The following Fedora 38 Security updates need testing: Age URL 93 https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaa2b3d20b containerd-1.6.23-1.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-7bd66f219f gst-devtools-1.22.7-1.fc38 gstreamer1-1.22.7-1.fc38 gstreamer1-doc-1.22.7-1.fc38 python-gstreamer1-1.22.7-1.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-56901a79a1 xen-4.17.2-5.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-6b20b7807a poppler-23.02.0-3.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4eff9e2cd6 mingw-poppler-23.02.0-2.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-185f3e8ad7 qbittorrent-4.6.1-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-13b03a90f9 python-pillow-9.5.0-2.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-548163deb1 golang-github-google-dap-0.11.0-1.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5911638116 libcap-2.48-7.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-00d4509fa9 java-latest-openjdk-21.0.1.0.12-1.rolling.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-433474a567 java-17-openjdk-17.0.9.0.9-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ba2e60e743 motif-2.3.4-30.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-41b9510adb gnutls-3.8.2-1.fc38
The following Fedora 38 Critical Path updates have yet to be approved: Age URL 69 https://bodhi.fedoraproject.org/updates/FEDORA-2023-da4a46622f conmon-2.1.8-2.fc38 31 https://bodhi.fedoraproject.org/updates/FEDORA-2023-06dd18eecb go-rpm-macros-3.3.0-1.fc38 go2rpm-1.10.0-1.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-56901a79a1 xen-4.17.2-5.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-73ae14c368 python-rpmautospec-0.3.8-1.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2023-7bd66f219f gst-devtools-1.22.7-1.fc38 gstreamer1-1.22.7-1.fc38 gstreamer1-doc-1.22.7-1.fc38 python-gstreamer1-1.22.7-1.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-18d84cb696 c-ares-1.21.0-1.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5f9f6a8034 cockpit-305-1.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-eb30e4e817 libmaxminddb-1.8.0-1.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-14af01ef1b freeipa-healthcheck-0.16-2.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0edc842e04 sssd-2.9.3-1.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-253c6c92af libxslt-1.1.39-1.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ac302d74cf libgsf-1.14.51-1.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2023-2caf7f523d xfconf-4.18.3-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ed0c00ab3 bind-9.18.20-1.fc38 bind-dyndb-ldap-11.10-22.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-437504c870 netcat-1.226-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-6c900ebd4d librsvg2-2.56.4-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-68592f791f vte291-0.72.3-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3907013109 pygobject3-3.44.2-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f10720f111 orca-44.2-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-9bbb615d39 libnotify-0.8.3-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0f6253c172 libadwaita-1.3.5-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ba3edb3fe9 libgtop2-2.41.2-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ee2292cb36 gvfs-1.50.7-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5cfc3e12f4 gupnp-1.6.6-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-de5593691d gssdp-1.6.3-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c04bd8d303 gnome-control-center-44.4-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-2c43cf1fb8 gnome-bluetooth-42.7-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-05f8de3ce3 glib2-2.76.6-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-d604706262 libwnck3-43.0-5.fc38 mate-panel-1.26.3-4.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-6b20b7807a poppler-23.02.0-3.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-df9f30f623 bluedevil-5.27.9-2.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-b2423736bf crun-1.12-1.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-5911638116 libcap-2.48-7.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e641494b35 passt-0^20231119.g4f1709d-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1b65e21301 dnf5-5.1.8-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-482fa5b5bf kobo-0.34.0-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-a5dadd2567 pipewire-1.0.0-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-4436be9cc9 ethtool-6.6-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1e3687a761 firefox-120.0-3.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-41b9510adb gnutls-3.8.2-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c060480f83 netavark-1.9.0-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-89f6815359 aardvark-dns-1.9.0-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-b8a5cf8409 systemd-253.13-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-433474a567 java-17-openjdk-17.0.9.0.9-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-b92c99588b fedora-appstream-metadata-20231124-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec5471d827 qt5-qtbase-5.15.11-7.fc38
The following builds have been pushed to Fedora 38 updates-testing
Zim-0.75.2-4.fc38 ansible-pcp-2.3.0-1.fc38 gdb-13.2-7.fc38 gmailctl-0.10.7-1.fc38 libarrow-11.0.0-4.fc38 libkdumpfile-0.5.4-1.fc38 liborc-1.8.6-1.fc38 llhttp-9.1.3-1.fc38 mame-0.261-1.fc38 matrix-synapse-1.97.0-1.fc38 mozilla-ublock-origin-1.54.0-1.fc38 podman-4.8.0-1.fc38 python-aiohttp-3.8.6-1.fc38 python-podman-4.8.0-1.fc38 python-pytest-venv-0.3-1.fc38 qownnotes-23.11.3-1.fc38 receptor-1.4.3-1.fc38 rust-libslirp-4.2.2-19.fc38 rust-libsystemd-0.7.0-1.fc38 syncthing-1.26.1-1.fc38 ugene-49.1-1.fc38 uxplay-1.66-2.fc38 xmake-2.8.5-2.fc38 xsnow-3.7.6-1.fc38
Details about builds:
================================================================================ Zim-0.75.2-4.fc38 (FEDORA-2023-9efee5d884) Desktop wiki & notekeeper -------------------------------------------------------------------------------- Update Information:
Avoid crash report when cancelling template copy (rhbz#2246676) -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Otto Liljalaakso otto.liljalaakso@iki.fi - 0.75.2-4 - Avoid crash report when cancelling template copy (rhbz#2246676) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2246676 - [abrt] Zim: on_copy(): templateeditordialog.py:113:on_copy:AssertionError https://bugzilla.redhat.com/show_bug.cgi?id=2246676 --------------------------------------------------------------------------------
================================================================================ ansible-pcp-2.3.0-1.fc38 (FEDORA-2023-a83412aa42) Ansible Metric collection for Performance Co-Pilot -------------------------------------------------------------------------------- Update Information:
Update to latest upstream release. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Nathan Scott nathans@redhat.com 2.3.0-1 - Latest upstream release * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 2.2.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ gdb-13.2-7.fc38 (FEDORA-2023-a4c8643cc8) A stub package for GNU source-level debugger -------------------------------------------------------------------------------- Update Information:
Backport upstream commits which fix several gdb-index problems: They reduce the size of the generated gdb-index file, and also ensure that the gdb-index and dwarf-5 index are generated consistently even as the number of worker threads that GDB uses changes. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Andrew Burgess aburgess@redhat.com - Backport upstream commits 1f0fab7ff86, aa19bc1d259, acc117b57f7, aff250145af, and 3644f41dc80. These commits reduce the size of the generated gdb-index file, and also ensure that the gdb-index and dwarf-5 index are generated consistently even as the number of worker threads that GDB uses changes (RHBZ 2232086). -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2232086 - .gdb_index sections are not reproducible https://bugzilla.redhat.com/show_bug.cgi?id=2232086 --------------------------------------------------------------------------------
================================================================================ gmailctl-0.10.7-1.fc38 (FEDORA-2023-6f4c5b6331) Declarative configuration for Gmail filters, stored locally -------------------------------------------------------------------------------- Update Information:
upgrade to v0.10.7, close rhbz#2249798 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.10.7-1 - upgrade to v0.10.7, close rhbz#2249798 * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 0.10.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2248276 - gmailctl: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2248276 [ 2 ] Bug #2249798 - gmailctl-0.10.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2249798 --------------------------------------------------------------------------------
================================================================================ libarrow-11.0.0-4.fc38 (FEDORA-2023-ee384fb9e8) A toolbox for accelerated data interchange and in-memory processing -------------------------------------------------------------------------------- Update Information:
Apache Arrow 11.0.0, rebuild with liborc 1.8.6 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Kaleb S. KEITHLEY <kkeithle [at] redhat.com> - 11.0.0-4 - Arrow 11.0.0, rebuild with liborc-1.8.6-1 --------------------------------------------------------------------------------
================================================================================ libkdumpfile-0.5.4-1.fc38 (FEDORA-2023-d62ff5109f) Kernel coredump file access -------------------------------------------------------------------------------- Update Information:
- Full support for 64-bit RISC-V. - Improved error messages. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Michel Lind salimma@fedoraproject.org - 0.5.4-1 - Update to 0.5.4 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2250488 - libkdumpfile-0.5.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2250488 --------------------------------------------------------------------------------
================================================================================ liborc-1.8.6-1.fc38 (FEDORA-2023-cca0da441f) Library for producing small, fast columnar storage for Hadoop workloads -------------------------------------------------------------------------------- Update Information:
Apache ORC 1.8.6 GA -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Kaleb S. KEITHLEY <kkeithle [at] redhat.com> - 1.8.6-1 - 1.8.6 GA --------------------------------------------------------------------------------
================================================================================ llhttp-9.1.3-1.fc38 (FEDORA-2023-bc1f081ca0) Port of http_parser to llparse -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2023-47627 https://pagure.io/fesco/issue/3106 ## python- aiohttp 3.8.6 (2023-10-07) https://github.com/aio- libs/aiohttp/blob/v3.8.6/CHANGES.rst#386-2023-10-07 ### Security bugfixes - Upgraded `llhttp` to v9.1.3: https://github.com/aio- libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9 - Updated Python parser to comply with RFCs 9110/9112: https://github.com/aio- libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg ### Deprecation - Added `fallback_charset_resolver` parameter in `ClientSession` to allow a user- supplied character set detection function. Character set detection will no longer be included in 3.9 as a default. If this feature is needed, please use [` fallback_charset_resolver`](https://docs.aiohttp.org/en/stable/client_advanced.h tml#character-set-detection). ### Features - Enabled lenient response parsing for more flexible parsing in the client (this should resolve some regressions when dealing with badly formatted HTTP responses). ### Bugfixes - Fixed `PermissionError` when `.netrc` is unreadable due to permissions. - Fixed output of parsing errors pointing to a `\n`. - Fixed `GunicornWebWorker` max_requests_jitter not working. - Fixed sorting in `filter_cookies` to use cookie with longest path. - Fixed display of `BadStatusLine` messages from `llhttp`. ---- ## llhttp 9.1.3 ### Fixes - Restart the parser on HTTP 100 - Fix chunk extensions quoted-string value parsing - Fix lenient_flags truncated on reset - Fix chunk extensions��� parameters parsing when more then one name- value pair provided ## llhttp 9.1.2 ### What's Changed - Fix HTTP 1xx handling ## llhttp 9.1.1 ### What's Changed - feat: Expose new lenient methods ## llhttp 9.1.0 ### What's Changed - New lenient flag to make CR completely optional - New lenient flag to have spaces after chunk header -------------------------------------------------------------------------------- ChangeLog:
* Thu Oct 5 2023 Benjamin A. Beasley code@musicinmybrain.net - 9.1.3-1 - Update to 9.1.3 (close RHBZ#2242220) * Tue Oct 3 2023 Benjamin A. Beasley code@musicinmybrain.net - 9.1.2-1 - Update to 9.1.2 * Thu Sep 14 2023 Benjamin A. Beasley code@musicinmybrain.net - 9.1.1-1 - Update to 9.1.1 * Thu Sep 14 2023 Benjamin A. Beasley code@musicinmybrain.net - 9.1.0-1 - Update to 9.1.0 * Mon Aug 21 2023 Benjamin A. Beasley code@musicinmybrain.net - 9.0.1-1 - Update to 9.0.1 (close RHBZ#2228290) * Tue Aug 1 2023 Benjamin A. Beasley code@musicinmybrain.net - 9.0.0-1 - Update to 9.0.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2249825 - CVE-2023-47627 python-aiohttp: numerous issues in HTTP parser with header parsing https://bugzilla.redhat.com/show_bug.cgi?id=2249825 --------------------------------------------------------------------------------
================================================================================ mame-0.261-1.fc38 (FEDORA-2023-80aa3224c5) Multiple Arcade Machine Emulator -------------------------------------------------------------------------------- Update Information:
Update to the latest upstream release: * https://www.mamedev.org/?p=532 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Julian Sikorski belegdol@fedoraproject.org - 0.261-1 - Update to 0.261 --------------------------------------------------------------------------------
================================================================================ matrix-synapse-1.97.0-1.fc38 (FEDORA-2023-3d82428b44) A Matrix reference homeserver written in Python using Twisted -------------------------------------------------------------------------------- Update Information:
Update to v1.97.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Kai A. Hiller V02460@gmail.com - 1.97.0-1 - Update to v1.97.0 --------------------------------------------------------------------------------
================================================================================ mozilla-ublock-origin-1.54.0-1.fc38 (FEDORA-2023-c3a1606244) An efficient blocker for Firefox -------------------------------------------------------------------------------- Update Information:
Latest upstream release. Changelog: https://github.com/gorhill/uBlock/releases/tag/1.54.0 . ---- Latest upstream release for Firefox. Changelog: https://github.com/gorhill/uBlock/releases/tag/1.53.0 . -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Dominik Mierzejewski dominik@greysector.net - 1.54.0-1 - update to 1.54.0 (#2251068) * Tue Nov 21 2023 Dominik Mierzejewski dominik@greysector.net - 1.53.0-1 - update to 1.53.0 (#2247578) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2247578 - mozilla-ublock-origin-1.53.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2247578 [ 2 ] Bug #2251068 - mozilla-ublock-origin-1.54.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2251068 --------------------------------------------------------------------------------
================================================================================ podman-4.8.0-1.fc38 (FEDORA-2023-2bd0e4904f) Manage Pods, Containers and Container Images -------------------------------------------------------------------------------- Update Information:
Automatic update for podman-4.8.0-1.fc38. ##### **Changelog for podman** ``` * Mon Nov 27 2023 Packit hello@packit.dev - 5:4.8.0-1 - [packit] 4.8.0 upstream release * Mon Nov 27 2023 Lokesh Mandvekar lsm5@redhat.com - 5:4.8.0~rc1-1 - bump to v4.8.0-rc1 ``` ---- bump to v4.8.0-rc1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Packit hello@packit.dev - 5:4.8.0-1 - [packit] 4.8.0 upstream release * Mon Nov 27 2023 Lokesh Mandvekar lsm5@redhat.com - 5:4.8.0~rc1-1 - bump to v4.8.0-rc1 --------------------------------------------------------------------------------
================================================================================ python-aiohttp-3.8.6-1.fc38 (FEDORA-2023-bc1f081ca0) Python HTTP client/server for asyncio -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2023-47627 https://pagure.io/fesco/issue/3106 ## python- aiohttp 3.8.6 (2023-10-07) https://github.com/aio- libs/aiohttp/blob/v3.8.6/CHANGES.rst#386-2023-10-07 ### Security bugfixes - Upgraded `llhttp` to v9.1.3: https://github.com/aio- libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9 - Updated Python parser to comply with RFCs 9110/9112: https://github.com/aio- libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg ### Deprecation - Added `fallback_charset_resolver` parameter in `ClientSession` to allow a user- supplied character set detection function. Character set detection will no longer be included in 3.9 as a default. If this feature is needed, please use [` fallback_charset_resolver`](https://docs.aiohttp.org/en/stable/client_advanced.h tml#character-set-detection). ### Features - Enabled lenient response parsing for more flexible parsing in the client (this should resolve some regressions when dealing with badly formatted HTTP responses). ### Bugfixes - Fixed `PermissionError` when `.netrc` is unreadable due to permissions. - Fixed output of parsing errors pointing to a `\n`. - Fixed `GunicornWebWorker` max_requests_jitter not working. - Fixed sorting in `filter_cookies` to use cookie with longest path. - Fixed display of `BadStatusLine` messages from `llhttp`. ---- ## llhttp 9.1.3 ### Fixes - Restart the parser on HTTP 100 - Fix chunk extensions quoted-string value parsing - Fix lenient_flags truncated on reset - Fix chunk extensions��� parameters parsing when more then one name- value pair provided ## llhttp 9.1.2 ### What's Changed - Fix HTTP 1xx handling ## llhttp 9.1.1 ### What's Changed - feat: Expose new lenient methods ## llhttp 9.1.0 ### What's Changed - New lenient flag to make CR completely optional - New lenient flag to have spaces after chunk header -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 16 2023 Benjamin A. Beasley code@musicinmybrain.net - 3.8.6-1 - Update to 3.8.6 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2249825 - CVE-2023-47627 python-aiohttp: numerous issues in HTTP parser with header parsing https://bugzilla.redhat.com/show_bug.cgi?id=2249825 --------------------------------------------------------------------------------
================================================================================ python-podman-4.8.0-1.fc38 (FEDORA-2023-f6a03d5581) RESTful API for Podman -------------------------------------------------------------------------------- Update Information:
Automatic update for python-podman-4.8.0-1.fc38. ##### **Changelog for python- podman** ``` * Tue Nov 28 2023 Packit hello@packit.dev - 3:4.8.0-1 - [packit] 4.8.0 upstream release ``` -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Packit hello@packit.dev - 3:4.8.0-1 - [packit] 4.8.0 upstream release --------------------------------------------------------------------------------
================================================================================ python-pytest-venv-0.3-1.fc38 (FEDORA-2023-5a1143dc67) py.test fixture for creating a virtual environment -------------------------------------------------------------------------------- Update Information:
Update to 0.3 (rhbz#2251136) -------------------------------------------------------------------------------- ChangeLog:
* Thu Nov 23 2023 Lumir Balhar lbalhar@redhat.com - 0.3-1 - Update to 0.3 (rhbz#2251136) * Thu Nov 23 2023 Lumir Balhar lbalhar@redhat.com - 0.2-16 - SPDX License identifier * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 0.2-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sun Jul 9 2023 Yaakov Selkowitz yselkowi@redhat.com - 0.2-11 - Fix virtualenv usage for Python 3.12 * Wed Jun 14 2023 Python Maint python-maint@redhat.com - 0.2-10 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2251136 - python-pytest-venv-0.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2251136 --------------------------------------------------------------------------------
================================================================================ qownnotes-23.11.3-1.fc38 (FEDORA-2023-fcc2117795) Plain-text file markdown note taking with Nextcloud integration -------------------------------------------------------------------------------- Update Information:
Automatic update for qownnotes-23.11.3-1.fc38. ##### **Changelog for qownnotes** ``` * Sat Nov 25 2023 Packit hello@packit.dev - 23.11.3-1 - [packit] 23.11.3 upstream release - Resolves rhbz#2251446 * Sun Nov 19 2023 Packit hello@packit.dev - 23.11.2-1 - [packit] 23.11.2 upstream release - Resolves rhbz#2250546 ``` -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 25 2023 Packit hello@packit.dev - 23.11.3-1 - [packit] 23.11.3 upstream release - Resolves rhbz#2251446 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2250546 - qownnotes-23.11.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2250546 [ 2 ] Bug #2251446 - qownnotes-23.11.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2251446 --------------------------------------------------------------------------------
================================================================================ receptor-1.4.3-1.fc38 (FEDORA-2023-b2141b02b2) Multi-service relayer with remote execution and orchestration capabilities -------------------------------------------------------------------------------- Update Information:
Update to 1.4.3 and removed unneeded items -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Andrew Heath anheath@redhat.com - 1.4.3-1 - Update to 1.4.3 and removed unneeded script --------------------------------------------------------------------------------
================================================================================ rust-libslirp-4.2.2-19.fc38 (FEDORA-2023-5434301788) High-level bindings & helper process for libslirp -------------------------------------------------------------------------------- Update Information:
- Update the libsystemd crate to version 0.7.0. - Adapt the package for the libslirp crate to build against libsystemd v0.7. -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 25 2023 Fabio Valentini decathorpe@gmail.com - 4.2.2-19 - Bump libsystemd dependency to <0.8 --------------------------------------------------------------------------------
================================================================================ rust-libsystemd-0.7.0-1.fc38 (FEDORA-2023-5434301788) Pure-Rust client library to interact with systemd -------------------------------------------------------------------------------- Update Information:
- Update the libsystemd crate to version 0.7.0. - Adapt the package for the libslirp crate to build against libsystemd v0.7. -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 25 2023 Fabio Valentini decathorpe@gmail.com - 0.7.0-1 - Update to version 0.7.0; Fixes RHBZ#1966652 --------------------------------------------------------------------------------
================================================================================ syncthing-1.26.1-1.fc38 (FEDORA-2023-66a4bd4ac1) Continuous File Synchronization -------------------------------------------------------------------------------- Update Information:
Update to version 1.26.1. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.26.1 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 27 2023 Fabio Valentini decathorpe@gmail.com - 1.26.1-1 - Update to version 1.26.1; Fixes RHBZ#2250334 --------------------------------------------------------------------------------
================================================================================ ugene-49.1-1.fc38 (FEDORA-2023-54efccf165) Integrated bioinformatics toolkit -------------------------------------------------------------------------------- Update Information:
New version 49.1 is released. -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Mamoru TASAKA mtasaka@fedoraproject.org - 49.1-1 - 49.1 --------------------------------------------------------------------------------
================================================================================ uxplay-1.66-2.fc38 (FEDORA-2023-bc1f081ca0) AirPlay Unix mirroring server -------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2023-47627 https://pagure.io/fesco/issue/3106 ## python- aiohttp 3.8.6 (2023-10-07) https://github.com/aio- libs/aiohttp/blob/v3.8.6/CHANGES.rst#386-2023-10-07 ### Security bugfixes - Upgraded `llhttp` to v9.1.3: https://github.com/aio- libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9 - Updated Python parser to comply with RFCs 9110/9112: https://github.com/aio- libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg ### Deprecation - Added `fallback_charset_resolver` parameter in `ClientSession` to allow a user- supplied character set detection function. Character set detection will no longer be included in 3.9 as a default. If this feature is needed, please use [` fallback_charset_resolver`](https://docs.aiohttp.org/en/stable/client_advanced.h tml#character-set-detection). ### Features - Enabled lenient response parsing for more flexible parsing in the client (this should resolve some regressions when dealing with badly formatted HTTP responses). ### Bugfixes - Fixed `PermissionError` when `.netrc` is unreadable due to permissions. - Fixed output of parsing errors pointing to a `\n`. - Fixed `GunicornWebWorker` max_requests_jitter not working. - Fixed sorting in `filter_cookies` to use cookie with longest path. - Fixed display of `BadStatusLine` messages from `llhttp`. ---- ## llhttp 9.1.3 ### Fixes - Restart the parser on HTTP 100 - Fix chunk extensions quoted-string value parsing - Fix lenient_flags truncated on reset - Fix chunk extensions��� parameters parsing when more then one name- value pair provided ## llhttp 9.1.2 ### What's Changed - Fix HTTP 1xx handling ## llhttp 9.1.1 ### What's Changed - feat: Expose new lenient methods ## llhttp 9.1.0 ### What's Changed - New lenient flag to make CR completely optional - New lenient flag to have spaces after chunk header -------------------------------------------------------------------------------- ChangeLog:
* Mon Oct 23 2023 Davide Cavalca dcavalca@fedoraproject.org - 1.66-2 - Rebuild for llhttp SONAME bump -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2249825 - CVE-2023-47627 python-aiohttp: numerous issues in HTTP parser with header parsing https://bugzilla.redhat.com/show_bug.cgi?id=2249825 --------------------------------------------------------------------------------
================================================================================ xmake-2.8.5-2.fc38 (FEDORA-2023-c351059833) A cross-platform build utility based on Lua -------------------------------------------------------------------------------- Update Information:
initial packaging -------------------------------------------------------------------------------- ChangeLog:
* Sat Nov 18 2023 topazus topazus@outlook.com - 2.8.5-2 - add .packit.yaml file * Sat Nov 18 2023 topazus topazus@outlook.com - 2.8.5-1 - initial import (rhbz#2249796) --------------------------------------------------------------------------------
================================================================================ xsnow-3.7.6-1.fc38 (FEDORA-2023-64338dc6de) Let it snow on your desktop -------------------------------------------------------------------------------- Update Information:
correct spelling error in ChangeLog -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 28 2023 Andrea Musuruane musuruan@gmail.com - 3.7.6-1 - Updated to new upstream release -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2250285 - xsnow-3.7.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2250285 --------------------------------------------------------------------------------