The following Fedora 37 Security updates need testing: Age URL 181 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37 80 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5c4718e547 containerd-1.6.23-1.fc37 20 https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414 thunderbird-115.4.1-1.fc37 18 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1458e23c3d dotnet7.0-7.0.113-1.fc37 18 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3dba61ad8c dotnet6.0-6.0.124-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4708733ccc tigervnc-1.13.1-6.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fa2d7b25d9 syncthing-1.26.0-1.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f73b2bc240 tor-0.4.8.9-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e23e432cb2 audiofile-0.3.6-36.fc37 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-2c851f43ba git-2.42.0-2.fc37 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-40e71fe5b9 microcode_ctl-2.1-53.3.fc37
The following Fedora 37 Critical Path updates have yet to be approved: Age URL 34 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc6bf2453f container-selinux-2.224.0-1.fc37 27 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c62ef568f1 mock-core-configs-39.2-1.fc37 20 https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414 thunderbird-115.4.1-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-6b3a9cafeb tracker-miners-3.4.6-1.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4708733ccc tigervnc-1.13.1-6.fc37 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8b6bc9ef2f google-noto-fonts-20201206^1.git0c78c8329-8.fc37 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fdf7d426f0 cups-2.4.7-2.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-81347b7def libretls-3.8.1-1.fc37 netcat-1.225-3.fc37 rpki-client-8.6-2.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-dd1f904b23 libopenmpt-0.6.12-1.fc37 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-927f3e9c4c audit-3.1.2-5.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1b933089ac go-rpm-macros-3.3.1-1.fc37 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-06e31ececc hwdata-0.376-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2023-62773ee361 passt-0^20231107.g56d9f6d-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2023-9737002c0e crun-1.11.2-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2023-02a753c0d8 slapi-nis-0.60.0-2.fc37 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-b14bf25423 kernel-6.5.11-100.fc37 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0862a2ca46 elfutils-0.190-1.fc37 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8a07817414 rpm-4.18.2-1.fc37 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5e098d786b python-rpmautospec-0.3.8-1.fc37 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-2c851f43ba git-2.42.0-2.fc37 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-afbb314b5e bash-5.2.21-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
c-ares-1.21.0-1.fc37 google-api-python-client-2.108.0-1.fc37 libmaxminddb-1.8.0-1.fc37 linux-firmware-20231111-1.fc37 lv2-eq10q-2.2-2.fc37 osbuild-composer-94-1.fc37 p11-kit-0.25.3-1.fc37 rdfind-1.6.0-1.fc37 xen-4.16.5-4.fc37
Details about builds:
================================================================================ c-ares-1.21.0-1.fc37 (FEDORA-2023-7c2049d301) A library that performs asynchronous DNS operations -------------------------------------------------------------------------------- Update Information:
Update to 1.21.0 to fix hostname resolution issues in 1.19.1. -------------------------------------------------------------------------------- ChangeLog:
* Sun Nov 5 2023 Tom Callaway spot@fedoraproject.org - 1.21.0-1 - update to 1.21.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2249223 - "search ." in /etc/resolv.conf breaks hostname resolution in c-ares (fixed in 1.20.0) https://bugzilla.redhat.com/show_bug.cgi?id=2249223 --------------------------------------------------------------------------------
================================================================================ google-api-python-client-2.108.0-1.fc37 (FEDORA-2023-0f379a098f) Google APIs Client Library for Python -------------------------------------------------------------------------------- Update Information:
2.108.0 ---- 2.107.0 ---- 2.106.0 ---- 2.105.0 ---- 2.104.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 15 2023 Gwyn Ciesla gwync@protonmail.com - 2:2.108.0-1 - 2.108.0 * Wed Nov 8 2023 Gwyn Ciesla gwync@protonmail.com - 2:2.107.0-1 - 2.107.0 * Wed Nov 1 2023 Gwyn Ciesla gwync@protonmail.com - 2:2.106.0-1 - 2.106.0 * Thu Oct 26 2023 Gwyn Ciesla gwync@protonmail.com - 2:2.105.0-1 - 2.105.0 * Thu Oct 19 2023 Gwyn Ciesla gwync@protonmail.com - 2:2.104.0-1 - 2.104.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2244946 - google-api-python-client-2.104.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2244946 [ 2 ] Bug #2246357 - google-api-python-client-2.105.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2246357 [ 3 ] Bug #2247353 - google-api-python-client-2.106.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2247353 [ 4 ] Bug #2248650 - google-api-python-client-2.107.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2248650 [ 5 ] Bug #2249806 - google-api-python-client-2.108.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2249806 --------------------------------------------------------------------------------
================================================================================ libmaxminddb-1.8.0-1.fc37 (FEDORA-2023-a65d5c216c) C library for reading MaxMind DB files -------------------------------------------------------------------------------- Update Information:
# libmaxminddb 1.8.0 - `PACKAGE_VERSION` is now a private compile definition when building with CMake. - `PACKAGE_VERSION` is no longer defined in `maxminddb.h` on Windows. - The feature test macro `_POSIX_C_SOURCE` is no longer set by `maxminddb.h`; should be set by applications rather than by libraries. - `assert()` is no longer used outside test code. - The deprecated Visual Studio 12 project files in the `projects/` directory have been removed. CMake should be used when building on Windows. -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 15 2023 Robert Scheck robert@fedoraproject.org 1.8.0-1 - Upgrade to 1.8.0 (#2248696) * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 1.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.7.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2248696 - libmaxminddb-1.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2248696 --------------------------------------------------------------------------------
================================================================================ linux-firmware-20231111-1.fc37 (FEDORA-2023-5c94545a80) Firmware files used by the Linux kernel -------------------------------------------------------------------------------- Update Information:
Update to upstream 20231111 release: * Move AMD SEV and TEE firmware to amd- ucode package * amdgpu: DMCUB updates for various AMDGPU ASICs * nvidia: add GSP-RM version 535.113.01 firmware images * Update firmware file for Intel Bluetooth AX101/AX203/AX210/AX211/BE200 * amdgpu: DMCUB updates for various AMDGPU ASICs * qca: add bluetooth firmware for WCN3988 * ixp4xx: Add the IXP4xx firmware * rtw89: 8852b: update fw to v0.29.29.5 * rtw89: 8851b: update fw to v0.29.41.3 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 14 2023 Peter Robinson pbrobinson@fedoraproject.org - 20231111-1 - Update to upstream 20231111 release - Move AMD SEV and TEE firmware to amd-ucode package - amdgpu: DMCUB updates for various AMDGPU ASICs - nvidia: add GSP-RM version 535.113.01 firmware images - Update firmware file for Intel Bluetooth AX101/AX203/AX210/AX211/BE200 - amdgpu: DMCUB updates for various AMDGPU ASICs - qca: add bluetooth firmware for WCN3988 - ixp4xx: Add the IXP4xx firmware - rtw89: 8852b: update fw to v0.29.29.5 - rtw89: 8851b: update fw to v0.29.41.3 --------------------------------------------------------------------------------
================================================================================ lv2-eq10q-2.2-2.fc37 (FEDORA-2023-00fa7d84b3) LV2 audio plugin suite -------------------------------------------------------------------------------- Update Information:
This new package resurrects the [EQ10Q plugin bundle](https://eq10q.sourceforge.net/) which was available as lv2-EQ10Q-plugins in older Fedora releases. -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 15 2023 Nils Philippsen nils@redhat.com - 2.2-2 - Fix obsoleting lv2-EQ10Q-plugins * Sun Nov 12 2023 Nils Philippsen nils@redhat.com - 2.2-1 - Import the package --------------------------------------------------------------------------------
================================================================================ osbuild-composer-94-1.fc37 (FEDORA-2023-28a93f3c0e) An image building service based on osbuild -------------------------------------------------------------------------------- Update Information:
Automatic update for osbuild-composer-94-1.fc37. ##### **Changelog for osbuild- composer** ``` * Wed Nov 15 2023 Packit hello@packit.dev - 94-1 Changes with 94 ---------------- * .github: update apt metadata before installing deps (#3788) * Author: Sanne Raymaekers, Reviewers: Ond��ej Budai, Simon de Vlieger, Tom���� Hozza * Add pkg splunk_logging (#3750) * Author: Diaa Sami, Reviewers: Ond��ej Budai, Sanne Raymaekers * Added hyper_v_generation metadata to the instance used by CIV. (#3769) * Author: Nicol��s M., Reviewers: Alexander Todorov, Jakub Rusz, Tom���� Hozza * Blueprints: Fix TOML filesystem `minsize` keyword (#3783) * Author: Gianluca Zuccarelli, Reviewers: Achilleas Koutsou, Tom���� Hozza * Generate RHEL-94 and RHEL-810 manifests + update (#3778) * Author: Jakub Rusz, Reviewers: Alexander Todorov * build(deps): bump the go-deps group with 10 updates (#3794) * Author: dependabot[bot], Reviewers: Tom���� Hozza * schutzbot/terraform: update rhel-9.2 aarch64 image (#3789) * Author: Sanne Raymaekers, Reviewers: Simon Steinbei�� * store: Fix RepoConfig (#3764) * Author: Brian C. Lane, Reviewers: Ond��ej Budai * tools/provision: disable tracing before manipulating OCI secrets (#3784) * Author: Sanne Raymaekers, Reviewers: Brian C. Lane ��� Somewhere on the Internet, 2023-11-15 ``` -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 15 2023 Packit hello@packit.dev - 94-1 Changes with 94 ---------------- * .github: update apt metadata before installing deps (#3788) * Author: Sanne Raymaekers, Reviewers: Ond��ej Budai, Simon de Vlieger, Tom���� Hozza * Add pkg splunk_logging (#3750) * Author: Diaa Sami, Reviewers: Ond��ej Budai, Sanne Raymaekers * Added hyper_v_generation metadata to the instance used by CIV. (#3769) * Author: Nicol��s M., Reviewers: Alexander Todorov, Jakub Rusz, Tom���� Hozza * Blueprints: Fix TOML filesystem `minsize` keyword (#3783) * Author: Gianluca Zuccarelli, Reviewers: Achilleas Koutsou, Tom���� Hozza * Generate RHEL-94 and RHEL-810 manifests + update (#3778) * Author: Jakub Rusz, Reviewers: Alexander Todorov * build(deps): bump the go-deps group with 10 updates (#3794) * Author: dependabot[bot], Reviewers: Tom���� Hozza * schutzbot/terraform: update rhel-9.2 aarch64 image (#3789) * Author: Sanne Raymaekers, Reviewers: Simon Steinbei�� * store: Fix RepoConfig (#3764) * Author: Brian C. Lane, Reviewers: Ond��ej Budai * tools/provision: disable tracing before manipulating OCI secrets (#3784) * Author: Sanne Raymaekers, Reviewers: Brian C. Lane
��� Somewhere on the Internet, 2023-11-15 --------------------------------------------------------------------------------
================================================================================ p11-kit-0.25.3-1.fc37 (FEDORA-2023-197706c72a) Library for loading and sharing PKCS#11 modules -------------------------------------------------------------------------------- Update Information:
- rpc: fix serialization of NULL mechanism pointer [#601] - fix meson build failure in macOS (appleframeworks not found) [#603] -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 15 2023 Packit hello@packit.dev - 0.25.3-1 - [packit] 0.25.3 upstream release --------------------------------------------------------------------------------
================================================================================ rdfind-1.6.0-1.fc37 (FEDORA-2023-d9b22be4c4) Program that finds duplicate files -------------------------------------------------------------------------------- Update Information:
Update to 1.6.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 15 2023 Peter Robinson pbrobinson@gmail.com - 1.6.0-1 - Update to 1.6.0 * Wed Nov 15 2023 Tomas Hrcka thrcka@redhat.com - 1.4.1-9 - Unretirement request: https://pagure.io/releng/issue/11783 --------------------------------------------------------------------------------
================================================================================ xen-4.16.5-4.fc37 (FEDORA-2023-e62da41072) Xen is a virtual machine monitor -------------------------------------------------------------------------------- Update Information:
x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445, CVE-2023-46835] x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836] -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 15 2023 Michael Young m.a.young@durham.ac.uk - 4.16.5-4 - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445, CVE-2023-46835] - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836] --------------------------------------------------------------------------------