The following Fedora 37 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3b4c68d85d
golang-1.19.4-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fc361cc7b6
OpenImageIO-2.4.6.1-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7d2f942be2
w3m-0.5.3-58.git20220429.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a36ba48049
binwalk-2.3.3-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
57
https://bodhi.fedoraproject.org/updates/FEDORA-2022-700705c81b
unbound-1.17.0-1.fc37
46
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1bfac29ac
python-rpmautospec-0.3.1-1.fc37
35
https://bodhi.fedoraproject.org/updates/FEDORA-2022-26a1391176
annobin-10.93-1.fc37
20
https://bodhi.fedoraproject.org/updates/FEDORA-2022-28dc37634d
dnsmasq-2.88-1.fc37
16
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf8feea173 lorax-37.10-1.fc37
13
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d1073ce971
libshout-2.4.6-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-16b288b12d git-2.39.0-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2bc7296765 clevis-18-14.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bb36bea121 xen-4.16.3-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-106a8e01bc
tpm2-tss-3.2.1-1.fc37
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7f86ea7f00
edk2-20221117gitfff6d81270b5-8.fc37
7
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4efd0aa07
libksba-1.6.3-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e63f49c01d
samba-4.17.4-2.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7edcc46973
thunderbird-102.6.0-2.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-edda4c3b97
libpwquality-1.4.5-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f6e640dd82
libretls-3.7.0-1.fc37 netcat-1.219-2.fc37 rpki-client-8.2-3.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c0faf96b8
libqalculate-4.5.0-1.fc37 qalculate-gtk-4.5.0-1.fc37 qalculate-qt-4.5.0-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
GitPython-3.1.30-1.fc37
OpenLP-3.0.0-1.fc37
bear-3.0.21-1.fc37
chordpro-6.000-1.fc37
ibus-typing-booster-2.19.12-1.fc37
klavaro-3.14-1.fc37
librevenge-0.0.5-3.fc37
mingw-filesystem-144-1.fc37
mingw-qt6-qtbase-6.4.1-2.fc37
naev-0.10.1-1.fc37
naev-data-0.10.1-1.fc37
nfdump-1.7.1-1.fc37
perl-Fsdb-3.1-1.fc37
python-pykeepass-4.0.3-3.fc37
python-pystemd-0.11.0-1.fc37
python-xxhash-3.2.0-1.fc37
rdiff-backup-2.2.2-2.fc37
rednotebook-2.28.1-1.fc37
rubygem-mini_portile2-2.8.1-1.fc37
tin-2.6.2-1.fc37
titools-0.2^20160515gcc7dc08-1.fc37
ykocli-1.0.2-1.fc37
Details about builds:
================================================================================
GitPython-3.1.30-1.fc37 (FEDORA-2022-8146a727a8)
Python Git Library
--------------------------------------------------------------------------------
Update Information:
Latest upstream release with fix for CVE-2022-24439.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 3.1.30-1
- Rebase to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2151583 - CVE-2022-24439 GitPython: improper user input validation leads into
a RCE
https://bugzilla.redhat.com/show_bug.cgi?id=2151583
--------------------------------------------------------------------------------
================================================================================
OpenLP-3.0.0-1.fc37 (FEDORA-2022-c839b8e1f4)
Open source Church presentation and lyrics projection application
--------------------------------------------------------------------------------
Update Information:
New release after 4 years of development. Many changes and bug fixes.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Release 3.0 <Tim.Bentley(a)openlp.org> - 3.0.0-1
- Rebuilt for Release 3.0.0
--------------------------------------------------------------------------------
================================================================================
bear-3.0.21-1.fc37 (FEDORA-2022-f68699936b)
Tool that generates a compilation database for clang tooling
--------------------------------------------------------------------------------
Update Information:
Update bear to 3.0.21
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.0.21-1
- Update to 3.0.21 (close RHBZ#2156922)
* Tue Nov 29 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.0.20-6
- Update License to SPDX
* Tue Nov 15 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.0.20-5
- Skip a failing valgrind test on s390x (close RHBZ#2127458, close
RHBZ#2140814)
* Tue Nov 15 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.0.20-4
- Remove an obsolete comment from the spec file
* Thu Nov 3 2022 Vitaly Zaitsev <vitaly(a)easycoding.org> 3.0.20-3
- Rebuilt due to spdlog update.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156922 - bear-3.0.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2156922
--------------------------------------------------------------------------------
================================================================================
chordpro-6.000-1.fc37 (FEDORA-2022-157d49d3e1)
Print songbooks (lyrics + chords)
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Johan Vromans <jvromans(a)squirrel.nl> - 6.000-1
- Upgrade to upstream.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156933 - chordpro-6.000 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2156933
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.19.12-1.fc37 (FEDORA-2022-40151120f8)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.19.12 Try not to fail if the database contains invalid UTF-8 or is
otherwise malformed (Resolves:
https://github.com/mike-fabian/ibus-typing-
booster/issues/409)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Mike FABIAN <mfabian(a)redhat.com> - 2.19.12-1
- Update to 2.19.12
- Try not to fail if the database contains invalid UTF-8 or is otherwise malformed
(Resolves:
https://github.com/mike-fabian/ibus-typing-booster/issues/409)
--------------------------------------------------------------------------------
================================================================================
klavaro-3.14-1.fc37 (FEDORA-2022-656e46f42b)
Typing tutor
--------------------------------------------------------------------------------
Update Information:
Update to 3.14.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Vasiliy N. Glazov <vascom2(a)gmail.com> - 3.14-1
- Update to 3.14
--------------------------------------------------------------------------------
================================================================================
librevenge-0.0.5-3.fc37 (FEDORA-2022-3faa4e936c)
A base library for writing document import filters
--------------------------------------------------------------------------------
Update Information:
New release 0.0.5.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 David Tardon <dtardon(a)redhat.com> 0.0.5-3
- Remove stray /
* Thu Dec 29 2022 David Tardon <dtardon(a)redhat.com> 0.0.5-2
- Compile .py files
* Thu Dec 29 2022 David Tardon <dtardon(a)redhat.com> 0.0.5-1
- New upstream release
* Mon Nov 21 2022 David Tardon <dtardon(a)redhat.com> - 0.0.4-24
- Convert license to SPDX
--------------------------------------------------------------------------------
================================================================================
mingw-filesystem-144-1.fc37 (FEDORA-2022-7c9f404638)
MinGW cross compiler base filesystem and environment
--------------------------------------------------------------------------------
Update Information:
Add mingw-qmake-qt6 macros and fix mingw qmake-qt6 wrappers.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 23 2022 Sandro Mani <manisandro(a)gmail.com> - 144-1
- Add mingw-qmake-qt6 macros, drop mingw-cmake-kde4 macros
--------------------------------------------------------------------------------
================================================================================
mingw-qt6-qtbase-6.4.1-2.fc37 (FEDORA-2022-7c9f404638)
Qt6 for Windows - QtBase component
--------------------------------------------------------------------------------
Update Information:
Add mingw-qmake-qt6 macros and fix mingw qmake-qt6 wrappers.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Sandro Mani <manisandro(a)gmail.com> - 6.4.1-2
- Fix broken cross-target qmake
--------------------------------------------------------------------------------
================================================================================
naev-0.10.1-1.fc37 (FEDORA-2022-967e60affb)
2d action, RPG space game
--------------------------------------------------------------------------------
Update Information:
New version with new missions and new storylines
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Jonathan Dieter <jdieter(a)gmail.com> - 0.10.1-1
- Update to 0.10.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2150419 - naev-0.10.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2150419
--------------------------------------------------------------------------------
================================================================================
naev-data-0.10.1-1.fc37 (FEDORA-2022-967e60affb)
Data files for NAEV
--------------------------------------------------------------------------------
Update Information:
New version with new missions and new storylines
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Jonathan Dieter <jdieter(a)gmail.com> - 0.10.1-1
- Update to 0.10.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2150419 - naev-0.10.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2150419
--------------------------------------------------------------------------------
================================================================================
nfdump-1.7.1-1.fc37 (FEDORA-2022-43bd1ad676)
NetFlow collecting and processing tools
--------------------------------------------------------------------------------
Update Information:
**nfdump-1.7.1** This release fixes mostly bugs from 1.7.0 and is now the
recommended version for production. It works together with well advanced in
years NfSen 1.3.9
https://github.com/phaag/nfsen. Changelog: - Fix #394.
Event labeling - Implement #393 consistent logging - Remove extra ':' in
getopt of nfcapd - Add feature #391. Add country code aggregation - Fix
#392. Fix format options with IPv6 - Implement #390. Aggregation for GeoDB's
enriched AS data - Add OpenBSD pflog decoding in nfpcapd and nfdump - Fix
Ident change - Sync nfcapd, sfcapd code - Fix #389 receiving IPv4 on IPv6
socket in sfcapd - Fix #385 bug when compiled on i386 arch - 32bit alignment
- Fix #384 bug when compile with --enable-nsel - Implement #366 Linux
NFLOG link layer protocol in nfpcapd - Fix #381 pcap overwrite in nfpcapd
fixed - Fix #380 nbar string validation - Implement #377. Rework sampling
code in general. Switch to packet interval/space notation. Map older sampling to
new notation. - Fix #375 relative timestamps with sysUptime id 160 -
Rework nbar code. Use new array records and fix nbar bug in older versions. -
Fix #370. Help shows correct option -A - Fix #369. Legacy -M for NfSen works
again - Improve nbar handling. Add private enterprise number decoding -
Merge pull request #357 **nfdump-1.7.0** NFDUMP switches to new release 1.7.0
A lot of old code has beed remove, and was rewritten. nfdump-1.7.0 replaces
nfdump-1.6.x. A lot of code has been improved and new features have been added.
The nfpcapd collector has been reworked completely. It allows to merge pcap and
flow data. - nfdump is now a multi-threaded program and uses parallel
threads mainly for reading, writing and processing flows as well as for sorting.
This may result in a 2 to 3 times faster flow processing, depending on the
tasks. The speed improvement also heavily depends on the hardware (SSD/HD) and
flow compression option. - For netflow v9 and IPFIX, nfdump now supports
flexible length fields. This improves compatibility with some exporters such as
yaf and others. The netflow v9 decoder is more flexible in decoding. -
Support for Cisco Network Based Application Recognition (NBAR). - Supports
Maxmind geo location information to tag/geolocate IP addresses and AS numbers. -
nfpcapd automatically uses TPACKET_V3 for Linux or direct BPF sockets for *BSD.
This improves packet processing. It adds new options to collect MAC and VLAN
information as well as the first packet of the payload. - Metric exports: By
default, every 60s a flow summary statistics can be sent to a UNIX socket. The
corresponding program may be nfinflux to insert these metrics into an influxDB
or nfexporter for Prometheus monitoring.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Denis Fateyev <denis(a)fateyev.com> - 1.7.1-1
- Update to version 1.7.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2131205 - nfdump-1.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2131205
--------------------------------------------------------------------------------
================================================================================
perl-Fsdb-3.1-1.fc37 (FEDORA-2022-807f18a278)
A set of commands for manipulating flat-text databases from the shell
--------------------------------------------------------------------------------
Update Information:
See
http://www.isi.edu/~johnh/SOFTWARE/FSDB/
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 22 2022 John Heidemann <johnh(a)isi.edu> 3.1-1
- See
http://www.isi.edu/~johnh/SOFTWARE/FSDB/
--------------------------------------------------------------------------------
================================================================================
python-pykeepass-4.0.3-3.fc37 (FEDORA-2022-47eddd9f99)
Python library to interact with keepass databases
--------------------------------------------------------------------------------
Update Information:
Update Epoch so that the F37 package upgrades the F36 one; exclude the s390x
architecture; use pyproject-rpm-macros and run upstream tests; convert License
to SPDX; and package the changelog file as documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 1:4.0.3-3
- Add ExcludeArch: s390x
* Thu Dec 29 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 1:4.0.3-2
- Migrate to pyproject-rpm-macros and SPDX
- Run the upstream tests
- Package the changelog as documentation
* Wed Oct 19 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> 1:4.0.3-1
- build: Bump epoch due >4.0.1 API break
--------------------------------------------------------------------------------
================================================================================
python-pystemd-0.11.0-1.fc37 (FEDORA-2022-f79376ab9c)
A thin Cython-based wrapper on top of libsystemd
--------------------------------------------------------------------------------
Update Information:
Update `pystemd` to the latest upstream release. Changes: - native support
for stop_cmd, (pre|post)_start_cmd and post_stop_cmd in pystemd.run. - adding
lxml as a dependency. - drop support for python 3.4 and 3.5 (yey welcome
f-strings) - change using select.select to use DefaultSelector in pystemd.run
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 6 2022 Davide Cavalca <dcavalca(a)fedoraproject.org> - 0.11.0-1
- Update to 0.11.0 (#2151054)
- Convert license tag to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2151054 - python-pystemd-0.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2151054
--------------------------------------------------------------------------------
================================================================================
python-xxhash-3.2.0-1.fc37 (FEDORA-2022-347b438f6a)
Python Binding for xxHash
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.0 (close RHBZ#2156793): official Python 3.11 support; CI and
testing improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.2.0-1
- Update to 3.2.0 (close RHBZ#2156793)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156793 - python-xxhash-3.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2156793
--------------------------------------------------------------------------------
================================================================================
rdiff-backup-2.2.2-2.fc37 (FEDORA-2022-0f92a65599)
Convenient and transparent local/remote incremental mirror/backup
--------------------------------------------------------------------------------
Update Information:
Bugfix Oops release v2.2.2 - Fedora/EPEL Release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Frank Crawford <frank(a)crawford.emu.id.au> - 2.2.2-2
- Bugfix Oops release v2.2.2 - Fedora/EPEL Release
* Thu Dec 29 2022 Frank Crawford <frank(a)crawford.emu.id.au> - 2.2.2-1
- Bugfix Oops release v2.2.2 - COPR Release
* Wed Dec 28 2022 Frank Crawford <frank(a)crawford.emu.id.au> - 2.2.1-1
- Bugfix release v2.2.1 - COPR Release
* Wed Dec 28 2022 Frank Crawford <frank(a)crawford.emu.id.au> - 2.2.0-3
- Patch to fix issue with function in debug mode
--------------------------------------------------------------------------------
================================================================================
rednotebook-2.28.1-1.fc37 (FEDORA-2022-651988dbcb)
Daily journal with calendar, templates and keyword searching
--------------------------------------------------------------------------------
Update Information:
New upstream version 2.28.1. ---- New upstream version 2.28.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 2.28.1-1
- New upstream version 2.28.1
* Wed Dec 28 2022 Phil Wyett <philip.wyett(a)kathenas.org> - 2.28-1
- New upstream version 2.28
--------------------------------------------------------------------------------
================================================================================
rubygem-mini_portile2-2.8.1-1.fc37 (FEDORA-2022-9eb2adb82f)
Simplistic port-like solution for developers
--------------------------------------------------------------------------------
Update Information:
New version 2.8.1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 2.8.1-1
- 2.8.1
--------------------------------------------------------------------------------
================================================================================
tin-2.6.2-1.fc37 (FEDORA-2022-f0674269ac)
Basic Internet news reader
--------------------------------------------------------------------------------
Update Information:
* Numerous bugfixes (see `/usr/share/doc/tin/CHANGES`) * New feature: NNTPS
support using OpenSSL.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Dominik Mierzejewski <dominik(a)greysector.net> 2.6.2-1
- update to 2.6.2 (#2156181)
- enable NNTPS support using OpenSSL
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156181 - tin-2.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2156181
--------------------------------------------------------------------------------
================================================================================
titools-0.2^20160515gcc7dc08-1.fc37 (FEDORA-2022-f65deb724d)
Command-line programs for communicating with a TI calculator
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#2107911
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Davide Cavalca <dcavalca(a)fedoraproject.org>
0.2^20160515gcc7dc08-1
- Initial import; Fixes: RHBZ#2107911
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2107911 - Review Request: titools - Command-line programs for communicating
with a TI calculator
https://bugzilla.redhat.com/show_bug.cgi?id=2107911
--------------------------------------------------------------------------------
================================================================================
ykocli-1.0.2-1.fc37 (FEDORA-2022-cdccb4ef0f)
Front-end script for ykman to obtain TOTP tokens
--------------------------------------------------------------------------------
Update Information:
Add optional background mode
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Gerald Cox <gbcox(a)fedoraproject.org> - 1.0.2-1
- Add optional background mode
--------------------------------------------------------------------------------