The following Fedora 37 Security updates need testing: Age URL 193 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37 92 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5c4718e547 containerd-1.6.23-1.fc37 32 https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414 thunderbird-115.4.1-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e62da41072 xen-4.16.5-4.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f0be0daaa5 poppler-22.08.0-5.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c858d2c53b golang-github-google-dap-0.11.0-1.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ce2836acfa golang-github-openprinting-ipp-usb-0.9.23-5.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-b845c60d1c java-latest-openjdk-21.0.1.0.12-1.rolling.fc37
The following Fedora 37 Critical Path updates have yet to be approved: Age URL 47 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc6bf2453f container-selinux-2.224.0-1.fc37 32 https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414 thunderbird-115.4.1-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-7c2049d301 c-ares-1.21.0-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e62da41072 xen-4.16.5-4.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-197706c72a p11-kit-0.25.3-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-a65d5c216c libmaxminddb-1.8.0-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5e098d786b python-rpmautospec-0.3.8-1.fc37 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5c9b2b08f4 libxslt-1.1.39-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2023-04796d3939 glibc-2.36-18.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-09bad4af42 netcat-1.226-1.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f0be0daaa5 poppler-22.08.0-5.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-b8b9c2ed1b crun-1.12-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0200aecd54 ethtool-6.6-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
anope-2.1.0-2.fc37 ansible-freeipa-1.12.0-1.fc37 bitcoin-core-selinux-0-11.20231127git4505616.fc37 fedora-appstream-metadata-20231124-1.fc37 firefox-120.0-3.fc37 java-17-openjdk-17.0.9.0.9-1.fc37 linux-system-roles-1.59.0-1.fc37 motif-2.3.4-30.fc37 openscap-1.3.9-1.fc37 python-pyqt-feedback-flow-0.3.1-1.fc37 rust-euclid-0.22.9-1.fc37 systemd-251.19-1.fc37 vdr-live-3.3.2-1.fc37 vdr-tvscraper-1.2.5-1.fc37
Details about builds:
================================================================================ anope-2.1.0-2.fc37 (FEDORA-2023-11f70480c1) IRC services designed for flexibility and ease of use -------------------------------------------------------------------------------- Update Information:
# Anope 2.1.0 - Added `nickserv:minpasslen` for configuring the minimum password length - Added support for access list entry descriptions. - Added support for linking over a UNIX socket. - Added support for server-initiated logins and logouts on UnrealIRCd - Added support for server-initiated logouts on InspIRCd - Added support for the `ANONYMOUS SASL` mechanism - Allowed users to opt-out of being added to channel access lists - Cleaned up the codebase to use Modern C++17 - Modernized the build system to use a modern version of CMake - Removed `nickserv:strictpasswords` as it is obsolete now `nickserv:minpasslen` exists - Removed support for using insecure encryption methods as the primary method - Removed the Windows-only `anopesmtp` tool - Removed the `inspircd12` and `inspircd20` modules (use `inspircd` instead) - Removed the `ns_getpass` module (no supported encryption modules) - Removed the `os_oline` module (no supported IRCds) - Removed the two day X-line cap - Removed the `unreal` module (use `unrealircd` instead) - Renamed `nickserv:passlen` to `nickserv:maxpasslen` - Renamed the `charybdis` module to `solanum` - Renamed the `inspircd3` module to `inspircd` - Renamed the `unreal4` module to `unrealircd` - Replaced `uplink:ipv6` with `uplink:protocol` - Updated all references to IRCServices to refer to Anope instead -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Robert Scheck robert@fedoraproject.org 2.1.0-2 - Reflect upstream configuration file changes and renamings * Sun Nov 26 2023 Robert Scheck robert@fedoraproject.org 2.1.0-1 - Upgrade to 2.1.0 (#2251530) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2251530 - anope-2.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2251530 --------------------------------------------------------------------------------
================================================================================ ansible-freeipa-1.12.0-1.fc37 (FEDORA-2023-ab06c617fe) Roles and playbooks to deploy FreeIPA servers, replicas and clients -------------------------------------------------------------------------------- Update Information:
Update to version 1.12.0 https://github.com/freeipa/ansible- freeipa/releases/tag/v1.12.0 Highlights: - New idoverridegroup management module. - New idoverrideuser management module. - New idview management module. - New idp management module. - Bug fixes and CI improvements. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Thomas Woerner twoerner@redhat.com - 1.12.0-1 - Update to version 1.12.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0 Highlights: - New idoverridegroup management module. - New idoverrideuser management module. - New idview management module. - New idp management module. - Bug fixes and CI improvements. --------------------------------------------------------------------------------
================================================================================ bitcoin-core-selinux-0-11.20231127git4505616.fc37 (FEDORA-2023-4c176d2b0a) Bitcoin Core SELinux policy -------------------------------------------------------------------------------- Update Information:
Fix policies for daemon case. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Simone Caronni negativo17@gmail.com - 0-11.20231127git4505616 - Update policies (#2246255). * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 0-10.20210312giteaa9a04 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jan 18 2023 Fedora Release Engineering releng@fedoraproject.org - 0-9.20210312giteaa9a04 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2246255 - SELinux denial of bitcoind reading /etc/bitcoin/bitcoin.conf https://bugzilla.redhat.com/show_bug.cgi?id=2246255 --------------------------------------------------------------------------------
================================================================================ fedora-appstream-metadata-20231124-1.fc37 (FEDORA-2023-f2b189966b) Operating System AppStream Metadata for Fedora Linux -------------------------------------------------------------------------------- Update Information:
Add Fedora 37 EOL date -------------------------------------------------------------------------------- ChangeLog:
* Fri Nov 24 2023 Timoth��e Ravier tim@siosm.fr - 20231124-1 - Add Fedora 37 EOL date --------------------------------------------------------------------------------
================================================================================ firefox-120.0-3.fc37 (FEDORA-2023-dce9c4b01f) Mozilla Firefox Web browser -------------------------------------------------------------------------------- Update Information:
- Fixed freezes on Google Maps ---- - Updated to latest upstream (120.0) -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Martin Stransky stransky@redhat.com- 120.0-3 - Add fix for rhbz#2251202 * Mon Nov 20 2023 Martin Stransky stransky@redhat.com- 120.0-2 - Updated to 120.0 Build 2 * Tue Nov 14 2023 Martin Stransky stransky@redhat.com- 120.0-1 - Updated to 120.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2251202 - Firefox 120 freezes on Google Maps when using strict Enhanced Tracking Protection https://bugzilla.redhat.com/show_bug.cgi?id=2251202 --------------------------------------------------------------------------------
================================================================================ java-17-openjdk-17.0.9.0.9-1.fc37 (FEDORA-2023-8ff7f34eb0) OpenJDK 17 Runtime Environment -------------------------------------------------------------------------------- Update Information:
updated to OpenJDK 17.0.9 (2023-10-17) -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 22 2023 Jiri Vanek jvanek@redhat.com - 1:17.0.9.0.9-1 - updated to OpenJDK 17.0.9 (2023-10-17) * Fri Sep 29 2023 Yaakov Selkowitz yselkowi@redhat.com - 1:17.0.8.0.7-2 - Fix flatpak build --------------------------------------------------------------------------------
================================================================================ linux-system-roles-1.59.0-1.fc37 (FEDORA-2023-0a1da404a6) Set of interfaces for unified system management -------------------------------------------------------------------------------- Update Information:
Automatic update for linux-system-roles-1.59.0-1.fc37. ##### **Changelog for linux-system-roles** ``` * Mon Nov 27 2023 Packit hello@packit.dev - 1.59.0-1 - Update to upstream version 1.59.0 * Thu Nov 23 2023 Packit hello@packit.dev - 1.58.1-1 - Update to upstream version 1.58.1 ``` ---- Automatic update for linux-system-roles-1.58.1-1.fc37. ##### **Changelog for linux-system-roles** ``` * Thu Nov 23 2023 Packit hello@packit.dev - 1.58.1-1 - Update to upstream version 1.58.1 ``` -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Packit hello@packit.dev - 1.59.0-1 - Update to upstream version 1.59.0 * Thu Nov 23 2023 Packit hello@packit.dev - 1.58.1-1 - Update to upstream version 1.58.1 --------------------------------------------------------------------------------
================================================================================ motif-2.3.4-30.fc37 (FEDORA-2023-25329c196b) Run-time libraries and programs -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2023-43788 and CVE-2023-43789 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Jos�� Exp��sito jexposit@redhat.com - 2.3.4-30 - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 2.3.4-29 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Apr 14 2023 Florian Weimer fweimer@redhat.com - 2.3.4-28 - Port to C99 (#2186773) * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 2.3.4-27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2242248 - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() https://bugzilla.redhat.com/show_bug.cgi?id=2242248 [ 2 ] Bug #2242249 - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap https://bugzilla.redhat.com/show_bug.cgi?id=2242249 --------------------------------------------------------------------------------
================================================================================ openscap-1.3.9-1.fc37 (FEDORA-2023-194b8a74dc) Set of open source libraries enabling integration of the SCAP line of standards -------------------------------------------------------------------------------- Update Information:
fix missing support for apk, add missing dependency for opendbx -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 23 2023 Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-1 - bump to 1.3.9 - provide perl binding * Tue Sep 5 2023 Yaakov Selkowitz yselkowi@redhat.com - 1:1.3.8-6 - Use pcre2 (#2128342) * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 1:1.3.8-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 27 2023 Python Maint python-maint@redhat.com - 1:1.3.8-4 - Rebuilt for Python 3.12 * Tue Jun 27 2023 Evgeny Kolesnikov ekolesni@redhat.com - 1:1.3.8-3 - Rebuilt because of xmlsec1 downgrade * Mon Jun 26 2023 Python Maint python-maint@redhat.com - 1:1.3.8-2 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2169830 - openscap unable to scan debian due to missing libapt dependency https://bugzilla.redhat.com/show_bug.cgi?id=2169830 [ 2 ] Bug #2169850 - openscap missing sql probe due to missing dependency on OpenDbx https://bugzilla.redhat.com/show_bug.cgi?id=2169850 --------------------------------------------------------------------------------
================================================================================ python-pyqt-feedback-flow-0.3.1-1.fc37 (FEDORA-2023-8e4ca836fd) Show feedback in toast-like notifications -------------------------------------------------------------------------------- Update Information:
Update to 0.3.1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.1-1 - Update to the latest release * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 0.3.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Mon Jul 3 2023 Python Maint python-maint@redhat.com - 0.3.0-2 - Rebuilt for Python 3.12 --------------------------------------------------------------------------------
================================================================================ rust-euclid-0.22.9-1.fc37 (FEDORA-2023-b39078aa6e) Geometry primitives -------------------------------------------------------------------------------- Update Information:
Initial import (fedora#2250466). -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Leo Puvilland leo@craftcat.dev - 0.22.9-1 - Initial import (fedora#2250466). * Mon Nov 27 2023 Tomas Hrcka thrcka@redhat.com - 0.22.6-4 - Unretirement request: https://pagure.io/releng/issue/11809 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 0.22.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ systemd-251.19-1.fc37 (FEDORA-2023-1582a08b60) System and Service Manager -------------------------------------------------------------------------------- Update Information:
Latest bugfix version. No need to log out or reboot. -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 251.19-1 - Version 251.19 (rhbz#2242219) * Mon Nov 27 2023 Martin Osvald mosvald@redhat.com - 251.14-3 - Support user:group notation by sysusers.generate-pre.sh script (rhbz#2103934) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2103934 - sysusers rpm macro fails on UID:GID https://bugzilla.redhat.com/show_bug.cgi?id=2103934 [ 2 ] Bug #2242219 - systemctl daemon-reexec breaks Alt-Fn key handling in Xorg https://bugzilla.redhat.com/show_bug.cgi?id=2242219 --------------------------------------------------------------------------------
================================================================================ vdr-live-3.3.2-1.fc37 (FEDORA-2023-5327e66226) An interactive web interface with HTML5 live stream support for VDR -------------------------------------------------------------------------------- Update Information:
Update to 3.3.2-1 ---- Update to 3.3.1-1 ---- Update to 3.3.0-1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Martin Gansser martinkg@fedoraproject.org - 3.3.2-1 - Update to 3.3.2 * Tue Nov 21 2023 Martin Gansser martinkg@fedoraproject.org - 3.3.1-1 - Update to 3.3.1 * Sun Nov 19 2023 Martin Gansser martinkg@fedoraproject.org - 3.3.0-1 - Update to 3.3.0 --------------------------------------------------------------------------------
================================================================================ vdr-tvscraper-1.2.5-1.fc37 (FEDORA-2023-12d2ef309f) Collects metadata for all available EPG events -------------------------------------------------------------------------------- Update Information:
Update to 1.2.5-1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Martin Gansser martinkg@fedoraproject.org - 1.2.5-1 - Update to 1.2.5 --------------------------------------------------------------------------------