--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-189057d45a
2023-05-31 17:29:34.390189
--------------------------------------------------------------------------------
Name : asahi-scripts
Product : Fedora 38
Version : 20230530
Release : 1.fc38
URL : https://github.com/AsahiLinux/asahi-scripts
Summary : Miscellaneous admin scripts for Asahi Linux
Description :
This package contains miscellaneous admin scripts for the Asahi Linux reference
distro.
--------------------------------------------------------------------------------
Update Information:
Update to 20230530; Fixes: RHBZ#2209183
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 30 2023 Davide Cavalca <dcavalca(a)fedoraproject.org> - 20230530-1
- Update to 20230530; Fixes: RHBZ#2209183
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2209183 - asahi-scripts-20230530 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2209183
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-189057d45a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-c8de0d1816
2023-05-31 17:29:34.390173
--------------------------------------------------------------------------------
Name : mesa
Product : Fedora 38
Version : 23.1.1
Release : 1.fc38
URL : http://www.mesa3d.org
Summary : Mesa graphics libraries
Description :
Mesa graphics libraries.
--------------------------------------------------------------------------------
Update Information:
Update to mesa 23.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 30 2023 Dave Airlie <airlied(a)redhat.com> - 23.1.1-1
- Update to mesa 23.1.1
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-c8de0d1816' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-2282555bb0
2023-05-31 17:29:34.390181
--------------------------------------------------------------------------------
Name : m1n1
Product : Fedora 38
Version : 1.2.8
Release : 1.fc38
URL : https://github.com/AsahiLinux/m1n1
Summary : Bootloader and experimentation playground for Apple Silicon
Description :
m1n1 is the bootloader developed by the Asahi Linux project to bridge the Apple
(XNU) boot ecosystem to the Linux boot ecosystem.
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.8
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 30 2023 Davide Cavalca <dcavalca(a)fedoraproject.org> - 1.2.8-1
- Update to 1.2.8
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-2282555bb0' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-0504b1f717
2023-05-31 17:29:34.390165
--------------------------------------------------------------------------------
Name : fedora-release
Product : Fedora 38
Version : 38
Release : 36
URL : https://fedoraproject.org/
Summary : Fedora release files
Description :
Fedora release files such as various /etc/ files that define the release
and systemd preset files that determine which services are enabled by default.
--------------------------------------------------------------------------------
Update Information:
Add nmstate.service preset
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 30 2023 Enrique Llorente <ellorent(a)redhat.com> - 38-36
- Enable presets for nmstate.service
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-0504b1f717' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-a19eb5132c
2023-05-31 17:29:34.390158
--------------------------------------------------------------------------------
Name : selinux-policy
Product : Fedora 38
Version : 38.15
Release : 1.fc38
URL : https://github.com/fedora-selinux/selinux-policy
Summary : SELinux policy configuration
Description :
SELinux core policy package.
Originally based off of reference policy,
the policy has been adjusted to provide support for Fedora.
--------------------------------------------------------------------------------
Update Information:
New F38 selinux-policy build
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 30 2023 Zdenek Pytela <zpytela(a)redhat.com> - 38.15-1
- Update policy for systemd-sleep
- Remove permissive domain for rshim_t
- Remove permissive domain for mptcpd_t
- Allow systemd-bootchartd the sys_ptrace userns capability
- Allow sysadm_t read nsfs files
- Allow sysadm_t run kernel bpf programs
- Update ssh_role_template for ssh-agent
- Update ssh_role_template to allow read/write unallocated ttys
- Add the booth module to modules.conf
- Allow firewalld rw ica_tmpfs_t files
* Fri May 26 2023 Zdenek Pytela <zpytela(a)redhat.com> - 38.14-1
- Remove permissive domain for cifs_helper_t
- Update the cifs-helper policy
- Replace cifsutils_helper_domtrans() with keyutils_request_domtrans_to()
- Update pkcsslotd policy for sandboxing
- Allow abrt_t read kernel persistent storage files
- Dontaudit targetd search httpd config dirs
- Allow init_t nnp domain transition to policykit_t
- Allow rpcd_lsad setcap and use generic ptys
- Allow samba-dcerpcd connect to systemd_machined over a unix socket
- Allow wireguard to rw network sysctls
- Add policy for boothd
- Allow kernel to manage its own BPF objects
- Label /usr/lib/systemd/system/proftpd.* & vsftpd.* with ftpd_unit_file_t
* Mon May 22 2023 Zdenek Pytela <zpytela(a)redhat.com> - 38.13-1
- Add initial policy for cifs-helper
- Label key.dns_resolver with keyutils_dns_resolver_exec_t
- Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
- Allow some systemd services write to cgroup files
- Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files
- Allow systemd resolved to bind to arbitrary nodes
- Allow plymouthd_t bpf capability to run bpf programs
- Allow cupsd to create samba_var_t files
- Allow rhsmcert request the kernel to load a module
- Allow virsh name_connect virt_port_t
- Allow certmonger manage cluster library files
- Allow plymouthd read init process state
- Add chromium_sandbox_t setcap capability
- Allow snmpd read raw disk data
- Allow samba-rpcd work with passwords
- Allow unconfined service inherit signal state from init
- Allow cloud-init manage gpg admin home content
- Allow cluster_t dbus chat with various services
- Allow nfsidmapd work with systemd-userdbd and sssd
- Allow unconfined_domain_type use IORING_OP_URING_CMD on all device nodes
- Allow plymouthd map dri and framebuffer devices
- Allow rpmdb_migrate execute rpmdb
- Allow logrotate dbus chat with systemd-hostnamed
- Allow icecast connect to kernel using a unix stream socket
- Allow lldpad connect to systemd-userdbd over a unix socket
- Allow journalctl open user domain ptys and ttys
- Allow keepalived to manage its tmp files
- Allow ftpd read network sysctls
- Label /run/bgpd with zebra_var_run_t
- Allow gssproxy read network sysctls
- Add the cifsutils module
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2180611 - SELinux is preventing nfsidmap from 'read' accesses on the directory userdb.
https://bugzilla.redhat.com/show_bug.cgi?id=2180611
[ 2 ] Bug #2183752 - SELinux is preventing plymouthd from 'read' accesses on the file stat.
https://bugzilla.redhat.com/show_bug.cgi?id=2183752
[ 3 ] Bug #2184900 - SELinux is preventing plymouthd from 'map' accesses on the chr_file /dev/dri/card0.
https://bugzilla.redhat.com/show_bug.cgi?id=2184900
[ 4 ] Bug #2188640 - SELinux is preventing systemd-sleep from 'search' accesses on the directory /var/lib/systemd.
https://bugzilla.redhat.com/show_bug.cgi?id=2188640
[ 5 ] Bug #2191724 - rpmdb_migrate selinux policy making service fail
https://bugzilla.redhat.com/show_bug.cgi?id=2191724
[ 6 ] Bug #2208845 - SELinux is preventing samba-dcerpcd from 'connectto' accesses on the unix_stream_socket /run/systemd/userdb/io.systemd.Machine.
https://bugzilla.redhat.com/show_bug.cgi?id=2208845
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-a19eb5132c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-b1cfac06c4
2023-05-31 17:29:34.390150
--------------------------------------------------------------------------------
Name : python-lxml
Product : Fedora 38
Version : 4.9.2
Release : 3.fc38
URL : https://github.com/lxml/lxml
Summary : XML processing library combining libxml2/libxslt with the ElementTree API
Description :
lxml is a Pythonic, mature binding for the libxml2 and libxslt libraries. It
provides safe and convenient access to these libraries using the ElementTree It
extends the ElementTree API significantly to offer support for XPath, RelaxNG,
XML Schema, XSLT, C14N and much more.
--------------------------------------------------------------------------------
Update Information:
Workaround a build failure.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 29 2023 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 4.9.2-3
- Skip failing test to avoid FTBFS
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-b1cfac06c4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-690e150a39
2023-05-31 17:29:34.390141
--------------------------------------------------------------------------------
Name : pypy
Product : Fedora 38
Version : 7.3.11
Release : 3.fc38
URL : http://pypy.org/
Summary : Python implementation with a Just-In-Time compiler
Description :
PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU
architectures, and various optimized implementations of the standard types
(strings, dictionaries, etc)
This build of PyPy has JIT-compilation enabled.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-24329
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 29 2023 Charalampos Stratakis <cstratak(a)redhat.com> - 7.3.11-3
- Security fix for CVE-2023-24329
Resolves: rhbz#2174018
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2174018 - CVE-2023-24329 pypy: python: urllib.parse url blocklisting bypass [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2174018
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-690e150a39' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-81bb8e3b99
2023-05-31 17:29:34.390134
--------------------------------------------------------------------------------
Name : pypy3.9
Product : Fedora 38
Version : 7.3.11
Release : 4.3.9.fc38
URL : http://pypy.org/
Summary : Python 3.9 implementation with a Just-In-Time compiler
Description :
PyPy's implementation of Python 3.9, featuring a Just-In-Time compiler
on some CPU architectures, and various optimized implementations
of the standard types (strings, dictionaries, etc.).
This build of PyPy has JIT-compilation enabled.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-24329
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 29 2023 Charalampos Stratakis <cstratak(a)redhat.com> - 7.3.11-4.3.9
- Security fix for CVE-2023-24329
Resolves: rhbz#2174020
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2174020 - CVE-2023-24329 pypy3.9: python: urllib.parse url blocklisting bypass [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2174020
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-81bb8e3b99' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-994ecd7dbc
2023-05-31 17:29:34.390126
--------------------------------------------------------------------------------
Name : python3.10
Product : Fedora 38
Version : 3.10.11
Release : 2.fc38
URL : https://www.python.org/
Summary : Version 3.10 of the Python interpreter
Description :
Python 3.10 is an accessible, high-level, dynamically typed, interpreted
programming language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
The python3.10 package provides the "python3.10" executable: the reference
interpreter for the Python language, version 3.
The majority of its standard library is provided in the python3.10-libs package,
which should be installed automatically along with python3.10.
The remaining parts of the Python standard library are broken out into the
python3.10-tkinter and python3.10-test packages, which may need to be installed
separately.
Documentation for Python is provided in the python3.10-docs package.
Packages containing additional libraries for Python are generally named with
the "python3.10-" prefix.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2023-24329
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 29 2023 Charalampos Stratakis <cstratak(a)redhat.com> - 3.10.11-2
- Fix for CVE-2023-24329
Resolves: rhbz#2174010
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2174010 - CVE-2023-24329 python3.10: python: urllib.parse url blocklisting bypass [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2174010
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-994ecd7dbc' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-e9c0b0c1f0
2023-05-31 17:29:34.390119
--------------------------------------------------------------------------------
Name : btrfs-progs
Product : Fedora 38
Version : 6.3.1
Release : 1.fc38
URL : https://btrfs.wiki.kernel.org/index.php/Main_Page
Summary : Userspace programs for btrfs
Description :
The btrfs-progs package provides all the userspace programs needed to create,
check, modify and correct any inconsistencies in the btrfs filesystem.
--------------------------------------------------------------------------------
Update Information:
### Changelog #### 6.3.1 * convert: fix checksum of a block relocated from
0-1M range * qgroup show: fix formatting of limit values in json output *
receive: report paret subovl UUID on errors * btrfsune: new option --convert-
to-free-space-tree to convert from block-group-tree back to extent tree for
block group tracking * mkfs: make option --rootdir more verbose and report
start when filling from the given directory starts * experimental: *
btrfstune: checksum switch logic reimplemented, conversion of all metadata
and data now works, resume from various states also supported * other: *
more CI github actions test coverage * more kernel/userspace source code
sync * warning fixes * code cleanups * documentation updates ####
6.3 * mkfs: option -R deprecated, options unified in -O (-R still works)
* mkfs: fix potential race with udev leading to EBUSY due to repeatedly
opened file descriptors * block-group-tree is out of experimental mode
* available as 'mkfs.btrfs -O block-group-tree' * btrfstune can do in-
place conversion to/from (use with care) * balance: fix recognizing old and
new syntax * subvol snapshot: specific error if a failure is caused by an
active swapfile * tree-stats: rephrase warning when run on a mounted
filesystem * completion: 'filesystem du' also completes files * check: fix
docs, help text and warning that --force + --repair works on a mounted
filesystem * build: fix static build when static libudev is available *
documentation: * more updates from wiki, developer docs, changelogs
* reformatting * updates and fixes * other: * test updates and
fixes * CI cleanups and old files removed * integration with Github
actions
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 30 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 6.3.1-1
- Update to 6.3.1
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-e9c0b0c1f0' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------