [WIP] import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix modules install path and install share files - hook up webrtc to main cmake file - avformat: check shared for both audio+video - cmake: add V4L2 module - Omx remove - cmake: add directfb module - main,webrtc/main: add `re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` - ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface - gzrtp: Call event hander when SAS needs to be verified - Generate also `MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one `MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net: add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options` and use re config - cmake/modules: build syslog only if available - cmake: add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11 cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module - call: do not set call state to answered, if session progress (PRACK) # librem v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01) - async: add `re_thread_async` - atomic: Add support for gcc `__sync` intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings - async: add guard - dns/client: add async `getaddrinfo` usage - async: make work handler and callback optional - Add a state update action to the main loop to unblock polling if another thread has affected the state - dns,net: fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo` duplicates - http/client: fix `dnsc_conf` initialization - tmr: `tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of `ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local media format ids to match those in the offer - debian: fix prefix -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Robert Scheck robert@fedoraproject.org 2.7.0-1 - Upgrade to 2.7.0 (#2123475) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123475 - baresip-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123475 [ 2 ] Bug #2123484 - librem-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123484 --------------------------------------------------------------------------------
================================================================================ bluez-5.65-3.fc37 (FEDORA-2022-4893616fa9) Bluetooth utilities -------------------------------------------------------------------------------- Update Information:
This update fixes a bug relating to the state of the device after an error occurs powering on the adapter, as well as adding support for the PowerState property. -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Bastien Nocera bnocera@redhat.com - 5.65-3 + bluez-5.65-3 - Update PowerState property patch to upstream version * Wed Aug 31 2022 Bastien Nocera bnocera@redhat.com - 5.65-2 + bluez-5.65-2 - Add PowerState property implementation --------------------------------------------------------------------------------
================================================================================ castxml-0.4.6-1.fc37 (FEDORA-2022-770c9a097e) C-family abstract syntax tree XML output tool -------------------------------------------------------------------------------- Update Information:
CastXML 0.4.6 -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Mattias Ellert mattias.ellert@physics.uu.se - 0.4.6-1 - Update to version 0.4.6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123195 - castxml-0.4.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123195 --------------------------------------------------------------------------------
================================================================================ chrony-4.3-1.fc37 (FEDORA-2022-eb3962f30f) An NTP client/server -------------------------------------------------------------------------------- Update Information:
Update to the final 4.3 release. -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 31 2022 Miroslav Lichvar mlichvar@redhat.com 4.3-1 - update to 4.3 --------------------------------------------------------------------------------
================================================================================ firefox-104.0.1-1.fc37 (FEDORA-2022-211161f40e) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information:
- New upstream version (104.0.1) -------------------------------------------------------------------------------- ChangeLog:
* Tue Aug 30 2022 Martin Stransky stransky@redhat.com- 104.0.1-1 - Updated to 104.0.1 --------------------------------------------------------------------------------
================================================================================ fotoxx-22.31-1.fc37 (FEDORA-2022-8711bbf2e4) Photo editor -------------------------------------------------------------------------------- Update Information:
22.31 -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Gwyn Ciesla gwync@protonmail.com - 22.31-1 - 22.31 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123283 - fotoxx-22.31 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123283 --------------------------------------------------------------------------------
================================================================================ gnome-shell-extension-pop-shell-1.2.0^8.4520e78-1.fc37 (FEDORA-2022-a1ba25cb95) GNOME Shell extension for advanced tiling window management -------------------------------------------------------------------------------- Update Information:
Latest upstream snapshot for GNOME 43 compatibility. ---- Latest upstream snapshot. -------------------------------------------------------------------------------- ChangeLog:
* Fri Sep 2 2022 Carl George carl@george.computer - 1.2.0^8.4520e78-1 - Latest upstream snapshot (GNOME 43 compatibility) * Wed Aug 31 2022 Carl George carl@george.computer - 1.2.0^7.4c03091-1 - Latest upstream snapshot --------------------------------------------------------------------------------
================================================================================ golang-github-uber-tally-4.1.2-2.fc37 (FEDORA-2022-699998c856) A Go metrics interface with fast buffered metrics and third party reporters -------------------------------------------------------------------------------- Update Information:
Update to 4.1.2 and fix ftbfs -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 4.1.2-2 - Skip m3 test also for armv7hl * Thu Sep 1 2022 Mikel Olasagasti Uranga mikel@olasagasti.info 4.1.2-1 - Update to 4.1.2 - Closes rhbz#2025732 rhbz#2045623 * Wed Aug 10 2022 Maxwell G gotmax@e.email - 4.0.1-4 - Rebuild to fix FTBFS * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 4.0.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 4.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ gsi-openssh-8.8p1-3.fc37 (FEDORA-2022-58d83d308b) An implementation of the SSH protocol with GSI authentication -------------------------------------------------------------------------------- Update Information:
Sync with openssh package -------------------------------------------------------------------------------- ChangeLog:
* Tue Aug 30 2022 Mattias Ellert mattias.ellert@physics.uu.se - 8.8p1-3 - Based on openssh-8.8p1-6.fc37 --------------------------------------------------------------------------------
================================================================================ hatch-1.5.0-1.fc37 (FEDORA-2022-57e48164c6) A modern project, package, and virtual env manager -------------------------------------------------------------------------------- Update Information:
### [1.5.0](https://github.com/pypa/hatch/releases/tag/hatch-v1.5.0) - 2022-08-28 ***Added:*** - The `index` publisher now recognizes repository- specific options - Add the `--ignore-compat` flag to the `env run` command - Setting the `HATCH_PYTHON` environment variable to `self` will now force the use of the Python executable Hatch is running on for `virtual` environment creation ***Fixed:*** - Fix the `--force-continue` flag of the `env run` command - Handle more edge cases in the `setuptools` migration script -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Benjamin A. Beasley code@musicinmybrain.net 1.5.0-1 - Update to 1.5.0 (close RHBZ#2121990) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2121990 - hatch-1.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2121990 --------------------------------------------------------------------------------
================================================================================ ibus-typing-booster-2.18.10-1.fc37 (FEDORA-2022-e57cfa1c4d) A completion input method -------------------------------------------------------------------------------- Update Information:
Update to 2.18.10 Add functions to get and set variables for m17n input methods Update emoji annotations from CLDR Translation update from Weblate (bn added 42% complete) Test cases for bn-national-jatiya.mim Add more icons in different sizes to the appdata.xml files Stop calling self.set_wmclass('emoji-picker', 'Emoji Picker') (avoid deprecation warning) -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Mike FABIAN mfabian@redhat.com - 2.18.10-1 - Update to 2.18.10 - Add functions to get and set variables for m17n input methods - Update emoji annotations from CLDR - Translation update from Weblate (bn added 42% complete) - Test cases for bn-national-jatiya.mim - Add more icons in different sizes to the appdata.xml files - Stop calling self.set_wmclass('emoji-picker', 'Emoji Picker') (avoid deprecation warning) --------------------------------------------------------------------------------
================================================================================ kernel-5.19.6-300.fc37 (FEDORA-2022-ccb0138bb6) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.19.6 stable kernel update contains a number of important fixes across the tree. ---- The 5.19.4 kernel rebase contains a number of important bug fixes, new hardware support, and feature enhancements across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 31 2022 Justin M. Forbes jforbes@fedoraproject.org [5.19.6-0] - Revert "block: freeze the queue earlier in del_gendisk" (Justin M. Forbes) - redhat/configs: aarch64: Turn on Apple Silicon configs for Fedora (Eric Curtin) - redhat/Makefile: Always set UPSTREAM (Prarit Bhargava) - Linux v5.19.6 * Thu Aug 25 2022 Justin M. Forbes jforbes@fedoraproject.org [5.19.4-0] - Linux v5.19.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2122228 - CVE-2022-3028 kernel: race condition in xfrm_probe_algs can lead to out-of-bounds read/write https://bugzilla.redhat.com/show_bug.cgi?id=2122228 --------------------------------------------------------------------------------
================================================================================ kernel-headers-5.19.4-300.fc37 (FEDORA-2022-ccb0138bb6) Header files for the Linux kernel for use by glibc -------------------------------------------------------------------------------- Update Information:
The 5.19.6 stable kernel update contains a number of important fixes across the tree. ---- The 5.19.4 kernel rebase contains a number of important bug fixes, new hardware support, and feature enhancements across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 25 2022 Justin M. Forbes jforbes@fedoraproject.org - 5.19.4-300 - Linux v5.19.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2122228 - CVE-2022-3028 kernel: race condition in xfrm_probe_algs can lead to out-of-bounds read/write https://bugzilla.redhat.com/show_bug.cgi?id=2122228 --------------------------------------------------------------------------------
================================================================================ kernel-tools-5.19.4-300.fc37 (FEDORA-2022-ccb0138bb6) Assortment of tools for the Linux kernel -------------------------------------------------------------------------------- Update Information:
The 5.19.6 stable kernel update contains a number of important fixes across the tree. ---- The 5.19.4 kernel rebase contains a number of important bug fixes, new hardware support, and feature enhancements across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu Aug 25 2022 Justin M. Forbes jforbes@fedoraproject.org - 5.19.4-300 - Linux v5.19.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2122228 - CVE-2022-3028 kernel: race condition in xfrm_probe_algs can lead to out-of-bounds read/write https://bugzilla.redhat.com/show_bug.cgi?id=2122228 --------------------------------------------------------------------------------
================================================================================ kpeoplevcard-0.1-1.fc37 (FEDORA-2022-05a8b3609e) Expose VCard contacts to KPeople -------------------------------------------------------------------------------- Update Information:
Initial package -------------------------------------------------------------------------------- ChangeLog:
* Sun Jan 16 2022 Onuralp SEZER thunderbirdtr@fedoraproject.org - 0.1-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2041267 - Review Request: kpeoplevcard - Expose VCard contacts to KPeople https://bugzilla.redhat.com/show_bug.cgi?id=2041267 --------------------------------------------------------------------------------
================================================================================ legendary-0.20.28-1.fc37 (FEDORA-2022-7b598c82d6) Free and open-source replacement for the Epic Games Launcher -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Artem Polishchuk ego.cordatus@gmail.com 0.20.28-1 - chore(update): 0.20.28 --------------------------------------------------------------------------------
================================================================================ libre-2.7.0-1.fc37 (FEDORA-2022-a0748b927d) Library for real-time communications and SIP stack -------------------------------------------------------------------------------- Update Information:
# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference - call: remember media dir for established state - avformat: fix ffmpeg `channel_layout` deprecation - cmake: add multicast module - play: ring tone fixes if `file_ausrc` is set - add peerconnection and mediatrack - main,test: close re async before `tmr_debug` - http: new file for HTTP functions - http: add `http_reply_json()` - play: `tmr_polling` has to check if `ausrc` is used - cmake: use object instead of static for modules - [WIP] import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix modules install path and install share files - hook up webrtc to main cmake file - avformat: check shared for both audio+video - cmake: add V4L2 module - Omx remove - cmake: add directfb module - main,webrtc/main: add `re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` - ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface - gzrtp: Call event hander when SAS needs to be verified - Generate also `MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one `MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net: add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options` and use re config - cmake/modules: build syslog only if available - cmake: add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11 cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module - call: do not set call state to answered, if session progress (PRACK) # librem v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01) - async: add `re_thread_async` - atomic: Add support for gcc `__sync` intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings - async: add guard - dns/client: add async `getaddrinfo` usage - async: make work handler and callback optional - Add a state update action to the main loop to unblock polling if another thread has affected the state - dns,net: fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo` duplicates - http/client: fix `dnsc_conf` initialization - tmr: `tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of `ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local media format ids to match those in the offer - debian: fix prefix -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Robert Scheck robert@fedoraproject.org 2.7.0-1 - Upgrade to 2.7.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123475 - baresip-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123475 [ 2 ] Bug #2123484 - librem-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123484 --------------------------------------------------------------------------------
================================================================================ librem-2.7.0-1.fc37 (FEDORA-2022-a0748b927d) Library for real-time audio and video processing -------------------------------------------------------------------------------- Update Information:
# Baresip v2.7.0 (2022-09-01) - menu: fix `menu_ua_carg` data preference - call: remember media dir for established state - avformat: fix ffmpeg `channel_layout` deprecation - cmake: add multicast module - play: ring tone fixes if `file_ausrc` is set - add peerconnection and mediatrack - main,test: close re async before `tmr_debug` - http: new file for HTTP functions - http: add `http_reply_json()` - play: `tmr_polling` has to check if `ausrc` is used - cmake: use object instead of static for modules - [WIP] import baresip-webrtc - FindAMR.cmake fixes/improvements - cmake: fix modules install path and install share files - hook up webrtc to main cmake file - avformat: check shared for both audio+video - cmake: add V4L2 module - Omx remove - cmake: add directfb module - main,webrtc/main: add `re_thread_async_init` - cmake: add wincons and winwave modules - cmake: add sndfile module - Mention actual GTK+ 3 usage (instead of 2) in `README.md` - ctrl_tcp: change unsafe operations on an mbuf to the safe mbuf interface - gzrtp: Call event hander when SAS needs to be verified - Generate also `MENC_EVENT_PEER_VERIFIED` event - gzrtp: Generate only one `MENC_EVENT_PEER_VERIFIED` event when all streams are verified - config,net: add `use_getaddrinfo`/`dns_getaddrinfo` option - cmake: `add_compile_options` and use re config - cmake/modules: build syslog only if available - cmake: add selftest - cmake: add win32 linklibs - cmake: add mqtt - Improve C11 cchecks - Added cmake of gzrtp module - Gzrtp cmake - Added cmake of webrtc_aecm module - Suppressed unused var warnings in webrtc_aecm module - call: do not set call state to answered, if session progress (PRACK) # librem v2.7.0 (2022-09-01) - cmake: add FindRE and use `re-config.cmake` for definitions - Fixed prefix in Debian `librem.pc` # librem v2.7.0 (2022-09-01) - async: add `re_thread_async` - atomic: Add support for gcc `__sync` intrinsics - btrace: fix gcc 4.3.5 warnings - h264: fix gcc 4.3.5 warnings - async: add guard - dns/client: add async `getaddrinfo` usage - async: make work handler and callback optional - Add a state update action to the main loop to unblock polling if another thread has affected the state - dns,net: fix build of `asyn_getaddrinfo` on gcc 4.3.5 - dns/client: fix `getaddrinfo` duplicates - http/client: fix `dnsc_conf` initialization - tmr: `tmr_start_dbg` use const char for file arg - base64: Encoding/Decoding with URL and Filename Safe Alphabet - misc: fix c11 err handling - cmake: move definitions to `re-config.cmake` - ci/mingw: fix make retest - cmake: add pkgconfig - Fix error: `NI_MAXSERV` undeclared - Fix error: storage size of `ifrr` isn���t known - ci/musl: add alpine/musl build - Correctly update local media format ids to match those in the offer - debian: fix prefix -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Robert Scheck robert@fedoraproject.org 2.7.0-1 - Upgrade to 2.7.0 (#2123484) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123475 - baresip-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123475 [ 2 ] Bug #2123484 - librem-2.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123484 --------------------------------------------------------------------------------
================================================================================ maildir-utils-1.8.9-1.fc37 (FEDORA-2022-b4a8044c21) A command-line mail organization utility -------------------------------------------------------------------------------- Update Information:
Update to 1.8.9 -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Jani Juhani Sinervo jani@sinervo.fi - 1.8.9-1 - Update to 1.8.9 * Thu Sep 1 2022 Jakub Kadlcik frostyx@email.cz - 1.8.5-1 - Update to a new upstream version -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2122825 - RFE: Please update to newer upstream release https://bugzilla.redhat.com/show_bug.cgi?id=2122825 --------------------------------------------------------------------------------
================================================================================ mediawiki-1.38.2-1.fc37 (FEDORA-2022-bca2c95559) A wiki engine -------------------------------------------------------------------------------- Update Information:
MediaWiki 1.38.2 This is a security and maintenance release of the MediaWiki 1.38 branch. Changes since MediaWiki 1.38.1 Localisation updates. (T309426) Repair language selector for SVGs. (T310013) Fix default value for $wgShowEXIF and $wgUsePathInfo. (T308471) SECURITY: Escape welcomeuser message passed to showSuccessPage(). (T308473) SECURITY: Escape contributions-title msg for use within page title. (T311272) Call parent constructor of AddSite maintenance script first. MediaWiki: Don't eagerly initialize action name. (T311384, CVE-2022-27776) Updated guzzlehttp/guzzle from 7.4.1 to 7.4.5. (T289926) Avoid passing null to trim() in SkinTemplate. (T289879) Address deprecations for PHP 8.1. (T311473) rollbackEdits: Pass user identity to RollbackPage. Upgrade wikimedia/remex-html from 3.0.1 to 3.0.2. (T311551) ShellboxClientFactory::getUrl(): Check if $this->key is null. (T311552) ChangesListSpecialPage: Don't pass null to FormatJson::decode(). (T311569) FileBackend::isStoragePath() Handle being passed null. (T311544) Pass int to ApiUsageException::newWithMessage()'s $httpCode param. (T311678) SpecialEditWatchlist: Prevent passing null to strtolower(). (T311554) ChangeTags: Return early in formatSummaryRow() if $tags === null. Upgrade wikimedia/common-passwords from 0.3.0 to 0.4.0. -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Michael Cronenworth mike@cchtml.com - 1.38.2-1 - Update to 1.38.2 - https://www.mediawiki.org/wiki/Release_notes/1.38#MediaWiki_1.38.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2101639 - MediaWiki 1.37.2 pulls in version of dependency (Parsoid 0.14.0) broken with PHP 8.1 https://bugzilla.redhat.com/show_bug.cgi?id=2101639 [ 2 ] Bug #2102955 - mediawiki-1.38.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2102955 [ 3 ] Bug #2112771 - CVE-2022-34911 mediawiki: Cross-site Scripting [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2112771 [ 4 ] Bug #2112773 - CVE-2022-34912 mediawiki: Username not escaped in the contributions-title message [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2112773 --------------------------------------------------------------------------------
================================================================================ muffin-5.4.6-2.fc37 (FEDORA-2022-605451164d) Window and compositing manager based on Clutter -------------------------------------------------------------------------------- Update Information:
- Remove muffin binary -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Leigh Scott leigh123linux@gmail.com - 5.4.6-2 - Remove muffin binary -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2101419 - Muffin doesn't work by itself https://bugzilla.redhat.com/show_bug.cgi?id=2101419 --------------------------------------------------------------------------------
================================================================================ perl-Acme-Alien-DontPanic2-2.650.0-1.fc37 (FEDORA-2022-df1bbecd5e) Test module for Alien::Base + Alien::Build -------------------------------------------------------------------------------- Update Information:
2.6500 - Require Alien::Build 2.65 -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 31 2022 Jitka Plesnikova jplesnik@redhat.com - 2.650.0-1 - 2.6500 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2122761 - perl-Acme-Alien-DontPanic2-2.6500 is available https://bugzilla.redhat.com/show_bug.cgi?id=2122761 --------------------------------------------------------------------------------
================================================================================ perl-Dist-Zilla-6.025-1.fc37 (FEDORA-2022-35663995b3) Distribution builder; installer not included! -------------------------------------------------------------------------------- Update Information:
6.025 - eliminate use of multidimensional array emulation -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Jitka Plesnikova jplesnik@redhat.com - 6.025-1 - 6.025 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2091301 - perl-Dist-Zilla-6.025 is available https://bugzilla.redhat.com/show_bug.cgi?id=2091301 --------------------------------------------------------------------------------
================================================================================ perl-Net-Netmask-2.0002-1.fc37 (FEDORA-2022-aae57fb905) Perl module for manipulating and looking up IP network blocks -------------------------------------------------------------------------------- Update Information:
2.0002 - Documentation fixes -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Jitka Plesnikova jplesnik@redhat.com - 2.0002-1 - 2.0002 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123150 - perl-Net-Netmask-2.0002 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123150 --------------------------------------------------------------------------------
================================================================================ perl-Test-File-Contents-0.242-1.fc37 (FEDORA-2022-a05eb23dc8) Test routines for examining the contents of files -------------------------------------------------------------------------------- Update Information:
0.242 - No functional changes; Corrected test dependencies -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Jitka Plesnikova jplesnik@redhat.com - 0.242-1 - 0.242 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123187 - perl-Test-File-Contents-0.242 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123187 --------------------------------------------------------------------------------
================================================================================ perl-Test2-Harness-1.0.127-1.fc37 (FEDORA-2022-5aa3562591) Test2 Harness designed for the Test2 event system -------------------------------------------------------------------------------- Update Information:
This release removes an unnecessary dependency on Carp::Always. ---- This release adds a yath resources subcommand to inspect resource usage. -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Petr Pisar ppisar@redhat.com - 1.0.127-1 - 1.000127 bump * Wed Aug 31 2022 Petr Pisar ppisar@redhat.com - 1.0.126-1 - 1.000126 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2122787 - perl-Test2-Harness-1.000126 is available https://bugzilla.redhat.com/show_bug.cgi?id=2122787 [ 2 ] Bug #2123062 - perl-Test2-Harness-1.000127 is available https://bugzilla.redhat.com/show_bug.cgi?id=2123062 --------------------------------------------------------------------------------
================================================================================ pygame-2.1.2-6.fc37 (FEDORA-2022-86d4c4e3d3) Python modules for writing games -------------------------------------------------------------------------------- Update Information:
Rebuild for SDL2 update. -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Gwyn Ciesla gwync@protonmail.com - 2.1.2-6 - Rebuild for SDL2 update. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2123208 - When trying to run a python program using pygame I get a version mismatch error for SDL https://bugzilla.redhat.com/show_bug.cgi?id=2123208 --------------------------------------------------------------------------------
================================================================================ python-gnupg-0.5.0-1.fc37 (FEDORA-2022-50148df55b) A wrapper for the Gnu Privacy Guard (GPG or GnuPG) -------------------------------------------------------------------------------- Update Information:
update to 0.5.0, mostly build changes, minor fixes -------------------------------------------------------------------------------- ChangeLog:
* Wed Aug 31 2022 Paul Wouters <paul.wouters@aiven.io - 0.5.0-1 - update to 0.5.0 - Use newer pyproject python macros --------------------------------------------------------------------------------
================================================================================ python-janus-1.0.0-2.fc37 (FEDORA-2022-49512186f1) Thread-safe asyncio-aware queue for Python -------------------------------------------------------------------------------- Update Information:
Initial package -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 12 2022 Roman Inflianskas rominf@aiven.io - 1.0.0-2 - Actually include LICENSE file * Fri Aug 5 2022 Roman Inflianskas rominf@aiven.io - 1.0.0-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2115797 - Review Request: python-janus - Thread-safe asyncio-aware queue for Python https://bugzilla.redhat.com/show_bug.cgi?id=2115797 --------------------------------------------------------------------------------
================================================================================ python-ovh-1.0.0-2.fc37 (FEDORA-2022-7dc85c7058) Lightweight wrapper around OVHcloud's APIs -------------------------------------------------------------------------------- Update Information:
Initial package (rhbz#2106063) -------------------------------------------------------------------------------- ChangeLog:
* Fri Aug 12 2022 Roman Inflianskas rominf@aiven.io - 1.0.0-2 - Add documentation * Mon Jul 11 2022 Roman Inflianskas rominf@aiven.io - 1.0.0-1 - Initial package (rhbz#2106063) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2106063 - Review Request: python-ovh - Lightweight wrapper around OVHcloud's APIs https://bugzilla.redhat.com/show_bug.cgi?id=2106063 --------------------------------------------------------------------------------
================================================================================ python-zmq-23.2.0-1.fc37 (FEDORA-2022-e5b5a1fd1a) Software library for fast, message-based applications -------------------------------------------------------------------------------- Update Information:
Update to 23.2.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Aug 2 2022 Charalampos Stratakis cstratak@redhat.com - 23.2.0-1 - Update to 23.2.0 Resolves: rhbz#2092836 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2092836 - python-zmq-23.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2092836 --------------------------------------------------------------------------------
================================================================================ qt5-qtwebengine-5.15.10-1.fc37 (FEDORA-2022-b572ba3a1e) Qt5 - QtWebEngine components -------------------------------------------------------------------------------- Update Information:
Update to 5.15.10 LTS -------------------------------------------------------------------------------- ChangeLog:
* Mon Aug 29 2022 Ankur Sinha <ankursinha AT fedoraproject DOT org> - 5.15.10-1 - Update to 5.15.10 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2079655 - QtWebEngine 5.15.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=2079655 --------------------------------------------------------------------------------
================================================================================ rust-wezterm-dynamic-0.1.0-1.fc37 (FEDORA-2022-891be0b3db) Config serialization for wezterm via dynamic json-like data values -------------------------------------------------------------------------------- Update Information:
Initial import; Fixes: RHBZ#2118892 -------------------------------------------------------------------------------- ChangeLog:
* Fri Sep 2 2022 Davide Cavalca dcavalca@fedoraproject.org 0.1.0-1 - Initial import; Fixes: RHBZ#2118892 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2118892 - Review Request: rust-wezterm-dynamic - Config serialization for wezterm via dynamic json-like data values https://bugzilla.redhat.com/show_bug.cgi?id=2118892 --------------------------------------------------------------------------------
================================================================================ thunderbird-102.2.1-1.fc37 (FEDORA-2022-e8e79b8dbf) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information:
Update to 102.2.1 ; https://www.mozilla.org/en- US/security/advisories/mfsa2022-38/ -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Eike Rathke erack@redhat.com - 102.2.1-1 - Update to 102.2.1 * Tue Aug 23 2022 Eike Rathke erack@redhat.com - 102.2.0-1 - Update to 102.2.0 * Wed Aug 3 2022 Jan Horak jhorak@redhat.com - 102.1.0-1 - Update to 102.1.0 --------------------------------------------------------------------------------
================================================================================ vcftools-0.1.16-15.fc37 (FEDORA-2022-507c6f33c9) VCF file manipulation tools -------------------------------------------------------------------------------- Update Information:
- spec cleanup and modernization -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Filipe Rosset rosset.filipe@gmail.com - 0.1.16-15 - spec cleanup and modernization --------------------------------------------------------------------------------
================================================================================ vim-9.0.348-1.fc37 (FEDORA-2022-b5a0fd2a36) The VIM editor -------------------------------------------------------------------------------- Update Information:
Security fixes for CVE-2022-2849, CVE-2022-2862, CVE-2022-3037, CVE-2022-2845 -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 1 2022 Zdenek Dohnal zdohnal@redhat.com - 2:9.0.348-1 - patchlevel 348 * Tue Aug 30 2022 Zdenek Dohnal zdohnal@redhat.com - 2:9.0.327-1 - patchlevel 327 * Tue Aug 23 2022 Zdenek Dohnal zdohnal@redhat.com - 2:9.0.246-1 - patchlevel 246 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2119844 - CVE-2022-2845 vim: Buffer Under-read https://bugzilla.redhat.com/show_bug.cgi?id=2119844 [ 2 ] Bug #2122137 - CVE-2022-2849 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c https://bugzilla.redhat.com/show_bug.cgi?id=2122137 [ 3 ] Bug #2122139 - CVE-2022-2862 vim: heap use-after-free in generate_PCALL() at src/vim9instr.c https://bugzilla.redhat.com/show_bug.cgi?id=2122139 [ 4 ] Bug #2122907 - CVE-2022-3037 vim: use after free in function qf_buf_add_line( ) https://bugzilla.redhat.com/show_bug.cgi?id=2122907 --------------------------------------------------------------------------------