Post Syndicated from original https://lwn.net/Articles/912776/

Fedora releases have traditionally happened later than their target date,
though the project has done better on that score in recent years. Ben
Cotton has announced in
Fedora Magazine that the upcoming Fedora 37 release, initially planned
for October 25, won’t be happening until November 15. The
immediate cause is an
impending OpenSSL update which fixes a vulnerability described as
“critical”.

Ironically, Fedora’s openness means we can’t start preparing ahead
of time. All of our build pipelines and artifacts are open. If we
were to start building updates, this would disclose the
vulnerability before the embargo lifts. As a result, we only know
that OpenSSL considers this the highest level of severity and Red
Hat’s Product Security team strongly recommended we wait for a fix
before releasing Fedora Linux 37.