The following Fedora 37 Security updates need testing:
Age URL
193
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d
cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37
92
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5c4718e547
containerd-1.6.23-1.fc37
32
https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414
thunderbird-115.4.1-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e62da41072 xen-4.16.5-4.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f0be0daaa5
poppler-22.08.0-5.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c858d2c53b
golang-github-google-dap-0.11.0-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ce2836acfa
golang-github-openprinting-ipp-usb-0.9.23-5.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b845c60d1c
java-latest-openjdk-21.0.1.0.12-1.rolling.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
47
https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc6bf2453f
container-selinux-2.224.0-1.fc37
32
https://bodhi.fedoraproject.org/updates/FEDORA-2023-253212d414
thunderbird-115.4.1-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7c2049d301
c-ares-1.21.0-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e62da41072 xen-4.16.5-4.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-197706c72a
p11-kit-0.25.3-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a65d5c216c
libmaxminddb-1.8.0-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5e098d786b
python-rpmautospec-0.3.8-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5c9b2b08f4
libxslt-1.1.39-1.fc37
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-04796d3939 glibc-2.36-18.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-09bad4af42
netcat-1.226-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f0be0daaa5
poppler-22.08.0-5.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b8b9c2ed1b crun-1.12-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0200aecd54 ethtool-6.6-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
anope-2.1.0-2.fc37
ansible-freeipa-1.12.0-1.fc37
bitcoin-core-selinux-0-11.20231127git4505616.fc37
fedora-appstream-metadata-20231124-1.fc37
firefox-120.0-3.fc37
java-17-openjdk-17.0.9.0.9-1.fc37
linux-system-roles-1.59.0-1.fc37
motif-2.3.4-30.fc37
openscap-1.3.9-1.fc37
python-pyqt-feedback-flow-0.3.1-1.fc37
rust-euclid-0.22.9-1.fc37
systemd-251.19-1.fc37
vdr-live-3.3.2-1.fc37
vdr-tvscraper-1.2.5-1.fc37
Details about builds:
================================================================================
anope-2.1.0-2.fc37 (FEDORA-2023-11f70480c1)
IRC services designed for flexibility and ease of use
--------------------------------------------------------------------------------
Update Information:
# Anope 2.1.0 - Added `nickserv:minpasslen` for configuring the minimum
password length - Added support for access list entry descriptions. - Added
support for linking over a UNIX socket. - Added support for server-initiated
logins and logouts on UnrealIRCd - Added support for server-initiated logouts
on InspIRCd - Added support for the `ANONYMOUS SASL` mechanism - Allowed
users to opt-out of being added to channel access lists - Cleaned up the
codebase to use Modern C++17 - Modernized the build system to use a modern
version of CMake - Removed `nickserv:strictpasswords` as it is obsolete now
`nickserv:minpasslen` exists - Removed support for using insecure encryption
methods as the primary method - Removed the Windows-only `anopesmtp` tool -
Removed the `inspircd12` and `inspircd20` modules (use `inspircd` instead) -
Removed the `ns_getpass` module (no supported encryption modules) - Removed
the `os_oline` module (no supported IRCds) - Removed the two day X-line cap
- Removed the `unreal` module (use `unrealircd` instead) - Renamed
`nickserv:passlen` to `nickserv:maxpasslen` - Renamed the `charybdis` module
to `solanum` - Renamed the `inspircd3` module to `inspircd` - Renamed the
`unreal4` module to `unrealircd` - Replaced `uplink:ipv6` with
`uplink:protocol` - Updated all references to IRCServices to refer to Anope
instead
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Robert Scheck <robert(a)fedoraproject.org> 2.1.0-2
- Reflect upstream configuration file changes and renamings
* Sun Nov 26 2023 Robert Scheck <robert(a)fedoraproject.org> 2.1.0-1
- Upgrade to 2.1.0 (#2251530)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2251530 - anope-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2251530
--------------------------------------------------------------------------------
================================================================================
ansible-freeipa-1.12.0-1.fc37 (FEDORA-2023-ab06c617fe)
Roles and playbooks to deploy FreeIPA servers, replicas and clients
--------------------------------------------------------------------------------
Update Information:
Update to version 1.12.0
https://github.com/freeipa/ansible-
freeipa/releases/tag/v1.12.0 Highlights: - New idoverridegroup management
module. - New idoverrideuser management module. - New idview management
module. - New idp management module. - Bug fixes and CI improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Thomas Woerner <twoerner(a)redhat.com> - 1.12.0-1
- Update to version 1.12.0
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
Highlights:
- New idoverridegroup management module.
- New idoverrideuser management module.
- New idview management module.
- New idp management module.
- Bug fixes and CI improvements.
--------------------------------------------------------------------------------
================================================================================
bitcoin-core-selinux-0-11.20231127git4505616.fc37 (FEDORA-2023-4c176d2b0a)
Bitcoin Core SELinux policy
--------------------------------------------------------------------------------
Update Information:
Fix policies for daemon case.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Simone Caronni <negativo17(a)gmail.com> - 0-11.20231127git4505616
- Update policies (#2246255).
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-10.20210312giteaa9a04
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-9.20210312giteaa9a04
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2246255 - SELinux denial of bitcoind reading /etc/bitcoin/bitcoin.conf
https://bugzilla.redhat.com/show_bug.cgi?id=2246255
--------------------------------------------------------------------------------
================================================================================
fedora-appstream-metadata-20231124-1.fc37 (FEDORA-2023-f2b189966b)
Operating System AppStream Metadata for Fedora Linux
--------------------------------------------------------------------------------
Update Information:
Add Fedora 37 EOL date
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 24 2023 Timoth��e Ravier <tim(a)siosm.fr> - 20231124-1
- Add Fedora 37 EOL date
--------------------------------------------------------------------------------
================================================================================
firefox-120.0-3.fc37 (FEDORA-2023-dce9c4b01f)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
- Fixed freezes on Google Maps ---- - Updated to latest upstream (120.0)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Martin Stransky <stransky(a)redhat.com>- 120.0-3
- Add fix for rhbz#2251202
* Mon Nov 20 2023 Martin Stransky <stransky(a)redhat.com>- 120.0-2
- Updated to 120.0 Build 2
* Tue Nov 14 2023 Martin Stransky <stransky(a)redhat.com>- 120.0-1
- Updated to 120.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2251202 - Firefox 120 freezes on Google Maps when using strict Enhanced
Tracking Protection
https://bugzilla.redhat.com/show_bug.cgi?id=2251202
--------------------------------------------------------------------------------
================================================================================
java-17-openjdk-17.0.9.0.9-1.fc37 (FEDORA-2023-8ff7f34eb0)
OpenJDK 17 Runtime Environment
--------------------------------------------------------------------------------
Update Information:
updated to OpenJDK 17.0.9 (2023-10-17)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 22 2023 Jiri Vanek <jvanek(a)redhat.com> - 1:17.0.9.0.9-1
- updated to OpenJDK 17.0.9 (2023-10-17)
* Fri Sep 29 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:17.0.8.0.7-2
- Fix flatpak build
--------------------------------------------------------------------------------
================================================================================
linux-system-roles-1.59.0-1.fc37 (FEDORA-2023-0a1da404a6)
Set of interfaces for unified system management
--------------------------------------------------------------------------------
Update Information:
Automatic update for linux-system-roles-1.59.0-1.fc37. ##### **Changelog for
linux-system-roles** ``` * Mon Nov 27 2023 Packit <hello(a)packit.dev> - 1.59.0-1
- Update to upstream version 1.59.0 * Thu Nov 23 2023 Packit <hello(a)packit.dev>
- 1.58.1-1 - Update to upstream version 1.58.1 ``` ---- Automatic update for
linux-system-roles-1.58.1-1.fc37. ##### **Changelog for linux-system-roles**
``` * Thu Nov 23 2023 Packit <hello(a)packit.dev> - 1.58.1-1 - Update to upstream
version 1.58.1 ```
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Packit <hello(a)packit.dev> - 1.59.0-1
- Update to upstream version 1.59.0
* Thu Nov 23 2023 Packit <hello(a)packit.dev> - 1.58.1-1
- Update to upstream version 1.58.1
--------------------------------------------------------------------------------
================================================================================
motif-2.3.4-30.fc37 (FEDORA-2023-25329c196b)
Run-time libraries and programs
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-43788 and CVE-2023-43789
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Jos�� Exp��sito <jexposit(a)redhat.com> - 2.3.4-30
- Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
- Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-29
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Fri Apr 14 2023 Florian Weimer <fweimer(a)redhat.com> - 2.3.4-28
- Port to C99 (#2186773)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-27
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2242248 - CVE-2023-43788 libXpm: out of bounds read in
XpmCreateXpmImageFromBuffer()
https://bugzilla.redhat.com/show_bug.cgi?id=2242248
[ 2 ] Bug #2242249 - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted
colormap
https://bugzilla.redhat.com/show_bug.cgi?id=2242249
--------------------------------------------------------------------------------
================================================================================
openscap-1.3.9-1.fc37 (FEDORA-2023-194b8a74dc)
Set of open source libraries enabling integration of the SCAP line of standards
--------------------------------------------------------------------------------
Update Information:
fix missing support for apk, add missing dependency for opendbx
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 23 2023 Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-1
- bump to 1.3.9
- provide perl binding
* Tue Sep 5 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 1:1.3.8-6
- Use pcre2 (#2128342)
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:1.3.8-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jun 27 2023 Python Maint <python-maint(a)redhat.com> - 1:1.3.8-4
- Rebuilt for Python 3.12
* Tue Jun 27 2023 Evgeny Kolesnikov <ekolesni(a)redhat.com> - 1:1.3.8-3
- Rebuilt because of xmlsec1 downgrade
* Mon Jun 26 2023 Python Maint <python-maint(a)redhat.com> - 1:1.3.8-2
- Rebuilt for Python 3.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2169830 - openscap unable to scan debian due to missing libapt dependency
https://bugzilla.redhat.com/show_bug.cgi?id=2169830
[ 2 ] Bug #2169850 - openscap missing sql probe due to missing dependency on OpenDbx
https://bugzilla.redhat.com/show_bug.cgi?id=2169850
--------------------------------------------------------------------------------
================================================================================
python-pyqt-feedback-flow-0.3.1-1.fc37 (FEDORA-2023-8e4ca836fd)
Show feedback in toast-like notifications
--------------------------------------------------------------------------------
Update Information:
Update to 0.3.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Iztok Fister Jr. <iztokf AT fedoraproject DOT org> - 0.3.1-1
- Update to the latest release
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Mon Jul 3 2023 Python Maint <python-maint(a)redhat.com> - 0.3.0-2
- Rebuilt for Python 3.12
--------------------------------------------------------------------------------
================================================================================
rust-euclid-0.22.9-1.fc37 (FEDORA-2023-b39078aa6e)
Geometry primitives
--------------------------------------------------------------------------------
Update Information:
Initial import (fedora#2250466).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Leo Puvilland <leo(a)craftcat.dev> - 0.22.9-1
- Initial import (fedora#2250466).
* Mon Nov 27 2023 Tomas Hrcka <thrcka(a)redhat.com> - 0.22.6-4
- Unretirement request:
https://pagure.io/releng/issue/11809
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.22.6-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
systemd-251.19-1.fc37 (FEDORA-2023-1582a08b60)
System and Service Manager
--------------------------------------------------------------------------------
Update Information:
Latest bugfix version. No need to log out or reboot.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 251.19-1
- Version 251.19 (rhbz#2242219)
* Mon Nov 27 2023 Martin Osvald <mosvald(a)redhat.com> - 251.14-3
- Support user:group notation by sysusers.generate-pre.sh script
(rhbz#2103934)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103934 - sysusers rpm macro fails on UID:GID
https://bugzilla.redhat.com/show_bug.cgi?id=2103934
[ 2 ] Bug #2242219 - systemctl daemon-reexec breaks Alt-Fn key handling in Xorg
https://bugzilla.redhat.com/show_bug.cgi?id=2242219
--------------------------------------------------------------------------------
================================================================================
vdr-live-3.3.2-1.fc37 (FEDORA-2023-5327e66226)
An interactive web interface with HTML5 live stream support for VDR
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.2-1 ---- Update to 3.3.1-1 ---- Update to 3.3.0-1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Martin Gansser <martinkg(a)fedoraproject.org> - 3.3.2-1
- Update to 3.3.2
* Tue Nov 21 2023 Martin Gansser <martinkg(a)fedoraproject.org> - 3.3.1-1
- Update to 3.3.1
* Sun Nov 19 2023 Martin Gansser <martinkg(a)fedoraproject.org> - 3.3.0-1
- Update to 3.3.0
--------------------------------------------------------------------------------
================================================================================
vdr-tvscraper-1.2.5-1.fc37 (FEDORA-2023-12d2ef309f)
Collects metadata for all available EPG events
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.5-1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Martin Gansser <martinkg(a)fedoraproject.org> - 1.2.5-1
- Update to 1.2.5
--------------------------------------------------------------------------------