The following Fedora 39 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1ef6197a49 exim-4.97.1-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2648dd2e0e rubygem-httparty-0.18.1-9.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f34963bef8 python-flask-security-too-5.1.2-3.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e812bddc51 tkimg-1.4.16-1.fc39 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-359d7180b3 zabbix-6.0.25-1.fc39
The following Fedora 39 Critical Path updates have yet to be approved: Age URL 73 https://bodhi.fedoraproject.org/updates/FEDORA-2023-60969403d0 go-rpm-macros-3.3.0-1.fc39 go2rpm-1.10.0-1.fc39 19 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c12a2a84a4 toolbox-0.0.99.5-1.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3bd19e87a3 llvm-17.0.6-2.fc39 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f13cd1514c python-rpds-py-0.16.2-1.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2023-907fd37700 breeze-icon-theme-5.113.0-1.fc39 extra-cmake-modules-5.113.0-1.fc39 kf5-5.113.0-1.fc39 kf5-attica-5.113.0-1.fc39 kf5-baloo-5.113.0-1.fc39 kf5-bluez-qt-5.113.0-1.fc39 kf5-frameworkintegration-5.113.0-1.fc39 kf5-kactivities-5.113.0-1.fc39 kf5-kactivities-stats-5.113.0-1.fc39 kf5-karchive-5.113.0-1.fc39 kf5-kauth-5.113.0-1.fc39 kf5-kbookmarks-5.113.0-1.fc39 kf5-kcalendarcore-5.113.0-1.fc39 kf5-kcmutils-5.113.0-1.fc39 kf5-kcodecs-5.113.0-1.fc39 kf5-kcompletion-5.113.0-1.fc39 kf5-kconfig-5.113.0-1.fc39 kf5-kconfigwidgets-5.113.0-1.fc39 kf5-kcontacts-5.113.0-1.fc39 kf5-kcoreaddons-5.113.0-1.fc39 kf5-kcrash-5.113.0-1.fc39 kf5-kdav-5.113.0-1.fc39 kf5-kdbusaddons-5.113.0-1.fc39 kf5-kdeclarative-5.113.0-1.fc39 kf5-kded-5.113.0-1.fc39 kf5-kdelibs4support-5.113.0-1.fc39 kf5-kdesignerplugin-5.113.0-1.fc39 kf5-kdesu-5.113.0-1.fc39 kf5-kdewebkit-5.113.0-1.fc39 kf5-kdnssd-5.113.0-1.fc39 kf5-kdoctools-5.113.0-1.fc39 kf5-kemoticons -5.113.0-1.fc39 kf5-kfilemetadata-5.113.0-2.fc39 kf5-kglobalaccel-5.113.0-1.fc39 kf5-kguiaddons-5.113.0-1.fc39 kf5-kholidays-5.113.0-1.fc39 kf5-khtml-5.113.0-1.fc39 kf5-ki18n-5.113.0-1.fc39 kf5-kiconthemes-5.113.0-1.fc39 kf5-kidletime-5.113.0-1.fc39 kf5-kimageformats-5.113.0-1.fc39 kf5-kinit-5.113.0-1.fc39 kf5-kio-5.113.0-1.fc39 kf5-kirigami2-5.113.0-1.fc39 kf5-kitemmodels-5.113.0-1.fc39 kf5-kitemviews-5.113.0-1.fc39 kf5-kjobwidgets-5.113.0-1.fc39 kf5-kjs-5.113.0-1.fc39 kf5-kjsembed-5.113.0-1.fc39 kf5-kmediaplayer-5.113.0-1.fc39 kf5-knewstuff-5.113.0-1.fc39 kf5-knotifications-5.113.0-1.fc39 kf5-knotifyconfig-5.113.0-1.fc39 kf5-kpackage-5.113.0-1.fc39 kf5-kparts-5.113.0-1.fc39 kf5-kpeople-5.113.0-1.fc39 kf5-kplotting-5.113.0-1.fc39 kf5-kpty-5.113.0-1.fc39 kf5-kquickcharts-5.113.0-1.fc39 kf5-kross-5.113.0-1.fc39 kf5-krunner-5.113.0-1.fc39 kf5-kservice-5.113.0-1.fc39 kf5-ktexteditor-5.113.0-1.fc39 kf5-ktextwidgets-5.113.0-1.fc39 kf5-kunitconversion-5.113.0-1.fc39 kf5-kwallet-5.113.0-1. fc39 kf5-kwayland-5.113.0-1.fc39 kf5-kwidgetsaddons-5.113.0-1.fc39 kf5-kwindowsystem-5.113.0-1.fc39 kf5-kxmlgui-5.113.0-1.fc39 kf5-kxmlrpcclient-5.113.0-1.fc39 kf5-modemmanager-qt-5.113.0-1.fc39 kf5-networkmanager-qt-5.113.0-1.fc39 kf5-plasma-5.113.0-1.fc39 kf5-prison-5.113.0-1.fc39 kf5-purpose-5.113.0-1.fc39 kf5-solid-5.113.0-1.fc39 kf5-sonnet-5.113.0-1.fc39 kf5-syndication-5.113.0-1.fc39 kf5-syntax-highlighting-5.113.0-1.fc39 kf5-threadweaver-5.113.0-1.fc39 oxygen-icon-theme-5.113.0-1.fc39 qqc2-desktop-style-5.113.0-1.fc39 7 https://bodhi.fedoraproject.org/updates/FEDORA-2024-ceb61e7465 python-wrapt-1.15.0-1.fc39 7 https://bodhi.fedoraproject.org/updates/FEDORA-2024-ef143b7706 passt-0^20231230.gf091893-1.fc39 7 https://bodhi.fedoraproject.org/updates/FEDORA-2024-7b66c6a4ef libxmlb-0.3.15-1.fc39 7 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d169d3004f kobo-0.35.1-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-88c705476e kde-settings-39.1-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-b042878379 cockpit-308-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e53b218099 libtirpc-1.3.4-0.rc2.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-450e7cc057 ostree-2023.8-3.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9ffc242365 device-mapper-persistent-data-1.0.9-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-c0ef9a4b2d guestfs-tools-1.52.0-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-78eec0d9fa libguestfs-1.52.0-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-7860ec3e1a mock-5.4-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-bb3b344978 annobin-12.35-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-3b8d11e257 ldns-1.8.3-10.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-bf9fda92e8 nfs-utils-2.6.4-0.rc3.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-b18be92032 papirus-icon-theme-20231201-2.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1e6637e547 lshw-B.02.20-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-65560146c1 kernel-6.6.10-200.fc39 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1ca8282d12 gstreamer1-plugins-bad-free-1.22.8-3.fc39 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-338183101f python-rpmautospec-0.4.1-2.fc39 python-rpmautospec-koji-0.4.0-1.fc39 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-21997da395 vim-9.1.016-1.fc39 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-11f99821bf pcsc-lite-ccid-1.5.5-1.fc39 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8aa319d508 evolution-3.50.3-1.fc39 evolution-data-server-3.50.3-1.fc39 evolution-ews-3.50.3-1.fc39 evolution-mapi-3.50.1-1.fc39 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d7fc8e71ec mariadb-connector-c-3.3.8-1.fc39
The following builds have been pushed to Fedora 39 updates-testing
LibRaw-0.21.2-2.fc39 PyDrive2-1.19.0-1.fc39 bzip3-1.4.0-1.fc39 cfn-lint-0.83.8-1.fc39 distribution-gpg-keys-1.100-1.fc39 gap-pkg-atlasrep-2.1.8-1.fc39 gap-pkg-ctbllib-1.3.7-1.fc39 gap-pkg-hap-1.61-1.fc39 gap-pkg-qpa-1.35-1.fc39 gap-pkg-semigroups-5.3.3-1.fc39 golang-github-pierrec-lz4-4.1.21-3.fc39 golang-x-crypto-0.18.0-1.fc39 golang-x-mod-0.14.0-1.fc39 golang-x-net-0.20.0-1.fc39 golang-x-sys-0.16.0-1.fc39 golang-x-text-0.14.0-1.fc39 gtkwave-3.3.118-1.fc39 hplip-3.23.12-1.fc39 hwdata-0.378-1.fc39 kubernetes-1.27.9-3.fc39 libsemigroups-2.7.2-2.fc39 minder-1.16.0-1.fc39 mkosi-20-1.fc39 nwg-panel-0.9.20-1.fc39 pylint-3.0.3-3.fc39 python-aws-sam-translator-1.83.0-1.fc39 python-basemap-1.4.0-1.fc39 python-numpoly-1.2.11-6.fc39 python-platformio-6.1.11-1.fc39 python-pydata-sphinx-theme-0.15.1-1.fc39 python-sphinxcontrib-zopeext-0.4.3-1.fc39 python-virt-firmware-24.1-2.fc39 python-xdfile-1.9.0~20240101git3349ddc-1.fc39 python-zstd-1.5.5.1-1.fc39 qownnotes-24.1.2-1.fc39 redis-7.2.4-1.fc39 rust-reference-counted-singleton-0.1.2-1.fc39 rust-selinux-sys-0.6.7-1.fc39 rust-uu_mkdir-0.0.23-1.fc39 rust-uu_mktemp-0.0.23-1.fc39 rust-uu_whoami-0.0.23-1.fc39 samba-4.19.4-2.fc39 timew-1.7.0-2.fc39 zbar-0.23.93-1.fc39
Details about builds:
================================================================================ LibRaw-0.21.2-2.fc39 (FEDORA-2024-7697250d52) Library for reading RAW files obtained from digital photo cameras -------------------------------------------------------------------------------- Update Information:
CR3-Qstep table: avoid wrong 64-bit code generation patch -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gwyn Ciesla gwync@protonmail.com - 0.21.2-2 - CR3-Qstep table: avoid wrong 64-bit code generation patch --------------------------------------------------------------------------------
================================================================================ PyDrive2-1.19.0-1.fc39 (FEDORA-2024-899bc9f116) Google Drive API Python wrapper library, maintained fork of PyDrive -------------------------------------------------------------------------------- Update Information:
Update to 1.19 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Mikel Olasagasti Uranga mikel@olasagasti.info - 1.19.0-1 - Update to 1.19.0 - Closes rhbz#2256707 --------------------------------------------------------------------------------
================================================================================ bzip3-1.4.0-1.fc39 (FEDORA-2024-7d38ee0dc1) Tools for compressing and decompressing bzip3 files -------------------------------------------------------------------------------- Update Information:
This release improves a header file to be includable into C++ programs. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Petr Pisar ppisar@redhat.com - 1.4.0-1 - 1.4.0 bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2253378 - bzip3-1.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2253378 --------------------------------------------------------------------------------
================================================================================ cfn-lint-0.83.8-1.fc39 (FEDORA-2024-3537183270) CloudFormation Linter -------------------------------------------------------------------------------- Update Information:
Update `python-aws-sam-translator` to 1.83.0 and `cfn-lint` to 0.83.8. https://github.com/aws/serverless-application-model/releases/tag/v1.83.0 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.6 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.7 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.8 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.83.8-1 - Update to 0.83.8 * Fri Jan 5 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.83.7-1 - Update to 0.83.7 * Fri Jan 5 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.83.6-1 - Update to 0.83.6 * Fri Jan 5 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.83.5-2 - Assert that %pyproject_files contains a license file -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256890 - python-aws-sam-translator-1.83.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256890 --------------------------------------------------------------------------------
================================================================================ distribution-gpg-keys-1.100-1.fc39 (FEDORA-2024-b0fd4a7217) GPG keys of various Linux distributions -------------------------------------------------------------------------------- Update Information:
Automatic update for distribution-gpg-keys-1.100-1.fc39. ##### **Changelog for distribution-gpg-keys** ``` * Tue Jan 09 2024 Miroslav Such�� msuchy@redhat.com 1.100-1 - update copr keys - Add remi 2024 Key ``` -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Miroslav Such�� msuchy@redhat.com 1.100-1 - update copr keys - Add remi 2024 Key --------------------------------------------------------------------------------
================================================================================ gap-pkg-atlasrep-2.1.8-1.fc39 (FEDORA-2024-21c4ea01a4) GAP interface to the Atlas of Group Representations -------------------------------------------------------------------------------- Update Information:
See https://www.math.rwth- aachen.de/~Thomas.Breuer/atlasrep/doc/chap1.html#sect:news for changes in version 2.1.8. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Jerry James loganjerry@gmail.com - 2.1.8-1 - Version 2.1.8 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256764 - gap-pkg-atlasrep-2.1.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256764 --------------------------------------------------------------------------------
================================================================================ gap-pkg-ctbllib-1.3.7-1.fc39 (FEDORA-2024-8b8bb3ea0b) GAP Character Table Library -------------------------------------------------------------------------------- Update Information:
See https://www.math.rwth- aachen.de/~Thomas.Breuer/ctbllib/doc/chap1.html#X87C0A6BA86AF8C25 for changes in version 1.3.7. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Jerry James loganjerry@gmail.com - 1.3.7-1 - Version 1.3.7 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256922 - gap-pkg-ctbllib-1.3.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256922 --------------------------------------------------------------------------------
================================================================================ gap-pkg-hap-1.61-1.fc39 (FEDORA-2024-7d7e9732b5) Homological Algebra Programming for GAP -------------------------------------------------------------------------------- Update Information:
For changes in version 1.61, see the commits at https://github.com/gap- packages/hap/commits/master/ starting after https://github.com/gap- packages/hap/commit/1a6808f2393961fc5cd0f863921716e64d02b997 (15 Oct 2023, "version 1.60"), and going through https://github.com/gap- packages/hap/commit/6e4b9887128df4a94e6255189d9d7beecf664046 (4 Jan 2024, "typo"). -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Jerry James loganjerry@gmail.com - 1.61-1 - Version 1.61 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256998 - gap-pkg-hap-1.61 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256998 --------------------------------------------------------------------------------
================================================================================ gap-pkg-qpa-1.35-1.fc39 (FEDORA-2024-194a005d93) GAP package for quivers and path algebras -------------------------------------------------------------------------------- Update Information:
See https://github.com/gap-packages/qpa/blob/master/CHANGES for changes in version 1.35. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Jerry James loganjerry@gmail.com - 1.35-1 - Version 1.35 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257046 - gap-pkg-qpa-1.35 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257046 --------------------------------------------------------------------------------
================================================================================ gap-pkg-semigroups-5.3.3-1.fc39 (FEDORA-2024-f68a5042d1) GAP methods for semigroups -------------------------------------------------------------------------------- Update Information:
The libsemigroups build fixes a packaging bug that resulted in the pkgconfig file containing a bogus version number. See https://github.com/semigroups/Semigroups/blob/main/CHANGELOG.md for changes in gap-pkg-semigroups 5.3.3. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Jerry James loganjerry@gmail.com - 5.3.3-1 - Version 5.3.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257056 - gap-pkg-semigroups-5.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257056 --------------------------------------------------------------------------------
================================================================================ golang-github-pierrec-lz4-4.1.21-3.fc39 (FEDORA-2024-159efe3cbe) LZ4 compression and decompression in pure Go -------------------------------------------------------------------------------- Update Information:
Update to 4.1.21 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Mikel Olasagasti Uranga mikel@olasagasti.info - Update to 4.1.21 - Closes rhbz#2257337 * Thu Dec 7 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - Update to 4.1.19 - Closes rhbz#2253506 --------------------------------------------------------------------------------
================================================================================ golang-x-crypto-0.18.0-1.fc39 (FEDORA-2024-7b08207cdb) Go supplementary cryptography libraries -------------------------------------------------------------------------------- Update Information:
Update golang-x-crypto to v0.18.0, fix for CVE-2023-48795 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Mark E. Fuller mark.e.fuller@gmx.de - 0.18.0-1 - update to v0.18.0, close rhbz#2255095 - CVE-2023-48795 golang-x-crypto: ssh: Prefix truncation attack on Binary Packet Protocol * Tue Dec 19 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.17.0-1 - update to v0.17.0, close rhbz#2255153 * Tue Nov 28 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.16.0-1 - update to v0.16.0, close rhbz#2251962 * Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.15.0-1 - update to 0.15.0, close rhbz#2248796 * Mon Oct 9 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.14.0-1 - update to v0.14.0, close rhbz#2242424 * Wed Sep 6 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.13.0-1 - update to v0.13.0, close rhbz#2237488 * Sat Aug 12 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.12.0-1 - update to v0.12.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) https://bugzilla.redhat.com/show_bug.cgi?id=2254210 --------------------------------------------------------------------------------
================================================================================ golang-x-mod-0.14.0-1.fc39 (FEDORA-2024-fb32950d11) Go module mechanics libraries -------------------------------------------------------------------------------- Update Information:
Update to v0.14.0 to address CVE-2022-41717 and CVE-2023-39325 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.14.0-1 - update to v0.14.0, close rhbz#2247966 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2248209 - golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) https://bugzilla.redhat.com/show_bug.cgi?id=2248209 [ 2 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) https://bugzilla.redhat.com/show_bug.cgi?id=2254210 --------------------------------------------------------------------------------
================================================================================ golang-x-net-0.20.0-1.fc39 (FEDORA-2024-5d8e87ec66) Go supplementary network libraries -------------------------------------------------------------------------------- Update Information:
update to v0.20.0 for CVE-2023-39325 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Mark E. Fuller mark.e.fuller@gmx.de - 0.20.0-1 - update to v0.20.0, close rhbz#2257356 * Fri Dec 1 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.19.0-1 - upgrade to v0.19.0, close rhbz#2252108 * Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.18.0-1 - update to v0.18.0, close rhbz#2249006 * Wed Oct 11 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.17.0-1 - update to v0.17.0, close rhbz#2243117 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2248209 - golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) https://bugzilla.redhat.com/show_bug.cgi?id=2248209 --------------------------------------------------------------------------------
================================================================================ golang-x-sys-0.16.0-1.fc39 (FEDORA-2024-722e396c65) Go packages for low-level interaction with the operating system -------------------------------------------------------------------------------- Update Information:
update to v0.16.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jan 7 2024 Mark E. Fuller mark.e.fuller@gmx.de - 0.16.0-1 - update to v0.16.0, close rhbz#2257072 * Tue Nov 28 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.15.0-1 - update to v0.15.0, close rhbz#2251810 * Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.14.0-1 - update to v0.14.0, close rhbz#2248031 * Wed Oct 11 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.13.0-1 - update to v0.13.0, close rhbz#2242352 * Mon Sep 4 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.12.0-1 - upgrade to v0.12.0, close rhbz#2237068 * Sat Aug 12 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.11.0-1 - update to v0.11.0, close rhbz#2229385 --------------------------------------------------------------------------------
================================================================================ golang-x-text-0.14.0-1.fc39 (FEDORA-2024-b85b97c0e9) Go text processing support -------------------------------------------------------------------------------- Update Information:
update to v0.14.0, address CVE-2023-39325 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.14.0-1 - update to v0.14.0, close rhbz#2248051 * Mon Sep 4 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.13.0-1 - update to v0.13.0, close rhbz#2237073 * Sat Aug 12 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.12.0-1 - v0.12.0, close rhbz#2214528 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2161274 - CVE-2022-41717 golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests https://bugzilla.redhat.com/show_bug.cgi?id=2161274 [ 2 ] Bug #2248209 - golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) https://bugzilla.redhat.com/show_bug.cgi?id=2248209 --------------------------------------------------------------------------------
================================================================================ gtkwave-3.3.118-1.fc39 (FEDORA-2024-2647382c5f) Waveform Viewer -------------------------------------------------------------------------------- Update Information:
Cumulative bug-fix update. This update includes fixes for multiple security issues found by Talos in which specially crafted input files could lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Paul Howarth paul@city-fan.org - 3.3.118-1 - Update to 3.3.118 - Update xml2stems to handle newer "loc" vs. "fl" xml tags - Change preg_regex_c_1 decl to use regex_t* as datatype - Move gtkwave.appdata.xml to io.github.gtkwave.GTKWave.metainfo.xml - Fixed popen security advisories: - TALOS-2023-1786 (CVE-2023-35963, CVE-2023-35960, CVE-2023-35964, CVE-2023-35959, CVE-2023-35961, CVE-2023-35962) - Fixed FST security advisories: - TALOS-2023-1777 (CVE-2023-32650) - TALOS-2023-1783 (CVE-2023-35704, CVE-2023-35703, CVE-2023-35702) - TALOS-2023-1785 (CVE-2023-35956, CVE-2023-35957, CVE-2023-35958, CVE-2023-35955) - TALOS-2023-1789 (CVE-2023-35969, CVE-2023-35970) - TALOS-2023-1790 (CVE-2023-35992) - TALOS-2023-1791 (CVE-2023-35994, CVE-2023-35996, CVE-2023-35997, CVE-2023-35995) - TALOS-2023-1792 (CVE-2023-35128) - TALOS-2023-1793 (CVE-2023-36747, CVE-2023-36746) - TALOS-2023-1797 (CVE-2023-36864) - TALOS-2023-1798 (CVE-2023-36915, CVE-2023-36916) - Fixed evcd2vcd security advisories: - TALOS-2023-1803 (CVE-2023-34087) - Fixed VCD security advisories: - TALOS-2023-1804 (CVE-2023-37416, CVE-2023-37419, CVE-2023-37420, CVE-2023-37418, CVE-2023-37417) - TALOS-2023-1805 (CVE-2023-37447, CVE-2023-37446, CVE-2023-37445, CVE-2023-37444, CVE-2023-37442, CVE-2023-37443) - TALOS-2023-1806 (CVE-2023-37576, CVE-2023-37577, CVE-2023-37573, CVE-2023-37578, CVE-2023-37575, CVE-2023-37574) - TALOS-2023-1807 (CVE-2023-37921, CVE-2023-37923, CVE-2023-37922) - Fixed VZT security advisories: - TALOS-2023-1810 (CVE-2023-37282) - TALOS-2023-1811 (CVE-2023-36861) - TALOS-2023-1812 (CVE-2023-38618, CVE-2023-38621, CVE-2023-38620, CVE-2023-38619, CVE-2023-38623, CVE-2023-38622) - TALOS-2023-1813 (CVE-2023-38649, CVE-2023-38648) - TALOS-2023-1814 (CVE-2023-38651, CVE-2023-38650) - TALOS-2023-1815 (CVE-2023-38653, CVE-2023-38652) - TALOS-2023-1816 (CVE-2023-35004) - TALOS-2023-1817 (CVE-2023-39235, CVE-2023-39234) - Fixed LXT2 security advisories: - TALOS-2023-1818 (CVE-2023-39273, CVE-2023-39271, CVE-2023-39274, CVE-2023-39275, CVE-2023-39272, CVE-2023-39270) - TALOS-2023-1819 (CVE-2023-34436) - TALOS-2023-1820 (CVE-2023-39316, CVE-2023-39317) - TALOS-2023-1821 (CVE-2023-35057) - TALOS-2023-1822 (CVE-2023-35989) - TALOS-2023-1823 (CVE-2023-38657) - TALOS-2023-1824 (CVE-2023-39413, CVE-2023-39414) - TALOS-2023-1826 (CVE-2023-39443, CVE-2023-39444) - TALOS-2023-1827 (CVE-2023-38583) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257435 - gtkwave: Multiple CVEs published by Talos https://bugzilla.redhat.com/show_bug.cgi?id=2257435 --------------------------------------------------------------------------------
================================================================================ hplip-3.23.12-1.fc39 (FEDORA-2024-50fe8c2270) HP Linux Imaging and Printing Project -------------------------------------------------------------------------------- Update Information:
2252302 - hplip-3.23.12 is available -------------------------------------------------------------------------------- ChangeLog:
* Mon Jan 8 2024 Zdenek Dohnal zdohnal@redhat.com - 3.23.12-1 - 2252302 - hplip-3.23.12 is available -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2252302 - hplip-3.23.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=2252302 --------------------------------------------------------------------------------
================================================================================ hwdata-0.378-1.fc39 (FEDORA-2024-4825dc68e5) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information:
Update vendor ids -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 3 2024 Vitezslav Crhonek vcrhonek@redhat.com - 0.378-1 - Update vendor ids --------------------------------------------------------------------------------
================================================================================ kubernetes-1.27.9-3.fc39 (FEDORA-2024-69f5d96cd6) Open Source Production-Grade Container Scheduling And Management Platform -------------------------------------------------------------------------------- Update Information:
Implements the shell completion macro in the spec file. This changes where the bash, fish, and zsh completions for kubectl are placed. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Bradley G Smith bradley.g.smith@gmail.com - 1.27.9-3 - Utilize shell completion rpm macro * Tue Jan 9 2024 blinxen h-k-81@hotmail.com - 1.27.9-2 - Use shell completion macro to specify completion directory This makes sure that the shell completion scripts are always installed in the correct directory. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257436 - kubectl zsh completion file is installed to the wrong directory https://bugzilla.redhat.com/show_bug.cgi?id=2257436 --------------------------------------------------------------------------------
================================================================================ libsemigroups-2.7.2-2.fc39 (FEDORA-2024-f68a5042d1) C++ library for semigroups and monoids -------------------------------------------------------------------------------- Update Information:
The libsemigroups build fixes a packaging bug that resulted in the pkgconfig file containing a bogus version number. See https://github.com/semigroups/Semigroups/blob/main/CHANGELOG.md for changes in gap-pkg-semigroups 5.3.3. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Jerry James loganjerry@gmail.com - 2.7.2-2 - Fix pkgconfig version number -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257056 - gap-pkg-semigroups-5.3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257056 --------------------------------------------------------------------------------
================================================================================ minder-1.16.0-1.fc39 (FEDORA-2024-205dee7d3b) Mind-mapping application -------------------------------------------------------------------------------- Update Information:
Automatic update for minder-1.16.0-1.fc39. ##### **Changelog for minder** ``` * Tue Jan 09 2024 Packit hello@packit.dev - 1.16.0-1 - [packit] 1.16.0 upstream release - Resolves rhbz#2257464 * Tue Jan 09 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-5 - packit: Update config * Sun Oct 08 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-4 - build: Add Packit config * Sun Oct 08 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-3 - license: Convert to SPDX * Sun Oct 08 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-2 - build: Use forge macros ``` -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Packit hello@packit.dev - 1.16.0-1 - [packit] 1.16.0 upstream release - Resolves rhbz#2257464 * Tue Jan 9 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-5 - packit: Update config * Sun Oct 8 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-4 - build: Add Packit config * Sun Oct 8 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-3 - license: Convert to SPDX * Sun Oct 8 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-2 - build: Use forge macros -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257464 - minder-1.16.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257464 --------------------------------------------------------------------------------
================================================================================ mkosi-20-1.fc39 (FEDORA-2024-b00c23e613) Create bespoke OS images -------------------------------------------------------------------------------- Update Information:
Latest upstream release. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 20-1 - Version 20 --------------------------------------------------------------------------------
================================================================================ nwg-panel-0.9.20-1.fc39 (FEDORA-2024-7843d2cc06) GTK3-based panel for sway window manager -------------------------------------------------------------------------------- Update Information:
Automatic update for nwg-panel-0.9.20-1.fc39. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Packit hello@packit.dev - 0.9.20-1 - [packit] 0.9.20 upstream release - Resolves rhbz#2257358 --------------------------------------------------------------------------------
================================================================================ pylint-3.0.3-3.fc39 (FEDORA-2024-19ce931ab4) Analyzes Python code looking for bugs and signs of poor quality -------------------------------------------------------------------------------- Update Information:
Drop -s from shebang. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gwyn Ciesla gwync@protonmail.com - 3.0.3-3 - Drop -s from shebang -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256378 - pylint runs with user-installed packeges excluded https://bugzilla.redhat.com/show_bug.cgi?id=2256378 --------------------------------------------------------------------------------
================================================================================ python-aws-sam-translator-1.83.0-1.fc39 (FEDORA-2024-3537183270) Transform SAM templates into AWS CloudFormation templates -------------------------------------------------------------------------------- Update Information:
Update `python-aws-sam-translator` to 1.83.0 and `cfn-lint` to 0.83.8. https://github.com/aws/serverless-application-model/releases/tag/v1.83.0 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.6 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.7 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.8 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jan 5 2024 Benjamin A. Beasley code@musicinmybrain.net - 1.83.0-1 - Update to 1.83.0 (close RHBZ#2256890) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256890 - python-aws-sam-translator-1.83.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256890 --------------------------------------------------------------------------------
================================================================================ python-basemap-1.4.0-1.fc39 (FEDORA-2024-7b4e354d2e) Plots data on map projections (with continental and political boundaries) -------------------------------------------------------------------------------- Update Information:
1.4.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gwyn Ciesla gwync@protonmail.com - 1.4.0-1 - 1.4.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257458 - python-basemap-1.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257458 --------------------------------------------------------------------------------
================================================================================ python-numpoly-1.2.11-6.fc39 (FEDORA-2024-57cefb65cd) Polynomials as a numpy datatype -------------------------------------------------------------------------------- Update Information:
Update to 1.2.11 -------------------------------------------------------------------------------- ChangeLog:
* Mon Jan 8 2024 Sandro devel@penguinpee.nl - 1.2.11-6 - Add Packit config * Mon Jan 8 2024 Sandro devel@penguinpee.nl - 1.2.11-5 - Drop `%{arm32}` from `ExcludeArch` (deprecated) * Mon Jan 8 2024 Sandro devel@penguinpee.nl - 1.2.11-4 - Make tests verbose * Mon Jan 8 2024 Sandro devel@penguinpee.nl - 1.2.11-3 - Update description (following upstream) * Mon Jan 8 2024 Sandro devel@penguinpee.nl - 1.2.11-2 - Assert existence of license file * Mon Jan 8 2024 Sandro devel@penguinpee.nl - 1.2.11-1 - Update to 1.2.11 (RHBZ#2212046) * Mon Jan 8 2024 Sandro devel@penguinpee.nl - 1.2.7-6 - Use forge macros -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2212046 - python-numpoly-1.2.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=2212046 --------------------------------------------------------------------------------
================================================================================ python-platformio-6.1.11-1.fc39 (FEDORA-2024-c6d05d4607) Professional collaborative platform for embedded development -------------------------------------------------------------------------------- Update Information:
Initial import; Fixes: RHBZ#2021751 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Davide Cavalca dcavalca@fedoraproject.org - 6.1.11-1 - Initial import; Fixes: RHBZ#2021751 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2021751 - Review Request: python-platformio - Professional collaborative platform for embedded development https://bugzilla.redhat.com/show_bug.cgi?id=2021751 --------------------------------------------------------------------------------
================================================================================ python-pydata-sphinx-theme-0.15.1-1.fc39 (FEDORA-2024-f5a2c9d74c) Bootstrap-based Sphinx theme from the PyData community -------------------------------------------------------------------------------- Update Information:
See https://github.com/pydata/pydata-sphinx-theme/releases/tag/v0.15.0 and https://github.com/pydata/pydata-sphinx-theme/releases/tag/v0.15.1 for changes in version 0.15.1. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Jerry James loganjerry@gmail.com - 0.15.1-1 - Version 0.15.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256574 - python-pydata-sphinx-theme-0.15.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256574 --------------------------------------------------------------------------------
================================================================================ python-sphinxcontrib-zopeext-0.4.3-1.fc39 (FEDORA-2024-225399975c) Sphinx extension for documenting Zope interfaces -------------------------------------------------------------------------------- Update Information:
Changes in version 0.4.3: - Support Sphinx up to 7.2.6 (tested) and Python up to 3.12. - Fixed some bugs with python 3.7 and 3.8. - Resolves issue [#10](https://github.com/sphinx-contrib/zopeext/issues/10) -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Jerry James loganjerry@gmail.com - 0.4.3-1 - Version 0.4.3 - Drop upstreamed Sphinx 7.2.x patch * Mon Oct 30 2023 Jerry James loganjerry@gmail.com - 0.4.2-4 - Add patch for Sphinx 7.2.x -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257195 - python-sphinxcontrib-zopeext-0.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257195 --------------------------------------------------------------------------------
================================================================================ python-virt-firmware-24.1-2.fc39 (FEDORA-2024-4875713b3d) Tools for virtual machine firmware volumes -------------------------------------------------------------------------------- Update Information:
update to version 24.1 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gerd Hoffmann kraxel@redhat.com - 24.1-2 - add pe-inspect manpage to file list * Tue Jan 9 2024 Gerd Hoffmann kraxel@redhat.com - 24.1-1 - update to version 24.1 --------------------------------------------------------------------------------
================================================================================ python-xdfile-1.9.0~20240101git3349ddc-1.fc39 (FEDORA-2024-2e1c103e0c) Python parser for .xd crossword format -------------------------------------------------------------------------------- Update Information:
Initial import; Fixes: RHBZ#2138487 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Davide Cavalca dcavalca@fedoraproject.org - 1.9.0~20240101git3349ddc-1 - Initial import; Fixes: RHBZ#2138487 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2138487 - Review Request: python-xdfile - Python parser for .xd crossword format https://bugzilla.redhat.com/show_bug.cgi?id=2138487 --------------------------------------------------------------------------------
================================================================================ python-zstd-1.5.5.1-1.fc39 (FEDORA-2024-9dd5ca396f) Zstd Bindings for Python -------------------------------------------------------------------------------- Update Information:
Update the Python bindings for `zstd` to match the system `zstd` version -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 1.5.5.1-1 - Update to 1.5.5.1 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2169048 - python-zstd-1.5.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2169048 --------------------------------------------------------------------------------
================================================================================ qownnotes-24.1.2-1.fc39 (FEDORA-2024-85d937906a) Plain-text file markdown note taking with Nextcloud integration -------------------------------------------------------------------------------- Update Information:
Automatic update for qownnotes-24.1.2-1.fc39. ##### **Changelog for qownnotes** ``` * Tue Jan 09 2024 Packit hello@packit.dev - 24.1.2-1 - [packit] 24.1.2 upstream release - Resolves rhbz#2257369 * Tue Jan 02 2024 Packit hello@packit.dev - 24.1.1-1 - [packit] 24.1.1 upstream release - Resolves rhbz#2256460 ``` -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Packit hello@packit.dev - 24.1.2-1 - [packit] 24.1.2 upstream release - Resolves rhbz#2257369 * Tue Jan 2 2024 Packit hello@packit.dev - 24.1.1-1 - [packit] 24.1.1 upstream release - Resolves rhbz#2256460 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256460 - qownnotes-24.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256460 [ 2 ] Bug #2257369 - qownnotes-24.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257369 --------------------------------------------------------------------------------
================================================================================ redis-7.2.4-1.fc39 (FEDORA-2024-6ef42a28c9) A persistent key-value database -------------------------------------------------------------------------------- Update Information:
**Redis 7.2.4 ** Released Tue 09 Jan 2024 10:45:52 IST Upgrade urgency SECURITY: See security fixes below. Security fixes * (**CVE-2023-41056**) In some cases, Redis may incorrectly handle resizing of memory buffers which can result in incorrect accounting of buffer sizes and lead to heap overflow and potential remote code execution. Bug fixes * Fix crashes of cluster commands clusters with mixed versions of 7.0 and 7.2 (#12805, #12832) * Fix slot ownership not being properly handled when deleting a slot from a node (#12564) * Fix atomicity issues with the RedisModuleEvent_Key module API event (#12733) -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Remi Collet remi@remirepo.net - 7.2.4-1 - Upstream 7.2.4 release --------------------------------------------------------------------------------
================================================================================ rust-reference-counted-singleton-0.1.2-1.fc39 (FEDORA-2024-cb524aedca) Reference-counted singleton whose protected data can be recreated as needed -------------------------------------------------------------------------------- Update Information:
Initial Fedora package -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.1.2-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257189 - Review Request: rust-reference-counted-singleton - Reference-counted singleton whose protected data can be recreated as needed https://bugzilla.redhat.com/show_bug.cgi?id=2257189 --------------------------------------------------------------------------------
================================================================================ rust-selinux-sys-0.6.7-1.fc39 (FEDORA-2024-0047d8edd8) Flexible Mandatory Access Control (MAC) for Linux -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.6.7-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257186 - Review Request: rust-selinux-sys - Flexible Mandatory Access Control (MAC) for Linux https://bugzilla.redhat.com/show_bug.cgi?id=2257186 --------------------------------------------------------------------------------
================================================================================ rust-uu_mkdir-0.0.23-1.fc39 (FEDORA-2024-e73dd7ece2) mkdir ~ (uutils) create DIRECTORY -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.0.23-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257194 - Review Request: rust-uu_mkdir - Mkdir ~ (uutils) create DIRECTORY https://bugzilla.redhat.com/show_bug.cgi?id=2257194 --------------------------------------------------------------------------------
================================================================================ rust-uu_mktemp-0.0.23-1.fc39 (FEDORA-2024-baf0fb5db6) mktemp ~ (uutils) create and display a temporary file or directory from TEMPLATE -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.0.23-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257196 - Review Request: rust-uu_mktemp - mktemp ~ (uutils) create and display a temporary file or directory from TEMPLATE https://bugzilla.redhat.com/show_bug.cgi?id=2257196 --------------------------------------------------------------------------------
================================================================================ rust-uu_whoami-0.0.23-1.fc39 (FEDORA-2024-09051db5e9) whoami ~ (uutils) display user name of current effective user ID -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.0.23-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257200 - Review Request: rust-uu_whoami - whoami ~ (uutils) display user name of current effective user ID https://bugzilla.redhat.com/show_bug.cgi?id=2257200 --------------------------------------------------------------------------------
================================================================================ samba-4.19.4-2.fc39 (FEDORA-2024-578e97f22f) Server and Client software to interoperate with Windows machines -------------------------------------------------------------------------------- Update Information:
resolves: rhbz#2256326 - Create all groups using systemd -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Andreas Schneider asn@redhat.com - 4.19.4-2 - resolves: rhbz#2256326 - Create all groups using systemd * Mon Jan 8 2024 Guenther Deschner gdeschner@redhat.com - 4.19.4-1 - resolves: #2257287 - Update to version 4.19.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256326 - Samba-winbind recommends "group(wbpriv)" but nothing provides it https://bugzilla.redhat.com/show_bug.cgi?id=2256326 [ 2 ] Bug #2257287 - samba-4.19.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257287 --------------------------------------------------------------------------------
================================================================================ timew-1.7.0-2.fc39 (FEDORA-2024-50836b2cd4) Timewarrior tracks and reports time -------------------------------------------------------------------------------- Update Information:
Fix regression: tag completion is broken in 1.7.0: https://github.com/GothenburgBitFactory/timewarrior/issues/581 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com - 1.7.0-2 - fix: revert completion changes that break tag completion --------------------------------------------------------------------------------
================================================================================ zbar-0.23.93-1.fc39 (FEDORA-2024-73d5220ed3) Bar code reader -------------------------------------------------------------------------------- Update Information:
0.23.93, fixes for two CVEs -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gwyn Ciesla gwync@protonmail.com - 0.23.93-1 - 0.23.93 * Fri Jan 5 2024 Florian Weimer fweimer@redhat.com - 0.23.90-12 - Add missing Py_SIZE to py311.patch -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2235860 - CVE-2023-40890 zbar: stack overflow caused malicious qr code may lead to information diusclosure or arbitrary code execution. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235860 [ 2 ] Bug #2235863 - CVE-2023-40889 zbar: buffer overflow via crafted qr code [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235863 [ 3 ] Bug #2257396 - Affect by CVE-2023-40889 https://bugzilla.redhat.com/show_bug.cgi?id=2257396 [ 4 ] Bug #2257428 - zbar-0.23.93 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257428 --------------------------------------------------------------------------------