The following Fedora 37 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3b4c68d85d
golang-1.19.4-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fbf6a320fe
python3.6-3.6.15-15.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fc361cc7b6
OpenImageIO-2.4.6.1-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7d2f942be2
w3m-0.5.3-58.git20220429.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a36ba48049
binwalk-2.3.3-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
56
https://bodhi.fedoraproject.org/updates/FEDORA-2022-700705c81b
unbound-1.17.0-1.fc37
45
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1bfac29ac
python-rpmautospec-0.3.1-1.fc37
34
https://bodhi.fedoraproject.org/updates/FEDORA-2022-26a1391176
annobin-10.93-1.fc37
19
https://bodhi.fedoraproject.org/updates/FEDORA-2022-28dc37634d
dnsmasq-2.88-1.fc37
15
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf8feea173 lorax-37.10-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d1073ce971
libshout-2.4.6-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-16b288b12d git-2.39.0-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bb36bea121 xen-4.16.3-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-106a8e01bc
tpm2-tss-3.2.1-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2bc7296765 clevis-18-14.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7f86ea7f00
edk2-20221117gitfff6d81270b5-8.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c4efd0aa07
libksba-1.6.3-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e63f49c01d
samba-4.17.4-2.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7edcc46973
thunderbird-102.6.0-2.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2022-edda4c3b97
libpwquality-1.4.5-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f6e640dd82
libretls-3.7.0-1.fc37 netcat-1.219-2.fc37 rpki-client-8.2-3.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c0faf96b8
libqalculate-4.5.0-1.fc37 qalculate-gtk-4.5.0-1.fc37 qalculate-qt-4.5.0-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
dar-2.7.8-1.fc37
grub-customizer-5.2.2-1.fc37
mimalloc-2.0.9-1.fc37
opendmarc-1.4.2-6.fc37
osbuild-composer-71-1.fc37
pdfarranger-1.9.2-1.fc37
python-Automat-22.10.0-1.fc37
python-apprise-1.2.1-1.fc37
python-pyrpm-0.13-1.fc37
qjackctl-0.9.9-1.fc37
qsynth-0.9.9-1.fc37
ravada-1.8.3-1.fc37
rssguard-4.2.7-1.fc37
schismtracker-20221201-1.fc37
traceroute-2.1.1-1.fc37
zita-alsa-pcmi-0.6.1-1.fc37
Details about builds:
================================================================================
dar-2.7.8-1.fc37 (FEDORA-2022-824d8d4500)
Software for making/restoring incremental CD/DVD backups
--------------------------------------------------------------------------------
Update Information:
New upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Luis Bazan <lbazan(a)fedoraproject.org> - 2.7.8-1
- New Upstream version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2149293 - dar-2.7.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2149293
--------------------------------------------------------------------------------
================================================================================
grub-customizer-5.2.2-1.fc37 (FEDORA-2022-a11846abe1)
Graphical GRUB2 settings manager
--------------------------------------------------------------------------------
Update Information:
Update to 5.2.2.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Vasiliy N. Glazov <vascom2(a)gmail.com> 5.2.2-1
- Update to 5.2.2
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.1.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.1.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2045680 - grub-customizer: FTBFS in Fedora rawhide/f36
https://bugzilla.redhat.com/show_bug.cgi?id=2045680
[ 2 ] Bug #2119508 - grub-customizer modifies grub.cfg in EFI folder, overriding the
original stub file
https://bugzilla.redhat.com/show_bug.cgi?id=2119508
[ 3 ] Bug #2155666 - Useable "grub.cfg" is not generated following edit and
save.
https://bugzilla.redhat.com/show_bug.cgi?id=2155666
--------------------------------------------------------------------------------
================================================================================
mimalloc-2.0.9-1.fc37 (FEDORA-2022-5958d62679)
A general purpose allocator with excellent performance
--------------------------------------------------------------------------------
Update Information:
Update to 2.0.9.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Vasiliy Glazov <vascom2(a)gmail.com> - 2.0.9-1
- Update to 2.0.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156157 - mimalloc-2.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2156157
--------------------------------------------------------------------------------
================================================================================
opendmarc-1.4.2-6.fc37 (FEDORA-2022-9baec62c1d)
A Domain-based Message Authentication, Reporting & Conformance (DMARC) milter and
library
--------------------------------------------------------------------------------
Update Information:
Upstream version 1.4.2 includes fixes: - Fix issue #175: Don't reject a multi-
valued From when all of the domains match. - Fix issue #179: Don't crash when a
value in a multi-valued From field is missing a domain name. Resolves
CVE-2021-34555. Packaging fixes - Use systemd type=simple and no PID file to
avoid PID file startup races. - Use systemd RuntimeDirectory when available,
fall back to tmpfiles.d - Use systemd Restart on-failure to ensure it stays
running - Use systemd ProtectSystem and ProtectHome for increased security
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 27 2022 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.4.2-6
- rebuild
* Mon Sep 5 2022 Matt Domsch <mdomsch(a)fedoraproject.org> - 1.4.2-5
- Add systemd protections and restart
- Use systemd RuntimeDirectory instead of tmpfiles where possible
- Default config file to using local socket
--------------------------------------------------------------------------------
================================================================================
osbuild-composer-71-1.fc37 (FEDORA-2022-2466e055ef)
An image building service based on osbuild
--------------------------------------------------------------------------------
Update Information:
Automatic update for osbuild-composer-71-1.fc37. ##### **Changelog for osbuild-
composer** ``` * Wed Dec 28 2022 Packit <hello(a)packit.dev> - 71-1 Changes with
71 ---------------- * Enable Azure images for aarch64 (#3192) * Ignition
blueprint config support on rhel9 (#3161) * Update building instructions
(#3049) Contributions from: Achilleas Koutsou, Irene Diez, Luk���� Zapletal,
Sanne Raymaekers, Tom���� Hozza ��� Somewhere on the Internet, 2022-12-28 ```
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Packit <hello(a)packit.dev> - 71-1
Changes with 71
----------------
* Enable Azure images for aarch64 (#3192)
* Ignition blueprint config support on rhel9 (#3161)
* Update building instructions (#3049)
Contributions from: Achilleas Koutsou, Irene Diez, Luk���� Zapletal, Sanne Raymaekers,
Tom���� Hozza
��� Somewhere on the Internet, 2022-12-28
--------------------------------------------------------------------------------
================================================================================
pdfarranger-1.9.2-1.fc37 (FEDORA-2022-e1f4877157)
PDF file merging, rearranging, and splitting
--------------------------------------------------------------------------------
Update Information:
Upgrade to 1.9.2 * Fix "export all to individual files" overwrite (#764) * Fix
unexpected application close and quit (#762) * Fix buggy export when CropBox is
larger than MediaBox (#750) * Fix equal page size test in generate booklet
(#753) * Fix NAME in `man` page (#740) * Some translation fixes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 David Auer <dreua(a)posteo.de> - 1.9.2-1
- Update to 1.9.2 (closes rhbz#2149537)
* Mon Dec 19 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.9.1-2
- Drop support for i686
* Sun Sep 25 2022 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.9.1-1
- Update to latest upstream release 1.9.1 (closes rhbz#2129599)
* Sun Sep 18 2022 Fabian Affolter <mail(a)fabian-affolter.ch> - 1.9.0-1
- Update to latest upstream release 1.9.0 (closes rhbz#2127657)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2149537 - pdfarranger-1.9.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2149537
--------------------------------------------------------------------------------
================================================================================
python-Automat-22.10.0-1.fc37 (FEDORA-2022-b4eb4fad76)
Self-service finite-state machines for the programmer on the go
--------------------------------------------------------------------------------
Update Information:
Update to 22.10.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 22.10.0-1
- Update to 22.10.0
* Fri Dec 9 2022 Lumir Balhar <lbalhar(a)redhat.com> 20.2.0-21
- Fix compatibility with pytest 7.2 and tox 4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2138498 - python-Automat-22.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2138498
--------------------------------------------------------------------------------
================================================================================
python-apprise-1.2.1-1.fc37 (FEDORA-2022-078192fb0f)
A simple wrapper to many popular notification services used today
--------------------------------------------------------------------------------
Update Information:
Updated to v1.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Chris Caron <lead2gold(a)gmail.com> - 1.2.1-1
- Updated to v1.2.1
--------------------------------------------------------------------------------
================================================================================
python-pyrpm-0.13-1.fc37 (FEDORA-2022-6f3cf48a5b)
Python module for parsing RPM spec files
--------------------------------------------------------------------------------
Update Information:
Update to 0.13
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 0.13-1
- Update to 0.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2139053 - python-pyrpm-0.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2139053
--------------------------------------------------------------------------------
================================================================================
qjackctl-0.9.9-1.fc37 (FEDORA-2022-474493d8f5)
Qt based JACK control application
--------------------------------------------------------------------------------
Update Information:
Update to version 0.9.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 0.9.9-1
- Update to version 0.9.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156530 - qjackctl-0.9.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2156530
--------------------------------------------------------------------------------
================================================================================
qsynth-0.9.9-1.fc37 (FEDORA-2022-11525bd813)
Qt based Fluidsynth GUI front end
--------------------------------------------------------------------------------
Update Information:
Update to version 0.9.9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 0.9.9-1
- Update to version 0.9.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156531 - qsynth-0.9.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2156531
--------------------------------------------------------------------------------
================================================================================
ravada-1.8.3-1.fc37 (FEDORA-2022-2b87029a27)
Remote Virtual Desktops Manager
--------------------------------------------------------------------------------
Update Information:
Update to 1.8.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 1.8.3-1
- Update to 1.8.3
* Mon Dec 12 2022 Neal Gompa <ngompa(a)fedoraproject.org> 1.7.7-2
- Drop unneeded BR on perl(Image::Magick::Q16)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2142292 - ravada-1.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2142292
--------------------------------------------------------------------------------
================================================================================
rssguard-4.2.7-1.fc37 (FEDORA-2022-f5492c8512)
Simple yet powerful feed reader
--------------------------------------------------------------------------------
Update Information:
Update to 4.2.7
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> 4.2.7-1
- Update to 4.2.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2155704 - rssguard-4.2.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2155704
--------------------------------------------------------------------------------
================================================================================
schismtracker-20221201-1.fc37 (FEDORA-2022-9a138e1d82)
Sound module composer/player
--------------------------------------------------------------------------------
Update Information:
bump version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 josef radinger <cheese(a)nosuchhost.net> - 20221201-1
- bump version
--------------------------------------------------------------------------------
================================================================================
traceroute-2.1.1-1.fc37 (FEDORA-2022-d2fa202eea)
Traces the route taken by packets over an IPv4/IPv6 network
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Dmitry Butskoy <Dmitry(a)Butskoy.name> - 3:2.1.1-1
- update to 2.1.1
--------------------------------------------------------------------------------
================================================================================
zita-alsa-pcmi-0.6.1-1.fc37 (FEDORA-2022-d9f464a1d5)
ALSA C++ library
--------------------------------------------------------------------------------
Update Information:
Update to 0.6.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 28 2022 Guido Aulisi <guido.aulisi(a)gmail.com> - 0.6.1-1
- Update to 0.6.1
- Fix bug 2156573
* Tue Dec 27 2022 Guido Aulisi <guido.aulisi(a)gmail.com> - 0.5.1-1
- Update to 0.5.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2156573 - bug in previous versions causes incorrect operation with common
audio format
https://bugzilla.redhat.com/show_bug.cgi?id=2156573
--------------------------------------------------------------------------------