The following Fedora 37 Security updates need testing: Age URL 31 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-92686b3e8b trafficserver-9.2.1-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-30f7ad4709 golang-1.19.10-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-eb9bec6e8c tang-14-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-edb993aeaf dotnet6.0-6.0.118-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e6d5cb11bb dotnet7.0-7.0.107-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved: Age URL 46 https://bodhi.fedoraproject.org/updates/FEDORA-2023-22c8575b95 glibc-2.36-10.fc37 23 https://bodhi.fedoraproject.org/updates/FEDORA-2023-84965ba750 mesa-23.0.3-2.fc37 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-08c1845d51 ncurses-6.4-3.20230114.fc37 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-87eefea607 ytnef-2.1.1-1.fc37 10 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1f8ef08eb7 pungi-4.4.0-1.fc37 7 https://bodhi.fedoraproject.org/updates/FEDORA-2023-90b4a62455 netcat-1.225-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-b1a083b503 libmd-1.1.0-1.fc37 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-854b10f32c python3-docs-3.11.4-1.fc37 python3.11-3.11.4-1.fc37 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-80d9cec080 cockpit-294.1-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
chromium-114.0.5735.133-1.fc37 flacon-11.2.0-1.fc37 gitleaks-8.17.0-1.fc37 golang-github-gorilla-websocket-1.5.0-1.fc37 kvantum-1.0.10-1.fc37 legendary-0.20.33-1.fc37 mfem-4.5.2-2.fc37 packit-0.77.0-1.fc37 rakudo-2023.05-1.fc37 rit-rachana-fonts-1.4.4-1.fc37 scap-security-guide-0.1.68-1.fc37 tracer-0.7.11-1.fc37 trurl-0.8-1.fc37 vdr-live-3.2.0-1.fc37 vdr-tvscraper-1.2.0-1.fc37
Details about builds:
================================================================================ chromium-114.0.5735.133-1.fc37 (FEDORA-2023-1b99669138) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information:
Update to 114.0.5735.133. Fixes the following security issues: CVE-2023-3214, CVE-2023-3215, CVE-2023-3215, CVE-2023-3217, -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 14 2023 Than Ngo than@redhat.com - 114.0.5735.133-1 - update to 114.0.5735.133 - Enable AllowQt feature flag - Fix Qt deps - Fix Qt logical scale factor -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2214814 - CVE-2023-3214 chromium-browser: Use after free in Autofill payments https://bugzilla.redhat.com/show_bug.cgi?id=2214814 [ 2 ] Bug #2214815 - CVE-2023-3215 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=2214815 [ 3 ] Bug #2214816 - CVE-2023-3216 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=2214816 [ 4 ] Bug #2214817 - CVE-2023-3217 chromium-browser: Use after free in WebXR https://bugzilla.redhat.com/show_bug.cgi?id=2214817 --------------------------------------------------------------------------------
================================================================================ flacon-11.2.0-1.fc37 (FEDORA-2023-0e88d67b27) Audio File Encoder -------------------------------------------------------------------------------- Update Information:
Update to 11.2.0. -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Vasiliy Glazov vascom2@gmail.com - 11.2.0-1 - Update to 11.2.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2210763 - flacon-11.2.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2210763 --------------------------------------------------------------------------------
================================================================================ gitleaks-8.17.0-1.fc37 (FEDORA-2023-8e2e4d6393) Scan git repos (or files) for secrets using regex and entropy -------------------------------------------------------------------------------- Update Information:
Update to 8.17.0 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 17 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 8.17.0-1 - Update to 8.17.0 - Closes rhbz#2215634 * Sat Jun 17 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 8.16.4-2 - Update to 8.17.0 - Closes rhbz#2215634 --------------------------------------------------------------------------------
================================================================================ golang-github-gorilla-websocket-1.5.0-1.fc37 (FEDORA-2023-6cd19f482e) A fast, well-tested and widely used WebSocket implementation for Go -------------------------------------------------------------------------------- Update Information:
Update to 1.5.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 1.5.0-1 - Update to 1.5.0 - Closes rhbz#2055367 * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.4.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ kvantum-1.0.10-1.fc37 (FEDORA-2023-a2b97ee04f) SVG-based theme engine for Qt5, KDE and LXQt -------------------------------------------------------------------------------- Update Information:
Update kvantum to 1.0.10 ``` In addition to better drawing of some widgets, ��� To support Qt5 long after Qt6 becomes the default, compilation without KDE Frameworks is made possible (if it is used, KWin's blur effect will be available only under X11). It works with Qt6 too. ��� Rounded buttons, combo-boxes and line- edits are allowed in LibreOffice. ��� Openbox themes are removed (Openbox's development stopped years ago). If you use Openbox, you could import its themes from older versions of Kvantum at GitHub. ``` -------------------------------------------------------------------------------- ChangeLog:
* Fri Jun 16 2023 Arthur Bols arthur@bols.dev - 1.0.10-1 - Update to 1.0.10 (rhbz#2185947) --------------------------------------------------------------------------------
================================================================================ legendary-0.20.33-1.fc37 (FEDORA-2023-d8a482a01c) Free and open-source replacement for the Epic Games Launcher -------------------------------------------------------------------------------- Update Information:
Update to latest version -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 17 2023 Artem Polishchuk ego.cordatus@gmail.com - 0.20.33-1 - chore: Update to 0.20.33 * Tue Jun 13 2023 Python Maint python-maint@redhat.com - 0.20.32-3 - Rebuilt for Python 3.12 * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 0.20.32-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ mfem-4.5.2-2.fc37 (FEDORA-2023-b4a53bd20e) Lightweight, general, scalable C++ library for finite element methods -------------------------------------------------------------------------------- Update Information:
skip tests of mfem-openmpi on fedora 38 i686 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 topazus topazus@outlook.com - 4.5.2-2 - skip tests of mfem-openmpi on fedora 38 i686 * Sat Jun 17 2023 topazus topazus@outlook.com - 4.5.2-1 - initial import (rhbz#2214308) --------------------------------------------------------------------------------
================================================================================ packit-0.77.0-1.fc37 (FEDORA-2023-81d8760190) A tool for integrating upstream projects with Fedora operating system -------------------------------------------------------------------------------- Update Information:
Automatic update for packit-0.77.0-1.fc37. ##### **Changelog for packit** ``` * Sat Jun 17 2023 Packit hello@packit.dev - 0.77.0-1 - Packit now includes dist-git branch in the title of the PRs for `propose-downstream` and `pull-from- upstream`. (#1996) - We have fixed an issue with `files_to_sync` filters not being applied properly. (#1977) ``` -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 17 2023 Packit hello@packit.dev - 0.77.0-1 - Packit now includes dist-git branch in the title of the PRs for `propose-downstream` and `pull-from-upstream`. (#1996) - We have fixed an issue with `files_to_sync` filters not being applied properly. (#1977) --------------------------------------------------------------------------------
================================================================================ rakudo-2023.05-1.fc37 (FEDORA-2023-8da0d006af) Raku on MoarVM, JVM, and JS -------------------------------------------------------------------------------- Update Information:
update to 2023.05 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 topazus topazus@outlook.com - 2023.05-1 - update to 2023.05 --------------------------------------------------------------------------------
================================================================================ rit-rachana-fonts-1.4.4-1.fc37 (FEDORA-2023-7e92d58f44) OpenType font for Malayalam traditional script -------------------------------------------------------------------------------- Update Information:
Version 1.4.4: Added dotted circle and NBSP characters -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Rajeesh K V rajeeshknambiar@gmail.com - 1.4.4-1 - Bugfix update, version 1.4.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2215735 - rit-rachana-fonts-1.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2215735 --------------------------------------------------------------------------------
================================================================================ scap-security-guide-0.1.68-1.fc37 (FEDORA-2023-ff2b61c2b1) Security guidance and baselines in SCAP formats -------------------------------------------------------------------------------- Update Information:
- Update to latest upstream SCAP-Security-Guide-0.1.68 release -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 15 2023 Jan ��ern�� jcerny@redhat.com - 0.1.68-1 - Update to latest upstream SCAP-Security-Guide-0.1.68 release: https://github.com/ComplianceAsCode/content/releases/tag/v0.1.68 --------------------------------------------------------------------------------
================================================================================ tracer-0.7.11-1.fc37 (FEDORA-2023-b977364c2f) Finds outdated running applications in your system -------------------------------------------------------------------------------- Update Information:
- Rather create `/run/reboot-required` not `/var/run/reboot-required` -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Jakub Kadlcik frostyx@email.cz 0.7.11-1 - Rather create a /run/reboot-required not /var/run/reboot-required (frostyx@email.cz) --------------------------------------------------------------------------------
================================================================================ trurl-0.8-1.fc37 (FEDORA-2023-51a17777b0) Command line tool for URL parsing and manipulation -------------------------------------------------------------------------------- Update Information:
Update to 0.8 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Gustavo Costa xfgusta@gmail.com - 0.8-1 - Update to 0.8 (rhbz#2215702) --------------------------------------------------------------------------------
================================================================================ vdr-live-3.2.0-1.fc37 (FEDORA-2023-fb491dbb24) An interactive web interface with HTML5 live stream support for VDR -------------------------------------------------------------------------------- Update Information:
Update to 3.2.0-1 ---- Update to 3.1.12-1 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 11 2023 Martin Gansser martinkg@fedoraproject.org - 3.2.0-1 - Update to 3.2.0 * Sun Jun 11 2023 Martin Gansser martinkg@fedoraproject.org - 3.1.12-1 - Update to 3.1.12 - Add vdr-live-timerconflict.patch --------------------------------------------------------------------------------
================================================================================ vdr-tvscraper-1.2.0-1.fc37 (FEDORA-2023-cecc1d1428) Collects metadata for all available EPG events -------------------------------------------------------------------------------- Update Information:
Update to 1.2.0-1 ---- Update to 1.1.13-1 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 18 2023 Martin Gansser martinkg@fedoraproject.org - 1.2.0-1 - Update to 1.2.0 * Sun Jun 11 2023 Martin Gansser martinkg@fedoraproject.org - 1.1.13-1 - Update to 1.1.13 --------------------------------------------------------------------------------