The following Fedora 36 Security updates need testing: Age URL 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8900b35c6f webkit2gtk3-2.40.1-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-88c4b55c32 apptainer-1.1.8-1.fc36 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-003e7d2867 git-2.40.1-1.fc36

The following Fedora 36 Critical Path updates have yet to be approved: Age URL 130 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fabaf54050 gdb-12.1-3.fc36 10 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fb80a4fff2 pyproject-rpm-macros-1.7.0-1.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8900b35c6f webkit2gtk3-2.40.1-1.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1e8b5040e2 evolution-3.44.4-3.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0355ccf850 pipewire-0.3.70-1.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-af1aaae396 mariadb-connector-c-3.3.4-2.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-72ef70f677 fedora-appstream-metadata-20230419-1.fc36 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-460849706f linux-firmware-20230404-149.fc36 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-9c568e54e3 libmediainfo-23.03-2.fc36 libzen-0.4.41-1.fc36 mediainfo-23.03-2.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1c19398137 389-ds-base-2.1.8-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-84cd7e9664 vim-9.0.1486-1.fc36 3 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fe709e5968 bind-9.16.40-1.fc36 bind-dyndb-ldap-11.9-23.fc36 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-003e7d2867 git-2.40.1-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5d56032009 audit-3.1.1-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae708519b7 yelp-xsl-42.1-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c8e4b29906 yelp-42.2-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0fcff493a4 pango-1.50.14-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c3c044b053 libsoup-2.74.3-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-33d9926f1b libsoup3-3.0.8-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-36464ed1fb libgee-0.20.6-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fa43be79ad libadwaita-1.2.4-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8f75b2b779 gvfs-1.50.4-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e0d56e8cbd gupnp-1.4.4-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5166cfd02e gtk4-4.6.9-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-accccc5724 gssdp-1.4.1-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc4b102d50 gnome-control-center-42.10-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f6f005c884 gnome-autoar-0.4.4-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-087126a584 gjs-1.72.3-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3b340a42ca glibmm24-2.66.6-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-52e717eade gdk-pixbuf2-2.42.10-1.fc36 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-d770f900c1 kernel-6.2.13-100.fc36

The following builds have been pushed to Fedora 36 updates-testing

fedpkg-1.44-4.fc36 java-17-openjdk-17.0.7.0.7-1.fc36 java-17-openjdk-portable-17.0.7.0.7-1.fc36 java-latest-openjdk-20.0.1.0.9-3.rolling.fc36 java-latest-openjdk-portable-20.0.1.0.9-1.rolling.fc36 linux-system-roles-1.37.0-1.fc36 mame-0.254-1.fc36 nwg-panel-0.8.5-1.fc36 packit-0.75.0-1.fc36 perl-Hash-Ordered-0.014-1.fc36 premake-5.0.0^20230420git3f1e4f8-1.20230420git3f1e4f8.fc36 python-dogpile-cache-1.1.8-1.fc36 python-glymur-0.12.4-1.fc36 python-numexpr-2.8.4-1.fc36 rpkg-1.66-7.fc36

Details about builds:

================================================================================ fedpkg-1.44-4.fc36 (FEDORA-2023-f2b4814d96) Fedora utility for working with dist-git -------------------------------------------------------------------------------- Update Information:

Some patches: - rpkg: * Do not require 'sources' file for all namespaces (https://pagure.io/rpkg/pull-request/691) * Use release's rpmdefines in unused sources check (https://pagure.io/rpkg/pull-request/678) - fedpkg: * Improve invalid branch name error message (https://pagure.io/fedpkg/pull-request/518) -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Ond��ej Nosek onosek@redhat.com - 1.44-4 - Patch: Improve invalid branch name error message --------------------------------------------------------------------------------

================================================================================ java-17-openjdk-17.0.7.0.7-1.fc36 (FEDORA-2023-21be6eae54) OpenJDK 17 Runtime Environment -------------------------------------------------------------------------------- Update Information:

Updated to April Security update -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2028 Jiri Vanek jvanek@redhat.com - 1:17.0.7.0.7-1 - updated to 17.0.7.0.7 underlying portables - now untarring enforced version --------------------------------------------------------------------------------

================================================================================ java-17-openjdk-portable-17.0.7.0.7-1.fc36 (FEDORA-2023-9f58fccc9e) OpenJDK 17 Runtime Environment portable edition -------------------------------------------------------------------------------- Update Information:

April security update for java17 and java20 -------------------------------------------------------------------------------- ChangeLog:

* Wed Apr 26 2023 Andrew Hughes gnu.andrew@redhat.com - 1:17.0.7.0.7 - Update to jdk-17.0.7.0+7 - Update release notes to 17.0.7.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Sync whitespace in generate_source_tarball.sh with RHEL version - Update FIPS support against 17.0.7+6 and bring in latest changes: - * RH2134669: Add missing attributes when registering services in FIPS mode. - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class - * RH1940064: Enable XML Signature provider in FIPS mode - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized --------------------------------------------------------------------------------

================================================================================ java-latest-openjdk-20.0.1.0.9-3.rolling.fc36 (FEDORA-2023-21be6eae54) OpenJDK 20 Runtime Environment -------------------------------------------------------------------------------- Update Information:

Updated to April Security update -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Jiri Vanek jvanek@redhat.com - 1:20.0.1.0.9-1.rolling - updated to 20.0.1.0.9 underlying portables * Wed Apr 19 2023 Jiri Vanek jvanek@redhat.com - 1:20.0.0.0.36-3.rolling - using icons from source package - providing full sources via src package - requiring exact version.reelase of portables - returned libsystemconf.so --------------------------------------------------------------------------------

================================================================================ java-latest-openjdk-portable-20.0.1.0.9-1.rolling.fc36 (FEDORA-2023-9f58fccc9e) OpenJDK 20 Runtime Environment portable edition -------------------------------------------------------------------------------- Update Information:

April security update for java17 and java20 -------------------------------------------------------------------------------- ChangeLog:

* Wed Apr 26 2023 Andrew Hughes gnu.andrew@redhat.com - 1:20.0.1.0.9-1.rolling - Update to jdk-20.0.1+9 - Update release notes to 20.0.1+9 --------------------------------------------------------------------------------

================================================================================ linux-system-roles-1.37.0-1.fc36 (FEDORA-2023-2c672a8a37) Set of interfaces for unified system management -------------------------------------------------------------------------------- Update Information:

Automatic update for linux-system-roles-1.37.0-1.fc36. ##### **Changelog for linux-system-roles** ``` * Fri Apr 28 2023 Packit hello@packit.dev - 1.37.0-1 - Update to upstream version 1.37.0 * Mon Apr 17 2023 Rich Megginson rmeggins@redhat.com - 1.36.3-2 - strip github action badge links from headers of README.md files before conversion to HTML - some of the converters do not like them - use %{python3} instead of python3 to force use of system python3 in order to use ruamel ``` -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Packit hello@packit.dev - 1.37.0-1 - Update to upstream version 1.37.0 * Mon Apr 17 2023 Rich Megginson rmeggins@redhat.com - 1.36.3-2 - strip github action badge links from headers of README.md files before conversion to HTML - some of the converters do not like them - use %{python3} instead of python3 to force use of system python3 in order to use ruamel --------------------------------------------------------------------------------

================================================================================ mame-0.254-1.fc36 (FEDORA-2023-6b8553c514) Multiple Arcade Machine Emulator -------------------------------------------------------------------------------- Update Information:

Update to the latest upstream release: * https://www.mamedev.org/?p=524 -------------------------------------------------------------------------------- ChangeLog:

* Thu Apr 27 2023 Julian Sikorski belegdol@fedoraproject.org - 0.254-1 - Update to 0.254 - update to 0.254 - drop included patches - drop obsolete disstag conditional --------------------------------------------------------------------------------

================================================================================ nwg-panel-0.8.5-1.fc36 (FEDORA-2023-baac9778dc) GTK3-based panel for sway window manager -------------------------------------------------------------------------------- Update Information:

Update to latest version -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Artem Polishchuk ego.cordatus@gmail.com - 0.8.5-1 - chore: Update to 0.8.5 --------------------------------------------------------------------------------

================================================================================ packit-0.75.0-1.fc36 (FEDORA-2023-5e5f7ff42d) A tool for integrating upstream projects with Fedora operating system -------------------------------------------------------------------------------- Update Information:

Automatic update for packit-0.75.0-1.fc36. ##### **Changelog for packit** ``` * Fri Apr 28 2023 Packit hello@packit.dev - 0.75.0-1 - Detection of `%autorelease` usage in dist-git spec file during `propose-downstream` and `pull-from-upstream` has been improved and Packit will always preserve it. (#1949) - Changed build tool to hatchling and moved metadata to `pyproject.toml`. (PEP621) (#1913) - Respect `upstream_ref` for tags that start with "a", "b", "c", "e", "n", "r", "s". This was caused by an issue with a `branches` prefix being treated as a set of letters to remove. (#1943) - Reset `Release` field in dist-git spec file to `1` when the version in upstream spec file is not up-to-date with the release that triggered `propose_downstream`. (#1940) - Correctly catch the logs, if any of the user actions fail during the propose-downstream. (#1939) - `packit source-git` related commands can skip dist-git repos, where the git trailer is not found, when looking for the right dist-git dir where to work. (#1938) - More monorepo related fixes. (#1946, #1947, #1948) ``` -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Packit hello@packit.dev - 0.75.0-1 - Detection of `%autorelease` usage in dist-git spec file during `propose-downstream` and `pull-from-upstream` has been improved and Packit will always preserve it. (#1949) - Changed build tool to hatchling and moved metadata to `pyproject.toml`. (PEP621) (#1913) - Respect `upstream_ref` for tags that start with "a", "b", "c", "e", "n", "r", "s". This was caused by an issue with a `branches` prefix being treated as a set of letters to remove. (#1943) - Reset `Release` field in dist-git spec file to `1` when the version in upstream spec file is not up-to-date with the release that triggered `propose_downstream`. (#1940) - Correctly catch the logs, if any of the user actions fail during the propose-downstream. (#1939) - `packit source-git` related commands can skip dist-git repos, where the git trailer is not found, when looking for the right dist-git dir where to work. (#1938) - More monorepo related fixes. (#1946, #1947, #1948) --------------------------------------------------------------------------------

================================================================================ perl-Hash-Ordered-0.014-1.fc36 (FEDORA-2023-014b33a0d7) Perl class for ordered hashes -------------------------------------------------------------------------------- Update Information:

This update brings a new perl-Hash-Ordered package which enables you to create Perl hashes with a preserved key order. -------------------------------------------------------------------------------- ChangeLog:

* Tue Apr 18 2023 Petr Pisar ppisar@redhat.com 0.014-1 - Specfile autogenerated by cpanspec 1.78. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2187643 - Review Request: perl-Hash-Ordered - Perl class for ordered hashes https://bugzilla.redhat.com/show_bug.cgi?id=2187643 --------------------------------------------------------------------------------

================================================================================ premake-5.0.0^20230420git3f1e4f8-1.20230420git3f1e4f8.fc36 (FEDORA-2023-62e0fe42f6) Cross-platform build configuration tool -------------------------------------------------------------------------------- Update Information:

Update to latest commit id on 2023.04.20 -------------------------------------------------------------------------------- ChangeLog:

* Fri Jan 20 2023 Fedora Release Engineering releng@fedoraproject.org - 4.3-27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 4.3-26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ python-dogpile-cache-1.1.8-1.fc36 (FEDORA-2023-9d7d081d0e) A caching front-end based on the Dogpile lock -------------------------------------------------------------------------------- Update Information:

update to 1.1.18 -------------------------------------------------------------------------------- ChangeLog:

* Sun Sep 18 2022 Kevin Fenzi kevin@scrye.com - 1.1.8-1 - Update to 1.1.8. Fixes rhbz#2095790 * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 1.1.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Jun 15 2022 Python Maint python-maint@redhat.com - 1.1.5-2 - Rebuilt for Python 3.11 --------------------------------------------------------------------------------

================================================================================ python-glymur-0.12.4-1.fc36 (FEDORA-2023-21340c8c06) Interface to the OpenJPEG library for working with JPEG 2000 files -------------------------------------------------------------------------------- Update Information:

### Changes in 0.12.4 - Fix regression on default value of numres. ---- ### Changes in 0.12.3 - Add support for type hints. - Remove support for Python 3.8. ---- ### Changes in 0.12.2 - Fix error condition when MCT specified as false for grayscale image. - Make properties conform to numpydoc. - Fix YCbCr/JPEG TIFF conversion test failure on Fedora. - Stop using libtiff to create test files on the fly. -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.12.4-1 - Update to 0.12.4 (close RHBZ#2190054) * Mon Apr 24 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.12.3-1 - Update to 0.12.3 (close RHBZ#2188827) * Mon Apr 24 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.12.2-1 - Update to 0.12.2 (close RHBZ#2158610) --------------------------------------------------------------------------------

================================================================================ python-numexpr-2.8.4-1.fc36 (FEDORA-2023-a82572e36a) Fast numerical array expression evaluator for Python and NumPy -------------------------------------------------------------------------------- Update Information:

update to 2.8.4 -------------------------------------------------------------------------------- ChangeLog:

* Sun Jan 22 2023 Orion Poplawski orion@nwra.com - 2.8.4-1 - Update to 2.8.4 * Fri Jan 20 2023 Fedora Release Engineering releng@fedoraproject.org - 2.8.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 2.8.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Jun 22 2022 Lumir Balhar lbalhar@redhat.com - 2.8.1-3 - Fix build with the latest setuptools * Mon Jun 13 2022 Python Maint python-maint@redhat.com - 2.8.1-2 - Rebuilt for Python 3.11 --------------------------------------------------------------------------------

================================================================================ rpkg-1.66-7.fc36 (FEDORA-2023-f2b4814d96) Python library for interacting with rpm+git -------------------------------------------------------------------------------- Update Information:

Some patches: - rpkg: * Do not require 'sources' file for all namespaces (https://pagure.io/rpkg/pull-request/691) * Use release's rpmdefines in unused sources check (https://pagure.io/rpkg/pull-request/678) - fedpkg: * Improve invalid branch name error message (https://pagure.io/fedpkg/pull-request/518) -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 28 2023 Ond��ej Nosek onosek@redhat.com - 1.66-7 - Patch: Do not require 'sources' file for all namespaces - Use release's rpmdefines in unused sources check --------------------------------------------------------------------------------