The following Fedora 37 Security updates need testing:
Age URL
31
https://bodhi.fedoraproject.org/updates/FEDORA-2023-749cb1a0d5
apptainer-1.1.8-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ca393d660a
edk2-20230301gitf80f052277c8-26.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6e5d4757df
editorconfig-0.12.6-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d
cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-328397d034 bottles-51.6-1.fc37
python-vkbasalt-cli-3.1.1.post1-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3317c9b824
bitcoin-core-24.1-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f238593a42
wordpress-6.2.2-1.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b28dc472b0
microcode_ctl-2.1-53.1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d261122726
texlive-base-20210325-54.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-953c2607d8
python2.7-2.7.18-27.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-56cefa23df
python3.6-3.6.15-16.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
166
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf8feea173 lorax-37.10-1.fc37
25
https://bodhi.fedoraproject.org/updates/FEDORA-2023-22c8575b95 glibc-2.36-10.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ca393d660a
edk2-20230301gitf80f052277c8-26.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a5539abfd6
qt5-qtsvg-5.15.9-2.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6e5d4757df
editorconfig-0.12.6-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-603a5a4abc cockpit-292-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4cc44986ba
selinux-policy-37.21-2.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-64f44448fc
linux-firmware-20230515-150.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d6a0e17d12
pipewire-0.3.71-2.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec5e418618
epiphany-43.1-3.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-32b75f824a
thunderbird-102.11.1-1.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-84965ba750 mesa-23.0.3-2.fc37
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dfaade59d7 koji-1.33.0-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
cmake-3.26.4-3.fc37
fedora-license-data-1.22-1.fc37
ghc9.6-9.6.2-6.fc37
guacamole-server-1.5.2-1.fc37
linux-system-roles-1.38.3-1.fc37
ocrmypdf-14.2.1-1.fc37
perl-Carmel-0.1.56-16.fc37
pmbootstrap-1.53.0-1.fc37
python-inema-0.8.8-1.fc37
python-rapidfuzz-2.13.7-4.fc37
python-scikit-build-0.16.7-1.fc37
python-xlsxwriter-3.1.1-1.fc37
rust-reedline-0.19.1-2.fc37
s3fs-fuse-1.92-1.fc37
sipp-3.7.1-1.fc37
wgrib-1.8.3-1.fc37
xpra-4.4.5-1.fc37
Details about builds:
================================================================================
cmake-3.26.4-3.fc37 (FEDORA-2023-9956f696e6)
Cross-platform make system
--------------------------------------------------------------------------------
Update Information:
- macros: Directly use %%set_build_flags, as it is supported since EPEL 7. -
macros: Fix formatting and indentation.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Bj��rn Esser <besser82(a)fedoraproject.org> - 3.26.4-3
- Rename macros.cmake -> macros.cmake.in
- macros: Fix formatting and indentation
- macros: Directly use %set_build_flags, as it is supported since EPEL 7
--------------------------------------------------------------------------------
================================================================================
fedora-license-data-1.22-1.fc37 (FEDORA-2023-78c959b656)
Fedora Linux license data
--------------------------------------------------------------------------------
Update Information:
- Add cryptsetup GPL/LGPL licenses with OpenSSL exceptions. - Add new file for
the BSD-3-Clause-Open-MPI variant - Add new files for the GPL-3.0-interface-
exception - Add new file for GPL-3.0-or-later_WITH_cryptsetup-OpenSSL-exception
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.22-1
- Add cryptsetup GPL/LGPL licenses with OpenSSL exceptions.
- Add new file for the BSD-3-Clause-Open-MPI variant
- Add new files for the GPL-3.0-interface-exception
- Add new file for GPL-3.0-or-later_WITH_cryptsetup-OpenSSL-exception
--------------------------------------------------------------------------------
================================================================================
ghc9.6-9.6.2-6.fc37 (FEDORA-2023-db7351da51)
Glasgow Haskell Compiler
--------------------------------------------------------------------------------
Update Information:
-
https://downloads.haskell.org/ghc/9.6.2/docs/users_guide/9.6.2-notes.html -
subpackage ghc-bignum
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 24 2023 Jens Petersen <petersen(a)redhat.com> - 9.6.2-6
-
https://downloads.haskell.org/ghc/9.6.2/docs/users_guide/9.6.2-notes.html
- subpackage ghc-bignum
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2209451 - ghc-9.6.2-release is available
https://bugzilla.redhat.com/show_bug.cgi?id=2209451
--------------------------------------------------------------------------------
================================================================================
guacamole-server-1.5.2-1.fc37 (FEDORA-2023-91625d0324)
Server-side native components that form the Guacamole proxy
--------------------------------------------------------------------------------
Update Information:
# Apache Guacamole 1.5.1 ## User interface / platform - Bug: Error handling
issues in stream processing code in Angular frontend (GUACAMOLE-1571) - Bug:
Connections in background tabs may disconnect if throttled by Chrome/Safari
(GUACAMOLE-1687) - Bug: User ���Account Restrictions��� time zone cannot be cleared
(GUACAMOLE-1728) - Bug: Scope watches on session storage may trigger AngularJS
���infdig��� error (GUACAMOLE-1745) - Bug: Authentication rejections without an
interactive login result in a white screen (GUACAMOLE-1756) ## Authentication,
integration, and storage - Bug: Hitting 2100 SQLServer query parameter limit
with large user base (GUACAMOLE-1253) - Bug: UserGroup Attributes not getting
picked from the ModelUserGroup instead is picked from Model User
(GUACAMOLE-1606) - Bug: `KsmRecordService.getField()` may throw a
NullPointerException if `getCustom()` returns null (GUACAMOLE-1769) ## Protocol
support / guacd - Bug: Self built `guacd`, Release 1.4.0 segfaults on RDP-
Disconnect (GUACAMOLE-1505) - Bug: SSH Connections not working when FIPS mode
is enabled on guacd host (GUACAMOLE-1669) - Bug: RDP NLA security mode
incompatible with FIPS (GUACAMOLE-1674) - Bug: Cursor Improperly Initialized
when Connecting to Gnome Remote Desktop via RDP (GUACAMOLE-1717) ##
Internationalization - Bug: Incorrect ���i��� character in hungarian keymap
(GUACAMOLE-1761) ## Documentation - Bug: Document Dependency Package Error
(GUACAMOLE-1662) - Bug: Documentation: Link to PostgreSQL JDBC drvier is not
correct any more (GUACAMOLE-1727) - Bug: X11 Keysym docs in protocol reference
section of GUG points to dead page (GUACAMOLE-1787) ## General housekeeping and
cleanup - Bug: Incorrect instruction element length handle because of Java���s
char type (GUACAMOLE-615) - Bug: Missing `winpr/file.h` includes
(GUACAMOLE-1436) - Bug: `uuid` property of `Guacamole.ChainedTunnel` may not be
initialized (GUACAMOLE-1562) - Bug: The frontend unnecessarily sends the auth
token to the `/api/patches` endpoint (GUACAMOLE-1579) - Bug: `mouse_mask` not
properly initialized within `guac_terminal` (GUACAMOLE-1595) - Bug: Typo
mistake: Some wrong comments (GUACAMOLE-1636) - Bug: Auth token as a parameter
in `session/tunnels/<tunnel ID>/protocol` request (GUACAMOLE-1775) - Bug:
`guac_user` instances must only be referenced from user callbacks
(GUACAMOLE-1784) - Bug: Build fails against Maven 3.9.x (GUACAMOLE-1788) -
Update webapp dependencies to latest stable and compatible versions
(GUACAMOLE-1786)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Robert Scheck <robert(a)fedoraproject.org> - 1.5.2-1
- Update to 1.5.2 (#2208446)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2208446 - guacamole-server-1.5.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2208446
--------------------------------------------------------------------------------
================================================================================
linux-system-roles-1.38.3-1.fc37 (FEDORA-2023-43d9600390)
Set of interfaces for unified system management
--------------------------------------------------------------------------------
Update Information:
Automatic update for linux-system-roles-1.38.3-1.fc37. ---- Automatic update
for linux-system-roles-1.38.2-1.fc37. ##### **Changelog for linux-system-
roles** ``` * Wed May 24 2023 Packit <hello(a)packit.dev> - 1.38.2-1 - Update to
upstream version 1.38.2 * Tue May 16 2023 Rich Megginson <rmeggins(a)redhat.com>
- 1.38.0-5 - remove upstream only docs from README.md files * Tue May 16 2023
Rich Megginson <rmeggins(a)redhat.com> - 1.38.0-4 - python3-setuptools is now
required for release_collection.py - fix ruamel issue described at
https://github.com/linux-system-roles/auto-maintenance/pull/272 * Tue May 02
2023 Rich Megginson <rmeggins(a)redhat.com> - 1.38.0-3 - move vendoring code into
included files * Tue May 02 2023 Rich Megginson <rmeggins(a)redhat.com> -
1.38.0-2 - ha_cluster - vendor in modprobe module ```
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Packit <hello(a)packit.dev> - 1.38.3-1
- Update to upstream version 1.38.3
* Wed May 24 2023 Packit <hello(a)packit.dev> - 1.38.2-1
- Update to upstream version 1.38.2
* Tue May 16 2023 Rich Megginson <rmeggins(a)redhat.com> - 1.38.0-5
- remove upstream only docs from README.md files
* Tue May 16 2023 Rich Megginson <rmeggins(a)redhat.com> - 1.38.0-4
- python3-setuptools is now required for release_collection.py
- fix ruamel issue described at
https://github.com/linux-system-roles/auto-maintenance/pull/272
* Tue May 2 2023 Rich Megginson <rmeggins(a)redhat.com> - 1.38.0-3
- move vendoring code into included files
* Tue May 2 2023 Rich Megginson <rmeggins(a)redhat.com> - 1.38.0-2
- ha_cluster - vendor in modprobe module
--------------------------------------------------------------------------------
================================================================================
ocrmypdf-14.2.1-1.fc37 (FEDORA-2023-82a31d29e6)
Add an OCR text layer to scanned PDF files
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#2209442)
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 14.2.1-1
- Update to latest version (#2209442)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2209442 - ocrmypdf-14.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2209442
--------------------------------------------------------------------------------
================================================================================
perl-Carmel-0.1.56-16.fc37 (FEDORA-2023-8a0b47a199)
CPAN Artifact Repository Manager
--------------------------------------------------------------------------------
Update Information:
New package.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Peter Oliver <git(a)mavit.org.uk> - 0.1.56-16
- Upload sources.
* Sat May 27 2023 Peter Oliver <git(a)mavit.org.uk> - 0.1.56-15
- RPMAUTOSPEC: unresolvable merge
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2145272 - Review Request: perl-Carmel - CPAN Artifact Repository Manager
https://bugzilla.redhat.com/show_bug.cgi?id=2145272
--------------------------------------------------------------------------------
================================================================================
pmbootstrap-1.53.0-1.fc37 (FEDORA-2023-4e297f8f04)
A sophisticated chroot/build/flash tool to develop and install postmarketOS
--------------------------------------------------------------------------------
Update Information:
New upstream release 1.53.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Dan ��erm��k <dan.cermak(a)cgc-instruments.com> - 1.53.0-1
- New upstream release 1.53.0, fixes rhbz#2208050
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2208050 - pmbootstrap-1.53.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2208050
--------------------------------------------------------------------------------
================================================================================
python-inema-0.8.8-1.fc37 (FEDORA-2023-7ea6485193)
A Python interface to the Deutsche Post Internetmarke Online Franking
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release because of product list and license changes
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Georg Sauthoff <mail(a)gms.tf> - 0.8.8-1
- Update to latest upstream release because of product list and license changes
(fixes fedora#2210419).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2210419 - python-inema-0.8.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2210419
--------------------------------------------------------------------------------
================================================================================
python-rapidfuzz-2.13.7-4.fc37 (FEDORA-2023-6da7d37791)
Rapid fuzzy string matching in Python and C++ using the Levenshtein Distance
--------------------------------------------------------------------------------
Update Information:
First version of both packages in F37.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 10 2023 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 2.13.7-1
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2210439 - Add package for python-scikit-build to f37
https://bugzilla.redhat.com/show_bug.cgi?id=2210439
[ 2 ] Bug #2210440 - Add package for python-rapidfuzz to f37
https://bugzilla.redhat.com/show_bug.cgi?id=2210440
--------------------------------------------------------------------------------
================================================================================
python-scikit-build-0.16.7-1.fc37 (FEDORA-2023-6da7d37791)
Improved build system generator for Python C/C++/Fortran/Cython extensions
--------------------------------------------------------------------------------
Update Information:
First version of both packages in F37.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 17 2023 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 0.16.7-1
- Update to 0.16.7
* Thu Feb 9 2023 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 0.16.6-1
- Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2210439 - Add package for python-scikit-build to f37
https://bugzilla.redhat.com/show_bug.cgi?id=2210439
[ 2 ] Bug #2210440 - Add package for python-rapidfuzz to f37
https://bugzilla.redhat.com/show_bug.cgi?id=2210440
--------------------------------------------------------------------------------
================================================================================
python-xlsxwriter-3.1.1-1.fc37 (FEDORA-2023-2f4cf1f668)
Python module for writing files in the Excel 2007+ XLSX file format
--------------------------------------------------------------------------------
Update Information:
Version 3.1.1: Add support for new Excel dynamic functions; Added support for
adding a color to the invert_if_negative chart option
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Rajeesh K V <rajeeshknambiar(a)gmail.com> - 3.1.1-1
- New release 3.1.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2208875 - python-xlsxwriter-3.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2208875
--------------------------------------------------------------------------------
================================================================================
rust-reedline-0.19.1-2.fc37 (FEDORA-2023-1702d9e834)
Readline-like crate for CLI text input
--------------------------------------------------------------------------------
Update Information:
Update to 0.19.1; drop clipboard feature due to unavailable dependency
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.19.1-2
- Errata: version is 0.19.1 not 0.29.1
* Fri May 26 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.19.1-1
- Update to 0.29.1
- Drop clipboard feature; the crate is retired
- Bump rstest dependency to 0.17.0
- Use rusqlite rather than rusqlite/bundled
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2173537 - F37FailsToInstall: rust-reedline+clipboard-devel,
rust-reedline+rusqlite-devel, rust-reedline+sqlite-devel
https://bugzilla.redhat.com/show_bug.cgi?id=2173537
[ 2 ] Bug #2177920 - rust-reedline-0.19.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2177920
--------------------------------------------------------------------------------
================================================================================
s3fs-fuse-1.92-1.fc37 (FEDORA-2023-b117033396)
FUSE-based file system backed by Amazon S3
--------------------------------------------------------------------------------
Update Information:
- Update to 1.92 from
https://github.com/s3fs-fuse/s3fs-fuse (#2209081) Full
changelog:
https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.92
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 23 2023 Julio Gonz��lez Gil <packages(a)juliogonzalez.es> - 1.92-1
- Update to 1.92 from
https://github.com/s3fs-fuse/s3fs-fuse (#2209081)
Full changelog:
https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.92
--------------------------------------------------------------------------------
================================================================================
sipp-3.7.1-1.fc37 (FEDORA-2023-e7235250ef)
SIP test tool / traffic generator
--------------------------------------------------------------------------------
Update Information:
SIPp ver. 3.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Peter Lemenkov <lemenkov(a)gmail.com> - 3.7.1-1
- SIPp ver. 3.7.1
* Mon Apr 10 2023 Peter Lemenkov <lemenkov(a)gmail.com> - 3.7.0-2
- Switch to SPDX
--------------------------------------------------------------------------------
================================================================================
wgrib-1.8.3-1.fc37 (FEDORA-2023-7e52217a43)
Manipulate, inventory and decode GRIB files
--------------------------------------------------------------------------------
Update Information:
Update to 1.8.3 - ECMWF introduced a new ec_stream (1122). This stream uses the
same convention as 1033 and 1035 for denoting the perturbation number.
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 26 2023 Orion Poplawski <orion(a)nwra.com> - 1.8.3-1
- Update to 1.8.3
* Fri Feb 17 2023 Florian Weimer <fweimer(a)redhat.com> - 1.8.2-10
- Add missing #include <stdlib.h> for C99 compatibility
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.2-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xpra-4.4.5-1.fc37 (FEDORA-2023-b164ec7264)
Remote display server for applications and desktops
--------------------------------------------------------------------------------
Update Information:
- Release 4.4.5
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 27 2023 Antonio Trande <sagitter(a)fedoraproject.org> - 4.4.5-1
- Release 4.4.5
* Mon May 22 2023 S��rgio M. Basto <sergio(a)serjux.com> - 4.4.4-2
- Fix epel 8 and 9 builds , no python3-zeroconf on epel and use pipewire on
el9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2209320 - xpra-4.4.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2209320
[ 2 ] Bug #2210418 - xpra crash when client connects
https://bugzilla.redhat.com/show_bug.cgi?id=2210418
--------------------------------------------------------------------------------