The following Fedora 37 Security updates need testing:
Age URL
19
https://bodhi.fedoraproject.org/updates/FEDORA-2022-1667f7b60a
nodejs-18.12.1-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d6310a1308
freerdp-2.8.1-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-243616c548
ntfs-3g-2022.10.3-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-471e14677d
python-virtualbmc-3.0.0-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-e0e9a43546
galera-26.4.13-1.fc37 mariadb-10.5.18-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3e859b6bc6
mingw-python3-3.10.8-2.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-2c77cee4b5
heimdal-7.7.1-3.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-47e298b59f
admesh-0.98.5-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-f092bc8f7b
libetpan-1.9.4-9.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9032cacb56
advancecomp-2.4-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-dacf699829
qpress-20220819-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-cf9ae8e4ff
wireshark-4.0.1-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
24
https://bodhi.fedoraproject.org/updates/FEDORA-2022-700705c81b
unbound-1.17.0-1.fc37
14
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a1bfac29ac
python-rpmautospec-0.3.1-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a82cee8b1b
device-mapper-multipath-0.9.0-4.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bc5fb1e0ba
fedora-appstream-metadata-20221115-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2022-d6310a1308
freerdp-2.8.1-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2022-243616c548
ntfs-3g-2022.10.3-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2022-aa9141f45f bluez-5.66-4.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2022-85b1fc1042
libvirt-8.6.0-5.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3c3eb5d63a
libguestfs-1.49.6-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-a35ebecf5b
python-pip-22.2.2-3.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-6ae411b7d4
gnome-tour-43.0-2.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2022-9285af6c70
perl-Getopt-Long-2.54-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-c3b0dfa797
libbsd-0.11.7-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-32e8d5b766
selinux-policy-37.15-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2022-26a1391176
annobin-10.93-1.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-b8ddd71a37
langtable-0.0.61-1.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-7febff96e0
xfce4-places-plugin-1.8.3-1.fc37 xfce4-screenshooter-1.10.0-1.fc37
xfce4-settings-4.16.5-1.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-74d54d2fe1 curl-7.85.0-4.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2022-946c441469
pipewire-0.3.61-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-79b841d2ae
libphonenumber-8.12.57-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-901bbc508d
guestfs-tools-1.49.6-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-575472271c
google-noto-fonts-20201206^1.git0c78c8329-7.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2022-3e6837f10f
dnsmasq-2.87-3.fc37
The following builds have been pushed to Fedora 37 updates-testing
archlinux-keyring-20221123-1.fc37
bzflag-2.4.26-1.fc37
fast_float-3.8.0-1.fc37
featherpad-1.3.3-1.fc37
fontconfig-2.14.1-2.fc37
frr-8.4.1-1.fc37
ibus-m17n-1.4.17-2.fc37
ibus-table-others-1.3.14-1.fc37
ipcalc-1.0.2-1.fc37
kernel-6.0.10-300.fc37
lightdm-settings-1.5.10-2.fc37
maradns-3.5.0030-1.fc37
papirus-icon-theme-20221101-1.fc37
pspg-5.5.13-1.fc37
python-ast-monitor-0.3.0-2.fc37
python-atpublic-3.1.1-1.fc37
python-cloudflare-2.11.1-1.fc37
python-geomet-1.0.0-1.fc37
python-keyring-23.11.0-1.fc37
python-multiprocess-0.70.13-3.fc37
python-prov-2.0.0-1.fc37
python-sphinx-copybutton-0.5.1-1.fc37
python-tldextract-3.4.0-1.fc37
rust-just-1.9.0-1.fc37
virt-v2v-2.1.10-1.fc37
wofi-1.3-1.fc37
xdg-desktop-portal-1.15.0-4.fc37
Details about builds:
================================================================================
archlinux-keyring-20221123-1.fc37 (FEDORA-2022-3aeaf5fbdc)
GPG keys used by Arch distribution to sign packages
--------------------------------------------------------------------------------
Update Information:
Version 20221123 (#2145118)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Frantisek Sumsal <frantisek(a)sumsal.cz> 20221123-1
- Version 20221123 (#2145118)
--------------------------------------------------------------------------------
================================================================================
bzflag-2.4.26-1.fc37 (FEDORA-2022-a773d2e692)
3D multi-player tank battle game
--------------------------------------------------------------------------------
Update Information:
Update to version 2.4.26, resolving RHBZ#2144598. Fixes audio bugs and other
minor problems.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jeff Makey <jeff(a)makey.net> 2.4.26-1
- version 2.4.26
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2144598 - bzflag-2.4.26 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2144598
--------------------------------------------------------------------------------
================================================================================
fast_float-3.8.0-1.fc37 (FEDORA-2022-8380cb4921)
Fast & exact implementation of C++ from_chars for float/double
--------------------------------------------------------------------------------
Update Information:
Update to 3.8.0: [3.8.0 release
notes](https://github.com/fastfloat/fast_float/releases/tag/v3.8.0), [3.7.0
release
notes](https://github.com/fastfloat/fast_float/releases/tag/v3.7.0),
[3.6.0 release
notes](https://github.com/fastfloat/fast_float/releases/tag/v3.6.0).
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.8.0-1
- Update to 3.8.0 (close RHBZ#2148328)
* Thu Nov 17 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.7.0-1
- Update to 3.7.0 (close RHBZ#2143469)
* Mon Nov 14 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 3.6.0-1
- Update to 3.6.0 (close RHBZ#2140130)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2140130 - fast_float-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2140130
[ 2 ] Bug #2143469 - fast_float-3.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2143469
[ 3 ] Bug #2148328 - fast_float-3.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2148328
--------------------------------------------------------------------------------
================================================================================
featherpad-1.3.3-1.fc37 (FEDORA-2022-bfb1e57b5d)
Lightweight Qt5 Plain-Text Editor
--------------------------------------------------------------------------------
Update Information:
update to 1.3.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jonathan Wright <jonathan(a)almalinux.org> - 1.3.3-1
- Update to 1.3.3 rhbz#2038534
* Sat Nov 26 2022 Jonathan Wright <jonathan(a)almalinux.org> - 1.1.1-1
- Update to 1.1.1
--------------------------------------------------------------------------------
================================================================================
fontconfig-2.14.1-2.fc37 (FEDORA-2022-870b576d8d)
Font configuration and customization library
--------------------------------------------------------------------------------
Update Information:
Enable 10-sub-pixel-rgb.conf for KDE only.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Akira TAGOH <tagoh(a)redhat.com> - 2.14.1-2
- Enable RGB stripes layout for sub-pixel rendering on KDE only.
Resolves: rhbz#2137825
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2137825 - fontconfig 2.14.1 breaks hinting
https://bugzilla.redhat.com/show_bug.cgi?id=2137825
--------------------------------------------------------------------------------
================================================================================
frr-8.4.1-1.fc37 (FEDORA-2022-335ebbfcd7)
Routing daemon
--------------------------------------------------------------------------------
Update Information:
New version 8.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 25 2022 Michal Ruprich <mruprich(a)redhat.com> - 8.4.1-1
- New version 8.4.1
- Fix for rhbz #2140705
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2140705 - PIDFile= references a path below legacy directory /var/run/
https://bugzilla.redhat.com/show_bug.cgi?id=2140705
[ 2 ] Bug #2143995 - frr-8.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2143995
--------------------------------------------------------------------------------
================================================================================
ibus-m17n-1.4.17-2.fc37 (FEDORA-2022-5c18c5bf15)
The M17N engine for IBus platform
--------------------------------------------------------------------------------
Update Information:
Migrate license tag to SPDX
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Mike FABIAN <mfabian(a)redhat.com> - 1.4.17-2
- Migrate license tag to SPDX
--------------------------------------------------------------------------------
================================================================================
ibus-table-others-1.3.14-1.fc37 (FEDORA-2022-8edb9ba4eb)
Various tables for IBus-Table
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream 1.3.14
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Mike FABIAN <mfabian(a)redhat.com> - 1.3.14-1
- Update to latest upstream 1.3.14
- Migrate license tags to SPDX
--------------------------------------------------------------------------------
================================================================================
ipcalc-1.0.2-1.fc37 (FEDORA-2022-276ddbb592)
IP network address calculator
--------------------------------------------------------------------------------
Update Information:
Updated to 1.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Nikos Mavrogiannopoulos <n.mavrogiannopoulos(a)gmail.com> - 1.0.2-1
- Updated to 1.0.2
--------------------------------------------------------------------------------
================================================================================
kernel-6.0.10-300.fc37 (FEDORA-2022-48b826559f)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 6.0.10 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.0.10-0]
- net: neigh: decrement the family specific qlen (Thomas Zeitlhofer)
- Linux v6.0.10
--------------------------------------------------------------------------------
================================================================================
lightdm-settings-1.5.10-2.fc37 (FEDORA-2022-70b2ad3c5e)
Configuration tool for the LightDM display manager
--------------------------------------------------------------------------------
Update Information:
update to 1.5.10
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
maradns-3.5.0030-1.fc37 (FEDORA-2022-015290d9e7)
Authoritative and recursive DNS server made with security in mind
--------------------------------------------------------------------------------
Update Information:
MaraDNS no longer accepts ANY queries as per RFC8482.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Tomasz Torcz <ttorcz(a)fedoraproject.org> - 3.5.0030-1
- new version (fixes rhbz#2138939)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2138939 - maradns-3.5.0030 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2138939
--------------------------------------------------------------------------------
================================================================================
papirus-icon-theme-20221101-1.fc37 (FEDORA-2022-5dca2e0f9d)
Free and open source SVG icon theme based on Paper Icon Set
--------------------------------------------------------------------------------
Update Information:
update to 20221101
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jonathan <jonathan(a)knownhost.com> 20221101-1
- update to 20221101 rhbz#2139237
--------------------------------------------------------------------------------
================================================================================
pspg-5.5.13-1.fc37 (FEDORA-2022-baff122c21)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.5.13
https://github.com/okbob/pspg/releases/tag/5.5.12
https://github.com/okbob/pspg/releases/tag/5.5.11
https://github.com/okbob/pspg/releases/tag/5.5.10
https://github.com/okbob/pspg/releases/tag/5.5.9
https://github.com/okbob/pspg/releases/tag/5.5.8
https://github.com/okbob/pspg/releases/tag/5.5.7
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Pavel Raiskup <praiskup(a)redhat.com> - 5.5.13-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.5.13
https://github.com/okbob/pspg/releases/tag/5.5.12
https://github.com/okbob/pspg/releases/tag/5.5.11
https://github.com/okbob/pspg/releases/tag/5.5.10
https://github.com/okbob/pspg/releases/tag/5.5.9
https://github.com/okbob/pspg/releases/tag/5.5.8
https://github.com/okbob/pspg/releases/tag/5.5.7
--------------------------------------------------------------------------------
================================================================================
python-ast-monitor-0.3.0-2.fc37 (FEDORA-2022-8b2a3639cc)
AST-Monitor is a wearable Raspberry Pi computer for cyclists
--------------------------------------------------------------------------------
Update Information:
Exclude some architectures
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.3.0-2
- Exclude architectures that lack qtwebengine
* Thu Sep 15 2022 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.0-1
- Update to the latest release
--------------------------------------------------------------------------------
================================================================================
python-atpublic-3.1.1-1.fc37 (FEDORA-2022-e451aa8f9d)
Decorator for populating a Python module's __all__
--------------------------------------------------------------------------------
Update Information:
update to 3.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 28 2022 Jonathan Wright <jonathan(a)almalinux.org> - 3.1.1-1
- Update to 3.1.1 rhbz#1861230
--------------------------------------------------------------------------------
================================================================================
python-cloudflare-2.11.1-1.fc37 (FEDORA-2022-ab60440beb)
Python wrapper for the Cloudflare Client API v4
--------------------------------------------------------------------------------
Update Information:
update to 2.11.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jonathan Wright <jonathan(a)almalinux.org - 2.11.1-1
- Update to 2.11.1 rhbz#2143783
--------------------------------------------------------------------------------
================================================================================
python-geomet-1.0.0-1.fc37 (FEDORA-2022-1414ca6dcb)
GeoJSON <-> WKT/WKB conversion utilities
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 1.0.0-1
- Update to latest version (#2142621)
* Sun Nov 20 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 0.3.0-9
- Use SPDX license
* Sun Nov 20 2022 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> 0.3.0-8
- Switch to latest Python macros
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2142621 - python-geomet-1.0.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2142621
--------------------------------------------------------------------------------
================================================================================
python-keyring-23.11.0-1.fc37 (FEDORA-2022-434893b36e)
Store and access your passwords safely
--------------------------------------------------------------------------------
Update Information:
### v23.11.0 - In `libsecret`, check that the service is available before
declaring viability. ### v23.10.0 - Bump requirement on `importlib_metadata`
to pull in fix for improperly-normalized names on egg-info.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 21 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 23.11.0-1
- Update to 23.11.0 (close RHBZ#2140241)
* Fri Nov 18 2022 Christopher Tubbs <ctubbsii(a)fedoraproject.org> - 23.9.3-2
- Convert license to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2140241 - python-keyring-23.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2140241
--------------------------------------------------------------------------------
================================================================================
python-multiprocess-0.70.13-3.fc37 (FEDORA-2022-a56a092982)
Better multiprocessing and multithreading in python
--------------------------------------------------------------------------------
Update Information:
Fix noarch package installing to python sitearch directory
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.70.13-3
- Fix noarch package installing to python sitearch dir
--------------------------------------------------------------------------------
================================================================================
python-prov-2.0.0-1.fc37 (FEDORA-2022-eefce1cdc6)
W3C Provenance Data Model supporting PROV-JSON and PROV-XML import/export
--------------------------------------------------------------------------------
Update Information:
update to 2.0.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jonathan Wright <jonathan(a)almalinux.org> - 2.0.0-1
- update to 2.0.0 rhbz#1893550
--------------------------------------------------------------------------------
================================================================================
python-sphinx-copybutton-0.5.1-1.fc37 (FEDORA-2022-311462f626)
Add a copy button to code cells in Sphinx docs
--------------------------------------------------------------------------------
Update Information:
update to 0.5.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jonathan Wright <jonathan(a)almalinux.org> - 0.5.1-1
- Update to 0.5.1 rhbz#2142964
--------------------------------------------------------------------------------
================================================================================
python-tldextract-3.4.0-1.fc37 (FEDORA-2022-7566059f74)
Accurately separate the TLD from the registered domain and subdomains of a URL
--------------------------------------------------------------------------------
Update Information:
update to 3.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Jonathan Wright <jonathan(a)almalinux.org> - 3.4.0-1
- update to 3.4.0 rhbz#2132165
--------------------------------------------------------------------------------
================================================================================
rust-just-1.9.0-1.fc37 (FEDORA-2022-aa2ae5b55f)
Just a command runner
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.0 (#2148570)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Aleksei Bavshin <alebastr(a)fedoraproject.org> 1.9.0-1
- Update to 1.9.0 (#2148570)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2148570 - rust-just-1.9.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2148570
--------------------------------------------------------------------------------
================================================================================
virt-v2v-2.1.10-1.fc37 (FEDORA-2022-7f4c7dd59b)
Convert a virtual machine to run on KVM
--------------------------------------------------------------------------------
Update Information:
New upstream development version 2.1.10
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:2.1.10-1
- New upstream development version 2.1.10
- New tool: virt-v2v-inspector
* Tue Oct 11 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:2.1.9-1
- New upstream development version 2.1.9
* Tue Aug 23 2022 Richard W.M. Jones <rjones(a)redhat.com> - 1:2.1.8-2
- Add BR glibc-static for tests on x86_64.
--------------------------------------------------------------------------------
================================================================================
wofi-1.3-1.fc37 (FEDORA-2022-571db5acf8)
A launcher/menu for wlroots based wayland compositors
--------------------------------------------------------------------------------
Update Information:
Update to version 1.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 Stefano Figura <stefano(a)figura.im> - 1.3-1
- Update to version 1.3
--------------------------------------------------------------------------------
================================================================================
xdg-desktop-portal-1.15.0-4.fc37 (FEDORA-2022-9c998c677c)
Portal frontend service to flatpak
--------------------------------------------------------------------------------
Update Information:
Update fusermount dependency
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 26 2022 David King <amigadave(a)amigadave.com> 1.15.0-4
- Update fusermount dependency (#2142385)
* Sat Oct 22 2022 Michael Catanzaro <mcatanzaro(a)redhat.com> 1.15.0-3
- Remove Recommends: flatpak
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2142385 - Unable to directly open attachments from Fedora Evolution Flatpak
https://bugzilla.redhat.com/show_bug.cgi?id=2142385
--------------------------------------------------------------------------------