The following Fedora 36 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8900b35c6f webkit2gtk3-2.40.1-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-88c4b55c32 apptainer-1.1.8-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-003e7d2867 git-2.40.1-1.fc36

The following Fedora 36 Critical Path updates have yet to be approved: Age URL 131 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fabaf54050 gdb-12.1-3.fc36 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fb80a4fff2 pyproject-rpm-macros-1.7.0-1.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-af1aaae396 mariadb-connector-c-3.3.4-2.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-72ef70f677 fedora-appstream-metadata-20230419-1.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-460849706f linux-firmware-20230404-149.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8900b35c6f webkit2gtk3-2.40.1-1.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1e8b5040e2 evolution-3.44.4-3.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0355ccf850 pipewire-0.3.70-1.fc36 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-9c568e54e3 libmediainfo-23.03-2.fc36 libzen-0.4.41-1.fc36 mediainfo-23.03-2.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-003e7d2867 git-2.40.1-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1c19398137 389-ds-base-2.1.8-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-84cd7e9664 vim-9.0.1486-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fe709e5968 bind-9.16.40-1.fc36 bind-dyndb-ldap-11.9-23.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5d56032009 audit-3.1.1-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae708519b7 yelp-xsl-42.1-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c8e4b29906 yelp-42.2-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0fcff493a4 pango-1.50.14-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c3c044b053 libsoup-2.74.3-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-33d9926f1b libsoup3-3.0.8-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-36464ed1fb libgee-0.20.6-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fa43be79ad libadwaita-1.2.4-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8f75b2b779 gvfs-1.50.4-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e0d56e8cbd gupnp-1.4.4-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5166cfd02e gtk4-4.6.9-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-accccc5724 gssdp-1.4.1-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc4b102d50 gnome-control-center-42.10-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f6f005c884 gnome-autoar-0.4.4-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-087126a584 gjs-1.72.3-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3b340a42ca glibmm24-2.66.6-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-52e717eade gdk-pixbuf2-2.42.10-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-d770f900c1 kernel-6.2.13-100.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-21be6eae54 java-17-openjdk-17.0.7.0.7-1.fc36 java-latest-openjdk-20.0.1.0.9-3.rolling.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-9d7d081d0e python-dogpile-cache-1.1.8-1.fc36

The following builds have been pushed to Fedora 36 updates-testing

atril-1.26.1-1.fc36 baresip-3.1.0-1.fc36 elfutils-0.189-2.fc36 golang-github-prometheus-alertmanager-0.23.0-15.fc36 libre-3.1.0-1.fc36 linux-system-roles-1.38.0-1.fc36 rakudo-2023.02-3.fc36

Details about builds:

================================================================================ atril-1.26.1-1.fc36 (FEDORA-2023-43ee644bb9) Document viewer -------------------------------------------------------------------------------- Update Information:

- update tp 1.26.1 -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Wolfgang Ulbrich fedora@raveit.de - 1.26.1-1 - update to 1.26.1 release --------------------------------------------------------------------------------

================================================================================ baresip-3.1.0-1.fc36 (FEDORA-2023-a7b4d62441) Modular SIP user-agent with audio and video support -------------------------------------------------------------------------------- Update Information:

# Baresip v3.1.0 (2023-04-27) - config: add `net_af` config setting - gzrtp: RX thread - safe stop - ci: avoid hardcoded OpenSSL path on macOS - fix cmake modules - cmake/mqtt: fix `MOSQUITTO_LIBRARY` - mc: send module event whenever receiver is stopped - menu: limit early audio TX streams - call: check if SIP UPDATE is allowed, but always update local media - account: increase line handler size to 1024 characters - cmake: avoid include of `/usr/local/include` - call,audio: respect SDP media dir on audio start similar to video - video: refactor paced and burst sending - ctrl_dbus,ice,png_vf: Fix format string usage - menu limit early video - play: flush of the aubuf directly before the replay starts - stream: fix setting of RTP tos for IPv6 - call: only flush audio stream when stream starts - menu: use busy tone when call declined (scode 603) - ua: incoming DTMF `key=0` should be reported as DTMF end - video: fix possible 32bit overflow - ua: deref call on `reset_transp` fail - uag: avoid transport reset if local address has not changed - ci: add gcc-12 for Ubuntu 22.04 (ubuntu-latest) - docs: remove librem from README files # libre v3.1.0 (2023-04-27) - ci: bump mingw openssl to 3.1.0 - thread: add `cnd_timedwait()` - Add tls and http apis for post handshake - ci/sanitizers: add multi thread testing - ci/win: use separate retest step - thread: fix `pthread_setname_np` thread pointer deref - ci: add FreeBSD test - cmake: bump minimum version of OpenSSL to 1.1.1 - ci: avoid hardcoded OpenSSL path on macOS - sip,uri,test: Escape SIP URIs - udp: add a lock for the helpers list - rem/vidmix: add position index handling - aubuf: set auframe fields correct in read_auframe loop - list: refactor/optimize `list_insert_sorted` - ci/freebsd: remove openssl-devel - tmr: add `tmr_continue()` - ci,cmake: replace C99 check by strict C99 and C11 checks - atomic: Fix missing memory order arguments in MSVC atomic functions - thread: remove win32 `SetThreadDescription` -------------------------------------------------------------------------------- ChangeLog:

* Thu Apr 27 2023 Robert Scheck robert@fedoraproject.org 3.1.0-1 - Upgrade to 3.1.0 (#2190310) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2190309 - libre-3.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2190309 [ 2 ] Bug #2190310 - baresip-3.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2190310 --------------------------------------------------------------------------------

================================================================================ elfutils-0.189-2.fc36 (FEDORA-2023-030f3d8652) A collection of utilities and DSOs to handle ELF files and DWARF data -------------------------------------------------------------------------------- Update Information:

eu-elfcompress would rewrite an ELF file if no section needed (de)compressing -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 22 2023 Mark Wielaard mjw@fedoraproject.org - 0.189-2 - Add elfutils-0.189-c99-compat.patch - Add elfutils-0.189-elfcompress.patch --------------------------------------------------------------------------------

================================================================================ golang-github-prometheus-alertmanager-0.23.0-15.fc36 (FEDORA-2023-b669ead5ba) Prometheus Alertmanager -------------------------------------------------------------------------------- Update Information:

Include s390x, and disable tests because it is failing -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 29 2023 S��rgio M. Basto sergio@serjux.com - 0.23.0-15 - Include s390x, and disable tests because it is failing * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 0.23.0-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Aug 10 2022 Maxwell G gotmax@e.email - 0.23.0-13 - Rebuild to fix FTBFS * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 0.23.0-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jul 19 2022 Maxwell G gotmax@e.email - 0.23.0-11 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang * Thu Jun 23 2022 Maxwell G gotmax@e.email - 0.23.0-10 - Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). --------------------------------------------------------------------------------

================================================================================ libre-3.1.0-1.fc36 (FEDORA-2023-a7b4d62441) Generic library for real-time communications -------------------------------------------------------------------------------- Update Information:

# Baresip v3.1.0 (2023-04-27) - config: add `net_af` config setting - gzrtp: RX thread - safe stop - ci: avoid hardcoded OpenSSL path on macOS - fix cmake modules - cmake/mqtt: fix `MOSQUITTO_LIBRARY` - mc: send module event whenever receiver is stopped - menu: limit early audio TX streams - call: check if SIP UPDATE is allowed, but always update local media - account: increase line handler size to 1024 characters - cmake: avoid include of `/usr/local/include` - call,audio: respect SDP media dir on audio start similar to video - video: refactor paced and burst sending - ctrl_dbus,ice,png_vf: Fix format string usage - menu limit early video - play: flush of the aubuf directly before the replay starts - stream: fix setting of RTP tos for IPv6 - call: only flush audio stream when stream starts - menu: use busy tone when call declined (scode 603) - ua: incoming DTMF `key=0` should be reported as DTMF end - video: fix possible 32bit overflow - ua: deref call on `reset_transp` fail - uag: avoid transport reset if local address has not changed - ci: add gcc-12 for Ubuntu 22.04 (ubuntu-latest) - docs: remove librem from README files # libre v3.1.0 (2023-04-27) - ci: bump mingw openssl to 3.1.0 - thread: add `cnd_timedwait()` - Add tls and http apis for post handshake - ci/sanitizers: add multi thread testing - ci/win: use separate retest step - thread: fix `pthread_setname_np` thread pointer deref - ci: add FreeBSD test - cmake: bump minimum version of OpenSSL to 1.1.1 - ci: avoid hardcoded OpenSSL path on macOS - sip,uri,test: Escape SIP URIs - udp: add a lock for the helpers list - rem/vidmix: add position index handling - aubuf: set auframe fields correct in read_auframe loop - list: refactor/optimize `list_insert_sorted` - ci/freebsd: remove openssl-devel - tmr: add `tmr_continue()` - ci,cmake: replace C99 check by strict C99 and C11 checks - atomic: Fix missing memory order arguments in MSVC atomic functions - thread: remove win32 `SetThreadDescription` -------------------------------------------------------------------------------- ChangeLog:

* Thu Apr 27 2023 Robert Scheck robert@fedoraproject.org 3.1.0-1 - Upgrade to 3.1.0 (#2190309) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2190309 - libre-3.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2190309 [ 2 ] Bug #2190310 - baresip-3.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2190310 --------------------------------------------------------------------------------

================================================================================ linux-system-roles-1.38.0-1.fc36 (FEDORA-2023-eef1b557a4) Set of interfaces for unified system management -------------------------------------------------------------------------------- Update Information:

Automatic update for linux-system-roles-1.38.0-1.fc36. ##### **Changelog for linux-system-roles** ``` * Sat Apr 29 2023 Packit hello@packit.dev - 1.38.0-1 - Update to upstream version 1.38.0 * Fri Apr 28 2023 Rich Megginson rmeggins@redhat.com - 1.37.0-2 - We need to change the sshd fingerprint string before doing any other `sed` changes. - Ensure the sshd meta version numbers are quoted. * Fri Apr 28 2023 Packit hello@packit.dev - 1.37.0-1 - Update to upstream version 1.37.0 * Mon Apr 17 2023 Rich Megginson rmeggins@redhat.com - 1.36.3-2 - strip github action badge links from headers of README.md files before conversion to HTML - some of the converters do not like them - use %{python3} instead of python3 to force use of system python3 in order to use ruamel ``` ---- Automatic update for linux-system-roles-1.37.0-1.fc36. ##### **Changelog for linux-system-roles** ``` * Fri Apr 28 2023 Packit hello@packit.dev - 1.37.0-1 - Update to upstream version 1.37.0 * Mon Apr 17 2023 Rich Megginson rmeggins@redhat.com - 1.36.3-2 - strip github action badge links from headers of README.md files before conversion to HTML - some of the converters do not like them - use %{python3} instead of python3 to force use of system python3 in order to use ruamel ``` -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 29 2023 Packit hello@packit.dev - 1.38.0-1 - Update to upstream version 1.38.0 * Fri Apr 28 2023 Rich Megginson rmeggins@redhat.com - 1.37.0-2 - We need to change the sshd fingerprint string before doing any other `sed` changes. - Ensure the sshd meta version numbers are quoted. * Fri Apr 28 2023 Packit hello@packit.dev - 1.37.0-1 - Update to upstream version 1.37.0 * Mon Apr 17 2023 Rich Megginson rmeggins@redhat.com - 1.36.3-2 - strip github action badge links from headers of README.md files before conversion to HTML - some of the converters do not like them - use %{python3} instead of python3 to force use of system python3 in order to use ruamel --------------------------------------------------------------------------------

================================================================================ rakudo-2023.02-3.fc36 (FEDORA-2023-180147f21a) Raku on MoarVM, JVM, and JS -------------------------------------------------------------------------------- Update Information:

Update to 2023.04 -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 29 2023 topazus topazus@outlook.com - 2023.02-3 - Update to 2023.04 --------------------------------------------------------------------------------