The following Fedora 37 Security updates need testing:
Age URL
174
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d
cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37
73
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5c4718e547
containerd-1.6.23-1.fc37
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-18cb340b28
xorg-x11-server-Xwayland-22.1.9-3.fc37
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f111d2f306
xorg-x11-server-1.20.14-26.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414
thunderbird-115.4.1-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1458e23c3d
dotnet7.0-7.0.113-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3dba61ad8c
dotnet6.0-6.0.124-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6efef709eb
community-mysql-8.0.35-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4708733ccc
tigervnc-1.13.1-6.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f2a6d27239
radare2-5.8.8-2.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f3389245ce
optipng-0.7.8-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-70578c5599
roundcubemail-1.6.5-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ce436d56f8 frr-8.5.3-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc6bf2453f
container-selinux-2.224.0-1.fc37
19
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c62ef568f1
mock-core-configs-39.2-1.fc37
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f111d2f306
xorg-x11-server-1.20.14-26.fc37
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-18cb340b28
xorg-x11-server-Xwayland-22.1.9-3.fc37
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7662bda6bb
smartmontools-7.4-2.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-273e516f97
libdrm-2.4.117-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414
thunderbird-115.4.1-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2afbcc2b6a
osinfo-db-20231027-1.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-87cf0f48f2
sgpio-1.2.0.10-35.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e701beae49
p11-kit-0.25.2-1.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b255de5862
linux-firmware-20231030-1.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3b9da12381 glibc-2.36-17.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-18010e9513
vim-9.0.2081-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6b3a9cafeb
tracker-miners-3.4.6-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c1a262549d
redhat-rpm-config-230-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4708733ccc
tigervnc-1.13.1-6.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8b6bc9ef2f
google-noto-fonts-20201206^1.git0c78c8329-8.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f2410e5f38
pipewire-0.3.84-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-fdf7d426f0 cups-2.4.7-2.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-81347b7def
libretls-3.8.1-1.fc37 netcat-1.225-3.fc37 rpki-client-8.6-2.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dd1f904b23
libopenmpt-0.6.12-1.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-927f3e9c4c audit-3.1.2-5.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1b933089ac
go-rpm-macros-3.3.1-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-06e31ececc
hwdata-0.376-1.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-599421156c
firefox-119.0-5.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-62773ee361
passt-0^20231107.g56d9f6d-1.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-9737002c0e crun-1.11.2-1.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-02a753c0d8
slapi-nis-0.60.0-2.fc37
The following builds have been pushed to Fedora 37 updates-testing
alsa-sof-firmware-2023.09.1-1.fc37
google-api-python-client-2.107.0-1.fc37
linux-system-roles-1.57.1-1.fc37
open-vm-tools-12.3.5-1.fc37
osbuild-99-1.fc37
pack-0.32.0-1.fc37
proxmark3-4.17140-1.fc37
resalloc-ibm-cloud-1.2-1.fc37
rust-cvt-0.1.2-1.fc37
rust-test-log-0.2.13-1.fc37
Details about builds:
================================================================================
alsa-sof-firmware-2023.09.1-1.fc37 (FEDORA-2023-492a55aa04)
Firmware and topology files for Sound Open Firmware project
--------------------------------------------------------------------------------
Update Information:
Update to Intel SOF firmware to version v2023.09.1 (bugfix release for Intel
Meteor Lake platforms). Changes:
https://github.com/thesofproject/sof-
bin/releases/tag/v2023.09.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 6 2023 Jaroslav Kysela <perex(a)perex.cz> - 2023.09.1-1
- Update to v2023.09.1
--------------------------------------------------------------------------------
================================================================================
google-api-python-client-2.107.0-1.fc37 (FEDORA-2023-3b8845dbd6)
Google APIs Client Library for Python
--------------------------------------------------------------------------------
Update Information:
2.107.0 ---- 2.106.0 ---- 2.105.0 ---- 2.104.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 2:2.107.0-1
- 2.107.0
* Wed Nov 1 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 2:2.106.0-1
- 2.106.0
* Thu Oct 26 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 2:2.105.0-1
- 2.105.0
* Thu Oct 19 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 2:2.104.0-1
- 2.104.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2244946 - google-api-python-client-2.104.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2244946
[ 2 ] Bug #2246357 - google-api-python-client-2.105.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2246357
[ 3 ] Bug #2247353 - google-api-python-client-2.106.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2247353
[ 4 ] Bug #2248650 - google-api-python-client-2.107.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2248650
--------------------------------------------------------------------------------
================================================================================
linux-system-roles-1.57.1-1.fc37 (FEDORA-2023-9ff472054a)
Set of interfaces for unified system management
--------------------------------------------------------------------------------
Update Information:
Automatic update for linux-system-roles-1.57.1-1.fc37. ##### **Changelog for
linux-system-roles** ``` * Wed Nov 08 2023 Packit <hello(a)packit.dev> - 1.57.1-1
- Update to upstream version 1.57.1 ```
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 Packit <hello(a)packit.dev> - 1.57.1-1
- Update to upstream version 1.57.1
--------------------------------------------------------------------------------
================================================================================
open-vm-tools-12.3.5-1.fc37 (FEDORA-2023-40cdf73a2b)
Open Virtual Machine Tools for virtual machines hosted on VMware
--------------------------------------------------------------------------------
Update Information:
Package new upstream version of open-vm-tools-12.3.5-22544099.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 John Wolfe <jwolfe(a)vmware.com> - 12.3.5-1
- Package new upstream version of open-vm-tools-12.3.5-22544099.
. fix for CVE-2023-34058 - another SAML token signature bypass vulnerability.
. fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the
vmware-user-suid-wrapper.
. address
https://github.com/vmware/open-vm-tools/issues/310
- Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2247124 - open-vm-tools version 12.3.5 has been released - please rebase
https://bugzilla.redhat.com/show_bug.cgi?id=2247124
--------------------------------------------------------------------------------
================================================================================
osbuild-99-1.fc37 (FEDORA-2023-c21ac0a6db)
A build system for OS images
--------------------------------------------------------------------------------
Update Information:
Automatic update for osbuild-99-1.fc37. ##### **Changelog for osbuild** ``` *
Wed Nov 08 2023 Packit <hello(a)packit.dev> - 99-1 Changes with 99
---------------- * :package: Packit configuration enhancements (#1416) *
Author: Tom���� Hozza, Reviewers: Achilleas Koutsou, Simon Steinbei��, Simon de
Vlieger * Add a tool script to help check for unused runners (#1367) *
Author: Brian C. Lane, Reviewers: Simon de Vlieger * Add selinux-label-version
to the org.osbuild.ostree.commit stage (#1415) * Author: Alexander Larsson,
Reviewers: Colin Walters, Simon de Vlieger * Build rpms on RHEL-8.10 and
RHEL-9.4 (#1417) * Author: Jakub Rusz, Reviewers: Alexander Todorov *
Update snapshots to 20231101 (#1419) * Author: SchutzBot, Reviewers: Simon
de Vlieger * depsolve-dnf: enable weak deps selection (#1413) * Author:
Simon de Vlieger, Reviewers: Achilleas Koutsou * depsolve-dnf: helpful
exception for repo (#1412) * Author: Simon de Vlieger, Reviewers: Achilleas
Koutsou * kickstart: add support for "zerombr","clearpart" (#1426)
*
Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger *
objectstore: also mount /etc/containers for "host" buildroot (#1410) *
Author: Dusty Mabe, Reviewers: Achilleas Koutsou * stage/copy: fix exception
msg when parsing mounts and inputs (#1421) * Author: Tom���� Hozza, Reviewers:
Achilleas Koutsou, Ond��ej Budai * stages(kickstart): add options "lang",
"keyboard", "timezone" (#1424) * Author: Michael Vogt, Reviewers:
Achilleas
Koutsou * stages/mkdir: fix its schema (#1409) * Author: Ond��ej Budai,
Reviewers: Achilleas Koutsou, Tom���� Hozza * stages: add new unit test for
kickstart stage (#1425) * Author: Michael Vogt, Reviewers: Achilleas
Koutsou, Simon de Vlieger * tests: run the `test_stages` category in parallel
(#1431) * Author: Michael Vogt, Reviewers: Simon de Vlieger * tools: add
Fedora 38 runner for OSTree image tests (COMPOSER-1998) (#1427) * Author:
Pawe�� Po��awski, Reviewers: Ond��ej Budai ��� Somewhere on the Internet, 2023-11-08
```
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 Packit <hello(a)packit.dev> - 99-1
Changes with 99
----------------
* :package: Packit configuration enhancements (#1416)
* Author: Tom���� Hozza, Reviewers: Achilleas Koutsou, Simon Steinbei��, Simon de
Vlieger
* Add a tool script to help check for unused runners (#1367)
* Author: Brian C. Lane, Reviewers: Simon de Vlieger
* Add selinux-label-version to the org.osbuild.ostree.commit stage (#1415)
* Author: Alexander Larsson, Reviewers: Colin Walters, Simon de Vlieger
* Build rpms on RHEL-8.10 and RHEL-9.4 (#1417)
* Author: Jakub Rusz, Reviewers: Alexander Todorov
* Update snapshots to 20231101 (#1419)
* Author: SchutzBot, Reviewers: Simon de Vlieger
* depsolve-dnf: enable weak deps selection (#1413)
* Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
* depsolve-dnf: helpful exception for repo (#1412)
* Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
* kickstart: add support for "zerombr","clearpart" (#1426)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* objectstore: also mount /etc/containers for "host" buildroot (#1410)
* Author: Dusty Mabe, Reviewers: Achilleas Koutsou
* stage/copy: fix exception msg when parsing mounts and inputs (#1421)
* Author: Tom���� Hozza, Reviewers: Achilleas Koutsou, Ond��ej Budai
* stages(kickstart): add options "lang", "keyboard",
"timezone" (#1424)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou
* stages/mkdir: fix its schema (#1409)
* Author: Ond��ej Budai, Reviewers: Achilleas Koutsou, Tom���� Hozza
* stages: add new unit test for kickstart stage (#1425)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* tests: run the `test_stages` category in parallel (#1431)
* Author: Michael Vogt, Reviewers: Simon de Vlieger
* tools: add Fedora 38 runner for OSTree image tests (COMPOSER-1998) (#1427)
* Author: Pawe�� Po��awski, Reviewers: Ond��ej Budai
��� Somewhere on the Internet, 2023-11-08
--------------------------------------------------------------------------------
================================================================================
pack-0.32.0-1.fc37 (FEDORA-2023-5029b92850)
Convert code into runnable images
--------------------------------------------------------------------------------
Update Information:
fix for CVE-2023-39325
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 RH Container Bot <rhcontainerbot(a)fedoraproject.org> - 0.32.0-1
- auto bump to v0.32.0
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.30.0~pre2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2248399 - pack: golang: net/http, x/net/http2: rapid stream resets can cause
excessive work (CVE-2023-39325) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2248399
--------------------------------------------------------------------------------
================================================================================
proxmark3-4.17140-1.fc37 (FEDORA-2023-6beb933b8d)
The Swiss Army Knife of RFID Research - RRG/Iceman repo
--------------------------------------------------------------------------------
Update Information:
Bump to v4.17140
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 7 2023 Marlin Soose <marlin.soose(a)esque.ca> - 4.17140
- Bumping package to v4.17140, add lz4-devel build dep
--------------------------------------------------------------------------------
================================================================================
resalloc-ibm-cloud-1.2-1.fc37 (FEDORA-2023-1158797a56)
Resource allocator scripts for IBM cloud
--------------------------------------------------------------------------------
Update Information:
https://github.com/fedora-copr/resalloc-ibm-cloud/releases/tag/resalloc-ibm-
cloud-1.2-1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.2-1
- Automatically remove leftover Floating IPs
- Fail early for too-long resource names
--------------------------------------------------------------------------------
================================================================================
rust-cvt-0.1.2-1.fc37 (FEDORA-2023-0756f5ce52)
Expose the cvt function from Rust libstd
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the cvt crate.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.2-1
- Initial import (#2247955)
--------------------------------------------------------------------------------
================================================================================
rust-test-log-0.2.13-1.fc37 (FEDORA-2023-dc7a6f3fd6)
Attribute for initializing logging and/or tracing before running tests
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the test-log crate.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.13-1
- Initial import (#2247954)
--------------------------------------------------------------------------------