The following Fedora 37 Security updates need testing:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4b892d116d
cutter-re-2.2.1-1.fc37 rizin-0.5.2-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b7eeaaee5 php-8.1.20-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1a7e2b3dda
mingw-glib2-2.74.7-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6f16e3bcee
perl-HTML-StripScripts-1.06-22.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-bf86df7ee8
syncthing-1.23.5-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dd526ed2e4
python3.7-3.7.16-2.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b4ff407364
mariadb-10.5.20-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ded3d48ebc iaito-5.8.6-1.fc37
radare2-5.8.6-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dcfde386f7
thunderbird-102.12.0-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f4954af225
chromium-114.0.5735.106-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
43
https://bodhi.fedoraproject.org/updates/FEDORA-2023-22c8575b95 glibc-2.36-10.fc37
19
https://bodhi.fedoraproject.org/updates/FEDORA-2023-84965ba750 mesa-23.0.3-2.fc37
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaafb156ac lorax-37.10-3.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5a7658328a
pyproject-rpm-macros-1.9.0-1.fc37
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-74719f1dbe
gnome-control-center-43.6-1.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-08c1845d51
ncurses-6.4-3.20230114.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-87eefea607 ytnef-2.1.1-1.fc37
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1f8ef08eb7 pungi-4.4.0-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae2b331758
gnome-shell-43.6-1.fc37 mutter-43.6-1.fc37
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0a4f0d633a git-2.41.0-1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-dcfde386f7
thunderbird-102.12.0-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-90b4a62455
netcat-1.225-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6222f60f11
python-rpm-macros-3.11-6.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-702744e9d8 gjs-1.74.2-2.fc37
mozjs102-102.12.0-1.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0ea607d24b
vim-9.0.1627-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
adw-gtk3-theme-4.8-1.fc37
cockpit-294-1.fc37
golang-1.19.10-1.fc37
iniparser-4.1-11.fc37
libmd-1.1.0-1.fc37
netrate-0.1-4.fc37
nwg-panel-0.9.7-1.fc37
openssl-pkcs11-sign-provider-1.0.0-2.fc37
osbuild-composer-84-1.fc37
php-theseer-autoload-1.28.0-1.fc37
python3-docs-3.11.4-1.fc37
python3.11-3.11.4-1.fc37
python3.12-3.12.0~b2-1.fc37
rust-enumflags2_derive0.6-0.6.4-4.fc37
rust-phf0.8-0.8.0-4.fc37
rust-phf_macros0.8-0.8.0-4.fc37
rust-phf_shared0.8-0.8.0-4.fc37
rust-random-0.14.0-1.fc37
tang-14-1.fc37
trafficserver-9.2.1-1.fc37
unrealircd-6.1.1-1.fc37
vte291-0.70.6-1.fc37
wasi-libc-20-1.fc37
whichfont-1.0.6-1.fc37
xorg-x11-xdm-1.1.14-29.fc37
Details about builds:
================================================================================
adw-gtk3-theme-4.8-1.fc37 (FEDORA-2023-e5fa13bf07)
The theme from libadwaita ported to GTK-3
--------------------------------------------------------------------------------
Update Information:
version 4.8
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Pavel Solovev <daron439(a)gmail.com> - 4.8-1
- version 4.8
--------------------------------------------------------------------------------
================================================================================
cockpit-294-1.fc37 (FEDORA-2023-c00baddb1c)
Web Console for Linux servers
--------------------------------------------------------------------------------
Update Information:
Automatic update for cockpit-294-1.fc37. ##### **Changelog for cockpit** ``` *
Wed Jun 14 2023 Packit <hello(a)packit.dev> - 294-1 - Introduce Python bridge on
Fedora Rawhide and Debian unstable * Thu Jun 01 2023 Packit <hello(a)packit.dev>
- 293-1 - Tests and code quality improvements ``` ---- - Tests and code
quality improvements
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Packit <hello(a)packit.dev> - 294-1
- Introduce Python bridge on Fedora Rawhide and Debian unstable
* Thu Jun 1 2023 Packit <hello(a)packit.dev> - 293-1
- Tests and code quality improvements
--------------------------------------------------------------------------------
================================================================================
golang-1.19.10-1.fc37 (FEDORA-2023-30f7ad4709)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
go1.19.10 (released 2023-06-06) includes four security fixes to the cmd/go and
runtime packages, as well as bug fixes to the compiler, the go command, and the
runtime. [See the milestone on the issue tracker for details](https://github.co
m/golang/go/issues?q=milestone%3AGo1.19.10+label%3ACherryPickApproved).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jun 8 2023 Alejandro S��ez <asm(a)redhat.com> - 1.19.10-1
- Update to go1.19.10
--------------------------------------------------------------------------------
================================================================================
iniparser-4.1-11.fc37 (FEDORA-2023-6454c8edea)
C library for parsing "INI-style" files
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-33461
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 David Cantrell <dcantrell(a)redhat.com> - 4.1-11
- Fix for CVE-2023-33461 (BZ#2211621)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2211618 - CVE-2023-33461 iniparser: NULL pointer cause crash in
iniparser_getboolean
https://bugzilla.redhat.com/show_bug.cgi?id=2211618
--------------------------------------------------------------------------------
================================================================================
libmd-1.1.0-1.fc37 (FEDORA-2023-b1a083b503)
Library that provides message digest functions from BSD systems
--------------------------------------------------------------------------------
Update Information:
# libmd 1.1.0 * man: Add new libmd(7) man page * doc: Move mailing list
reference to the end * build: Fix version script linker support detection *
build: Fix `configure.ac` indentation * build: Require automake 1.11 *
build: Rename `libmd_alias()` to `libmd_strong_alias()` * Remove unused
`<assert.h>` * Sync MD2 changes from NetBSD * Sync MD4 changes from OpenBSD
* Sync MD5 changes from OpenBSD * Sync RMD160 changes from OpenBSD * Sync
SHA1 changes from OpenBSD * Sync SHA2 changes from OpenBSD * test: Add a new
`test_eq()` helper function * test: Add cases for SHA224 and SHA512-256 *
build: Terminate lists in variables with `# EOL`
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Robert Scheck <robert(a)fedoraproject.org> 1.1.0-1
- Upgrade to 1.1.0 (#2214865)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2214865 - libmd-1.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2214865
--------------------------------------------------------------------------------
================================================================================
netrate-0.1-4.fc37 (FEDORA-2023-7494caf97e)
Network interface traffic meter
--------------------------------------------------------------------------------
Update Information:
`netrate` is a simple program that displays real-time byte and packet count rate
of network interfaces in Linux systems. This is a new package submission, and
for that reason, there are no update notes per se. The program is self-contained
and very small, and does not have any other dependencies than the standard C
library. No interactions with other installed programs or libraries are
expected.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 2 2023 Radu Rendec <radu(a)rendec.net> - 0.1-4
- Update license tag to use SPDX identifiers
- Use the newer autosetup macro
- Do not call the
CFLAGS="${CFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g
-grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2
-Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1
-fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686
-mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables
-fstack-clash-protection -fcf-protection}" ; export CFLAGS ;
CXXFLAGS="${CXXFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g
-grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2
-Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1
-fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686
-mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables
-fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ;
FFLAGS="${FFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g
-grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2
-Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1
-fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686
-mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables
-fstack-clash-protection -fcf-protection -I/usr/lib/gfortran/modules}" ; export
FFLAGS ;
FCFLAGS="${FCFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g
-grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2
-Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1
-fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=i686
-mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables
-fstack-clash-protection -fcf-protection -I/usr/lib/gfortran/modules}" ; export
FCFLAGS ;
LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed -Wl,-z,now
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld
-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1
-specs=/usr/lib/rpm/redhat/redhat-package-notes}" ; export LDFLAGS ;
LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib:}" ; export
LT_SYS_LIBRARY_PATH ;
CC="${CC:-gcc}" ; export CC ;
CXX="${CXX:-g++}" ; export CXX macro explicitly
* Tue Jan 4 2022 Radu Rendec <radu(a)rendec.net> - 0.1-3
- Use URL macro to define source URL
- Split build deps into separate BuildRequires lines
* Mon Jan 3 2022 Radu Rendec <radu(a)rendec.net> - 0.1-2
- Use distribution provided CFLAGS
* Thu Dec 30 2021 Radu Rendec <radu(a)rendec.net> - 0.1-1
- First release
--------------------------------------------------------------------------------
================================================================================
nwg-panel-0.9.7-1.fc37 (FEDORA-2023-88793e28c9)
GTK3-based panel for sway window manager
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 13 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.9.7-1
- chore: Update to 0.9.7
* Tue Jun 6 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.9.6-1
- chore: Update to 0.9.6
--------------------------------------------------------------------------------
================================================================================
openssl-pkcs11-sign-provider-1.0.0-2.fc37 (FEDORA-2023-128b5cecf0)
A PKCS#11 provider for OpenSSL 3.0 (private key operations only)
--------------------------------------------------------------------------------
Update Information:
OpenSSL 3.0 provider for PKCS#11 Initial import
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Holger Dengler <dengler(a)linux.ibm.com> - 1.0.0-2
- fix conflicting files in multi-arch installs
* Tue Jun 13 2023 Holger Dengler <dengler(a)linux.ibm.com> - 1.0.0-1
- Initial import (fedora#2214269)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2214269 - Review requested: openssl-pkcs11-sign-provider - OpenSSL 3.0
provider for pkcs#11 (private key operations only)
https://bugzilla.redhat.com/show_bug.cgi?id=2214269
--------------------------------------------------------------------------------
================================================================================
osbuild-composer-84-1.fc37 (FEDORA-2023-a53f2e2941)
An image building service based on osbuild
--------------------------------------------------------------------------------
Update Information:
Automatic update for osbuild-composer-84-1.fc37. ##### **Changelog for osbuild-
composer** ``` * Wed Jun 14 2023 Packit <hello(a)packit.dev> - 84-1 Changes with
84 ---------------- * Add the 'edge-ami' image type based on edge-raw-image
(#3429) * CI: Move RHEL for Edge CI into osbuild/rhel-edge-ci repo (#3460) *
Cleanup of Fedora cloud images (#3480) * Finalise interface between composer
and image definitions (#3444) * Update snapshots to 20230522 (#3451) *
build(deps): bump
google.golang.org/api from 0.123.0 to 0.126.0 (#3485) *
cloudapi: add vsphere-ova type (#3474) * fedora: f36 went EOL (#3445) *
internal/cloudapi: new prometheus listener (#3430) * internal/osbuild: yum
repos ssl verify (#3419) * osbuild: Add validation error logging (#3483) *
templates/composer: parametrise replicas and tweak cpu requests/limits (#3472)
Contributions from: Achilleas Koutsou, Brian C. Lane, Diaa Sami, Gianluca
Zuccarelli, Irene Diez, Ond��ej Budai, Sanne Raymaekers, Simon de Vlieger, Tom����
Hozza, Xiaofeng Wang, dependabot[bot], jabia99, schutzbot ��� Somewhere on the
Internet, 2023-06-14 ```
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Packit <hello(a)packit.dev> - 84-1
Changes with 84
----------------
* Add the 'edge-ami' image type based on edge-raw-image (#3429)
* CI: Move RHEL for Edge CI into osbuild/rhel-edge-ci repo (#3460)
* Cleanup of Fedora cloud images (#3480)
* Finalise interface between composer and image definitions (#3444)
* Update snapshots to 20230522 (#3451)
* build(deps): bump
google.golang.org/api from 0.123.0 to 0.126.0 (#3485)
* cloudapi: add vsphere-ova type (#3474)
* fedora: f36 went EOL (#3445)
* internal/cloudapi: new prometheus listener (#3430)
* internal/osbuild: yum repos ssl verify (#3419)
* osbuild: Add validation error logging (#3483)
* templates/composer: parametrise replicas and tweak cpu requests/limits (#3472)
Contributions from: Achilleas Koutsou, Brian C. Lane, Diaa Sami, Gianluca Zuccarelli,
Irene Diez, Ond��ej Budai, Sanne Raymaekers, Simon de Vlieger, Tom���� Hozza, Xiaofeng
Wang, dependabot[bot], jabia99, schutzbot
��� Somewhere on the Internet, 2023-06-14
--------------------------------------------------------------------------------
================================================================================
php-theseer-autoload-1.28.0-1.fc37 (FEDORA-2023-7592f3a019)
A tool and library to generate autoload code
--------------------------------------------------------------------------------
Update Information:
**Release 1.28.0** * Add support for composer's `vendor-dir` setting when
building autoloader based on composer.json and custom vendor directory location
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Remi Collet <remi(a)remirepo.net> - 1.28.0-1
- update to 1.28.0
--------------------------------------------------------------------------------
================================================================================
python3-docs-3.11.4-1.fc37 (FEDORA-2023-854b10f32c)
Documentation for the Python 3 programming language
--------------------------------------------------------------------------------
Update Information:
Update to 3.11.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 7 2023 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 3.11.4-1
- Update to 3.11.4
--------------------------------------------------------------------------------
================================================================================
python3.11-3.11.4-1.fc37 (FEDORA-2023-854b10f32c)
Version 3.11 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Update to 3.11.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 7 2023 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 3.11.4-1
- Update to 3.11.4
--------------------------------------------------------------------------------
================================================================================
python3.12-3.12.0~b2-1.fc37 (FEDORA-2023-3c628568e7)
Version 3.12 of the Python interpreter
--------------------------------------------------------------------------------
Update Information:
Update to 3.12.0b2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 7 2023 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 3.12.0~b2-1
- Update to 3.12.0b2
* Mon May 29 2023 Miro Hron��ok <mhroncok(a)redhat.com> - 3.12.0~b1-2
- Use wheels from RPMs, at least on Fedora 39+
- On older Fedora releases, declare bundled() provides and a complex License tag
--------------------------------------------------------------------------------
================================================================================
rust-enumflags2_derive0.6-0.6.4-4.fc37 (FEDORA-2023-9145a41cb8)
Implementation detail of the enumflags2 crate
--------------------------------------------------------------------------------
Update Information:
Update another batch of Rust packages for the latest Rust spec template from
rust2rpm v24. These packages also included fixes to update their license tags
and / or add missing license files from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.4-4
- Regenerate with rust2rpm v24 and add missing license files
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-phf0.8-0.8.0-4.fc37 (FEDORA-2023-9145a41cb8)
Runtime support for perfect hash function data structures
--------------------------------------------------------------------------------
Update Information:
Update another batch of Rust packages for the latest Rust spec template from
rust2rpm v24. These packages also included fixes to update their license tags
and / or add missing license files from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.0-4
- Regenerate with rust2rpm v24 and add missing license file
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-phf_macros0.8-0.8.0-4.fc37 (FEDORA-2023-9145a41cb8)
Macros to generate types in the phf crate
--------------------------------------------------------------------------------
Update Information:
Update another batch of Rust packages for the latest Rust spec template from
rust2rpm v24. These packages also included fixes to update their license tags
and / or add missing license files from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.0-4
- Regenerate with rust2rpm v24 and add missing license file
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-phf_shared0.8-0.8.0-4.fc37 (FEDORA-2023-9145a41cb8)
Support code shared by PHF libraries
--------------------------------------------------------------------------------
Update Information:
Update another batch of Rust packages for the latest Rust spec template from
rust2rpm v24. These packages also included fixes to update their license tags
and / or add missing license files from upstream.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.0-4
- Regenerate with rust2rpm v24 and add missing license file
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-random-0.14.0-1.fc37 (FEDORA-2023-8d2400e4c5)
Package provides sources of randomness
--------------------------------------------------------------------------------
Update Information:
Update to version 0.14.0.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.14.0-1
- Update to version 0.14.0; Fixes RHBZ#2140447
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
tang-14-1.fc37 (FEDORA-2023-eb9bec6e8c)
Network Presence Binding Daemon
--------------------------------------------------------------------------------
Update Information:
Fixes CVE-2023-1672
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Sergio Arroutbi <sarroutb(a)redhat.com> - 14-1
- New upstream release - v14
Resolves: rhbz#2180990
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2180990 - Private bug
https://bugzilla.redhat.com/show_bug.cgi?id=2180990
--------------------------------------------------------------------------------
================================================================================
trafficserver-9.2.1-1.fc37 (FEDORA-2023-92686b3e8b)
Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server
--------------------------------------------------------------------------------
Update Information:
Update to upstream 9.2.1; resolves CVE-2022-47184, CVE-2023-30631,
CVE-2023-33933
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 13 2023 Jered Floyd <jered(a)redhat.com> 9.2.1-1
- Update to upstream 9.2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2213425 - trafficserver-9.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2213425
--------------------------------------------------------------------------------
================================================================================
unrealircd-6.1.1-1.fc37 (FEDORA-2023-f90f860212)
Open Source IRC server
--------------------------------------------------------------------------------
Update Information:
# UnrealIRCd 6.1.1 UnrealIRCd 6.1.1 comes with various bug fixes and
performance improvements, especially for channels with thousands of users. It
also has more options to override settings per security group, for example if
you want to give trusted users or bots more rights or higher flood rates than
regular users. All these options are now in a single [Special
users](https://www.unrealircd.org/docs/Special_users) article on the UnrealIRCd
wiki. Other notable features are better connection errors to SSL/TLS users and
a new `proxy { }` block for websocket reverse proxies. ## Enhancements * Two
new features that are conditionally on: * SSL/TLS users will now correctly
receive the error message if they are rejected due to throttling (connect-flood)
and some other situations. * DNS lookups are done before throttling. This
allows exempting a hostname from both maxperip and connect-flood restrictions.
A good example for IRCCloud would be: ``` except ban { mask
*.irccloud.com; type { maxperip; connect-flood; } } ``` * Both
features are temporarily disabled whenever a [high rate of connection
attempts](https://www.unrealircd.org/docs/FAQ#hi-conn-rate) is detected, to save
CPU and other resources during such an attack. The default rate is 1000 per
second, so this would be unusual to trigger accidentally. * It is now possible
to override some set settings per-security group by having a set block with a
name, like `set unknown-users { }` * You could use this to set more
limitations for unknown-users: ``` set unknown-users { max-
channels-per-user 5; static-quit "Quit"; static-part
yes; } ``` * Or to set higher values (higher than the normal set
block) for trusted users: ``` security-group trusted-bots {
account { BotOne; BotTwo; } } set trusted-bots { max-
channels-per-user 25; } ``` * Currently the following settings can be
used in a `set xxx { }` block: `set::auto-join`, `set::modes-on-connect`,
`set::restrict-usermodes`, `set::max-channels-per-user`, `set::static-quit`,
`set::static-part.` * See also [Special
users](https://www.unrealircd.org/docs/Special_users) in the documentation for
applying settings to a security groups. * New [`proxy { }`
block](https://www.unrealircd.org/docs/Proxy_block) that can be used for
spoofing IP addresses when: * Reverse proxying websocket connections (eg. via
NGINX, a load balancer or other reverse proxy) * WEBIRC/CGI:IRC gateways. This
will replace the old `webirc { }` block in the future, though the old one will
still work for now. * New setting [`set::handshake-boot-
delay`](https://www.unrealircd.org/docs/Set_block#set%3A%3Ahandshake-boot...
which allows server linking autoconnects to kick in (and incoming servers on
serversonly ports), before allowing clients in. This potentially avoids part of
the mess when initially linking on-boot. This option is not turned on by
default, you have to set it explicitly. * This is not a useful feature on
hubs, as they don't have clients. * It can be useful on client servers, if you
`autoconnect` to your hub. * If you connect services to a server with clients
this can be useful as well, especially in single-server setups. You would have
to set a low `retrywait` in your anope conf (or similar services package) of
like `5s` instead of the default `60s`. Then after an IRCd restart, your
services link in before your clients and your IRC users have SASL available
straight from the start. * JSON-RPC: * New call
[`log.list`](https://www.unrealircd.org/docs/JSON-RPC:Log#log.list) to fetch
past 1000 log entries. This functionality is only loaded if you include
`rpc.modules.default.conf`, so not wasting any memory on servers that are not
used for JSON-RPC. ## Changes * [`set::topic-
setter`](https://www.unrealircd.org/docs/Set_block#set::topic-setter) and
[`set::ban-setter`](https://www.unrealircd.org/docs/Set_block#set::ban-setter)
are now by default set to `nick-user-host` instead of `nick`, so you can see the
full nick!user@host of who set the topic/ban/exempt/invex. * Some small DNS
performance improvements: * We now 'negatively cache' unresolved hosts for 60
seconds. * The maximum number of cached records (positive and negative) was
raised to 4096. * We no longer use "search domains" to avoid silly lookups
for
like `4.3.2.1.dnsbl.dronebl.org.mydomain.org`. * Data buffer chunks bumped from
512 bytes to ~4K. This results in less write calls (lower CPU usage) and more
data per TCP/IP packet. * We now cache sending of lines in `sendto_channel` via
a new "LineCache" system. It saves CPU on (very) large channels. * Several
other
performance improvements such as checking maxperip via a hash table and faster
invisibility checks for delayjoin. * Blacklist hits are now logged globally.
This means they show up in snomask `B`, are logged, and show up in the webpanel
"Logs" view. * The event `REMOTE_CLIENT_JOIN` was mass-triggered when servers
were syncing. They are now hidden, like `REMOTE_CLIENT_CONNECT`. ## Fixes *
Crash when removing a `listen { }` block for websocket or rpc (or changing the
port number) * When using the webpanel, if an IRC client tried to connect with
the same IP as the webpanel server, it would often receive the error "Too many
unknown connections". This only affected non-localhost connections. * The
[`require module`
block](https://www.unrealircd.org/docs/Require_module_block)
was only checked of one side of the link, thus partially not working. ##
Removed * [`set::maxbanlength`](https://www.unrealircd.org/docs/Set_block#set::m
axbanlength) has been removed as it was not deemed useful and only confusing to
users and admins. ## Developers and protocol * Server to server lines can now
be 16384 bytes in size when `PROTOCTL BIGLINES` is set. This will allow us to do
things more efficiently and possibly raise some other limits in the future. This
16k is the size of the complete line, including sender, message tags, content
and `\r\n`. Also, in server-to-server traffic we now allow 30 parameters
(`MAXPARA`*2). The original input size limits for non-servers remain the
same: the complete line can be 4k+512, with the non-mtag portion limit set at
512 bytes (including `\r\n`), and `MAXPARA` is still 15 as well. * In command
handlers, individual `parv[]` elements can be 510 bytes max, even if they add up
like `parv[1]` and `parv[2]` both being 510 bytes each. If you need more than
that, then you need to set the flag `CMD_BIGLINES` in `CommandAdd()`, then an
individual parameter can be near ~16k. This is so, because a lot of the code
does not expect parameters bigger than 512 bytes (but can still handle the total
of parameters being greater than 512). The new flag allows gradually opting in
commands to allow bigger parameters, after such code has been checked and
modified to handle it.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Robert Scheck <robert(a)fedoraproject.org> 6.1.1-1
- Upgrade to 6.1.1 (#2211354)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2211354 - unrealircd-6.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2211354
--------------------------------------------------------------------------------
================================================================================
vte291-0.70.6-1.fc37 (FEDORA-2023-9ff9769a48)
GTK+ 3 terminal emulator library
--------------------------------------------------------------------------------
Update Information:
vte 0.70.6 release.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Kalev Lember <klember(a)redhat.com> - 0.70.6-1
- Update to 0.70.6
--------------------------------------------------------------------------------
================================================================================
wasi-libc-20-1.fc37 (FEDORA-2023-fee471167f)
C library implementation for WebAssembly System Interface
--------------------------------------------------------------------------------
Update Information:
Standard C library for WebAssembly System Interface.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 14 2023 Jan Stan��k <jstanek(a)redhat.com> - 20-1
- Initial import (fedora#2166379)
--------------------------------------------------------------------------------
================================================================================
whichfont-1.0.6-1.fc37 (FEDORA-2023-e661a97ac4)
Querying Fontconfig
--------------------------------------------------------------------------------
Update Information:
help section changed
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 13 2023 Sudip Shil <sshil(a)redhat.com> - 1.0.6-1
- help section changed
--------------------------------------------------------------------------------
================================================================================
xorg-x11-xdm-1.1.14-29.fc37 (FEDORA-2023-d854b47f65)
X.Org X11 xdm - X Display Manager
--------------------------------------------------------------------------------
Update Information:
Bring back XDM package with its latest version.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Alisson Bruno <alissonbruno.sa(a)gmail.com> - 1:1.1.14-29
- Bring back XDM package
- Update to version 1.1.14
- Remove unnecessary patches for crypt.h and libdl
- Add support to systemd notify
- New patch for version 1.1.14 for audit and systemd unit file
- Add patch to fix build when auto-identifying the libsystemd
- Add patch to set -nolisten tcp
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:1.1.11-28
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:1.1.11-27
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------