The following Fedora 37 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c8c2e402fb expat-2.5.0-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a6812b0224 libxml2-2.10.3-2.fc37 xmlsec1-1.2.34-4.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f3a939e960 mingw-pixman-0.42.2-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5f1e2e9016 mingw-expat-2.5.0-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-19056934a7 mingw-libtasn1-4.19.0-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-6716cd0da2 android-tools-33.0.3p1-1.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-1667f7b60a nodejs-18.12.1-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9f51d13fa3 xen-4.16.2-4.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9f3af921a5 sysstat-12.6.0-4.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a7cad6bd22 python3.10-3.10.8-2.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-028c09eaa7 python3.9-3.9.15-2.fc37
The following Fedora 37 Critical Path updates have yet to be approved: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f98dec8c0b rust-packaging-23-1.fc37 rust-srpm-macros-23-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f0a6809cef cmake-3.24.2-1.fc37 11 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a66fea896d v4l-utils-1.22.1-4.fc37 10 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c8c2e402fb expat-2.5.0-1.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f18b99345b lcms2-2.14-1.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f7fdf02056 selinux-policy-37.14-1.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-700705c81b unbound-1.17.0-1.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-8bb1537de2 speech-dispatcher-0.11.4-1.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2022-16430c62fd capstone-4.0.2-11.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2022-725cbf0d10 xorg-x11-server-Xwayland-22.1.5-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-c98b928028 perl-URI-5.17-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2022-a6812b0224 libxml2-2.10.3-2.fc37 xmlsec1-1.2.34-4.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-b83c3f5e9e fedora-appstream-metadata-20220912-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-2a370286a6 satyr-0.40-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-5bc46e8756 gnome-shell-43.1-1.fc37 mutter-43.1-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2022-3175e1c32a gnutls-3.7.8-3.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e83239c44f nfs-utils-2.6.2-1.rc3.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e124357957 avahi-0.8-18.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2022-e815358059 pungi-4.3.6-2.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-4c75b2cdf9 libsoup3-3.2.2-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-15d6ad46a0 libappindicator-12.10.1-0.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f1d65a5247 mesa-22.2.3-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-9f51d13fa3 xen-4.16.2-4.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-dd9f7bbf7e imath-3.1.6-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2022-d2bb98654a gnome-bluetooth-42.4-3.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-faeae126de fwupd-1.8.7-2.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-ddc3487da9 liburing-2.3-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-f14d7ea6ca annobin-10.92-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2022-37c4637387 clang-15.0.4-1.fc37 compiler-rt-15.0.4-1.fc37 flang-15.0.4-1.fc37 libclc-15.0.4-1.fc37 libcxx-15.0.4-1.fc37 libcxxabi-15.0.4-1.fc37 libomp-15.0.4-1.fc37 lld-15.0.4-1.fc37 lldb-15.0.4-1.fc37 llvm-15.0.4-1.fc37 llvm-libunwind-15.0.4-1.fc37 llvm-test-suite-15.0.4-1.fc37 mlir-15.0.4-1.fc37 polly-15.0.4-1.fc37 python-lit-15.0.1-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
cockatrice-2.8.0-7.fc37 dotnet6.0-6.0.110-2.fc37 gap-4.12.1-1.fc37 gap-pkg-crypting-0.10.4-1.fc37 gap-pkg-datastructures-0.3.0-1.fc37 gap-pkg-io-4.8.0-1.fc37 gap-pkg-smallgrp-1.5.1-1.fc37 ibus-table-1.16.14-1.fc37 libloc-0.9.16-1.fc37 linux-firmware-20221109-143.fc37 openjdk-asmtools-8.0.b02.ea-0.1.20221108.git608867a.fc37 passt-0^20221110.g4129764-1.fc37 pipewire-0.3.60-1.fc37 procyon-0.6.0-0.1.20220221.git88a95fa.fc37 python-canonicaljson-1.6.4-1.fc37 python-dropbox-11.36.0-1.fc37 python-frozenlist-1.3.3-1.fc37 python3.6-3.6.15-14.fc37 reprotest-0.7.22-1.fc37 xgap-4.31-5.fc37
Details about builds:
================================================================================ cockatrice-2.8.0-7.fc37 (FEDORA-2022-1a18e516e1) A cross-platform virtual tabletop software for multi-player card games -------------------------------------------------------------------------------- Update Information:
- Split servatrice into separate subpackage -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Link Dupont linkdupont@fedoraproject.org - 2.8.0-7 - Split servatrice into separate subpackage --------------------------------------------------------------------------------
================================================================================ dotnet6.0-6.0.110-2.fc37 (FEDORA-2022-2c37647a9c) .NET Runtime and SDK -------------------------------------------------------------------------------- Update Information:
This is the October 2022 monthly update for .NET 6. It updates the SDK to 6.0.110 and the Runtime to 6.0.10. This update includes a fix for CVE 2022-41032 -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 31 2022 Omair Majid omajid@redhat.com - 6.0.110-2 - Set OPENSSL_ENABLE_SHA1_SIGNATURES=1 when building * Fri Oct 28 2022 Omair Majid omajid@redhat.com - 6.0.110-1 - Update to .NET SDK 6.0.110 and Runtime 6.0.10 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2133875 - CVE-2022-41032 dotnet6.0: dotnet: Nuget cache poisoning on Linux via world-writable cache directory [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2133875 --------------------------------------------------------------------------------
================================================================================ gap-4.12.1-1.fc37 (FEDORA-2022-6ff0216954) Computational discrete algebra -------------------------------------------------------------------------------- Update Information:
See https://github.com/gap-system/gap/blob/master/CHANGES.md for changes in version 4.12.1. -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Jerry James loganjerry@gmail.com - 4.12.1-1 - Version 4.12.1 - Drop builtin-mul-overflow patch - Drop post-4.12.0 bug fix patches - Switch to upstream's method of bootstrapping --------------------------------------------------------------------------------
================================================================================ gap-pkg-crypting-0.10.4-1.fc37 (FEDORA-2022-ef68e748d4) Hashes and Crypto in GAP -------------------------------------------------------------------------------- Update Information:
Changes in version 0.10.4: - Check for endianness - Simplify build system -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Jerry James loganjerry@gmail.com - 0.10.4-1 - Version 0.10.4 - Drop obsolete -endian patch - Clarify license of the doc subpackage -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2140054 - gap-pkg-crypting-0.10.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2140054 --------------------------------------------------------------------------------
================================================================================ gap-pkg-datastructures-0.3.0-1.fc37 (FEDORA-2022-7e92b7777c) Standard data structures for GAP -------------------------------------------------------------------------------- Update Information:
Changes in version 0.3.0: - Improve printing of HashSets and HashMaps - Allow giving initial values for HashMaps and HashSets - Make sure `rec(1:=2,3:=4)` and `rec(1:=4,2:=3)` have different hashes - Various janitorial changes -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 4 2022 Jerry James loganjerry@gmail.com - 0.3.0-1 - Version 0.3.0 - Drop obsolete -unused patch - Clarify license of the doc subpackage -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2140080 - gap-pkg-datastructures-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2140080 --------------------------------------------------------------------------------
================================================================================ gap-pkg-io-4.8.0-1.fc37 (FEDORA-2022-6ee2b64cab) Unix I/O functionality for GAP -------------------------------------------------------------------------------- Update Information:
Changes in version 4.8.0: - Change minimal required GAP version to 4.11 - Add `IO_getenv`, `IO_setenv`, and `IO_unsetenv` -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Jerry James loganjerry@gmail.com - 4.8.0-1 - Version 4.8.0 - Use upstream's method of bootstrapping - Clarify license of the doc subpackage --------------------------------------------------------------------------------
================================================================================ gap-pkg-smallgrp-1.5.1-1.fc37 (FEDORA-2022-e72475b08a) Small groups library -------------------------------------------------------------------------------- Update Information:
Changes in version 1.5.1: - Compress data files to reduce on-disk footprint -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Jerry James loganjerry@gmail.com - 1.5.1-1 - Version 1.5.1 - Use upstream's method of bootstrapping - Clarify license of the doc subpackage -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2140315 - gap-pkg-smallgrp-1.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2140315 --------------------------------------------------------------------------------
================================================================================ ibus-table-1.16.14-1.fc37 (FEDORA-2022-2daf69d418) The Table engine for IBus platform -------------------------------------------------------------------------------- Update Information:
Update to 1.16.14 Fix a problem in C/POSIX and invalid locales: Use lower() on LC_MESSAGES only if it is a string and not None Resolves: https://github.com/mike-fabian/ibus-table/issues/130 Resolves: rhbz#2131410 https://bugzilla.redhat.com/show_bug.cgi?id=2131410 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Mike FABIAN mfabian@redhat.com - 1.16.14-1 - Update to 1.16.14 - Fix a problem in C/POSIX and invalid locales: Use lower() on LC_MESSAGES only if it is a string and not None Resolves: https://github.com/mike-fabian/ibus-table/issues/130 Resolves: rhbz#2131410 https://bugzilla.redhat.com/show_bug.cgi?id=2131410 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2131410 - [abrt] ibus-table: write_xml(): main.py:281:write_xml:AttributeError: 'NoneType' object has no attribute 'lower' https://bugzilla.redhat.com/show_bug.cgi?id=2131410 --------------------------------------------------------------------------------
================================================================================ libloc-0.9.16-1.fc37 (FEDORA-2022-4091e204d7) Library to determine a location of an IP address in the Internet -------------------------------------------------------------------------------- Update Information:
This updates brings libloc, a tool and a library for determining a location of an IP address in the Internet. -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 31 2022 Petr Pisar ppisar@redhat.com - 0.9.16-1 - 0.9.16 bump - A database snapshot from 2022-10-20T06:27:23 is included * Wed Oct 19 2022 Petr Pisar ppisar@redhat.com - 0.9.15-2 - Enable enabling debuging messages - Fix make dependencies for Perl * Tue Oct 4 2022 Petr Pisar ppisar@redhat.com - 0.9.15-1 - 0.9.15 packaged -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2132701 - Review Request: libloc - Library to determine a location of an IP address in the Internet https://bugzilla.redhat.com/show_bug.cgi?id=2132701 --------------------------------------------------------------------------------
================================================================================ linux-firmware-20221109-143.fc37 (FEDORA-2022-c5ad0b895f) Firmware files used by the Linux kernel -------------------------------------------------------------------------------- Update Information:
Update to upstream 20221109 release: * Update firmware file for Intel Bluetooth 9462/9560/AX20x/AX21x * amdgpu: update DMCUB firmware for DCN 3.1.6 * rtl_bt: Update RTL8822C BT UART firmware to 0xFFB8_ABD6 * rtl_bt: Update RTL8822C BT USB firmware to 0xFFB8_ABD3 * mrvl: prestera: Update Marvell Prestera Switchdev FW to v4.1 * iwlwifi: add new FWs from core74_pv-60 release * qcom: drop split a530_zap firmware file * qcom/vpu-1.0: drop split firmware in favour of the mbn file * qcom/venus-4.2: drop split firmware in favour of the mbn file * qcom/venus-4.2: replace split firmware with the mbn file * qcom/venus-1.8: replace split firmware with the mbn file * iwlwifi: add new PNVM binaries from core74-44 release * iwlwifi: add new FWs from core69-81 release * qcom: update venus firmware files for VPU-2.0 * qcom: remove split SC7280 venus firmware images * qcom: update venus firmware file for v5.4 * qcom: replace split SC7180 venus firmware images with symlink * rtw89: 8852b: update fw to v0.27.32.1 * rtlwifi: update firmware for rtl8192eu to v35.7 * rtlwifi: Add firmware v4.0 for RTL8188FU * i915: Add HuC 7.10.3 for DG2 * cnm: update chips&media wave521c firmware. * brcm: add symlink for Pi Zero 2 W NVRAM file * Add firmware for Cirrus CS35L41 on ASUS/Lenovo/HP Laptops * iwlwifi: add new FWs from core72-129 release * iwlwifi: update 9000-family firmwares to core72-129 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Peter Robinson pbrobinson@fedoraproject.org - 20221109-143 - Update to upstream 20221109 release - Update firmware file for Intel Bluetooth 9462/9560/AX20x/AX21x - amdgpu: update DMCUB firmware for DCN 3.1.6 - rtl_bt: Update RTL8822C BT UART firmware to 0xFFB8_ABD6 - rtl_bt: Update RTL8822C BT USB firmware to 0xFFB8_ABD3 - mrvl: prestera: Update Marvell Prestera Switchdev FW to v4.1 - iwlwifi: add new FWs from core74_pv-60 release - qcom: drop split a530_zap firmware file - qcom/vpu-1.0: drop split firmware in favour of the mbn file - qcom/venus-4.2: drop split firmware in favour of the mbn file - qcom/venus-4.2: replace split firmware with the mbn file - qcom/venus-1.8: replace split firmware with the mbn file - iwlwifi: add new PNVM binaries from core74-44 release - iwlwifi: add new FWs from core69-81 release - qcom: update venus firmware files for VPU-2.0 - qcom: remove split SC7280 venus firmware images - qcom: update venus firmware file for v5.4 - qcom: replace split SC7180 venus firmware images with symlink - rtw89: 8852b: update fw to v0.27.32.1 - rtlwifi: update firmware for rtl8192eu to v35.7 - rtlwifi: Add firmware v4.0 for RTL8188FU - i915: Add HuC 7.10.3 for DG2 - cnm: update chips&media wave521c firmware. - brcm: add symlink for Pi Zero 2 W NVRAM file - Add firmware for Cirrus CS35L41 on ASUS/Lenovo/HP Laptops - iwlwifi: add new FWs from core72-129 release - iwlwifi: update 9000-family firmwares to core72-129 --------------------------------------------------------------------------------
================================================================================ openjdk-asmtools-8.0.b02.ea-0.1.20221108.git608867a.fc37 (FEDORA-2022-9eb558657c) To develop tools create proper & improper Java '.class' files -------------------------------------------------------------------------------- Update Information:
bumped to asmtools8 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Fedora Release Engineering releng@fedoraproject.org - 8.0.b02.ea-0.1.20221108.git608867a - bumped to asmtools8 --------------------------------------------------------------------------------
================================================================================ passt-0^20221110.g4129764-1.fc37 (FEDORA-2022-65124d8f7f) User-mode networking daemons for virtual machines and namespaces -------------------------------------------------------------------------------- Update Information:
Visible user changes: * running with IPv6 disabled and sending IPv6 traffic from sockets, or IPv4 disabled and sending IPv4 from sockets doesn't result in passt/pasta to exit anymore * network mask for IPv4 is correctly reported in start-up messages -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Stefano Brivio sbrivio@redhat.com - 0^20221110.g4129764-1 - Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_11_04.e308018..2022_11_10.4... * Fri Nov 4 2022 Stefano Brivio sbrivio@redhat.com - 0^20221104.ge308018-1 - Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_10_26.f212044..2022_11_04.e... --------------------------------------------------------------------------------
================================================================================ pipewire-0.3.60-1.fc37 (FEDORA-2022-4396c60384) Media Sharing Server -------------------------------------------------------------------------------- Update Information:
Update version to 0.3.60 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Wim Taymans wtaymans@redhat.com - 0.3.60-1 - Update version to 0.3.60 --------------------------------------------------------------------------------
================================================================================ procyon-0.6.0-0.1.20220221.git88a95fa.fc37 (FEDORA-2022-917ad0b54a) procyon java decompiler and other tools -------------------------------------------------------------------------------- Update Information:
bumped to 0.6.0 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ python-canonicaljson-1.6.4-1.fc37 (FEDORA-2022-962e7ebbcb) Canonical JSON -------------------------------------------------------------------------------- Update Information:
Update to 1.6.4 -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 6 2022 Kai A. Hiller V02460@gmail.com - 1.6.4-1 - Update to 1.6.4 - Follow new Python packaging guidelines --------------------------------------------------------------------------------
================================================================================ python-dropbox-11.36.0-1.fc37 (FEDORA-2022-8827d74a22) Official Dropbox REST API Client -------------------------------------------------------------------------------- Update Information:
11.36.0 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Gwyn Ciesla gwync@protonmail.com - 11.36.0-1 - 11.36.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2141468 - python-dropbox-11.36.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2141468 --------------------------------------------------------------------------------
================================================================================ python-frozenlist-1.3.3-1.fc37 (FEDORA-2022-12606fafbc) List-like structure which can be made immutable -------------------------------------------------------------------------------- Update Information:
1.3.3 (2022-11-08) ================== - Fixed CI runs when creating a new release, where new towncrier versions fail when the current version section is already present. ---- 1.3.2 (2022-11-08) ================== Misc ---- - Updated the CI runs to better check for test results and to avoid deprecated syntax. `#327 https://github.com/aio-libs/frozenlist/issues/327`_ -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Benjamin A. Beasley code@musicinmybrain.net 1.3.3-1 - Update to 1.3.3 (close RHBZ#2141069) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2141069 - python-frozenlist-1.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2141069 --------------------------------------------------------------------------------
================================================================================ python3.6-3.6.15-14.fc37 (FEDORA-2022-cae8089f93) Version 3.6 of the Python interpreter -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2022-37454. -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Miro Hron��ok mhroncok@redhat.com - 3.6.15-14 - CVE-2022-37454: Fix buffer overflows in _sha3 module Related: rhbz#2140200 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2140200 - CVE-2022-37454 XKCP: buffer overflow in the SHA-3 reference implementation https://bugzilla.redhat.com/show_bug.cgi?id=2140200 --------------------------------------------------------------------------------
================================================================================ reprotest-0.7.22-1.fc37 (FEDORA-2022-f4a94d4a2c) Build packages and check them for reproducibility -------------------------------------------------------------------------------- Update Information:
version 0.7.22 -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Fr��d��ric Pierret (fepitre) frederic@invisiblethingslab.com - 0.7.22-1 - version 0.7.22 --------------------------------------------------------------------------------
================================================================================ xgap-4.31-5.fc37 (FEDORA-2022-0b3e4b6dda) GUI for GAP -------------------------------------------------------------------------------- Update Information:
This update fixes and reenables the tests. There are no user-visible changes. -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 10 2022 Jerry James loganjerry@gmail.com - 4.31-5 - Fix and reenable the tests - Clarify license of the doc subpackage --------------------------------------------------------------------------------
test-reports@lists.fedoraproject.org