The following Fedora 37 Security updates need testing:
Age URL
32
https://bodhi.fedoraproject.org/updates/FEDORA-2023-749cb1a0d5
apptainer-1.1.8-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ca393d660a
edk2-20230301gitf80f052277c8-26.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6e5d4757df
editorconfig-0.12.6-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d
cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3317c9b824
bitcoin-core-24.1-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f238593a42
wordpress-6.2.2-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b28dc472b0
microcode_ctl-2.1-53.1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d261122726
texlive-base-20210325-54.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-953c2607d8
python2.7-2.7.18-27.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-56cefa23df
python3.6-3.6.15-16.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
167
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf8feea173 lorax-37.10-1.fc37
26
https://bodhi.fedoraproject.org/updates/FEDORA-2023-22c8575b95 glibc-2.36-10.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6e5d4757df
editorconfig-0.12.6-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-603a5a4abc cockpit-292-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4cc44986ba
selinux-policy-37.21-2.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ca393d660a
edk2-20230301gitf80f052277c8-26.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a5539abfd6
qt5-qtsvg-5.15.9-2.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6a0e17d12
pipewire-0.3.71-2.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec5e418618
epiphany-43.1-3.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-32b75f824a
thunderbird-102.11.1-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-84965ba750 mesa-23.0.3-2.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dfaade59d7 koji-1.33.0-1.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-9956f696e6
cmake-3.26.4-3.fc37
The following builds have been pushed to Fedora 37 updates-testing
cinnamon-screensaver-5.6.3-3.fc37
ddnet-17.0.1-1.fc37
distribution-gpg-keys-1.88-1.fc37
golang-github-bep-golibsass-1.1.1-1.fc37
golang-github-tdewolff-minify-2.12.6-1.fc37
golang-github-tdewolff-parse-2.6.6-1.fc37
golang-github-tdewolff-test-1.0.9-1.fc37
kernel-6.3.4-101.fc37
kernel-headers-6.3.3-100.fc37
kernel-tools-6.3.3-100.fc37
libXISF-0.2.5-1.fc37
lua-readline-3.3-1.fc37
mariadb-connector-odbc-3.1.18-1.fc37
nml-0.7.3-1.fc37
rust-deser-hjson-1.2.0-1.fc37
rust-enum-as-inner-0.5.2-1.fc37
rust-mac_address-1.1.5-1.fc37
rust-mio-0.8.7-1.fc37
rust-proc-macro2-1.0.59-1.fc37
rust-quote-1.0.28-1.fc37
rust-syn-2.0.18-1.fc37
rust-tokio-1.28.2-1.fc37
rust-toml_edit-0.19.10-1.fc37
Details about builds:
================================================================================
cinnamon-screensaver-5.6.3-3.fc37 (FEDORA-2023-14d3e9a2ca)
Cinnamon Screensaver
--------------------------------------------------------------------------------
Update Information:
- Update
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Leigh Scott <leigh123linux(a)gmail.com> - 5.6.3-3
- Add requires xprop
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.6.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
ddnet-17.0.1-1.fc37 (FEDORA-2023-82c4be73aa)
DDraceNetwork, a cooperative racing mod of Teeworlds
--------------------------------------------------------------------------------
Update Information:
Update to 17.0.1 (#2208411)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
17.0.1-1
- Update to 17.0.1 (#2208411)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2208411 - ddnet-17.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2208411
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.88-1.fc37 (FEDORA-2023-d90c7f8f12)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
- update copr keys - add per distro/version link to proper key for remi - update
brave keys - add Docker key - add mullvad key
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.88-1
- update copr keys
- add per distro/version link to proper key for remi
- update brave keys
- add Docker key
- add mullvad key
--------------------------------------------------------------------------------
================================================================================
golang-github-bep-golibsass-1.1.1-1.fc37 (FEDORA-2023-3f4cd261ec)
Easy to use Go bindings for LibSass
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#2208445)
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.1.1-1
- Update to latest version (#2208445)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2208445 - golang-github-bep-golibsass-1.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2208445
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-minify-2.12.6-1.fc37 (FEDORA-2023-5a971cdc91)
Go minifiers for web formats
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.12.6-1
- Update to latest version (#2210396)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2203666 - golang-github-tdewolff-parse-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203666
[ 2 ] Bug #2203818 - golang-github-tdewolff-test-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203818
[ 3 ] Bug #2210396 - golang-github-tdewolff-minify-2.12.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2210396
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-parse-2.6.6-1.fc37 (FEDORA-2023-5a971cdc91)
Go parsers for web formats
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.6.6-1
- Update to latest version (#2203666)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2203666 - golang-github-tdewolff-parse-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203666
[ 2 ] Bug #2203818 - golang-github-tdewolff-test-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203818
[ 3 ] Bug #2210396 - golang-github-tdewolff-minify-2.12.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2210396
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-test-1.0.9-1.fc37 (FEDORA-2023-5a971cdc91)
Go test helper functions
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.9-1
- Update to latest version (#2203818)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2203666 - golang-github-tdewolff-parse-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203666
[ 2 ] Bug #2203818 - golang-github-tdewolff-test-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203818
[ 3 ] Bug #2210396 - golang-github-tdewolff-minify-2.12.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2210396
--------------------------------------------------------------------------------
================================================================================
kernel-6.3.4-101.fc37 (FEDORA-2023-2f35633034)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 6.3.3 stable kernel rebase contains a several new features, additional
hardware support, and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.3.4-1]
- Bump rhelver for build with xfs fix (Justin M. Forbes)
- xfs: fix livelock in delayed allocation at ENOSPC (Dave Chinner)
- Turn off some debug options found to impact performance (Justin M. Forbes)
* Thu May 25 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.3.4-0]
- Revert "Turn off DEBUG_VM for non debug Fedora kernels" (Justin M. Forbes)
- Turn off DEBUG_VM for non debug Fedora kernels (Justin M. Forbes)
- Fix up some Fedora config items (Justin M. Forbes)
- enable efifb for Nvidia (Justin M. Forbes)
- Turn on NFT_CONNLIMIT for Fedora (Justin M. Forbes)
- Linux v6.3.4
* Wed May 17 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.3.3-0]
- [PATCH] ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (Mark Pearson) [2203317]
- Linux v6.3.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187931 - CVE-2023-2176 Kernel: Slab-out-of-bound read in
compare_netdev_and_ip
https://bugzilla.redhat.com/show_bug.cgi?id=2187931
[ 2 ] Bug #2187935 - CVE-2023-2176 kernel: Slab-out-of-bound read in
compare_netdev_and_ip [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2187935
[ 3 ] Bug #2208553 - xfs metadata corruption after upgrade to 6.3.3 kernel
https://bugzilla.redhat.com/show_bug.cgi?id=2208553
--------------------------------------------------------------------------------
================================================================================
kernel-headers-6.3.3-100.fc37 (FEDORA-2023-2f35633034)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 6.3.3 stable kernel rebase contains a several new features, additional
hardware support, and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 17 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> - 6.3.3-100
- Linux v6.3.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187931 - CVE-2023-2176 Kernel: Slab-out-of-bound read in
compare_netdev_and_ip
https://bugzilla.redhat.com/show_bug.cgi?id=2187931
[ 2 ] Bug #2187935 - CVE-2023-2176 kernel: Slab-out-of-bound read in
compare_netdev_and_ip [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2187935
[ 3 ] Bug #2208553 - xfs metadata corruption after upgrade to 6.3.3 kernel
https://bugzilla.redhat.com/show_bug.cgi?id=2208553
--------------------------------------------------------------------------------
================================================================================
kernel-tools-6.3.3-100.fc37 (FEDORA-2023-2f35633034)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 6.3.3 stable kernel rebase contains a several new features, additional
hardware support, and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 17 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> - 6.3.3-100
- Linux v6.3.3
* Wed May 3 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> - 6.2.6-201
- Bump for libbpf update
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187931 - CVE-2023-2176 Kernel: Slab-out-of-bound read in
compare_netdev_and_ip
https://bugzilla.redhat.com/show_bug.cgi?id=2187931
[ 2 ] Bug #2187935 - CVE-2023-2176 kernel: Slab-out-of-bound read in
compare_netdev_and_ip [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2187935
[ 3 ] Bug #2208553 - xfs metadata corruption after upgrade to 6.3.3 kernel
https://bugzilla.redhat.com/show_bug.cgi?id=2208553
--------------------------------------------------------------------------------
================================================================================
libXISF-0.2.5-1.fc37 (FEDORA-2023-b8b2ef1dc3)
Library to load and write XISF format
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.5 and provide pkgconfig file.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Mattia Verga <mattia.verga(a)proton.me> - 0.2.5-1
- Update to 0.2.5 (fedora#2208667)
- Added pkgconfig file
--------------------------------------------------------------------------------
================================================================================
lua-readline-3.3-1.fc37 (FEDORA-2023-3224048944)
Lua interface to the readline and history libraries
--------------------------------------------------------------------------------
Update Information:
- Update to 3.3 (#2185584) - Upstream change: return `nil` if `ctrl-D` is
first char
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Robert Scheck <robert(a)fedoraproject.org> - 3.3-1
- Update to 3.3 (#2185584)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2185584 - lua-readline-3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2185584
--------------------------------------------------------------------------------
================================================================================
mariadb-connector-odbc-3.1.18-1.fc37 (FEDORA-2023-a850ec1961)
The MariaDB Native Client library (ODBC driver)
--------------------------------------------------------------------------------
Update Information:
**MariaDB ODBC connector 3.1.18** Release notes:
https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-18-release-notes/
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 19 2023 Michal Schorm <mschorm(a)redhat.com> - 3.1.18-1
- Rebase to 3.1.18
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.15-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nml-0.7.3-1.fc37 (FEDORA-2023-809f82226f)
NewGRF Meta Language compiler
--------------------------------------------------------------------------------
Update Information:
## What's Changed - Change: Extend vehicle random bits to 16. by
[@PeterN](https://github.com/PeterN) in
[#288](https://github.com/OpenTTD/nml/pull/288) - Support extended
object/station/roadstop limits (draft) by
[@andythenorth](https://github.com/andythenorth) in
[#287](https://github.com/OpenTTD/nml/pull/287) - Codechange: [Actions] Use
'gh' to upload release assets by [@glx22](https://github.com/glx22) in
[#284](https://github.com/OpenTTD/nml/pull/284) - Add: STAT_ALL_TILES constant
for use instead of 0xFF by [@Brickblock1](https://github.com/Brickblock1) in
[#283](https://github.com/OpenTTD/nml/pull/283) - Fix: [Actions] nmlc version
could not be determined during regression by [@glx22](https://github.com/glx22)
in [#285](https://github.com/OpenTTD/nml/pull/285) - Add: Support for {FORCE}
string command by [@glx22](https://github.com/glx22) in
[#289](https://github.com/OpenTTD/nml/pull/289) - Add: --no-32bpp and --no-
extra-zoom option to skip some alternative sprites by
[@glx22](https://github.com/glx22) in
[#286](https://github.com/OpenTTD/nml/pull/286) - Update: changelog for 0.7.3
by [@glx22](https://github.com/glx22) in
[#291](https://github.com/OpenTTD/nml/pull/291) **Full Changelog**:
[
0.7.2...0.7.3](https://github.com/OpenTTD/nml/compare/0.7.2...0.7.3)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Felix Kaechele <felix(a)kaechele.ca> - 0.7.3-1
- update to 0.7.3
- use forge macros
* Tue Apr 18 2023 Felix Kaechele <felix(a)kaechele.ca> - 0.7.2-1
- update to 0.7.2
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187579 - nml-0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2187579
--------------------------------------------------------------------------------
================================================================================
rust-deser-hjson-1.2.0-1.fc37 (FEDORA-2023-97aa430656)
Hjson deserializer for Serde
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.2.0-1
- Update to version 1.2.0; Fixes RHBZ#2210125
--------------------------------------------------------------------------------
================================================================================
rust-enum-as-inner-0.5.2-1.fc37 (FEDORA-2023-c4f034912e)
Proc-macro for deriving inner field accessor functions on enums
--------------------------------------------------------------------------------
Update Information:
Update to version 0.5.2.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.2-1
- Update to version 0.5.2; Fixes RHBZ#2210501
--------------------------------------------------------------------------------
================================================================================
rust-mac_address-1.1.5-1.fc37 (FEDORA-2023-32f4011ee8)
Cross-platform retrieval of a network interface MAC address
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.5.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.5-1
- Update to version 1.1.5; Fixes RHBZ#2210152
--------------------------------------------------------------------------------
================================================================================
rust-mio-0.8.7-1.fc37 (FEDORA-2023-86e8fc5210)
Lightweight non-blocking I/O
--------------------------------------------------------------------------------
Update Information:
Update to version 0.8.7.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.7-1
- Update to version 0.8.7; Fixes RHBZ#2210551
--------------------------------------------------------------------------------
================================================================================
rust-proc-macro2-1.0.59-1.fc37 (FEDORA-2023-ed6f257d2a)
Substitute implementation of the Rust compiler's proc_macro API
--------------------------------------------------------------------------------
Update Information:
- Update the syn crate to version 2.0.18. - Update the quote crate to version
1.0.28. - Update the proc-macro2 crate to version 1.0.59.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.59-1
- Update to version 1.0.59; Fixes RHBZ#2210146
--------------------------------------------------------------------------------
================================================================================
rust-quote-1.0.28-1.fc37 (FEDORA-2023-ed6f257d2a)
Quasi-quoting macro quote!(...)
--------------------------------------------------------------------------------
Update Information:
- Update the syn crate to version 2.0.18. - Update the quote crate to version
1.0.28. - Update the proc-macro2 crate to version 1.0.59.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.28-1
- Update to version 1.0.28; Fixes RHBZ#2210147
--------------------------------------------------------------------------------
================================================================================
rust-syn-2.0.18-1.fc37 (FEDORA-2023-ed6f257d2a)
Parser for Rust source code
--------------------------------------------------------------------------------
Update Information:
- Update the syn crate to version 2.0.18. - Update the quote crate to version
1.0.28. - Update the proc-macro2 crate to version 1.0.59.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.18-1
- Update to version 2.0.18; Fixes RHBZ#2210148
--------------------------------------------------------------------------------
================================================================================
rust-tokio-1.28.2-1.fc37 (FEDORA-2023-07733e9e82)
Event-driven, non-blocking I/O platform
--------------------------------------------------------------------------------
Update Information:
Update to version 1.28.2.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.28.2-1
- Update to version 1.28.2; Fixes RHBZ#2210497
--------------------------------------------------------------------------------
================================================================================
rust-toml_edit-0.19.10-1.fc37 (FEDORA-2023-3fca19ac6d)
Yet another format-preserving TOML parser
--------------------------------------------------------------------------------
Update Information:
Update to version 0.19.10.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.19.10-1
- Update to version 0.19.10; Fixes RHBZ#2209437
--------------------------------------------------------------------------------