The following Fedora 37 Security updates need testing:
Age URL
44
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6bdc769313
cutter-re-2.2.0-1.fc37 rizin-0.5.1-1.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a4bbf02a57
webkitgtk-2.40.1-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-749cb1a0d5
apptainer-1.1.8-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d84a75ea52 git-2.40.1-1.fc37
The following Fedora 37 Critical Path updates have yet to be approved:
Age URL
138
https://bodhi.fedoraproject.org/updates/FEDORA-2022-bf8feea173 lorax-37.10-1.fc37
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-734593f163
edk2-20230301gitf80f052277c8-3.fc37
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d128ae56c7
pyproject-rpm-macros-1.7.0-1.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b892930b88
mariadb-connector-c-3.3.4-2.fc37
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-363cf1cea2 cockpit-290-1.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a4bbf02a57
webkitgtk-2.40.1-1.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ff5709e1a7
nfs-utils-2.6.3-0.fc37
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-34a075d304 llvm-15.0.7-2.fc37
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-83279212cc
libtirpc-1.3.3-1.rc1.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-acfbdb28cd bind-9.18.14-1.fc37
bind-dyndb-ldap-11.10-13.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-82734f264d
onboard-1.4.1-30.fc37
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-bb53b89e8a
libmediainfo-23.03-2.fc37 libzen-0.4.41-1.fc37 mediainfo-23.03-2.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-13093d1386
selinux-policy-37.20-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a88a701820
gnome-shell-43.5-1.fc37 mutter-43.5-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-44868fd669
389-ds-base-2.2.7-2.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-319b7f56ac
xorg-x11-server-1.20.14-23.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d84a75ea52 git-2.40.1-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-cd5d0e8f18
nautilus-43.4-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a4ed654b20
glibmm2.4-2.66.6-1.fc37
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e743a79041
perl-5.36.1-493.fc37 polymake-4.9-2.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-66697036e9 audit-3.1.1-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0db7d5ea15 dracut-059-2.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2d90d74c3a
xorg-x11-server-Xwayland-22.1.9-2.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0de6457ef5 abrt-2.16.1-1.fc37
libreport-2.17.9-1.fc37 satyr-0.42-1.fc37
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-70986ed850
kernel-6.2.13-200.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-48d1193166
elfutils-0.189-2.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-32d08f02af
java-17-openjdk-17.0.7.0.7-1.fc37 java-latest-openjdk-20.0.1.0.9-4.rolling.fc37
0
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3d6585a3ab
python-dogpile-cache-1.1.8-1.fc37
The following builds have been pushed to Fedora 37 updates-testing
atril-1.26.1-1.fc37
baresip-3.1.0-1.fc37
fedora-packager-0.6.0.7-3.fc37
golang-github-prometheus-alertmanager-0.23.0-15.fc37
libre-3.1.0-1.fc37
linux-system-roles-1.38.0-1.fc37
Details about builds:
================================================================================
atril-1.26.1-1.fc37 (FEDORA-2023-382c077cf3)
Document viewer
--------------------------------------------------------------------------------
Update Information:
- update tp 1.26.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 28 2023 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.1-1
- update to 1.26.1 release
--------------------------------------------------------------------------------
================================================================================
baresip-3.1.0-1.fc37 (FEDORA-2023-ba7b8a9206)
Modular SIP user-agent with audio and video support
--------------------------------------------------------------------------------
Update Information:
# Baresip v3.1.0 (2023-04-27) - config: add `net_af` config setting - gzrtp: RX
thread - safe stop - ci: avoid hardcoded OpenSSL path on macOS - fix cmake
modules - cmake/mqtt: fix `MOSQUITTO_LIBRARY` - mc: send module event whenever
receiver is stopped - menu: limit early audio TX streams - call: check if SIP
UPDATE is allowed, but always update local media - account: increase line
handler size to 1024 characters - cmake: avoid include of `/usr/local/include` -
call,audio: respect SDP media dir on audio start similar to video - video:
refactor paced and burst sending - ctrl_dbus,ice,png_vf: Fix format string usage
- menu limit early video - play: flush of the aubuf directly before the replay
starts - stream: fix setting of RTP tos for IPv6 - call: only flush audio stream
when stream starts - menu: use busy tone when call declined (scode 603) - ua:
incoming DTMF `key=0` should be reported as DTMF end - video: fix possible 32bit
overflow - ua: deref call on `reset_transp` fail - uag: avoid transport reset if
local address has not changed - ci: add gcc-12 for Ubuntu 22.04 (ubuntu-latest)
- docs: remove librem from README files # libre v3.1.0 (2023-04-27) - ci:
bump mingw openssl to 3.1.0 - thread: add `cnd_timedwait()` - Add tls and http
apis for post handshake - ci/sanitizers: add multi thread testing - ci/win: use
separate retest step - thread: fix `pthread_setname_np` thread pointer deref -
ci: add FreeBSD test - cmake: bump minimum version of OpenSSL to 1.1.1 - ci:
avoid hardcoded OpenSSL path on macOS - sip,uri,test: Escape SIP URIs - udp: add
a lock for the helpers list - rem/vidmix: add position index handling - aubuf:
set auframe fields correct in read_auframe loop - list: refactor/optimize
`list_insert_sorted` - ci/freebsd: remove openssl-devel - tmr: add
`tmr_continue()` - ci,cmake: replace C99 check by strict C99 and C11 checks -
atomic: Fix missing memory order arguments in MSVC atomic functions - thread:
remove win32 `SetThreadDescription`
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 27 2023 Robert Scheck <robert(a)fedoraproject.org> 3.1.0-1
- Upgrade to 3.1.0 (#2190310)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2190309 - libre-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2190309
[ 2 ] Bug #2190310 - baresip-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2190310
--------------------------------------------------------------------------------
================================================================================
fedora-packager-0.6.0.7-3.fc37 (FEDORA-2023-45e1b89cc6)
Tools for setting up a fedora maintainer environment
--------------------------------------------------------------------------------
Update Information:
Drop fedora-packager-yubikey subpackage. It was fas2 specific and no longer
works at all.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 29 2023 Kevin Fenzi <kevin(a)scrye.com> - 0.6.0.7-3
- Drop the fedora-packager-yubikey subpackage as fas2 is retired. Fixes rhbz#2165100
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1811895 - [abrt] fedora-packager-yubikey: module():
fedora-burn-yubikey:13:<module>:ModuleNotFoundError: No module named
'fedora'
https://bugzilla.redhat.com/show_bug.cgi?id=1811895
--------------------------------------------------------------------------------
================================================================================
golang-github-prometheus-alertmanager-0.23.0-15.fc37 (FEDORA-2023-89f7bf3b2f)
Prometheus Alertmanager
--------------------------------------------------------------------------------
Update Information:
Include s390x, and disable tests because it is failing
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 29 2023 S��rgio M. Basto <sergio(a)serjux.com> - 0.23.0-15
- Include s390x, and disable tests because it is failing
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.23.0-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Aug 10 2022 Maxwell G <gotmax(a)e.email> - 0.23.0-13
- Rebuild to fix FTBFS
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.23.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jul 19 2022 Maxwell G <gotmax(a)e.email> - 0.23.0-11
- Rebuild for
CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang
* Thu Jun 23 2022 Maxwell G <gotmax(a)e.email> - 0.23.0-10
- Rebuild to mitigate CVE-2022-21698 (rhbz#2067400).
--------------------------------------------------------------------------------
================================================================================
libre-3.1.0-1.fc37 (FEDORA-2023-ba7b8a9206)
Generic library for real-time communications
--------------------------------------------------------------------------------
Update Information:
# Baresip v3.1.0 (2023-04-27) - config: add `net_af` config setting - gzrtp: RX
thread - safe stop - ci: avoid hardcoded OpenSSL path on macOS - fix cmake
modules - cmake/mqtt: fix `MOSQUITTO_LIBRARY` - mc: send module event whenever
receiver is stopped - menu: limit early audio TX streams - call: check if SIP
UPDATE is allowed, but always update local media - account: increase line
handler size to 1024 characters - cmake: avoid include of `/usr/local/include` -
call,audio: respect SDP media dir on audio start similar to video - video:
refactor paced and burst sending - ctrl_dbus,ice,png_vf: Fix format string usage
- menu limit early video - play: flush of the aubuf directly before the replay
starts - stream: fix setting of RTP tos for IPv6 - call: only flush audio stream
when stream starts - menu: use busy tone when call declined (scode 603) - ua:
incoming DTMF `key=0` should be reported as DTMF end - video: fix possible 32bit
overflow - ua: deref call on `reset_transp` fail - uag: avoid transport reset if
local address has not changed - ci: add gcc-12 for Ubuntu 22.04 (ubuntu-latest)
- docs: remove librem from README files # libre v3.1.0 (2023-04-27) - ci:
bump mingw openssl to 3.1.0 - thread: add `cnd_timedwait()` - Add tls and http
apis for post handshake - ci/sanitizers: add multi thread testing - ci/win: use
separate retest step - thread: fix `pthread_setname_np` thread pointer deref -
ci: add FreeBSD test - cmake: bump minimum version of OpenSSL to 1.1.1 - ci:
avoid hardcoded OpenSSL path on macOS - sip,uri,test: Escape SIP URIs - udp: add
a lock for the helpers list - rem/vidmix: add position index handling - aubuf:
set auframe fields correct in read_auframe loop - list: refactor/optimize
`list_insert_sorted` - ci/freebsd: remove openssl-devel - tmr: add
`tmr_continue()` - ci,cmake: replace C99 check by strict C99 and C11 checks -
atomic: Fix missing memory order arguments in MSVC atomic functions - thread:
remove win32 `SetThreadDescription`
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 27 2023 Robert Scheck <robert(a)fedoraproject.org> 3.1.0-1
- Upgrade to 3.1.0 (#2190309)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2190309 - libre-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2190309
[ 2 ] Bug #2190310 - baresip-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2190310
--------------------------------------------------------------------------------
================================================================================
linux-system-roles-1.38.0-1.fc37 (FEDORA-2023-5ba79a7d01)
Set of interfaces for unified system management
--------------------------------------------------------------------------------
Update Information:
Automatic update for linux-system-roles-1.38.0-1.fc37. ##### **Changelog for
linux-system-roles** ``` * Sat Apr 29 2023 Packit <hello(a)packit.dev> - 1.38.0-1
- Update to upstream version 1.38.0 * Fri Apr 28 2023 Rich Megginson
<rmeggins(a)redhat.com> - 1.37.0-2 - We need to change the sshd fingerprint string
before doing any other `sed` changes. - Ensure the sshd meta version numbers are
quoted. * Fri Apr 28 2023 Packit <hello(a)packit.dev> - 1.37.0-1 - Update to
upstream version 1.37.0 * Mon Apr 17 2023 Rich Megginson <rmeggins(a)redhat.com>
- 1.36.3-2 - strip github action badge links from headers of README.md files
before conversion to HTML - some of the converters do not like them - use
%{python3} instead of python3 to force use of system python3 in order to use
ruamel ``` ---- Automatic update for linux-system-roles-1.37.0-1.fc37. #####
**Changelog for linux-system-roles** ``` * Fri Apr 28 2023 Packit
<hello(a)packit.dev> - 1.37.0-1 - Update to upstream version 1.37.0 * Mon Apr 17
2023 Rich Megginson <rmeggins(a)redhat.com> - 1.36.3-2 - strip github action badge
links from headers of README.md files before conversion to HTML - some of the
converters do not like them - use %{python3} instead of python3 to force use of
system python3 in order to use ruamel ```
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 29 2023 Packit <hello(a)packit.dev> - 1.38.0-1
- Update to upstream version 1.38.0
* Fri Apr 28 2023 Rich Megginson <rmeggins(a)redhat.com> - 1.37.0-2
- We need to change the sshd fingerprint string before doing any other `sed` changes.
- Ensure the sshd meta version numbers are quoted.
* Fri Apr 28 2023 Packit <hello(a)packit.dev> - 1.37.0-1
- Update to upstream version 1.37.0
* Mon Apr 17 2023 Rich Megginson <rmeggins(a)redhat.com> - 1.36.3-2
- strip github action badge links from headers of README.md files
before conversion to HTML - some of the converters do not like them
- use %{python3} instead of python3 to force use of system python3 in
order to use ruamel
--------------------------------------------------------------------------------