The following Fedora 37 Security updates need testing:
Age URL
28
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d
cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ded3d48ebc iaito-5.8.6-1.fc37
radare2-5.8.6-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dcfde386f7
thunderbird-102.12.0-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f4954af225
chromium-114.0.5735.106-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-92686b3e8b
trafficserver-9.2.1-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-30f7ad4709
golang-1.19.10-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6454c8edea
iniparser-4.1-11.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-eb9bec6e8c tang-14-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
44
https://bodhi.fedoraproject.org/updates/FEDORA-2023-22c8575b95 glibc-2.36-10.fc37
21
https://bodhi.fedoraproject.org/updates/FEDORA-2023-84965ba750 mesa-23.0.3-2.fc37
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5a7658328a
pyproject-rpm-macros-1.9.0-1.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-74719f1dbe
gnome-control-center-43.6-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-08c1845d51
ncurses-6.4-3.20230114.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-87eefea607 ytnef-2.1.1-1.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1f8ef08eb7 pungi-4.4.0-1.fc37
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae2b331758
gnome-shell-43.6-1.fc37 mutter-43.6-1.fc37
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0a4f0d633a git-2.41.0-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dcfde386f7
thunderbird-102.12.0-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-90b4a62455
netcat-1.225-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b1a083b503 libmd-1.1.0-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6454c8edea
iniparser-4.1-11.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-9ff9769a48
vte291-0.70.6-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-854b10f32c
python3-docs-3.11.4-1.fc37 python3.11-3.11.4-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
CSFML-2.5.2-1.fc37
alizams-1.9.1-1.fc37
cockpit-294.1-1.fc37
cockpit-machines-292-1.fc37
corrosion-0.4.1-1.fc37
dotnet6.0-6.0.118-1.fc37
dotnet7.0-7.0.107-1.fc37
fapolicyd-1.3.1-2.fc37
icedtea-web-1.8.8-1.fc37
kernel-6.3.8-100.fc37
perl-XS-Parse-Sublike-0.18-1.fc37
python-apypie-0.4.0-1.fc37
rpmdistro-repoquery-0^20230612gitcf75cee-1.fc37
rust-cxx-1.0.97-1.fc37
rust-cxx-build-1.0.97-1.fc37
rust-cxx-gen-0.7.97-1.fc37
rust-cxxbridge-flags-1.0.97-1.fc37
rust-cxxbridge-macro-1.0.97-1.fc37
rust-dbl-0.3.2-1.fc37
zabbix-6.0.18-1.fc37
Details about builds:
================================================================================
CSFML-2.5.2-1.fc37 (FEDORA-2023-653a8906eb)
C Interface for the Simple and Fast Multimedia Library
--------------------------------------------------------------------------------
Update Information:
Update to v2.5.2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Artur Frenszek-Iwicki <fedora(a)svgames.pl> - 2.5.2-1
- Update to v2.5.2
- Switch to downloading sources from GitHub (no v2.5.2 download available on
sfml-dev.org)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2213929 - CSFML-2.5.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2213929
--------------------------------------------------------------------------------
================================================================================
alizams-1.9.1-1.fc37 (FEDORA-2023-45f790501b)
Aliza MS DICOM Viewer
--------------------------------------------------------------------------------
Update Information:
Update to 1.9.1
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Alessio <alciregi(a)fedoraproject.org> - 1.9.1-1
- Update to 1.9.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2211185 - alizams-1.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2211185
--------------------------------------------------------------------------------
================================================================================
cockpit-294.1-1.fc37 (FEDORA-2023-80d9cec080)
Web Console for Linux servers
--------------------------------------------------------------------------------
Update Information:
Automatic update for cockpit-294.1-1.fc37. ##### **Changelog for cockpit** ```
* Thu Jun 15 2023 Packit <hello(a)packit.dev> - 294.1-1 - Multiple major fixes for
the "remote python bridge" use case * Wed Jun 14 2023 Packit
<hello(a)packit.dev>
- 294-1 - Introduce Python bridge on Fedora Rawhide and Debian unstable * Thu
Jun 01 2023 Packit <hello(a)packit.dev> - 293-1 - Tests and code quality
improvements ``` ---- Automatic update for cockpit-294-1.fc37. #####
**Changelog for cockpit** ``` * Wed Jun 14 2023 Packit <hello(a)packit.dev> -
294-1 - Introduce Python bridge on Fedora Rawhide and Debian unstable * Thu Jun
01 2023 Packit <hello(a)packit.dev> - 293-1 - Tests and code quality improvements
``` ---- - Tests and code quality improvements
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Packit <hello(a)packit.dev> - 294.1-1
- Multiple major fixes for the "remote python bridge" use case
* Wed Jun 14 2023 Packit <hello(a)packit.dev> - 294-1
- Introduce Python bridge on Fedora Rawhide and Debian unstable
* Thu Jun 1 2023 Packit <hello(a)packit.dev> - 293-1
- Tests and code quality improvements
--------------------------------------------------------------------------------
================================================================================
cockpit-machines-292-1.fc37 (FEDORA-2023-7139cc572e)
Cockpit user interface for virtual machines
--------------------------------------------------------------------------------
Update Information:
Automatic update for cockpit-machines-292-1.fc37. ##### **Changelog for
cockpit-machines** ``` * Thu Jun 15 2023 Packit <hello(a)packit.dev> - 292-1 -
Add manifest condition for the Python bridge ```
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Packit <hello(a)packit.dev> - 292-1
- Add manifest condition for the Python bridge
--------------------------------------------------------------------------------
================================================================================
corrosion-0.4.1-1.fc37 (FEDORA-2023-ee73cb527f)
Easy Rust and C/C++ Integration
--------------------------------------------------------------------------------
Update Information:
Initial packaging of corrosion.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.4.1-1
- Update to version 0.4.1
* Thu Jun 15 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.5-1
- Initial import (#2209376)
--------------------------------------------------------------------------------
================================================================================
dotnet6.0-6.0.118-1.fc37 (FEDORA-2023-edb993aeaf)
.NET Runtime and SDK
--------------------------------------------------------------------------------
Update Information:
This is the June 2023 monthly update for .NET 6. It includes fixes for several
CVEs. Release Notes: - Runtime:
https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.18.md -
SDK:
https://github.com/dotnet/core/blob/main/release-
notes/6.0/6.0.18/6.0.118.md
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Omair Majid <omajid(a)redhat.com> - 6.0.118-1
- Update to .NET SDK 6.0.118 and Runtime 6.0.18
--------------------------------------------------------------------------------
================================================================================
dotnet7.0-7.0.107-1.fc37 (FEDORA-2023-e6d5cb11bb)
.NET Runtime and SDK
--------------------------------------------------------------------------------
Update Information:
This is the June 2023 monthly update for .NET 7. It includes fixes for several
CVEs. Release Notes: - Runtime:
https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.7/7.0.7.md - SDK:
https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.7/7.0.107.md
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Omair Majid <omajid(a)redhat.com> - 7.0.107-1
- Update to .NET SDK 7.0.107 and Runtime 7.0.7
--------------------------------------------------------------------------------
================================================================================
fapolicyd-1.3.1-2.fc37 (FEDORA-2023-d7d9037faa)
Application Whitelisting Daemon
--------------------------------------------------------------------------------
Update Information:
rebase to fapolicyd v1.3.1 and selinux v0.6
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Radovan Sroka <rsroka(a)redhat.com> - 1.3.1-2
- rebase to fapolicyd v1.3.1 and selinux v0.6
* Tue Jun 13 2023 Radovan Sroka <rsroka(a)redhat.com> - 1.2-5
- migrated to SPDX license
--------------------------------------------------------------------------------
================================================================================
icedtea-web-1.8.8-1.fc37 (FEDORA-2023-249574eb93)
Open Source implementation of JSR-56 better known as Java Web Start
--------------------------------------------------------------------------------
Update Information:
The IcedTea-Web project provides a free software implementation of Java Web
Start, originally based on the NetX, project. IcedTea's NetX currently supports
verification of signed jars, trusted certificate storing, system certificate
store checking, and provides the services specified by the jnlp API. In
addition it also provides a full desktop integration, an offline run, many
extended security features, an own policy editor and much more.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 23 2023 Robert Scheck <robert(a)fedoraproject.org> - 1.8.8-1
- Upgrade to 1.8.8 (#2188867)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2188867 - Review Request: icedtea-web - Open Source implementation of JSR-56
better known as Java Web Start
https://bugzilla.redhat.com/show_bug.cgi?id=2188867
--------------------------------------------------------------------------------
================================================================================
kernel-6.3.8-100.fc37 (FEDORA-2023-0ea5b492c7)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 6.3.8 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Augusto Caringi <acaringi(a)redhat.com> [6.3.8-0]
- usb: typec: ucsi: Fix command cancellation (Heikki Krogerus)
- Add a CVE to BugsFixed (Justin M. Forbes)
- Linux v6.3.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2213179 - 6.2.15-200.fc37 is the last kernel that boots with a display. All
newer kernels have a black screen. AMD GPU.
https://bugzilla.redhat.com/show_bug.cgi?id=2213179
--------------------------------------------------------------------------------
================================================================================
perl-XS-Parse-Sublike-0.18-1.fc37 (FEDORA-2023-98d411d01f)
XS functions to assist in parsing sub-like syntax
--------------------------------------------------------------------------------
Update Information:
This release modernizes the tests. We deliver it mainly to provide an up-to-date
version string.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Petr Pisar <ppisar(a)redhat.com> - 0.18-1
- 0.18 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2215084 - perl-XS-Parse-Sublike-0.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215084
--------------------------------------------------------------------------------
================================================================================
python-apypie-0.4.0-1.fc37 (FEDORA-2023-b11363ed1d)
Apipie bindings for Python
--------------------------------------------------------------------------------
Update Information:
Update to
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Ond��ej Gajdu��ek <ogajduse(a)redhat.com> - 0.4.0-1
- Update to apypie 0.4.0
* Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 0.3.2-9
- Rebuilt for Python 3.12
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.2-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2214937 - python-apypie-0.4.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2214937
--------------------------------------------------------------------------------
================================================================================
rpmdistro-repoquery-0^20230612gitcf75cee-1.fc37 (FEDORA-2023-ecb8ffdfaf)
Tool to easily do repository queries for different distributions using DNF
--------------------------------------------------------------------------------
Update Information:
Update to snapshot from 20230612 - Add EPEL source repos - Also refactor to
deduplicate the repo files - Add Amazon Linux configuration (2023+) - Add CentOS
extras repos
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> -
0^20230612gitcf75cee-1
- Update to snapshot from 20230612
- Add EPEL source repos
- Also refactor to deduplicate the repo files
- Add Amazon Linux configuration (2023+)
- Add CentOS extras repos
--------------------------------------------------------------------------------
================================================================================
rust-cxx-1.0.97-1.fc37 (FEDORA-2023-3436c01225)
Safe interop between Rust and C++
--------------------------------------------------------------------------------
Update Information:
Update rust-cxx and associated crates to version 1.0.97.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Jan Stan��k <jstanek(a)redhat.com> - 1.0.97-1
- Update to version 1.0.97 (rhbz#2215177)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2215177 - rust-cxx-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215177
[ 2 ] Bug #2215178 - rust-cxxbridge-macro-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215178
[ 3 ] Bug #2215179 - rust-cxxbridge-flags-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215179
[ 4 ] Bug #2215180 - rust-cxx-build-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215180
[ 5 ] Bug #2215181 - rust-cxx-gen-0.7.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215181
--------------------------------------------------------------------------------
================================================================================
rust-cxx-build-1.0.97-1.fc37 (FEDORA-2023-3436c01225)
C++ code generator for integrating cxx crate into a Cargo build
--------------------------------------------------------------------------------
Update Information:
Update rust-cxx and associated crates to version 1.0.97.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Jan Stan��k <jstanek(a)redhat.com> - 1.0.97-1
- Update to version 1.0.97 (rhbz#2215180)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2215177 - rust-cxx-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215177
[ 2 ] Bug #2215178 - rust-cxxbridge-macro-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215178
[ 3 ] Bug #2215179 - rust-cxxbridge-flags-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215179
[ 4 ] Bug #2215180 - rust-cxx-build-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215180
[ 5 ] Bug #2215181 - rust-cxx-gen-0.7.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215181
--------------------------------------------------------------------------------
================================================================================
rust-cxx-gen-0.7.97-1.fc37 (FEDORA-2023-3436c01225)
C++ code generator for integrating cxx crate into higher level tools
--------------------------------------------------------------------------------
Update Information:
Update rust-cxx and associated crates to version 1.0.97.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Jan Stan��k <jstanek(a)redhat.com> - 0.7.97-1
- Update to version 0.7.97 (rhbz#2215181)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2215177 - rust-cxx-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215177
[ 2 ] Bug #2215178 - rust-cxxbridge-macro-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215178
[ 3 ] Bug #2215179 - rust-cxxbridge-flags-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215179
[ 4 ] Bug #2215180 - rust-cxx-build-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215180
[ 5 ] Bug #2215181 - rust-cxx-gen-0.7.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215181
--------------------------------------------------------------------------------
================================================================================
rust-cxxbridge-flags-1.0.97-1.fc37 (FEDORA-2023-3436c01225)
Compiler configuration of the cxx crate (implementation detail)
--------------------------------------------------------------------------------
Update Information:
Update rust-cxx and associated crates to version 1.0.97.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Jan Stan��k <jstanek(a)redhat.com> - 1.0.97-1
- Update to version 1.0.97 (rhbz#2215179)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2215177 - rust-cxx-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215177
[ 2 ] Bug #2215178 - rust-cxxbridge-macro-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215178
[ 3 ] Bug #2215179 - rust-cxxbridge-flags-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215179
[ 4 ] Bug #2215180 - rust-cxx-build-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215180
[ 5 ] Bug #2215181 - rust-cxx-gen-0.7.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215181
--------------------------------------------------------------------------------
================================================================================
rust-cxxbridge-macro-1.0.97-1.fc37 (FEDORA-2023-3436c01225)
Implementation detail of the cxx crate
--------------------------------------------------------------------------------
Update Information:
Update rust-cxx and associated crates to version 1.0.97.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Jan Stan��k <jstanek(a)redhat.com> - 1.0.97-1
- Update to version 1.0.97 (rhbz#2215178)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2215177 - rust-cxx-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215177
[ 2 ] Bug #2215178 - rust-cxxbridge-macro-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215178
[ 3 ] Bug #2215179 - rust-cxxbridge-flags-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215179
[ 4 ] Bug #2215180 - rust-cxx-build-1.0.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215180
[ 5 ] Bug #2215181 - rust-cxx-gen-0.7.97 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2215181
--------------------------------------------------------------------------------
================================================================================
rust-dbl-0.3.2-1.fc37 (FEDORA-2023-39540a4967)
Double operation in Galois Field (GF)
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the dbl crate.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.2-1
- Initial import (#2214354)
--------------------------------------------------------------------------------
================================================================================
zabbix-6.0.18-1.fc37 (FEDORA-2023-c12d173b00)
Open-source monitoring solution for your IT infrastructure
--------------------------------------------------------------------------------
Update Information:
- Update to 6.0.18 Release notes:
https://www.zabbix.com/de/rn/rn6.0.18
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 15 2023 Morten Stevens <mstevens(a)fedoraproject.org> - 1:6.0.18-1
- Update to 6.0.18
--------------------------------------------------------------------------------