The following Fedora 38 Security updates need testing:
Age URL
33
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec60871da5
apptainer-1.1.8-1.fc38
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3dc1f9ba12
cutter-re-2.2.1-1.fc38 rizin-0.5.2-1.fc38.2
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-286ed8fa46 qt-4.8.7-72.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1bae6b7751
bitcoin-core-24.1-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b534ca7056
mod_auth_openidc-2.4.13.2-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e18d3d4004
wordpress-6.2.2-1.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f3824383be
mingw-python-requests-2.31.0-1.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-38094d905c
texlive-base-20220321-72.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b25dd2a11
python3.6-3.6.15-18.fc38
The following Fedora 38 Critical Path updates have yet to be approved:
Age URL
24
https://bodhi.fedoraproject.org/updates/FEDORA-2023-fb366d5ed5
binutils-2.39-12.fc38
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-fa421c349d
freeipa-4.10.1-4.fc38
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-286ed8fa46 qt-4.8.7-72.fc38
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-53982f0320
cmake-3.26.4-3.fc38
The following builds have been pushed to Fedora 38 updates-testing
cinnamon-screensaver-5.6.3-3.fc38
cozy-1.2.1-4.fc38
ddnet-17.0.1-1.fc38
distribution-gpg-keys-1.88-1.fc38
golang-github-bep-golibsass-1.1.1-1.fc38
golang-github-tdewolff-minify-2.12.6-1.fc38
golang-github-tdewolff-parse-2.6.6-1.fc38
golang-github-tdewolff-test-1.0.9-1.fc38
kde-style-breeze-5.18.5-8.fc38
kernel-6.3.4-201.fc38
kernel-headers-6.3.3-200.fc38
kernel-tools-6.3.3-200.fc38
libXISF-0.2.5-1.fc38
lua-readline-3.3-1.fc38
nml-0.7.3-1.fc38
openexr2-2.5.8-1.fc38
pyhoca-cli-0.6.1.3~20220916git7303ada-1.fc38
rust-deser-hjson-1.2.0-1.fc38
rust-enum-as-inner-0.5.2-1.fc38
rust-mac_address-1.1.5-1.fc38
rust-mio-0.8.7-1.fc38
rust-proc-macro2-1.0.59-1.fc38
rust-quote-1.0.28-1.fc38
rust-syn-2.0.18-1.fc38
rust-tokio-1.28.2-1.fc38
rust-toml_edit-0.19.10-1.fc38
Details about builds:
================================================================================
cinnamon-screensaver-5.6.3-3.fc38 (FEDORA-2023-cbefb4e0fa)
Cinnamon Screensaver
--------------------------------------------------------------------------------
Update Information:
- Update
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Leigh Scott <leigh123linux(a)gmail.com> - 5.6.3-3
- Add requires xprop
--------------------------------------------------------------------------------
================================================================================
cozy-1.2.1-4.fc38 (FEDORA-2023-d99a6bc068)
Modern audiobook player
--------------------------------------------------------------------------------
Update Information:
Fix yet another crash at startup
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 1.2.1-4
- Modify Patch2 to fix yet another crash at startup
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2210539 - Cozy refuses to start
https://bugzilla.redhat.com/show_bug.cgi?id=2210539
--------------------------------------------------------------------------------
================================================================================
ddnet-17.0.1-1.fc38 (FEDORA-2023-b1e3a2bafe)
DDraceNetwork, a cooperative racing mod of Teeworlds
--------------------------------------------------------------------------------
Update Information:
Update to 17.0.1 (#2208411)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
17.0.1-1
- Update to 17.0.1 (#2208411)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2208411 - ddnet-17.0.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2208411
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.88-1.fc38 (FEDORA-2023-0bb17bc522)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
- update copr keys - add per distro/version link to proper key for remi - update
brave keys - add Docker key - add mullvad key
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.88-1
- update copr keys
- add per distro/version link to proper key for remi
- update brave keys
- add Docker key
- add mullvad key
--------------------------------------------------------------------------------
================================================================================
golang-github-bep-golibsass-1.1.1-1.fc38 (FEDORA-2023-b2f695e855)
Easy to use Go bindings for LibSass
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#2208445)
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.1.1-1
- Update to latest version (#2208445)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2208445 - golang-github-bep-golibsass-1.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2208445
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-minify-2.12.6-1.fc38 (FEDORA-2023-bc88968208)
Go minifiers for web formats
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.12.6-1
- Update to latest version (#2210396)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2203666 - golang-github-tdewolff-parse-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203666
[ 2 ] Bug #2203818 - golang-github-tdewolff-test-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203818
[ 3 ] Bug #2210396 - golang-github-tdewolff-minify-2.12.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2210396
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-parse-2.6.6-1.fc38 (FEDORA-2023-bc88968208)
Go parsers for web formats
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.6.6-1
- Update to latest version (#2203666)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2203666 - golang-github-tdewolff-parse-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203666
[ 2 ] Bug #2203818 - golang-github-tdewolff-test-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203818
[ 3 ] Bug #2210396 - golang-github-tdewolff-minify-2.12.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2210396
--------------------------------------------------------------------------------
================================================================================
golang-github-tdewolff-test-1.0.9-1.fc38 (FEDORA-2023-bc88968208)
Go test helper functions
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 1.0.9-1
- Update to latest version (#2203818)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2203666 - golang-github-tdewolff-parse-2.6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203666
[ 2 ] Bug #2203818 - golang-github-tdewolff-test-1.0.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2203818
[ 3 ] Bug #2210396 - golang-github-tdewolff-minify-2.12.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2210396
--------------------------------------------------------------------------------
================================================================================
kde-style-breeze-5.18.5-8.fc38 (FEDORA-2023-3c7464f11f)
KDE 4 version of Plasma 5 artwork, style and assets
--------------------------------------------------------------------------------
Update Information:
- Add missing cstdint include in libbreezecommon (#2171584, #2188911)
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Robert Scheck <robert(a)fedoraproject.org> - 1:5.18.5-8
- Add missing cstdint include in libbreezecommon (#2171584, #2188911)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:5.18.5-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2171584 - kde-style-breeze: FTBFS in Fedora rawhide/f38
https://bugzilla.redhat.com/show_bug.cgi?id=2171584
[ 2 ] Bug #2188911 - kde-style-breeze hasn't been rebuilt in the mass rebuild for
F38
https://bugzilla.redhat.com/show_bug.cgi?id=2188911
--------------------------------------------------------------------------------
================================================================================
kernel-6.3.4-201.fc38 (FEDORA-2023-514965dd8a)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 6.3.3 stable kernel rebase contains a several new features, additional
hardware support, and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.3.4-1]
- Bump rhelver for build with xfs fix (Justin M. Forbes)
- xfs: fix livelock in delayed allocation at ENOSPC (Dave Chinner)
- Turn off some debug options found to impact performance (Justin M. Forbes)
* Thu May 25 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.3.4-0]
- Revert "Turn off DEBUG_VM for non debug Fedora kernels" (Justin M. Forbes)
- Turn off DEBUG_VM for non debug Fedora kernels (Justin M. Forbes)
- Fix up some Fedora config items (Justin M. Forbes)
- enable efifb for Nvidia (Justin M. Forbes)
- Turn on NFT_CONNLIMIT for Fedora (Justin M. Forbes)
- Linux v6.3.4
* Wed May 17 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.3.3-0]
- [PATCH] ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (Mark Pearson) [2203317]
- Linux v6.3.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187931 - CVE-2023-2176 Kernel: Slab-out-of-bound read in
compare_netdev_and_ip
https://bugzilla.redhat.com/show_bug.cgi?id=2187931
[ 2 ] Bug #2187935 - CVE-2023-2176 kernel: Slab-out-of-bound read in
compare_netdev_and_ip [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2187935
[ 3 ] Bug #2208553 - xfs metadata corruption after upgrade to 6.3.3 kernel
https://bugzilla.redhat.com/show_bug.cgi?id=2208553
--------------------------------------------------------------------------------
================================================================================
kernel-headers-6.3.3-200.fc38 (FEDORA-2023-514965dd8a)
Header files for the Linux kernel for use by glibc
--------------------------------------------------------------------------------
Update Information:
The 6.3.3 stable kernel rebase contains a several new features, additional
hardware support, and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 17 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> - 6.3.3-200
- Linux v6.3.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187931 - CVE-2023-2176 Kernel: Slab-out-of-bound read in
compare_netdev_and_ip
https://bugzilla.redhat.com/show_bug.cgi?id=2187931
[ 2 ] Bug #2187935 - CVE-2023-2176 kernel: Slab-out-of-bound read in
compare_netdev_and_ip [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2187935
[ 3 ] Bug #2208553 - xfs metadata corruption after upgrade to 6.3.3 kernel
https://bugzilla.redhat.com/show_bug.cgi?id=2208553
--------------------------------------------------------------------------------
================================================================================
kernel-tools-6.3.3-200.fc38 (FEDORA-2023-514965dd8a)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 6.3.3 stable kernel rebase contains a several new features, additional
hardware support, and a number of important fixes across the tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 17 2023 Justin M. Forbes <jforbes(a)fedoraproject.org> - 6.3.3-200
- Linux v6.3.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187931 - CVE-2023-2176 Kernel: Slab-out-of-bound read in
compare_netdev_and_ip
https://bugzilla.redhat.com/show_bug.cgi?id=2187931
[ 2 ] Bug #2187935 - CVE-2023-2176 kernel: Slab-out-of-bound read in
compare_netdev_and_ip [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2187935
[ 3 ] Bug #2208553 - xfs metadata corruption after upgrade to 6.3.3 kernel
https://bugzilla.redhat.com/show_bug.cgi?id=2208553
--------------------------------------------------------------------------------
================================================================================
libXISF-0.2.5-1.fc38 (FEDORA-2023-6b97039520)
Library to load and write XISF format
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.5 and provide pkgconfig file.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Mattia Verga <mattia.verga(a)proton.me> - 0.2.5-1
- Update to 0.2.5 (fedora#2208667)
- Added pkgconfig file
--------------------------------------------------------------------------------
================================================================================
lua-readline-3.3-1.fc38 (FEDORA-2023-febf5bb833)
Lua interface to the readline and history libraries
--------------------------------------------------------------------------------
Update Information:
- Update to 3.3 (#2185584) - Upstream change: return `nil` if `ctrl-D` is
first char
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Robert Scheck <robert(a)fedoraproject.org> - 3.3-1
- Update to 3.3 (#2185584)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2185584 - lua-readline-3.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2185584
--------------------------------------------------------------------------------
================================================================================
nml-0.7.3-1.fc38 (FEDORA-2023-32b32153a5)
NewGRF Meta Language compiler
--------------------------------------------------------------------------------
Update Information:
## What's Changed - Change: Extend vehicle random bits to 16. by
[@PeterN](https://github.com/PeterN) in
[#288](https://github.com/OpenTTD/nml/pull/288) - Support extended
object/station/roadstop limits (draft) by
[@andythenorth](https://github.com/andythenorth) in
[#287](https://github.com/OpenTTD/nml/pull/287) - Codechange: [Actions] Use
'gh' to upload release assets by [@glx22](https://github.com/glx22) in
[#284](https://github.com/OpenTTD/nml/pull/284) - Add: STAT_ALL_TILES constant
for use instead of 0xFF by [@Brickblock1](https://github.com/Brickblock1) in
[#283](https://github.com/OpenTTD/nml/pull/283) - Fix: [Actions] nmlc version
could not be determined during regression by [@glx22](https://github.com/glx22)
in [#285](https://github.com/OpenTTD/nml/pull/285) - Add: Support for {FORCE}
string command by [@glx22](https://github.com/glx22) in
[#289](https://github.com/OpenTTD/nml/pull/289) - Add: --no-32bpp and --no-
extra-zoom option to skip some alternative sprites by
[@glx22](https://github.com/glx22) in
[#286](https://github.com/OpenTTD/nml/pull/286) - Update: changelog for 0.7.3
by [@glx22](https://github.com/glx22) in
[#291](https://github.com/OpenTTD/nml/pull/291) **Full Changelog**:
[
0.7.2...0.7.3](https://github.com/OpenTTD/nml/compare/0.7.2...0.7.3)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Felix Kaechele <felix(a)kaechele.ca> - 0.7.3-1
- update to 0.7.3
- use forge macros
* Tue Apr 18 2023 Felix Kaechele <felix(a)kaechele.ca> - 0.7.2-1
- update to 0.7.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2187579 - nml-0.7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2187579
--------------------------------------------------------------------------------
================================================================================
openexr2-2.5.8-1.fc38 (FEDORA-2023-2104c61119)
Provides the specification and reference implementation of the EXR file format
--------------------------------------------------------------------------------
Update Information:
2.5.8, fix missing Fedora 38 Mass Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 22 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 2.5.8-1
- 2.5.8
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
pyhoca-cli-0.6.1.3~20220916git7303ada-1.fc38 (FEDORA-2023-56f9263530)
Command line X2Go client written in Python
--------------------------------------------------------------------------------
Update Information:
Update to latest git for better remmina support.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Orion Poplawki <orion(a)nwra.com> - 0.6.1.3~20220916git7303ada
* Package git snapshot for better remmina support (bz#2190275)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2190275 - pyhoca-cli cannot resume session with remmina-plugins-x2go
https://bugzilla.redhat.com/show_bug.cgi?id=2190275
--------------------------------------------------------------------------------
================================================================================
rust-deser-hjson-1.2.0-1.fc38 (FEDORA-2023-5d542ba9a0)
Hjson deserializer for Serde
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.2.0-1
- Update to version 1.2.0; Fixes RHBZ#2210125
--------------------------------------------------------------------------------
================================================================================
rust-enum-as-inner-0.5.2-1.fc38 (FEDORA-2023-9987fded8f)
Proc-macro for deriving inner field accessor functions on enums
--------------------------------------------------------------------------------
Update Information:
Update to version 0.5.2.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.2-1
- Update to version 0.5.2; Fixes RHBZ#2210501
--------------------------------------------------------------------------------
================================================================================
rust-mac_address-1.1.5-1.fc38 (FEDORA-2023-9925cf68a5)
Cross-platform retrieval of a network interface MAC address
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.5.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.5-1
- Update to version 1.1.5; Fixes RHBZ#2210152
--------------------------------------------------------------------------------
================================================================================
rust-mio-0.8.7-1.fc38 (FEDORA-2023-608106ed23)
Lightweight non-blocking I/O
--------------------------------------------------------------------------------
Update Information:
Update to version 0.8.7.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.7-1
- Update to version 0.8.7; Fixes RHBZ#2210551
--------------------------------------------------------------------------------
================================================================================
rust-proc-macro2-1.0.59-1.fc38 (FEDORA-2023-0bd3aaf5f4)
Substitute implementation of the Rust compiler's proc_macro API
--------------------------------------------------------------------------------
Update Information:
- Update the syn crate to version 2.0.18. - Update the quote crate to version
1.0.28. - Update the proc-macro2 crate to version 1.0.59.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.59-1
- Update to version 1.0.59; Fixes RHBZ#2210146
--------------------------------------------------------------------------------
================================================================================
rust-quote-1.0.28-1.fc38 (FEDORA-2023-0bd3aaf5f4)
Quasi-quoting macro quote!(...)
--------------------------------------------------------------------------------
Update Information:
- Update the syn crate to version 2.0.18. - Update the quote crate to version
1.0.28. - Update the proc-macro2 crate to version 1.0.59.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.28-1
- Update to version 1.0.28; Fixes RHBZ#2210147
--------------------------------------------------------------------------------
================================================================================
rust-syn-2.0.18-1.fc38 (FEDORA-2023-0bd3aaf5f4)
Parser for Rust source code
--------------------------------------------------------------------------------
Update Information:
- Update the syn crate to version 2.0.18. - Update the quote crate to version
1.0.28. - Update the proc-macro2 crate to version 1.0.59.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.18-1
- Update to version 2.0.18; Fixes RHBZ#2210148
--------------------------------------------------------------------------------
================================================================================
rust-tokio-1.28.2-1.fc38 (FEDORA-2023-8e9773f626)
Event-driven, non-blocking I/O platform
--------------------------------------------------------------------------------
Update Information:
Update to version 1.28.2.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.28.2-1
- Update to version 1.28.2; Fixes RHBZ#2210497
--------------------------------------------------------------------------------
================================================================================
rust-toml_edit-0.19.10-1.fc38 (FEDORA-2023-57cc68f074)
Yet another format-preserving TOML parser
--------------------------------------------------------------------------------
Update Information:
Update to version 0.19.10.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.19.10-1
- Update to version 0.19.10; Fixes RHBZ#2209437
--------------------------------------------------------------------------------