The following Fedora 37 Security updates need testing: Age URL 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1667f7b60a nodejs-18.12.1-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9f51d13fa3 xen-4.16.2-4.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9f3af921a5 sysstat-12.6.0-4.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-028c09eaa7 python3.9-3.9.15-2.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-cae8089f93 python3.6-3.6.15-14.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2c37647a9c dotnet6.0-6.0.110-2.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-7291b78111 js-jquery-ui-1.13.2-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a7cad6bd22 python3.10-3.10.8-3.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-0d5dcc031e varnish-7.1.2-1.fc37 varnish-modules-0.20.0-4.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-af5f1eee2c xterm-375-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-be7abff81b elixir-1.14.2-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-cb47d98a05 python3.8-3.8.15-2.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4f547d1cc6 python3.7-3.7.15-2.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d6310a1308 freerdp-2.8.1-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dec4cdacd7 grub2-2.06-63.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e795e17c38 drupal7-link-1.11-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-50482009d5 drupal7-context-3.11-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved: Age URL 14 https://bodhi.fedoraproject.org/updates/FEDORA-2022-700705c81b unbound-1.17.0-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c98b928028 perl-URI-5.17-1.fc37 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2a370286a6 satyr-0.40-1.fc37 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5bc46e8756 gnome-shell-43.1-1.fc37 mutter-43.1-1.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e815358059 pungi-4.3.6-2.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9f51d13fa3 xen-4.16.2-4.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dd9f7bbf7e imath-3.1.6-1.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ddc3487da9 liburing-2.3-1.fc37 6 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f14d7ea6ca annobin-10.92-1.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1bfac29ac python-rpmautospec-0.3.1-1.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5a9600e505 s390utils-2.24.0-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-52513a8d7c libxcrypt-4.4.31-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-aa9141f45f bluez-5.66-2.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-97dcc77694 linux-firmware-20221109-144.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a82cee8b1b device-mapper-multipath-0.9.0-4.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dec4cdacd7 grub2-2.06-63.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bc5fb1e0ba fedora-appstream-metadata-20221115-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2563c69150 glibc-2.36-8.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-18f1d926de sssd-2.8.1-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d6310a1308 freerdp-2.8.1-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
4ti2-1.6.9-12.fc37 cockpit-280-1.fc37 cockpit-machines-278-1.fc37 cockpit-podman-57-1.fc37 darkman-1.4.0-1.20221116git5f30663.fc37 electrum-4.3.2-1.fc37 fast_float-3.6.0-1.fc37 gap-pkg-irredsol-1.4.4-1.fc37 geeqie-2.0.1-1.fc37 gjs-1.74.1-2.fc37 heimdal-7.7.1-1.fc37 kernel-6.0.9-300.fc37 krb5-1.19.2-13.fc37 libdrm-2.4.114-1.fc37 license-validate-14-1.fc37 lollypop-1.4.36-2.fc37 moodle-4.0.5-2.fc37 mozjs102-102.5.0-1.fc37 ntfs-3g-2022.10.3-1.fc37 osbuild-composer-68-1.fc37 packetdrill-2.0~20220927gitc556afb-3.fc37 passt-0^20221116.gace074c-1.fc37 perl-Getopt-Long-2.53-1.fc37 php-laminas-barcode-2.12.0-1.fc37 php-laminas-captcha-2.15.0-1.fc37 php-laminas-log-2.16.0-1.fc37 php-laminas-memory-2.10.0-1.fc37 php-laminas-permissions-rbac-3.4.0-1.fc37 php-laminas-server-2.12.0-1.fc37 php-laminas-session-2.15.0-1.fc37 qemu-7.0.0-11.fc37 recoll-1.33.2-1.fc37 rsnapshot-1.4.4-1.fc37 samba-4.17.3-0.fc37 thunderbird-102.5.0-1.fc37 yubioath-desktop-5.1.0-10.fc37
Details about builds:
================================================================================ 4ti2-1.6.9-12.fc37 (FEDORA-2022-20fd83b4b8) Algebraic, geometric and combinatorial problems on linear spaces -------------------------------------------------------------------------------- Update Information:
This update eliminates "egrep is obsolescent" warnings from the scripts. -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Jerry James loganjerry@gmail.com - 1.6.9-12 - Silence "egrep is obsolescent" warnings from the scripts - Update license to reflect embedded fonts in the PDF manual * Thu Aug 11 2022 Jerry James loganjerry@gmail.com - 1.6.9-11 - Convert License tag to SPDX --------------------------------------------------------------------------------
================================================================================ cockpit-280-1.fc37 (FEDORA-2022-fbe5e7a3cf) Web Console for Linux servers -------------------------------------------------------------------------------- Update Information:
Automatic update for cockpit-280-1.fc37. ##### **Changelog for cockpit** ``` * Wed Nov 16 2022 Packit hello@packit.dev - 280-1 - tools: Disallow root login by default ``` -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Packit hello@packit.dev - 280-1 - tools: Disallow root login by default --------------------------------------------------------------------------------
================================================================================ cockpit-machines-278-1.fc37 (FEDORA-2022-c9cca5367f) Cockpit user interface for virtual machines -------------------------------------------------------------------------------- Update Information:
Automatic update for cockpit-machines-278-1.fc37. ##### **Changelog for cockpit-machines** ``` * Wed Nov 16 2022 Packit hello@packit.dev - 278-1 - Stability and performance improvements ``` -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Packit hello@packit.dev - 278-1 - Stability and performance improvements --------------------------------------------------------------------------------
================================================================================ cockpit-podman-57-1.fc37 (FEDORA-2022-80191dda2a) Cockpit component for Podman containers -------------------------------------------------------------------------------- Update Information:
Automatic update for cockpit-podman-57-1.fc37. ##### **Changelog for cockpit- podman** ``` * Wed Nov 16 2022 Packit hello@packit.dev - 57-1 - Performance and stability improvements ``` -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Packit hello@packit.dev - 57-1 - Performance and stability improvements --------------------------------------------------------------------------------
================================================================================ darkman-1.4.0-1.20221116git5f30663.fc37 (FEDORA-2022-afcd2328f1) Daemon for dark-mode and light-mode transitions on Linux desktop -------------------------------------------------------------------------------- Update Information:
New upstream version -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 31 2022 Link Dupont linkdupont@fedoraproject.org - 1.4.0-1 - New upstream version --------------------------------------------------------------------------------
================================================================================ electrum-4.3.2-1.fc37 (FEDORA-2022-8f1301f0eb) A lightweight Bitcoin Client -------------------------------------------------------------------------------- Update Information:
Update to 4.3.2 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 7 2022 Vitaly Zaitsev vitaly@easycoding.org - 4.3.2-1 - Updated to version 4.3.2. --------------------------------------------------------------------------------
================================================================================ fast_float-3.6.0-1.fc37 (FEDORA-2022-8380cb4921) Fast & exact implementation of C++ from_chars for float/double -------------------------------------------------------------------------------- Update Information:
Update to 3.6.0: [release notes](https://github.com/fastfloat/fast_float/releases/tag/v3.6.0). -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 14 2022 Benjamin A. Beasley code@musicinmybrain.net 3.6.0-1 - Update to 3.6.0 (close RHBZ#2140130) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2140130 - fast_float-3.6.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2140130 --------------------------------------------------------------------------------
================================================================================ gap-pkg-irredsol-1.4.4-1.fc37 (FEDORA-2022-6b1ef0a75d) Irreducible soluble linear groups over finite fields -------------------------------------------------------------------------------- Update Information:
Changes in version 1.4.4: - use gzip compressed data files - documentation fixes -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Jerry James loganjerry@gmail.com - 1.4.4-1 - Version 1.4.4 - Drop upstreamed -ref patch - Upstream now compresses the data files * Thu Nov 10 2022 Jerry James loganjerry@gmail.com - 1.4.3-5 - Clarify license of the doc subpackage -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2143213 - gap-pkg-irredsol-1.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2143213 --------------------------------------------------------------------------------
================================================================================ geeqie-2.0.1-1.fc37 (FEDORA-2022-ef58e1d4a9) Image browser and viewer -------------------------------------------------------------------------------- Update Information:
Latest upstream version. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 15 2022 Matthew Miller mattdm@mattdm.org 2.0.1-1 - Update to 2.0.1 (rhbz#2118001) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2118001 - geeqie-2.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2118001 --------------------------------------------------------------------------------
================================================================================ gjs-1.74.1-2.fc37 (FEDORA-2022-6ee0a0a850) Javascript Bindings for GNOME -------------------------------------------------------------------------------- Update Information:
- mozjs102-102.5.0: https://www.mozilla.org/en-US/firefox/102.5.0/releasenotes/ - gjs rebuild -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Frantisek Zatloukal fzatlouk@redhat.com - 1.74.1-2 - Rebuild against mozjs102-102.5.0-1 --------------------------------------------------------------------------------
================================================================================ heimdal-7.7.1-1.fc37 (FEDORA-2022-ea403b373f) A Kerberos 5 implementation without export restrictions -------------------------------------------------------------------------------- Update Information:
This release fixes the following Security Vulnerabilities: * CVE-2022-42898 PAC parse integer overflows * CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour * CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array * CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors * CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ * CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec Note that CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common Vulnerability Scoring System (CVSS) v3. -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Alexander Bostr��m abo@root.snowtree.se - 7.7.1-1 - Update to 7.7.1 - Remove upstreamed patch - Replace patch with sed command --------------------------------------------------------------------------------
================================================================================ kernel-6.0.9-300.fc37 (FEDORA-2022-01ec25af12) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 6.0.9 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Justin M. Forbes jforbes@fedoraproject.org [6.0.9-0] - Linux v6.0.9 --------------------------------------------------------------------------------
================================================================================ krb5-1.19.2-13.fc37 (FEDORA-2022-a1747aca80) The Kerberos network authentication system -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2022-42898 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 9 2022 Julien Rische jrische@redhat.com - 1.19.2-13 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2143011 * Tue Aug 2 2022 Andreas Schneider asn@redhat.com - 1.19.2-12 - Use baserelease to set the release number - Do not define netlib, but use autoconf detection for res_* functions - Add missing BR for resolv_wrapper to run t_discover_uri.py -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2140960 - CVE-2022-42898 krb5: integer overflow vulnerabilities in PAC parsing https://bugzilla.redhat.com/show_bug.cgi?id=2140960 --------------------------------------------------------------------------------
================================================================================ libdrm-2.4.114-1.fc37 (FEDORA-2022-b81bd39ec2) Direct Rendering Manager runtime library -------------------------------------------------------------------------------- Update Information:
Update to 2.4.114 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Dave Airlie airlied@redhat.com - 2.4.114-1 - Update to 2.4.114 --------------------------------------------------------------------------------
================================================================================ license-validate-14-1.fc37 (FEDORA-2022-9070be16bf) Validate SPEC license string -------------------------------------------------------------------------------- Update Information:
- stress the need to choose a license when there are more options ---- fixed duplicities in the output -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Miroslav Such�� msuchy@redhat.com 14-1 - stress the need to choose licesense when there is more options * Thu Nov 10 2022 Miroslav Such�� msuchy@redhat.com 13-1 - add variation only if it not there yet --------------------------------------------------------------------------------
================================================================================ lollypop-1.4.36-2.fc37 (FEDORA-2022-27b2f296c3) Music player for GNOME -------------------------------------------------------------------------------- Update Information:
Add libsoup-3.0 support ---- Update to 1.4.36-1 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Martin Gansser martinkg@fedoraproject.org - 1.4.36-2 - replaced BR libsoup-2.4 by libsoup-3.0 * Mon Nov 14 2022 Martin Gansser martinkg@fedoraproject.org - 1.4.36-1 - Update to 1.4.36 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2142521 - lollypop-1.4.36 is available https://bugzilla.redhat.com/show_bug.cgi?id=2142521 --------------------------------------------------------------------------------
================================================================================ moodle-4.0.5-2.fc37 (FEDORA-2022-d5e433a1b4) A Course Management System -------------------------------------------------------------------------------- Update Information:
Fix php-google-apiclient1 dependencies ---- 4.0.5 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Gwyn Ciesla gwync@protonmail.com - 4.0.5-2 - Fix php-google-apiclient1 requirements. * Mon Nov 14 2022 Gwyn Ciesla gwync@protonmail.com - 4.0.5-1 - 4.0.5 * Wed Oct 12 2022 Gwyn Ciesla gwync@protonmail.com - 4.0.4-2 - Rebundle google-apiclient -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2142243 - moodle-4.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2142243 [ 2 ] Bug #2143030 - moodle-4.0.5-1.fc37.noarch has file conflicts with php-google-apiclient https://bugzilla.redhat.com/show_bug.cgi?id=2143030 --------------------------------------------------------------------------------
================================================================================ mozjs102-102.5.0-1.fc37 (FEDORA-2022-6ee0a0a850) SpiderMonkey JavaScript library -------------------------------------------------------------------------------- Update Information:
- mozjs102-102.5.0: https://www.mozilla.org/en-US/firefox/102.5.0/releasenotes/ - gjs rebuild -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 15 2022 Frantisek Zatloukal fzatlouk@redhat.com - 102.5.0-1 - mozjs102-102.5.0 --------------------------------------------------------------------------------
================================================================================ ntfs-3g-2022.10.3-1.fc37 (FEDORA-2022-243616c548) Linux NTFS userspace driver -------------------------------------------------------------------------------- Update Information:
Update to 2022.10.3. Fixes CVE-2022-40284 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 3 2022 Gabriel Kihlman gk@sysctl.se - 2:2022.10.3-1 - New upstream version 2022.10.3 - Fixes: CVE-2022-40284 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2090876 - ntfs-3g-2022.10.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2090876 [ 2 ] Bug #2140031 - CVE-2022-40284: buffer overflow in NTFS-3G https://bugzilla.redhat.com/show_bug.cgi?id=2140031 --------------------------------------------------------------------------------
================================================================================ osbuild-composer-68-1.fc37 (FEDORA-2022-f5df6eabce) An image building service based on osbuild -------------------------------------------------------------------------------- Update Information:
Automatic update for osbuild-composer-68-1.fc37. ##### **Changelog for osbuild- composer** ``` * Wed Nov 16 2022 Packit hello@packit.dev - 68-1 Changes with 68 ---------------- * Fix iot-installer build via the cloud API (#3132) * Fix issues reported by Coverity (#3092) * Fix loading cross distro compose results (#3090) * RHEL-8/9 EC2 image definitions fixes (#3135) * Refactor the RHEL 9 SAP config and packages to be useful on other platforms (#3100) * ci: add my SSH keys to the CI ssh keys (#3119) * ci: add tags to AWS instances (#3127) * cloudapi/v2: expose ostree contenturl and rhsm options (#3105) * dbjobqueue: acquire a new connection for each listen query (#3116) * diff- manifests.sh: Use shared_lib for greenprint and redprint (#3133) * distro: SELinux should be the last stage (#3117) * docker-compose: remove unavailable `--dnf-json` (#3124) * tools/provision.sh: copy RHEL repo overrides using wildcard (#3111) Contributions from: Brian C. Lane, Jakub Rusz, Ond��ej Budai, Paul Whalen, Sanne Raymaekers, Simon de Vlieger, Thomas Lavocat, Tom Gundersen, Tom���� Hozza ��� Somewhere on the Internet, 2022-11-16 ``` -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Packit hello@packit.dev - 68-1 Changes with 68 ---------------- * Fix iot-installer build via the cloud API (#3132) * Fix issues reported by Coverity (#3092) * Fix loading cross distro compose results (#3090) * RHEL-8/9 EC2 image definitions fixes (#3135) * Refactor the RHEL 9 SAP config and packages to be useful on other platforms (#3100) * ci: add my SSH keys to the CI ssh keys (#3119) * ci: add tags to AWS instances (#3127) * cloudapi/v2: expose ostree contenturl and rhsm options (#3105) * dbjobqueue: acquire a new connection for each listen query (#3116) * diff-manifests.sh: Use shared_lib for greenprint and redprint (#3133) * distro: SELinux should be the last stage (#3117) * docker-compose: remove unavailable `--dnf-json` (#3124) * tools/provision.sh: copy RHEL repo overrides using wildcard (#3111)
Contributions from: Brian C. Lane, Jakub Rusz, Ond��ej Budai, Paul Whalen, Sanne Raymaekers, Simon de Vlieger, Thomas Lavocat, Tom Gundersen, Tom���� Hozza
��� Somewhere on the Internet, 2022-11-16 --------------------------------------------------------------------------------
================================================================================ packetdrill-2.0~20220927gitc556afb-3.fc37 (FEDORA-2022-f7973dad2b) Quick, precise tests for entire TCP/UDP/IPv4/IPv6 network stacks -------------------------------------------------------------------------------- Update Information:
Backport upstream PR for Python 3 support -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 15 2022 Davide Cavalca dcavalca@fedoraproject.org 2.0~20220927gitc556afb-3 - Backport upstream PR for Python 3 support --------------------------------------------------------------------------------
================================================================================ passt-0^20221116.gace074c-1.fc37 (FEDORA-2022-754a5818f2) User-mode networking daemons for virtual machines and namespaces -------------------------------------------------------------------------------- Update Information:
Possibly visible user change: two patches reverted upstream might fix erratic behaviour with qemu unable to send TX frames after a given amount of packet flooding. ---- Visible user changes: * running with IPv6 disabled and sending IPv6 traffic from sockets, or IPv4 disabled and sending IPv4 from sockets doesn't result in passt/pasta to exit anymore * network mask for IPv4 is correctly reported in start-up messages -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Stefano Brivio sbrivio@redhat.com - 0^20221116.gace074c-1 - Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_11_10.4129764..2022_11_16.a... * Thu Nov 10 2022 Stefano Brivio sbrivio@redhat.com - 0^20221110.g4129764-1 - Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_11_04.e308018..2022_11_10.4... * Fri Nov 4 2022 Stefano Brivio sbrivio@redhat.com - 0^20221104.ge308018-1 - Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_10_26.f212044..2022_11_04.e... --------------------------------------------------------------------------------
================================================================================ perl-Getopt-Long-2.53-1.fc37 (FEDORA-2022-2695ce59ae) Extended processing of command line options -------------------------------------------------------------------------------- Update Information:
Changes in version 2.53 * Improve parsing of float numbers. * Fix Version/HelpMessage -message argument. * Added 'starter' method to the callback object. This method returns the starter (e.g. '--' or '-') of the option as used by the user. * Enhanced option:default spec to octal, hex and binary. -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Jitka Plesnikova jplesnik@redhat.com - 1:2.53-1 - 2.53 bump - Package tests -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2142938 - perl-Getopt-Long-2.53 is available https://bugzilla.redhat.com/show_bug.cgi?id=2142938 --------------------------------------------------------------------------------
================================================================================ php-laminas-barcode-2.12.0-1.fc37 (FEDORA-2022-3606fbdd0b) Laminas Framework Barcode component -------------------------------------------------------------------------------- Update Information:
**Version 2.12.0** Enhancement * 20: Feature: Support PHP 8.2 thanks to @ghostwriter -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Remi Collet remi@remirepo.net - 2.12.0-1 - update to 2.12.0 - raise dependency on PHP 8.0 --------------------------------------------------------------------------------
================================================================================ php-laminas-captcha-2.15.0-1.fc37 (FEDORA-2022-c176e055db) Laminas Framework Captcha component -------------------------------------------------------------------------------- Update Information:
**Version 2.15.0** Enhancement * 27: Feature: Support PHP 8.2 thanks to @ghostwriter ---- **Version 2.14.0** Enhancement * 26: Added PHP 8.2 compatibility thanks to @glo71317 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Remi Collet remi@remirepo.net - 2.15.0-1 - update to 2.15.0 - raise dependency on PHP 8.0 * Tue Nov 15 2022 Remi Collet remi@remirepo.net - 2.14.0-1 - update to 2.14.0 (no change) --------------------------------------------------------------------------------
================================================================================ php-laminas-log-2.16.0-1.fc37 (FEDORA-2022-bdb085cbe2) Laminas Framework Log component -------------------------------------------------------------------------------- Update Information:
**Version 2.16.0** Enhancement * 45: Feature: Support PHP 8.2 thanks to @ghostwriter Bug * 39: Fix #38 thanks to @misterabdul * 38: Simple formatter broken with non-array value extra array key in PHP > 8 thanks to @misterabdul -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Remi Collet remi@remirepo.net - 2.16.0-1 - update to 2.16.0 (no change) - raise dependency on PHP 8.0 --------------------------------------------------------------------------------
================================================================================ php-laminas-memory-2.10.0-1.fc37 (FEDORA-2022-9bf66b1e80) Laminas Framework Memory component -------------------------------------------------------------------------------- Update Information:
**Version 2.10.0** Enhancement * 9: Feature: Support PHP 8.2 thanks to @ghostwriter -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Remi Collet remi@remirepo.net - 2.10.0-1 - update to 2.10.0 (no change) - raise dependency on PHP 8.0 --------------------------------------------------------------------------------
================================================================================ php-laminas-permissions-rbac-3.4.0-1.fc37 (FEDORA-2022-4081a4180a) Laminas Framework Permissions/Rbac component -------------------------------------------------------------------------------- Update Information:
**Version 3.4.0** Enhancement * 34: Feature: Support PHP 8.2 thanks to @ghostwriter -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Remi Collet remi@remirepo.net - 3.4.0-1 - update to 3.4.0 (no change) - raise dependency on PHP 8.0 --------------------------------------------------------------------------------
================================================================================ php-laminas-server-2.12.0-1.fc37 (FEDORA-2022-d2c7925d98) Laminas Framework Server component -------------------------------------------------------------------------------- Update Information:
**Version 2.12.0** Enhancement * 55: Feature: Support PHP 8.2 thanks to @ghostwriter -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Remi Collet remi@remirepo.net - 2.12.0-1 - update to 2.12.0 (no change) - raise dependency on PHP 8.0 --------------------------------------------------------------------------------
================================================================================ php-laminas-session-2.15.0-1.fc37 (FEDORA-2022-31fb70d263) Laminas Framework Session component -------------------------------------------------------------------------------- Update Information:
**Version 2.15.0** Enhancement * 64: Apply PHP 8.0 Syntax and constructor promotion thanks to @samsonasik ---- **Version 2.14.0** Enhancement * 63: Drop support php 7, add php 8.2 support thanks to @fezfez Duplicate,Enhancement * 60: Add support for PHP 8.2 to composer.json thanks to @TimWolla renovate * 59: Lock file maintenance thanks to @renovate[bot] -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Remi Collet remi@remirepo.net - 2.15.0-1 - update to 2.15.0 * Tue Nov 15 2022 Remi Collet remi@remirepo.net - 2.14.0-1 - update to 2.14.0 - raise dependency on PHP 8.0 --------------------------------------------------------------------------------
================================================================================ qemu-7.0.0-11.fc37 (FEDORA-2022-82bf1ca875) QEMU is a FAST! processor emulator -------------------------------------------------------------------------------- Update Information:
Fix "failed to set up stack guard page: Cannot allocate memory" -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Richard W.M. Jones rjones@redhat.com - 7.0.0-11 - Fix "failed to set up stack guard page: Cannot allocate memory" (rhbz#2143006) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2143006 - qemu coredump when boot with multi disks (qemu) failed to set up stack guard page: Cannot allocate memory https://bugzilla.redhat.com/show_bug.cgi?id=2143006 --------------------------------------------------------------------------------
================================================================================ recoll-1.33.2-1.fc37 (FEDORA-2022-cc5fd6465b) Desktop full text search tool with Qt GUI -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release recoll 1.33.2 -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 12 2022 Terje Rosten terje.rosten@ntnu.no - 1.33.2-1 - 1.33.2 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2141624 - recoll-1.33.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2141624 --------------------------------------------------------------------------------
================================================================================ rsnapshot-1.4.4-1.fc37 (FEDORA-2022-6f2e2566e9) Local and remote filesystem snapshot utility -------------------------------------------------------------------------------- Update Information:
# rsnapshot 1.4.4 - Add sentence explaining rsync_long|short_args + sign to man page - Fix rsnapreport problems (incorrect header, fail when `rsync` present, fail with LVM) - Add notes about documentation, and link to the website repo - Fix for '`rsync_cleanup_after_native_cp_al()` only works on directories' fail when `sync_first on` and `cmd_cp` not set (#133), add test - Fix for `rm -rf` failing when the path contains `./` - Suppress noisy error from non-GNU `cp` on BSD-ish machines, including MacOS - Add CentOS 7 to successfully tested to docs - Minor tidy up rel `configure` options `--with-test-(true|false)` - Update travis build settings - Dont use `m4_esyscmd_s` in `configure.ac` - Update docs to remove dangling refs to HOWTO on rsnapshot.org - Skip both SSH tests (rather one) if SSH doesn't work - Use perl-5.30 for tests (used in Ubuntu 20.04 Focal) - Lower verbose level of `rsync` output to 1.3.x equivalent to work with `rsnapreport.pl` again - Fix location of true and false binaries on macOS -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Robert Scheck robert@fedoraproject.org - 1.4.4-1 - Upgrade to 1.4.4 (#1974006, thanks to Todd Zullinger) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1974006 - rsnapshot 1.4.4 is available. Please build for EPEL8 and Fedora34 https://bugzilla.redhat.com/show_bug.cgi?id=1974006 --------------------------------------------------------------------------------
================================================================================ samba-4.17.3-0.fc37 (FEDORA-2022-2156b74a6a) Server and Client software to interoperate with Windows machines -------------------------------------------------------------------------------- Update Information:
Update to version 4.17.3 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 15 2022 Guenther Deschner gdeschner@redhat.com - 4.17.3-0 - resolves: #2142959 - Update to version 4.17.3 - resolves: #2140960, #2143117 - Security fixes for CVE-2022-42898 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2140960 - CVE-2022-42898 krb5: integer overflow vulnerabilities in PAC parsing https://bugzilla.redhat.com/show_bug.cgi?id=2140960 --------------------------------------------------------------------------------
================================================================================ thunderbird-102.5.0-1.fc37 (FEDORA-2022-c6922f983b) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information:
Update to 102.5.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2022-49/ ; https://www.thunderbird.net/en- US/thunderbird/102.5.0/releasenotes/ ; https://www.thunderbird.net/en- US/thunderbird/102.4.2/releasenotes/ -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 15 2022 Eike Rathke erack@redhat.com - 102.5.0-1 - Update to 102.5.0 - Use SPDX license IDs in spec --------------------------------------------------------------------------------
================================================================================ yubioath-desktop-5.1.0-10.fc37 (FEDORA-2022-ab89283605) Yubikey tool for generating OATH event-based HOTP and time-based TOTP codes -------------------------------------------------------------------------------- Update Information:
Requires yubikey-manager < 5.0.0 rhbz#2136583 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 16 2022 Gerald Cox gbcox@fedoraproject.org - 5.1.0-10 - Requires yubikey-manager < 5.0.0 rhbz#2136583 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2136583 - yubikey-manager - upstream release 5.0.0 https://bugzilla.redhat.com/show_bug.cgi?id=2136583 --------------------------------------------------------------------------------
test-reports@lists.fedoraproject.org