Fedora 37 updates-testing report
by updates@fedoraproject.org
The following Fedora 37 Security updates need testing:
Age URL
1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bde7913e5a python-django3-3.2.18-1.fc37
1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5bf9d886d9 perl-HTTP-Daemon-6.15-1.fc37
0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-dcf1c398fb stb-0^20230129git5736b15-0.2.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
75 https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf8feea173 lorax-37.10-1.fc37
38 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bbae3d2e0d annobin-11.06-2.fc37
11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaadcdc2fc xmessage-1.0.6-2.fc37
10 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5acf6a4f2d xscreensaver-6.06-2.fc37
5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bfb3c52703 fedora-appstream-metadata-20230220-1.fc37
4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-a8971b1f50 freerdp-2.10.0-1.fc37
3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bd951ae64b osinfo-db-tools-1.10.0-6.fc37
3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-b9ea480ba0 libosinfo-1.10.0-5.fc37
1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0f5cd2ab85 ndctl-76.1-1.fc37
0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4e7ac081d0 xorg-x11-drv-amdgpu-23.0.0-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
PyDrive2-1.15.1-2.fc37
chromium-110.0.5481.177-1.fc37
doctl-1.92.1-1.fc37
fzf-0.38.0-1.fc37
gnome-shell-extension-pop-shell-1.2.0^10.dcf17f3-1.fc37
golang-github-charmbracelet-bubbletea-0.23.2-1.fc37
golang-github-projectdiscovery-chaos-client-0.4.0-3.fc37
icestorm-0-0.28.20230220gitd20a5e9.fc37
kernel-6.1.14-200.fc37
nextcloud-25.0.3-1.fc37
nextpnr-1-20.20230226git14050f9.fc37
python-bitcoinlib-0.12.0-1.fc37
python-pyrate-limiter-2.9.1-1.fc37
radare2-5.8.2-2.fc37
rust-sequoia-octopus-librnp-1.4.1-5.fc37
rust-sequoia-sop-0.26.1-5.fc37
rust-sequoia-sq-0.26.0-5.fc37
strace-6.2-1.fc37
trellis-1.2.1-16.20230226gitf767e56.fc37
usd-22.05b-13.fc37
veusz-3.6.2-1.fc37
Details about builds:
================================================================================
PyDrive2-1.15.1-2.fc37 (FEDORA-2023-edc01b8267)
Google Drive API Python wrapper library, maintained fork of PyDrive
--------------------------------------------------------------------------------
Update Information:
Update to 1.15.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 25 2023 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.15.1-2
- Move Obsoletes to the binary subpackage
* Tue Feb 21 2023 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 1.15.1-1
- Update to 1.15.1 - Closes rhbz#2171971
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
chromium-110.0.5481.177-1.fc37 (FEDORA-2023-c1b595e2ed)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 110.0.5481.177. Fixes the following security issues: CVE-2023-0927
CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932
CVE-2023-0933 CVE-2023-0941
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 23 2023 Than Ngo <than(a)redhat.com> - 110.0.5481.177-1
- update to 110.0.5481.177
- workaround for crash on aarch64, rhel8
* Wed Feb 22 2023 Jan Grulich <jgrulich(a)redhat.com> - 110.0.5481.100-3
- Enable PipeWire screen sharing on RHEL8+
* Tue Feb 21 2023 Than Ngo <than(a)redhat.com> - 110.0.5481.100-2
- fixed bz#2036205, failed to load GLES library
--------------------------------------------------------------------------------
================================================================================
doctl-1.92.1-1.fc37 (FEDORA-2023-bc3ee55e62)
The official command line interface for the DigitalOcean API
--------------------------------------------------------------------------------
Update Information:
Update to 1.92.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 1.92.1-1
- Update to 1.92.1 - Closes rhbz#2166327
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.92.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fzf-0.38.0-1.fc37 (FEDORA-2023-5193fdd34f)
A command-line fuzzy finder written in Go
--------------------------------------------------------------------------------
Update Information:
Update to 0.38.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 24 2023 Alejandro S��ez <asm(a)redhat.com> - 0.38.0-1
- Update to 0.38.0
* Fri Feb 10 2023 Jonathan Lebon <jonathan(a)jlebon.com> - 0.37.0-1
- Update to latest version (#2161496)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.35.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2161496 - fzf-0.38.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2161496
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-pop-shell-1.2.0^10.dcf17f3-1.fc37 (FEDORA-2023-daeceadca5)
GNOME Shell extension for advanced tiling window management
--------------------------------------------------------------------------------
Update Information:
Latest upstream snapshot.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 24 2023 Carl George <carl(a)george.computer> - 1.2.0^10.dcf17f3-1
- Update to upstream snapshot for GNOME 44 compatibility
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0^9.886a069-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-github-charmbracelet-bubbletea-0.23.2-1.fc37 (FEDORA-2023-ba00cf561a)
A powerful little TUI framework
--------------------------------------------------------------------------------
Update Information:
Update to 0.23.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 0.23.2-1
- Update to 0.23.2 - Closes rhbz#2168463
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.23.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
golang-github-projectdiscovery-chaos-client-0.4.0-3.fc37 (FEDORA-2023-8b700042ac)
Go client to communicate with Chaos DNS API
--------------------------------------------------------------------------------
Update Information:
Update to 0.4.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 25 2023 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 0.4.0-3
- Fix dep on ratelimit - Closes rhbz#2145096
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Tue Dec 20 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 0.4.0-1
- Update to 0.4.0 - Closes rhbz#2145096
* Tue Dec 20 2022 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 0.3.0-2
- Update to 0.4.0 - Closes rhbz#2145096
--------------------------------------------------------------------------------
================================================================================
icestorm-0-0.28.20230220gitd20a5e9.fc37 (FEDORA-2023-6893625945)
Lattice iCE40 FPGA bitstream creation/analysis/programming tools
--------------------------------------------------------------------------------
Update Information:
Update to newer snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 20 2023 Gabriel Somlo <gsomlo(a)gmail.com> - 0-0.28.20230220gitd20a5e9
- Update to newer snapshot
* Wed Feb 15 2023 Gabriel Somlo <gsomlo(a)gmail.com> - 0-0.27.20230215git8649e3e
- Update to newer snapshot
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-0.26.20230104git45f5e5f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kernel-6.1.14-200.fc37 (FEDORA-2023-3b67299c42)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 6.1.14 stable kernel updates contain a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 25 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.1.14-0]
- Linux v6.1.14
--------------------------------------------------------------------------------
================================================================================
nextcloud-25.0.3-1.fc37 (FEDORA-2023-239c19da56)
Private file sync and share server
--------------------------------------------------------------------------------
Update Information:
https://nextcloud.com/changelog/#25-0-3
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 21 2023 Iv��n Chavero <ichavero(a)chavero.com.mx> - 25.0.3-1
- Update to 25.0.3
--------------------------------------------------------------------------------
================================================================================
nextpnr-1-20.20230226git14050f9.fc37 (FEDORA-2023-0dcf40573a)
FPGA place and route tool
--------------------------------------------------------------------------------
Update Information:
Update to newer snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Gabriel Somlo <gsomlo(a)gmail.com> - 1-20.20230226git14050f9
- Update to newer snapshot
- Temp. use bundled pybind11 (https://github.com/pybind/pybind11/issues/4529)
* Mon Feb 20 2023 Jonathan Wakely <jwakely(a)redhat.com> - 1-19.20230215git78dabb7
- Rebuilt for Boost 1.81
* Wed Feb 15 2023 Gabriel Somlo <gsomlo(a)gmail.com> - 1-18.20230215git78dabb7
- Update to newer snapshot
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1-17.20230104gita46afc6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2171618 - nextpnr: FTBFS in Fedora rawhide/f38
https://bugzilla.redhat.com/show_bug.cgi?id=2171618
[ 2 ] Bug #2172708 - F39FailsToInstall: nextpnr
https://bugzilla.redhat.com/show_bug.cgi?id=2172708
--------------------------------------------------------------------------------
================================================================================
python-bitcoinlib-0.12.0-1.fc37 (FEDORA-2023-1189a41e48)
The Swiss Army Knife of the Bitcoin protocol
--------------------------------------------------------------------------------
Update Information:
Update to 0.12.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Pablo Greco <pgreco(a)centosproject.org> - 0.12.0-1
- Update to 0.12.0
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.0-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-pyrate-limiter-2.9.1-1.fc37 (FEDORA-2023-06721a85c3)
The request rate limiter using Leaky-bucket algorithm
--------------------------------------------------------------------------------
Update Information:
Update to 2.9.1 ---- Update to 2.9.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.9.1-1
- Update to 2.9.1
* Tue Feb 21 2023 Steve Cossette <farchord(a)gmail.com> - 2.9.0-1
- Update to 2.9.0
--------------------------------------------------------------------------------
================================================================================
radare2-5.8.2-2.fc37 (FEDORA-2023-712c15b3c9)
The reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
fix sdb generation from messon
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Michal Ambroz <rebus at, seznam.cz> 5.8.2-2
- cherrypick upstream patch for fixing the sdb generation from mesosn
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2170036 - syscall detection is broken
https://bugzilla.redhat.com/show_bug.cgi?id=2170036
--------------------------------------------------------------------------------
================================================================================
rust-sequoia-octopus-librnp-1.4.1-5.fc37 (FEDORA-2023-c17427d18a)
Reimplementation of RNP's interface using Sequoia
--------------------------------------------------------------------------------
Update Information:
Rebuild for bzip2 0.4.4 (CVE-2023-22895 / RUSTSEC-2023-0004).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.4.1-5
- Rebuild for bzip2 0.4.4 (CVE-2023-22895 / RUSTSEC-2023-0004)
* Sun Feb 5 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.4.1-4
- Rebuild for fixed frame pointer compiler flags in Rust RPM macros
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-sequoia-sop-0.26.1-5.fc37 (FEDORA-2023-c17427d18a)
Stateless OpenPGP Interface using Sequoia
--------------------------------------------------------------------------------
Update Information:
Rebuild for bzip2 0.4.4 (CVE-2023-22895 / RUSTSEC-2023-0004).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.1-5
- Rebuild for bzip2 0.4.4 (CVE-2023-22895 / RUSTSEC-2023-0004)
* Sun Feb 5 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.1-4
- Rebuild for fixed frame pointer compiler flags in Rust RPM macros
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.26.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-sequoia-sq-0.26.0-5.fc37 (FEDORA-2023-c17427d18a)
Command-line frontends for Sequoia
--------------------------------------------------------------------------------
Update Information:
Rebuild for bzip2 0.4.4 (CVE-2023-22895 / RUSTSEC-2023-0004).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.0-5
- Rebuild for bzip2 0.4.4 (CVE-2023-22895 / RUSTSEC-2023-0004)
* Sun Feb 5 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.0-4
- Rebuild for fixed frame pointer compiler flags in Rust RPM macros
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.26.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
strace-6.2-1.fc37 (FEDORA-2023-e1c1eb8dba)
Tracks and displays system calls associated with a running process
--------------------------------------------------------------------------------
Update Information:
v6.1 -> v6.2
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Dmitry V. Levin <ldv(a)strace.io> - 6.2-1
- v6.1 -> v6.2.
--------------------------------------------------------------------------------
================================================================================
trellis-1.2.1-16.20230226gitf767e56.fc37 (FEDORA-2023-67e0ce3615)
Lattice ECP5 FPGA bitstream creation/analysis/programming tools
--------------------------------------------------------------------------------
Update Information:
Update to newer snapshot
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Gabriel Somlo <gsomlo(a)gmail.com> - 1.2.1-16.20230226gitf767e56
- Update to newer snapshot
- Temp. use bundled pybind11 (https://github.com/pybind/pybind11/issues/4529)
* Mon Feb 20 2023 Jonathan Wakely <jwakely(a)redhat.com> - 1.2.1-15.20230215git0c522ce
- Rebuilt for Boost 1.81
* Wed Feb 15 2023 Gabriel Somlo <gsomlo(a)gmail.com> - 1.2.1-14.20230215git0c522ce
- Update to newer snapshot
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-13.20221109git35f5aff
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
usd-22.05b-13.fc37 (FEDORA-2023-80fbbe0f3c)
3D VFX pipeline interchange file format
--------------------------------------------------------------------------------
Update Information:
Rebuilt with fix for null pointer dereference in stb_image
(https://github.com/nothings/stb/issues/1452).
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 22.05b-13
- Update minimum stb_image versions
--------------------------------------------------------------------------------
================================================================================
veusz-3.6.2-1.fc37 (FEDORA-2023-de66d01087)
GUI scientific plotting package
--------------------------------------------------------------------------------
Update Information:
Update to Veusz 3.6.2 (fixes resource issue) ---- Update to Veusz 3.6.1 (fixes
appdata issue) ---- Update to Veusz 3.6. Fixes bugs for Python 3.11.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 26 2023 Jeremy Sanders <jeremy(a)jeremysanders.net> - 3.6.2-1
- Update to Veusz 3.6.2 (fixes resource issue)
* Sun Feb 26 2023 Jeremy Sanders <jeremy(a)jeremysanders.net> - 3.6.1-1
- Update to Veusz 3.6.1 (fixes appdata issue)
* Sat Feb 25 2023 Jeremy Sanders <jeremy(a)jeremysanders.net> - 3.6-1
- Update to Veusz 3.6
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Mon Jan 16 2023 Jeremy Sanders <jeremy(a)jeremysanders.net> - 3.5.3-2
- Use explicit files, rather than glob all
- Update licence to new rules
- Update provide filtering to new method for internal libraries
--------------------------------------------------------------------------------