[SECURITY] Fedora 38 Update: ghc-base64-0.4.2.4-28.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-6ad6b9f417
2024-03-31 01:53:51.907786
--------------------------------------------------------------------------------
Name : ghc-base64
Product : Fedora 38
Version : 0.4.2.4
Release : 28.fc38
URL : https://hackage.haskell.org/package/base64
Summary : A modern RFC 4648-compliant Base64 library
Description :
RFC 4648-compliant Base64 with an eye towards performance and modernity
(additional support for RFC 7049 standards).
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-35936 and CVE-2023-38745
pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745
base64 now packaged in Fedora
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 28 2024 Jens Petersen <petersen(a)redhat.com> - 0.4.2.4-28
- bump over pandoc
* Fri May 12 2023 Jens Petersen <petersen(a)redhat.com> - 0.4.2.4-2
- add doc files to devel
* Mon Jan 23 2023 Jens Petersen <petersen(a)redhat.com> - 0.4.2.4-1
- spec file generated by cabal-rpm-2.1.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2163472 - Review Request: ghc-base64 - A modern RFC 4648-compliant Base64 library
https://bugzilla.redhat.com/show_bug.cgi?id=2163472
[ 2 ] Bug #2220873 - TRIAGE pandoc: TRIAGE_CVE-2023-35936 pandoc: allows attacker to create or overwrite arbitrary files on the system [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2220873
[ 3 ] Bug #2227034 - CVE-2023-38745 pandoc: allows attacker to create or overwrite arbitrary files on the system [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227034
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-6ad6b9f417' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
Fedora 38 Update: python-glad2-2.0.6-1.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-a63310b2ca
2024-03-31 01:53:51.907779
--------------------------------------------------------------------------------
Name : python-glad2
Product : Fedora 38
Version : 2.0.6
Release : 1.fc38
URL : https://github.com/Dav1dde/glad
Summary : Multi-Language GL/GLES/EGL/GLX/WGL Loader-Generator
Description :
Glad uses the official Khronos-XML specs to generate a GL/GLES/EGL/GLX/WGL
Loader made for your needs.
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#2270163)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 22 2024 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2.0.6-1
- Update to latest version (#2270163)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2270163 - python-glad2-2.0.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2270163
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-a63310b2ca' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
Fedora 38 Update: rust-1.77.0-1.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-1c4ce1e04f
2024-03-31 01:53:51.907772
--------------------------------------------------------------------------------
Name : rust
Product : Fedora 38
Version : 1.77.0
Release : 1.fc38
URL : https://www.rust-lang.org
Summary : The Rust Programming Language
Description :
Rust is a systems programming language that runs blazingly fast, prevents
segfaults, and guarantees thread safety.
This package includes the Rust compiler and documentation generator.
--------------------------------------------------------------------------------
Update Information:
Update to Rust 1.77.0:
C-string literals
Support for recursion in async fn
offset_of!
Enable strip in release profiles by default
Stabilized APIs
See the blog post and release notes for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 21 2024 Nikita Popov <npopov(a)redhat.com> - 1.77.0-1
- Update to 1.77.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-1c4ce1e04f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
Fedora 38 Update: luminance-hdr-2.6.1.1-64.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-bcd4fd7dd4
2024-03-31 01:53:51.907766
--------------------------------------------------------------------------------
Name : luminance-hdr
Product : Fedora 38
Version : 2.6.1.1
Release : 64.fc38
URL : http://qtpfsgui.sourceforge.net/
Summary : GUI that provides a complete workflow for HDR imaging
Description :
Luminance HDR is a graphical user interface (based on the Qt5 toolkit) that
provides a complete workflow for HDR imaging.
Supported HDR formats:
��� OpenEXR (extension: exr)
��� Radiance RGBE (extension: hdr)
��� Tiff formats: 16bit, 32bit (float) and LogLuv (extension: tiff)
��� Raw image formats (extension: various)
��� PFS native format (extension: pfs)
Supported LDR formats:
��� JPEG, PNG, PPM, PBM, TIFF, FITS
Supported features:
��� Create an HDR file from a set of images (JPEG, TIFF 8bit and 16bit, RAW) of
the same scene taken at different exposure settings
��� Save and load HDR files
��� Rotate and resize HDR files
��� Tonemap HDR images
��� Projective Transformations
��� Copy EXIF data between sets of images
��� Supports internationalization
Raw image formats are supported - and treated as HDR - thanks to LibRAW.
The code is in part based on the existing open source packages:
��� ���pfstools���, ���pfstmo��� and ���pfscalibration��� by Grzegorz Krawczyk and Rafal
Mantiuk
��� ���qpfstmo���, by Nicholas Phillips.
Without their contribution all of this would have not been possible.
--------------------------------------------------------------------------------
Update Information:
Add developer ID in AppStream XML metadata
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.6.1.1-64
- Add developer ID in AppData (fix FTBFS with appstream 1.0.2)
* Fri Mar 22 2024 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.6.1.1-62
- Fix build with exiv2-0.28.0
* Fri Mar 22 2024 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 2.6.1.1-61
- Fix remaining Callaway notation license
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.6.1.1-60
- Fix deprecated top-level developer_name in AppData XML
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.6.1.1-59
- Ask appstreamcli to explain validation findings
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.6.1.1-58
- Correct appstreamcli invocation (--nonet no longer works)
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.6.1.1-57
- Break a long line in the spec file
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-bcd4fd7dd4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
Fedora 38 Update: notejot-3.5.1-15.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-d3e14a8529
2024-03-31 01:53:51.907759
--------------------------------------------------------------------------------
Name : notejot
Product : Fedora 38
Version : 3.5.1
Release : 15.fc38
URL : https://github.com/lainsce/notejot
Summary : Jot your ideas
Description :
A stupidly-simple notes application for any type of short term notes or ideas.
��� ���� Color your notes in 8 different colors
��� ���� Classify them in notebooks
��� ���� Format text to your liking
��� ���� Pin your most important ones
--------------------------------------------------------------------------------
Update Information:
Add developer ID to AppStream XML metadata
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.5.1-15
- Add developer ID to AppStream XML metadata
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.5.1-13
- Fix deprecated top-level developer_name in AppData XML
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.5.1-12
- Ask appstreamcli to explain validation findings
* Fri Mar 22 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.5.1-11
- Correct appstreamcli invocation (--nonet no longer works)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-d3e14a8529' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
Fedora 38 Update: libphidget22-1.19.20240304-1.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-42a5b1caab
2024-03-31 01:53:51.907753
--------------------------------------------------------------------------------
Name : libphidget22
Product : Fedora 38
Version : 1.19.20240304
Release : 1.fc38
URL : https://www.phidgets.com
Summary : Drivers and API for Phidget devices
Description :
Phidgets are a set of "plug and play" building blocks for low cost USB
sensing and control from your PC. All the USB complexity is taken care
of by the robust libphidget API.
--------------------------------------------------------------------------------
Update Information:
Update to latest release
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 21 2024 Richard Shaw <hobbes1069(a)gmail.com> - 1.19.20240304-1
- Update to 1.19.20240304.
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17.20240109-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.17.20240109-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 12 2024 Richard Shaw <hobbes1069(a)gmail.com> - 1.17.20240109-1
- Update to 1.17.20240109.
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.15.20230603-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2213275 - libphidget22-1.19.20240304 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2213275
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-42a5b1caab' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
Fedora 38 Update: xmake-2.8.9-1.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-256167871e
2024-03-31 01:53:51.907746
--------------------------------------------------------------------------------
Name : xmake
Product : Fedora 38
Version : 2.8.9
Release : 1.fc38
URL : https://xmake.io
Summary : A cross-platform build utility based on Lua
Description :
xmake is a lightweight cross-platform build utility based on Lua.
It uses xmake.lua to maintain project builds. Compared with
makefile/CMakeLists.txt, the configuration syntax is more concise and
intuitive. It is very friendly to novices and can quickly get started in
a short time. Let users focus more on actual project development.
It can compile the project directly like Make/Ninja, or generate project
files like CMake/Meson, and it also has a built-in package management
system to help users solve the integrated use of C/C++ dependent
libraries.
--------------------------------------------------------------------------------
Update Information:
Automatic update for xmake-2.8.9-1.fc38.
Changelog for xmake
* Thu Mar 21 2024 Packit <hello(a)packit.dev> - 2.8.9-1
- [packit] 2.8.9 upstream release
- Resolves rhbz#2270859
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 21 2024 Packit <hello(a)packit.dev> - 2.8.9-1
- [packit] 2.8.9 upstream release
- Resolves rhbz#2270859
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2270859 - xmake-2.8.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2270859
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-256167871e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
[SECURITY] Fedora 38 Update: gnutls-3.8.4-1.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-af55471f75
2024-03-31 01:53:51.907738
--------------------------------------------------------------------------------
Name : gnutls
Product : Fedora 38
Version : 3.8.4
Release : 1.fc38
URL : http://www.gnutls.org/
Summary : A TLS protocol implementation
Description :
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS
protocols and technologies around them. It provides a simple C language
application programming interface (API) to access the secure communications
protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and
other required structures.
--------------------------------------------------------------------------------
Update Information:
Rebase gnutls to version 3.8.4
- contains fixes for CVE-2024-28834 and CVE-2024-28835
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 20 2024 Zoltan Fridrich <zfridric(a)redhat.com> - 3.8.4-1
- [packit] 3.8.4 upstream release
- Resolves rhbz#2270320
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2270320 - gnutls-3.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2270320
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-af55471f75' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
Fedora 38 Update: dnf5-5.1.15-1.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-ea2bec8480
2024-03-31 01:53:51.907730
--------------------------------------------------------------------------------
Name : dnf5
Product : Fedora 38
Version : 5.1.15
Release : 1.fc38
URL : https://github.com/rpm-software-management/dnf5
Summary : Command-line package manager
Description :
DNF5 is a command-line package manager that automates the process of installing,
upgrading, configuring, and removing computer programs in a consistent manner.
It supports RPM packages, modulemd modules, and comps groups & environments.
--------------------------------------------------------------------------------
Update Information:
Automatic update for dnf5-5.1.15-1.fc38.
Changelog for dnf5
* Fri Mar 15 2024 Packit <hello(a)packit.dev> - 5.1.15-1
- Update translations from weblate
- Automatically set `upgrade --downloadonly` when `--destdir` is used
- Write warnings to stderr too in config-manager plugin
- Add repoid to generated repository name in config-manager plugin
- Bump sdbus-cpp requirement to 0.9.0
- Document and implement dnf5daemon Rpm interface
- Document and implement dnf5daemon Goal interface
- Document and implement dnf5daemon Repo interface
- Document and implement dnf5daemon Base interface
- Document and implement dnf5daemon Advisory interface
- Document and implement dnf5daemon SessionManager interface
- Add `dnf5daemon repo --enable/--disable` commands
- automatic: Skip network availability check without remote repo
- dnf5daemon: Rpm.list() works with commandline pkgs
* Tue Mar 05 2024 Packit <hello(a)packit.dev> - 5.1.14-1
- Update translations from weblate
- Make the error to resolve module metadata more descriptive
- Switch off deltarpm support
- Limit number of dnf5daemon simultaneously active sessions
- Make info and list commands case insesitive
- Allow dnf5daemon configuration overrides for root
- Add repoquery.hpp for swig-4.2.1 support
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 15 2024 Packit <hello(a)packit.dev> - 5.1.15-1
- Update translations from weblate
- Automatically set `upgrade --downloadonly` when `--destdir` is used
- Write warnings to stderr too in config-manager plugin
- Add repoid to generated repository name in config-manager plugin
- Bump sdbus-cpp requirement to 0.9.0
- Document and implement dnf5daemon Rpm interface
- Document and implement dnf5daemon Goal interface
- Document and implement dnf5daemon Repo interface
- Document and implement dnf5daemon Base interface
- Document and implement dnf5daemon Advisory interface
- Document and implement dnf5daemon SessionManager interface
- Add `dnf5daemon repo --enable/--disable` commands
- automatic: Skip network availability check without remote repo
- dnf5daemon: Rpm.list() works with commandline pkgs
* Tue Mar 5 2024 Packit <hello(a)packit.dev> - 5.1.14-1
- Update translations from weblate
- Make the error to resolve module metadata more descriptive
- Switch off deltarpm support
- Limit number of dnf5daemon simultaneously active sessions
- Make info and list commands case insesitive
- Allow dnf5daemon configuration overrides for root
- Add repoquery.hpp for swig-4.2.1 support
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-ea2bec8480' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week
Fedora 38 Update: nfs-utils-2.6.4-0.rc5.fc38
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-4fbfd244fe
2024-03-31 01:53:51.907689
--------------------------------------------------------------------------------
Name : nfs-utils
Product : Fedora 38
Version : 2.6.4
Release : 0.rc5.fc38
URL : http://linux-nfs.org/
Summary : NFS utilities and supporting clients and daemons for the kernel NFS server
Description :
The nfs-utils package provides a daemon for the kernel NFS server and
related tools, which provides a much higher level of performance than the
traditional Linux NFS server used by most users.
This package also contains the showmount program. Showmount queries the
mount daemon on a remote host for information about the NFS (Network File
System) server on the remote host. For example, showmount can display the
clients which are mounted on that host.
This package also contains the mount.nfs and umount.nfs program.
--------------------------------------------------------------------------------
Update Information:
Updated to the latest RC release: nfs-utils-2-7-1-rc5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 15 2024 Steve Dickson <steved(a)redhat.com> 2.6.4-0.rc5
- Updated to the latest RC release: nfs-utils-2-7-1-rc5
* Wed Jan 24 2024 Steve Dickson <steved(a)redhat.com> 2.6.4-0.rc4
- Updated to the latest RC release: nfs-utils-2-7-1-rc4
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-4fbfd244fe' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
1 month, 1 week