The following Fedora 38 Security updates need testing: Age URL 31 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3dc1f9ba12 cutter-re-2.2.1-1.fc38 rizin-0.5.2-1.fc38.2 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-2e6bead58b trafficserver-9.2.1-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3e84bba241 tang-14-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-d22162d9ba mingw-dbus-1.14.8-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-401e38c388 dotnet6.0-6.0.118-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ee819d655b dotnet7.0-7.0.107-1.fc38 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ab291ca614 wabt-1.0.33-1.fc38
The following Fedora 38 Critical Path updates have yet to be approved: Age URL 44 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fb366d5ed5 binutils-2.39-12.fc38 10 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e5483f2b5b pungi-4.4.0-1.fc38 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-6e1c335bc2 wayland-utils-1.2.0-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1b6672bbe1 uboot-tools-2023.04-2.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ef3b10d387 netcat-1.225-1.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0ac8519750 lxsession-0.5.5-10.D20210419git82580e45.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-32b5bc8bdf python3-docs-3.11.4-1.fc38 python3.11-3.11.4-1.fc38
The following builds have been pushed to Fedora 38 updates-testing
chromium-114.0.5735.133-1.fc38 flacon-11.2.0-1.fc38 gitleaks-8.17.0-1.fc38 golang-github-gorilla-websocket-1.5.0-1.fc38 golang-github-mmcloughlin-avo-0.5.0-1.fc38 kubernetes-1.26.6-1.fc38 mfem-4.5.2-4.fc38 nebula-1.7.2-2.fc38 python-celery-5.3.0-1.fc38 python-kombu-5.3.1-1.fc38 rakudo-2023.05-1.fc38 rit-rachana-fonts-1.4.4-1.fc38 scap-security-guide-0.1.68-1.fc38 socnetv-3.1-1.fc38 tracer-0.7.11-1.fc38 trurl-0.8-1.fc38 vdr-live-3.2.0-1.fc38 vdr-tvscraper-1.2.0-1.fc38
Details about builds:
================================================================================ chromium-114.0.5735.133-1.fc38 (FEDORA-2023-5f35718d4c) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information:
Update to 114.0.5735.133. Fixes the following security issues: CVE-2023-3214, CVE-2023-3215, CVE-2023-3215, CVE-2023-3217, -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 14 2023 Than Ngo than@redhat.com - 114.0.5735.133-1 - update to 114.0.5735.133 - Enable AllowQt feature flag - Fix Qt deps - Fix Qt logical scale factor -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2214814 - CVE-2023-3214 chromium-browser: Use after free in Autofill payments https://bugzilla.redhat.com/show_bug.cgi?id=2214814 [ 2 ] Bug #2214815 - CVE-2023-3215 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=2214815 [ 3 ] Bug #2214816 - CVE-2023-3216 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=2214816 [ 4 ] Bug #2214817 - CVE-2023-3217 chromium-browser: Use after free in WebXR https://bugzilla.redhat.com/show_bug.cgi?id=2214817 --------------------------------------------------------------------------------
================================================================================ flacon-11.2.0-1.fc38 (FEDORA-2023-ccf62cfa7c) Audio File Encoder -------------------------------------------------------------------------------- Update Information:
Update to 11.2.0. -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Vasiliy Glazov vascom2@gmail.com - 11.2.0-1 - Update to 11.2.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2210763 - flacon-11.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2210763 --------------------------------------------------------------------------------
================================================================================ gitleaks-8.17.0-1.fc38 (FEDORA-2023-fcea4e3e8b) Scan git repos (or files) for secrets using regex and entropy -------------------------------------------------------------------------------- Update Information:
Update to 8.17.0 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 17 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 8.17.0-1 - Update to 8.17.0 - Closes rhbz#2215634 * Sat Jun 17 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 8.16.4-2 - Update to 8.17.0 - Closes rhbz#2215634 --------------------------------------------------------------------------------
================================================================================ golang-github-gorilla-websocket-1.5.0-1.fc38 (FEDORA-2023-4465374c5f) A fast, well-tested and widely used WebSocket implementation for Go -------------------------------------------------------------------------------- Update Information:
Update to 1.5.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 1.5.0-1 - Update to 1.5.0 - Closes rhbz#2055367 --------------------------------------------------------------------------------
================================================================================ golang-github-mmcloughlin-avo-0.5.0-1.fc38 (FEDORA-2023-bcfd3a79da) Generate x86 Assembly with Go -------------------------------------------------------------------------------- Update Information:
Update to 0.5.0 and fix ftbfs -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 0.5.0-1 - Update to 0.5.0 - Closes rhbz#2215798 rhbz#2171526 * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 0.4.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ kubernetes-1.26.6-1.fc38 (FEDORA-2023-c7f63322b5) Container cluster management -------------------------------------------------------------------------------- Update Information:
Upstream security update with additional bugfixes. Resolves CVE-2023-2431. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 15 2023 Bradley G Smith bradley.g.smith@gmail.com - 1.26.6-1 - Update to Kubernetes 1.26.6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2215555 - TRIAGE-CVE-2023-2431 kubernetes: Bypass of seccomp profile enforcement https://bugzilla.redhat.com/show_bug.cgi?id=2215555 --------------------------------------------------------------------------------
================================================================================ mfem-4.5.2-4.fc38 (FEDORA-2023-b3a5817d6f) Lightweight, general, scalable C++ library for finite element methods -------------------------------------------------------------------------------- Update Information:
add packit ci -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 topazus topazus@outlook.com - 4.5.2-4 - add packit ci * Sun Jun 18 2023 topazus topazus@outlook.com - 4.5.2-3 - skip some tests of mfem-openmpi on Fedora 38 ppc64le * Sun Jun 18 2023 topazus topazus@outlook.com - 4.5.2-2 - skip tests of mfem-openmpi on fedora 38 i686 * Sat Jun 17 2023 topazus topazus@outlook.com - 4.5.2-1 - initial import (rhbz#2214308) --------------------------------------------------------------------------------
================================================================================ nebula-1.7.2-2.fc38 (FEDORA-2023-9fb10519e2) A scalable overlay networking tool with a focus on performance, simplicity and security -------------------------------------------------------------------------------- Update Information:
Update to 1.7.2 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Fabio Alessandro Locati me@fale.io - 1.7.2-2 - Drop x86 * Sun Jun 18 2023 Fabio Alessandro Locati me@fale.io - 1.7.2-1 - Update to 1.7.2 --------------------------------------------------------------------------------
================================================================================ python-celery-5.3.0-1.fc38 (FEDORA-2023-e00fe70136) Distributed Task Queue -------------------------------------------------------------------------------- Update Information:
- kombu 5.3.1 - celery 5.3.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Franti��ek Zatloukal fzatlouk@redhat.com - 5.3.0-1 - Celery 5.3.0 --------------------------------------------------------------------------------
================================================================================ python-kombu-5.3.1-1.fc38 (FEDORA-2023-e00fe70136) An AMQP Messaging Framework for Python -------------------------------------------------------------------------------- Update Information:
- kombu 5.3.1 - celery 5.3.0 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 17 2023 Franti��ek Zatloukal fzatlouk@redhat.com - 1:5.3.1-1 - kombu 5.3.1 (Fixes RHBZ#2215327) --------------------------------------------------------------------------------
================================================================================ rakudo-2023.05-1.fc38 (FEDORA-2023-008382b04b) Raku on MoarVM, JVM, and JS -------------------------------------------------------------------------------- Update Information:
update to 2023.05 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 topazus topazus@outlook.com - 2023.05-1 - update to 2023.05 * Sat Apr 29 2023 topazus topazus@outlook.com - 2023.04-2 - Fix failed tests --------------------------------------------------------------------------------
================================================================================ rit-rachana-fonts-1.4.4-1.fc38 (FEDORA-2023-3f0a07ec74) OpenType font for Malayalam traditional script -------------------------------------------------------------------------------- Update Information:
Version 1.4.4: Added dotted circle and NBSP characters -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Rajeesh K V rajeeshknambiar@gmail.com - 1.4.4-1 - Bugfix update, version 1.4.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2215735 - rit-rachana-fonts-1.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2215735 --------------------------------------------------------------------------------
================================================================================ scap-security-guide-0.1.68-1.fc38 (FEDORA-2023-3769348ebc) Security guidance and baselines in SCAP formats -------------------------------------------------------------------------------- Update Information:
- Update to latest upstream SCAP-Security-Guide-0.1.68 release -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 15 2023 Jan ��ern�� jcerny@redhat.com - 0.1.68-1 - Update to latest upstream SCAP-Security-Guide-0.1.68 release: https://github.com/ComplianceAsCode/content/releases/tag/v0.1.68 --------------------------------------------------------------------------------
================================================================================ socnetv-3.1-1.fc38 (FEDORA-2023-176e3855a8) A Social Networks Analyser and Visualiser -------------------------------------------------------------------------------- Update Information:
Version bump -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 TI_Eugene ti.eugene@gmail.com 3.1-1 - Version bump - Qt6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2214490 - socnetv-3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2214490 --------------------------------------------------------------------------------
================================================================================ tracer-0.7.11-1.fc38 (FEDORA-2023-a29c10c771) Finds outdated running applications in your system -------------------------------------------------------------------------------- Update Information:
- Rather create `/run/reboot-required` not `/var/run/reboot-required` -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Jakub Kadlcik frostyx@email.cz 0.7.11-1 - Rather create a /run/reboot-required not /var/run/reboot-required (frostyx@email.cz) --------------------------------------------------------------------------------
================================================================================ trurl-0.8-1.fc38 (FEDORA-2023-ad51c883c8) Command line tool for URL parsing and manipulation -------------------------------------------------------------------------------- Update Information:
Update to 0.8 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Gustavo Costa xfgusta@gmail.com - 0.8-1 - Update to 0.8 (rhbz#2215702) --------------------------------------------------------------------------------
================================================================================ vdr-live-3.2.0-1.fc38 (FEDORA-2023-6013c78fb6) An interactive web interface with HTML5 live stream support for VDR -------------------------------------------------------------------------------- Update Information:
Update to 3.2.0-1 ---- Update to 3.1.12-3 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 11 2023 Martin Gansser martinkg@fedoraproject.org - 3.2.0-1 - Update to 3.2.0 * Sun Jun 11 2023 Martin Gansser martinkg@fedoraproject.org - 3.1.12-1 - Update to 3.1.12 - Add vdr-live-timerconflict.patch --------------------------------------------------------------------------------
================================================================================ vdr-tvscraper-1.2.0-1.fc38 (FEDORA-2023-0270846b73) Collects metadata for all available EPG events -------------------------------------------------------------------------------- Update Information:
Update to 1.2.0-1 ---- Update to 1.1.13-1 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Martin Gansser martinkg@fedoraproject.org - 1.2.0-1 - Update to 1.2.0 * Sun Jun 11 2023 Martin Gansser martinkg@fedoraproject.org - 1.1.13-1 - Update to 1.1.13 --------------------------------------------------------------------------------