The following Fedora 36 Security updates need testing:
Age URL
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8900b35c6f
webkit2gtk3-2.40.1-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-88c4b55c32
apptainer-1.1.8-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-003e7d2867 git-2.40.1-1.fc36
The following Fedora 36 Critical Path updates have yet to be approved:
Age URL
131
https://bodhi.fedoraproject.org/updates/FEDORA-2022-fabaf54050 gdb-12.1-3.fc36
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-fb80a4fff2
pyproject-rpm-macros-1.7.0-1.fc36
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-af1aaae396
mariadb-connector-c-3.3.4-2.fc36
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-72ef70f677
fedora-appstream-metadata-20230419-1.fc36
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-460849706f
linux-firmware-20230404-149.fc36
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8900b35c6f
webkit2gtk3-2.40.1-1.fc36
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1e8b5040e2
evolution-3.44.4-3.fc36
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0355ccf850
pipewire-0.3.70-1.fc36
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-9c568e54e3
libmediainfo-23.03-2.fc36 libzen-0.4.41-1.fc36 mediainfo-23.03-2.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-003e7d2867 git-2.40.1-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1c19398137
389-ds-base-2.1.8-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-84cd7e9664
vim-9.0.1486-1.fc36
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-fe709e5968 bind-9.16.40-1.fc36
bind-dyndb-ldap-11.9-23.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5d56032009 audit-3.1.1-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae708519b7
yelp-xsl-42.1-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c8e4b29906 yelp-42.2-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0fcff493a4
pango-1.50.14-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c3c044b053
libsoup-2.74.3-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-33d9926f1b
libsoup3-3.0.8-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-36464ed1fb
libgee-0.20.6-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-fa43be79ad
libadwaita-1.2.4-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8f75b2b779 gvfs-1.50.4-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e0d56e8cbd gupnp-1.4.4-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5166cfd02e gtk4-4.6.9-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-accccc5724 gssdp-1.4.1-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc4b102d50
gnome-control-center-42.10-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f6f005c884
gnome-autoar-0.4.4-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-087126a584 gjs-1.72.3-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3b340a42ca
glibmm24-2.66.6-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-52e717eade
gdk-pixbuf2-2.42.10-1.fc36
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d770f900c1
kernel-6.2.13-100.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-21be6eae54
java-17-openjdk-17.0.7.0.7-1.fc36 java-latest-openjdk-20.0.1.0.9-3.rolling.fc36
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-9d7d081d0e
python-dogpile-cache-1.1.8-1.fc36
The following builds have been pushed to Fedora 36 updates-testing
atril-1.26.1-1.fc36
baresip-3.1.0-1.fc36
elfutils-0.189-2.fc36
golang-github-prometheus-alertmanager-0.23.0-15.fc36
libre-3.1.0-1.fc36
linux-system-roles-1.38.0-1.fc36
rakudo-2023.02-3.fc36
Details about builds:
================================================================================
atril-1.26.1-1.fc36 (FEDORA-2023-43ee644bb9)
Document viewer
--------------------------------------------------------------------------------
Update Information:
- update tp 1.26.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 28 2023 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.1-1
- update to 1.26.1 release
--------------------------------------------------------------------------------
================================================================================
baresip-3.1.0-1.fc36 (FEDORA-2023-a7b4d62441)
Modular SIP user-agent with audio and video support
--------------------------------------------------------------------------------
Update Information:
# Baresip v3.1.0 (2023-04-27) - config: add `net_af` config setting - gzrtp: RX
thread - safe stop - ci: avoid hardcoded OpenSSL path on macOS - fix cmake
modules - cmake/mqtt: fix `MOSQUITTO_LIBRARY` - mc: send module event whenever
receiver is stopped - menu: limit early audio TX streams - call: check if SIP
UPDATE is allowed, but always update local media - account: increase line
handler size to 1024 characters - cmake: avoid include of `/usr/local/include` -
call,audio: respect SDP media dir on audio start similar to video - video:
refactor paced and burst sending - ctrl_dbus,ice,png_vf: Fix format string usage
- menu limit early video - play: flush of the aubuf directly before the replay
starts - stream: fix setting of RTP tos for IPv6 - call: only flush audio stream
when stream starts - menu: use busy tone when call declined (scode 603) - ua:
incoming DTMF `key=0` should be reported as DTMF end - video: fix possible 32bit
overflow - ua: deref call on `reset_transp` fail - uag: avoid transport reset if
local address has not changed - ci: add gcc-12 for Ubuntu 22.04 (ubuntu-latest)
- docs: remove librem from README files # libre v3.1.0 (2023-04-27) - ci:
bump mingw openssl to 3.1.0 - thread: add `cnd_timedwait()` - Add tls and http
apis for post handshake - ci/sanitizers: add multi thread testing - ci/win: use
separate retest step - thread: fix `pthread_setname_np` thread pointer deref -
ci: add FreeBSD test - cmake: bump minimum version of OpenSSL to 1.1.1 - ci:
avoid hardcoded OpenSSL path on macOS - sip,uri,test: Escape SIP URIs - udp: add
a lock for the helpers list - rem/vidmix: add position index handling - aubuf:
set auframe fields correct in read_auframe loop - list: refactor/optimize
`list_insert_sorted` - ci/freebsd: remove openssl-devel - tmr: add
`tmr_continue()` - ci,cmake: replace C99 check by strict C99 and C11 checks -
atomic: Fix missing memory order arguments in MSVC atomic functions - thread:
remove win32 `SetThreadDescription`
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 27 2023 Robert Scheck <robert(a)fedoraproject.org> 3.1.0-1
- Upgrade to 3.1.0 (#2190310)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2190309 - libre-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2190309
[ 2 ] Bug #2190310 - baresip-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2190310
--------------------------------------------------------------------------------
================================================================================
elfutils-0.189-2.fc36 (FEDORA-2023-030f3d8652)
A collection of utilities and DSOs to handle ELF files and DWARF data
--------------------------------------------------------------------------------
Update Information:
eu-elfcompress would rewrite an ELF file if no section needed (de)compressing
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 22 2023 Mark Wielaard <mjw(a)fedoraproject.org> - 0.189-2
- Add elfutils-0.189-c99-compat.patch
- Add elfutils-0.189-elfcompress.patch
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-alertmanager-0.23.0-15.fc36 (FEDORA-2023-b669ead5ba)
Prometheus Alertmanager
--------------------------------------------------------------------------------
Update Information:
Include s390x, and disable tests because it is failing
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 29 2023 S��rgio M. Basto <sergio(a)serjux.com> - 0.23.0-15
- Include s390x, and disable tests because it is failing
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.23.0-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Aug 10 2022 Maxwell G <gotmax(a)e.email> - 0.23.0-13
- Rebuild to fix FTBFS
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.23.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jul 19 2022 Maxwell G <gotmax(a)e.email> - 0.23.0-11
- Rebuild for
CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> - 0.23.0-10
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
--------------------------------------------------------------------------------
================================================================================
libre-3.1.0-1.fc36 (FEDORA-2023-a7b4d62441)
Generic library for real-time communications
--------------------------------------------------------------------------------
Update Information:
# Baresip v3.1.0 (2023-04-27) - config: add `net_af` config setting - gzrtp: RX
thread - safe stop - ci: avoid hardcoded OpenSSL path on macOS - fix cmake
modules - cmake/mqtt: fix `MOSQUITTO_LIBRARY` - mc: send module event whenever
receiver is stopped - menu: limit early audio TX streams - call: check if SIP
UPDATE is allowed, but always update local media - account: increase line
handler size to 1024 characters - cmake: avoid include of `/usr/local/include` -
call,audio: respect SDP media dir on audio start similar to video - video:
refactor paced and burst sending - ctrl_dbus,ice,png_vf: Fix format string usage
- menu limit early video - play: flush of the aubuf directly before the replay
starts - stream: fix setting of RTP tos for IPv6 - call: only flush audio stream
when stream starts - menu: use busy tone when call declined (scode 603) - ua:
incoming DTMF `key=0` should be reported as DTMF end - video: fix possible 32bit
overflow - ua: deref call on `reset_transp` fail - uag: avoid transport reset if
local address has not changed - ci: add gcc-12 for Ubuntu 22.04 (ubuntu-latest)
- docs: remove librem from README files # libre v3.1.0 (2023-04-27) - ci:
bump mingw openssl to 3.1.0 - thread: add `cnd_timedwait()` - Add tls and http
apis for post handshake - ci/sanitizers: add multi thread testing - ci/win: use
separate retest step - thread: fix `pthread_setname_np` thread pointer deref -
ci: add FreeBSD test - cmake: bump minimum version of OpenSSL to 1.1.1 - ci:
avoid hardcoded OpenSSL path on macOS - sip,uri,test: Escape SIP URIs - udp: add
a lock for the helpers list - rem/vidmix: add position index handling - aubuf:
set auframe fields correct in read_auframe loop - list: refactor/optimize
`list_insert_sorted` - ci/freebsd: remove openssl-devel - tmr: add
`tmr_continue()` - ci,cmake: replace C99 check by strict C99 and C11 checks -
atomic: Fix missing memory order arguments in MSVC atomic functions - thread:
remove win32 `SetThreadDescription`
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 27 2023 Robert Scheck <robert(a)fedoraproject.org> 3.1.0-1
- Upgrade to 3.1.0 (#2190309)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2190309 - libre-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2190309
[ 2 ] Bug #2190310 - baresip-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2190310
--------------------------------------------------------------------------------
================================================================================
linux-system-roles-1.38.0-1.fc36 (FEDORA-2023-eef1b557a4)
Set of interfaces for unified system management
--------------------------------------------------------------------------------
Update Information:
Automatic update for linux-system-roles-1.38.0-1.fc36. ##### **Changelog for
linux-system-roles** ``` * Sat Apr 29 2023 Packit <hello(a)packit.dev> - 1.38.0-1
- Update to upstream version 1.38.0 * Fri Apr 28 2023 Rich Megginson
<rmeggins(a)redhat.com> - 1.37.0-2 - We need to change the sshd fingerprint string
before doing any other `sed` changes. - Ensure the sshd meta version numbers are
quoted. * Fri Apr 28 2023 Packit <hello(a)packit.dev> - 1.37.0-1 - Update to
upstream version 1.37.0 * Mon Apr 17 2023 Rich Megginson <rmeggins(a)redhat.com>
- 1.36.3-2 - strip github action badge links from headers of README.md files
before conversion to HTML - some of the converters do not like them - use
%{python3} instead of python3 to force use of system python3 in order to use
ruamel ``` ---- Automatic update for linux-system-roles-1.37.0-1.fc36. #####
**Changelog for linux-system-roles** ``` * Fri Apr 28 2023 Packit
<hello(a)packit.dev> - 1.37.0-1 - Update to upstream version 1.37.0 * Mon Apr 17
2023 Rich Megginson <rmeggins(a)redhat.com> - 1.36.3-2 - strip github action badge
links from headers of README.md files before conversion to HTML - some of the
converters do not like them - use %{python3} instead of python3 to force use of
system python3 in order to use ruamel ```
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 29 2023 Packit <hello(a)packit.dev> - 1.38.0-1
- Update to upstream version 1.38.0
* Fri Apr 28 2023 Rich Megginson <rmeggins(a)redhat.com> - 1.37.0-2
- We need to change the sshd fingerprint string before doing any other `sed` changes.
- Ensure the sshd meta version numbers are quoted.
* Fri Apr 28 2023 Packit <hello(a)packit.dev> - 1.37.0-1
- Update to upstream version 1.37.0
* Mon Apr 17 2023 Rich Megginson <rmeggins(a)redhat.com> - 1.36.3-2
- strip github action badge links from headers of README.md files
before conversion to HTML - some of the converters do not like them
- use %{python3} instead of python3 to force use of system python3 in
order to use ruamel
--------------------------------------------------------------------------------
================================================================================
rakudo-2023.02-3.fc36 (FEDORA-2023-180147f21a)
Raku on MoarVM, JVM, and JS
--------------------------------------------------------------------------------
Update Information:
Update to 2023.04
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 29 2023 topazus <topazus(a)outlook.com> - 2023.02-3
- Update to 2023.04
--------------------------------------------------------------------------------