The following Fedora 36 Security updates need testing: Age URL 15 https://bodhi.fedoraproject.org/updates/FEDORA-2023-88c4b55c32 apptainer-1.1.8-1.fc36 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-7ffeed7339 tcpreplay-4.4.3-3.fc36 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1bffe413e9 LibRaw-0.20.2-8.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-eee3f84a0f firefox-113.0-1.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-6a76c10a13 kitty-0.26.5-5.fc36
The following Fedora 36 Critical Path updates have yet to be approved: Age URL 143 https://bodhi.fedoraproject.org/updates/FEDORA-2022-fabaf54050 gdb-12.1-3.fc36 21 https://bodhi.fedoraproject.org/updates/FEDORA-2023-460849706f linux-firmware-20230404-149.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5d56032009 audit-3.1.1-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae708519b7 yelp-xsl-42.1-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c8e4b29906 yelp-42.2-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0fcff493a4 pango-1.50.14-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c3c044b053 libsoup-2.74.3-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-33d9926f1b libsoup3-3.0.8-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-36464ed1fb libgee-0.20.6-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fa43be79ad libadwaita-1.2.4-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8f75b2b779 gvfs-1.50.4-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e0d56e8cbd gupnp-1.4.4-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5166cfd02e gtk4-4.6.9-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-accccc5724 gssdp-1.4.1-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc4b102d50 gnome-control-center-42.10-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f6f005c884 gnome-autoar-0.4.4-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-087126a584 gjs-1.72.3-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3b340a42ca glibmm24-2.66.6-1.fc36 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-52e717eade gdk-pixbuf2-2.42.10-1.fc36 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-21be6eae54 java-17-openjdk-17.0.7.0.7-1.fc36 java-latest-openjdk-20.0.1.0.9-3.rolling.fc36 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-9d7d081d0e python-dogpile-cache-1.1.8-1.fc36 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-a002cc596d libopenmpt-0.6.10-1.fc36 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-030f3d8652 elfutils-0.189-2.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-575a80e91f xen-4.16.4-1.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-7859bdd41f python-beaker-1.12.1-1.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-fdfee8935f annobin-12.10-1.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-06a00e8fdc langtable-0.0.62-1.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-23ade814a0 hwdata-0.370-1.fc36 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-cb7c1c30fd glibc-2.35-23.fc36 7 https://bodhi.fedoraproject.org/updates/FEDORA-2023-eafe3fad16 binutils-2.37-38.fc36 7 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4ed9854500 pungi-4.3.8-2.fc36 7 https://bodhi.fedoraproject.org/updates/FEDORA-2023-9c568e54e3 libmediainfo-23.04-1.fc36 libzen-0.4.41-1.fc36 mediainfo-23.04-1.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae0ad20697 initscripts-10.19-1.fc36 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5647903b81 chkconfig-1.24-1.fc36 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-d7883ee5d7 libxslt-1.1.38-1.fc36 0 https://bodhi.fedoraproject.org/updates/FEDORA-2023-eee3f84a0f firefox-113.0-1.fc36
The following builds have been pushed to Fedora 36 updates-testing
kernel-6.2.15-100.fc36 libmatekbd-1.26.1-1.fc36 libmateweather-1.26.1-1.fc36 libmodulemd-2.15.0-2.fc36 liborc-1.7.9-1.fc36 lighttpd-1.4.70-1.fc36 mate-settings-daemon-1.26.1-1.fc36 osbuild-85-1.fc36 pappl-1.3.2-1.fc36 perl-Crypt-URandom-0.38-1.fc36 python-google-auth-2.18.0-1.fc36 python-specfile-0.17.0-1.fc36 thunderbird-102.11.0-1.fc36 tmt-1.23.0-1.fc36
Details about builds:
================================================================================ kernel-6.2.15-100.fc36 (FEDORA-2023-00393126a0) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 6.2.15 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Justin M. Forbes jforbes@fedoraproject.org [6.2.15-0] - redhat: configs: generic: x86: Disable CONFIG_VIDEO_OV2740 for x86 platform (Kate Hsuan) - Add Bugs to be fixed in 6.2.15 (Justin M. Forbes) - xfs: verify buffer contents when we skip log replay (Darrick J. Wong) - Linux v6.2.15 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2187439 - CVE-2023-2124 kernel: OOB access in the Linux kernel's XFS subsystem https://bugzilla.redhat.com/show_bug.cgi?id=2187439 [ 2 ] Bug #2189388 - CVE-2023-2269 kernel: A possible deadlock in dm_get_inactive_table in dm- ioctl.c leads to dos https://bugzilla.redhat.com/show_bug.cgi?id=2189388 --------------------------------------------------------------------------------
================================================================================ libmatekbd-1.26.1-1.fc36 (FEDORA-2023-579cf9fcf5) Libraries for mate kbd -------------------------------------------------------------------------------- Update Information:
- update to 1.26.1 -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Wolfgang Ulbrich fedora@raveit.de - 1.26.1-1 - update to 1.26.1 * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.26.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.26.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
> ffe1cbb (update to 1.26.1)
--------------------------------------------------------------------------------
================================================================================ libmateweather-1.26.1-1.fc36 (FEDORA-2023-ff66e4331b) Libraries to allow MATE Desktop to display weather information -------------------------------------------------------------------------------- Update Information:
- update to 1.26.1 -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Wolfgang Ulbrich fedora@raveit.de - 1.26.1-1 - update to 1.26.1 --------------------------------------------------------------------------------
================================================================================ libmodulemd-2.15.0-2.fc36 (FEDORA-2023-09dff8a6d0) Module metadata manipulation library -------------------------------------------------------------------------------- Update Information:
This release fixes a crash when converting a modulemd-packager object, parsing empty profiles, and quoting number-like string values. It also adds a support for decompressin ZStandard-compressed YAML files and removes a dependency on large libmagic library while retaining an ability to detect supported compression formats. -------------------------------------------------------------------------------- ChangeLog:
* Wed May 10 2023 Petr Pisar ppisar@redhat.com - 2.15.0-2 - Adapt STI tests to current meson * Wed May 10 2023 Petr Pisar ppisar@redhat.com - 2.15.0-1 - 2.15.0 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2203025 - libmodulemd-2.15.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2203025 --------------------------------------------------------------------------------
================================================================================ liborc-1.7.9-1.fc36 (FEDORA-2023-8255000af2) Library for producing small, fast columnar storage for Hadoop workloads -------------------------------------------------------------------------------- Update Information:
Apache ORC 1.7.9 GA -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Kaleb S. KEITHLEY <kkeithle [at] redhat.com> - 1.7.9-1 - 1.7.9 GA --------------------------------------------------------------------------------
================================================================================ lighttpd-1.4.70-1.fc36 (FEDORA-2023-74bdf62c8f) Lightning fast webserver with light system requirements -------------------------------------------------------------------------------- Update Information:
https://redmine.lighttpd.net/projects/lighttpd/wiki/Release-1_4_70 -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Gwyn Ciesla gwync@protonmail.com - 1.4.70-1 - 1.4.70 * Sun Mar 5 2023 Gwyn Ciesla gwync@protonmail.com - 1.4.69-2 - migrated to SPDX license -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2202991 - lighttpd-1.4.70 is available https://bugzilla.redhat.com/show_bug.cgi?id=2202991 --------------------------------------------------------------------------------
================================================================================ mate-settings-daemon-1.26.1-1.fc36 (FEDORA-2023-5eda01ad17) MATE Desktop settings daemon -------------------------------------------------------------------------------- Update Information:
- update to 1.26.1 -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Wolfgang Ulbrich fedora@raveit.de - 1.26.1-1 - update to 1.26.1 --------------------------------------------------------------------------------
================================================================================ osbuild-85-1.fc36 (FEDORA-2023-dbaa6f3f5c) A build system for OS images -------------------------------------------------------------------------------- Update Information:
Automatic update for osbuild-85-1.fc36. ##### **Changelog for osbuild** ``` * Wed May 10 2023 Packit hello@packit.dev - 85-1 Changes with 85 ---------------- * COMPOSER-1959: Start building osbuild on RHEL 8.9 and 9.3 nightly (#1300) * Python 3.6 compatibility fixes (#1294) * Update terraform SHA (#1299) * Update test runners for 8.8 & 9.2 nightly (#1162) * Various fixes (#1295) * loop: use LOOP_CONFIGURE when available (#1253) * stages/org.osbuild.ovf: support older python3 versions (#1306) * stages/yum.repo: add `sslverify` field (#1298) Contributions from: Alexander Todorov, Gianluca Zuccarelli, Jakub Rusz, Sanne Raymaekers, Thomas Lavocat, Tom���� Hozza ��� Somewhere on the Internet, 2023-05-10 * Thu Apr 27 2023 Packit hello@packit.dev - 84-1 Changes with 84 ---------------- * CI tests cleanup and maintenance (#1282) * Remove SSH keys of people who left the team (#1290) * Test: skip test cases if the tested filesystem is not supported on the platform (#1287) * lint: provide bandit configuration (#1265) * mockbuild.sh: use dnf to install local package, not rpm (#1292) * stages/lorax-script: minor schema adjustments (#1257) Contributions from: Ond��ej Budai, Simon de Vlieger, Tom���� Hozza ��� Somewhere on the Internet, 2023-04-26 ``` ---- Automatic update for osbuild-84-1.fc36. ##### **Changelog for osbuild** ``` * Thu Apr 27 2023 Packit hello@packit.dev - 84-1 Changes with 84 ---------------- * CI tests cleanup and maintenance (#1282) * Remove SSH keys of people who left the team (#1290) * Test: skip test cases if the tested filesystem is not supported on the platform (#1287) * lint: provide bandit configuration (#1265) * mockbuild.sh: use dnf to install local package, not rpm (#1292) * stages/lorax-script: minor schema adjustments (#1257) Contributions from: Ond��ej Budai, Simon de Vlieger, Tom���� Hozza ��� Somewhere on the Internet, 2023-04-26 ``` -------------------------------------------------------------------------------- ChangeLog:
* Wed May 10 2023 Packit hello@packit.dev - 85-1 Changes with 85 ---------------- * COMPOSER-1959: Start building osbuild on RHEL 8.9 and 9.3 nightly (#1300) * Python 3.6 compatibility fixes (#1294) * Update terraform SHA (#1299) * Update test runners for 8.8 & 9.2 nightly (#1162) * Various fixes (#1295) * loop: use LOOP_CONFIGURE when available (#1253) * stages/org.osbuild.ovf: support older python3 versions (#1306) * stages/yum.repo: add `sslverify` field (#1298)
Contributions from: Alexander Todorov, Gianluca Zuccarelli, Jakub Rusz, Sanne Raymaekers, Thomas Lavocat, Tom���� Hozza
��� Somewhere on the Internet, 2023-05-10 * Thu Apr 27 2023 Packit hello@packit.dev - 84-1 Changes with 84 ---------------- * CI tests cleanup and maintenance (#1282) * Remove SSH keys of people who left the team (#1290) * Test: skip test cases if the tested filesystem is not supported on the platform (#1287) * lint: provide bandit configuration (#1265) * mockbuild.sh: use dnf to install local package, not rpm (#1292) * stages/lorax-script: minor schema adjustments (#1257)
Contributions from: Ond��ej Budai, Simon de Vlieger, Tom���� Hozza
��� Somewhere on the Internet, 2023-04-26 --------------------------------------------------------------------------------
================================================================================ pappl-1.3.2-1.fc36 (FEDORA-2023-c17e9672b0) Printer Application Framework (PAPPL) -------------------------------------------------------------------------------- Update Information:
rebase to version 1.3.2 (#2195988) -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Richard Lescak rlescak@redhat.com - 1.3.2-1 - rebase to version 1.3.2 (#2195988) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2195988 - pappl-1.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2195988 --------------------------------------------------------------------------------
================================================================================ perl-Crypt-URandom-0.38-1.fc36 (FEDORA-2023-07e0eca857) Non-blocking randomness for Perl -------------------------------------------------------------------------------- Update Information:
This release adds urandom_ub() method for unbuffered reasing from /dev/urandom. -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Petr Pisar ppisar@redhat.com - 0.38-1 - 0.38 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2203031 - Upgrade perl-Crypt-URandom to 0.38 https://bugzilla.redhat.com/show_bug.cgi?id=2203031 --------------------------------------------------------------------------------
================================================================================ python-google-auth-2.18.0-1.fc36 (FEDORA-2023-3f0d2e4b45) Google Auth Python Library -------------------------------------------------------------------------------- Update Information:
Update python-google-auth to 2.18.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed May 10 2023 Fedora Release Monitoring release-monitoring@fedoraproject.org - 1:2.18.0-1 - Update to 2.18.0 (#2198978) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2198978 - python-google-auth-2.18.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2198978 --------------------------------------------------------------------------------
================================================================================ python-specfile-0.17.0-1.fc36 (FEDORA-2023-2a574109d2) A library for parsing and manipulating RPM spec files -------------------------------------------------------------------------------- Update Information:
Automatic update for python-specfile-0.17.0-1.fc36. ##### **Changelog for python-specfile** ``` * Thu May 11 2023 Packit hello@packit.dev - 0.17.0-1 - Added a new `guess_packager()` function that uses similar heuristics as `rpmdev- packager`, meaning that the `Specfile.add_changelog_entry()` method no longer requires `rpmdev-packager` to guess the changelog entry author. (#220) - The `Specfile.add_changelog_entry()` method now uses dates based on UTC instead of the local timezone. (#223) ``` -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Packit hello@packit.dev - 0.17.0-1 - Added a new `guess_packager()` function that uses similar heuristics as `rpmdev-packager`, meaning that the `Specfile.add_changelog_entry()` method no longer requires `rpmdev-packager` to guess the changelog entry author. (#220) - The `Specfile.add_changelog_entry()` method now uses dates based on UTC instead of the local timezone. (#223) --------------------------------------------------------------------------------
================================================================================ thunderbird-102.11.0-1.fc36 (FEDORA-2023-a39f529811) Mozilla Thunderbird mail/newsgroup client -------------------------------------------------------------------------------- Update Information:
Update to 102.11.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-18/ ; https://www.thunderbird.net/en- US/thunderbird/102.11.0/releasenotes/ -------------------------------------------------------------------------------- ChangeLog:
* Wed May 10 2023 Eike Rathke erack@redhat.com - 102.11.0-1 - Update to 102.11.0 --------------------------------------------------------------------------------
================================================================================ tmt-1.23.0-1.fc36 (FEDORA-2023-0022823653) Test Management Tool -------------------------------------------------------------------------------- Update Information:
Release tmt-1.23.0 ### Highlights - Refactored metadata linting ([demo](https://asciinema.org/a/584264)) - Add test start/end timestamps into results - Convert gitlab private namespace into dist-git url - Shorter Nitrate summary name - Add a new cpu property `flag` to the hardware spec - Fix duplicate export for Polarion hyperlinks - Don't use specific addresses in virtual provision - Support for fuzzy matching subcommand - Support logging "topics" to allow lower unnecessary verbosity -------------------------------------------------------------------------------- ChangeLog:
* Thu May 11 2023 Luk���� Zachar lzachar@redhat.com - 1.23.0-1 - Add `Artemis` to the `provision` documentation - Add artemis's user defined watchdog specification - Add support for require of files and directories - Expose test serial number as an environment variable - Print only failed objects when linting in hook - Refactored metadata linting - Request newer os image and python version for docs - Explore all available plugins only once - Add test start/end timestamps into results - Implement `deprecated` for obsoleted options - Unify results examples in test and plan specification - Convert gitlab private namespace into dist-git url - Shorter Nitrate summary name - Correct the path of Ansible playbook - Refactor logging during plugin discovery, using tmt's logging - Improve names and docs around CLI context in Common classes - Fix ruamel.yaml type waivers that mypy sometimes ignores - Drop some no longer valid TODO comments - Replace '--t' by '-t' when creating a new plan with template - Add a new cpu property `flag` to the hardware spec - Fix duplicate export for Polarion hyperlinks - Option to list locally cached images for testcloud - Log out testcloud version in virtual provision - Use yq instead of grep when testing YAML content - Don't use specific addresses in virtual provision - Polish workdir pruning - pathlib transition & logging - Support for fuzzy matching subcommand - Add new link relation `test-script` definition - Remove `group` from the `multihost` specification - Move "show exception" code to utils - Add missing support for 0.0.55 and 0.0.48 API - Add type annotations to tmt.steps.STEPS/ACTIONS - Support logging "topics" to allow lower unnecessary verbosity - Add support for right-padding of logging labels - Move tools config to `pyproject.toml`, add Ruff - Example to parametrize test selection via envars - Merge run_command() and _run_command() into Command.run() - Install beakerlib into images used in test/full - Don't run `ShellCheck` on tests & decrease severity - Support multiline strings for option help texts - Fix tests run only in full testsuite --------------------------------------------------------------------------------
test-reports@lists.fedoraproject.org