The following Fedora 38 Security updates need testing: Age URL 135 https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaa2b3d20b containerd-1.6.23-1.fc38 48 https://bodhi.fedoraproject.org/updates/FEDORA-2023-13b03a90f9 python-pillow-9.5.0-2.fc38 26 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec02e360af tigervnc-1.13.1-9.fc38 xorg-x11-server-1.20.14-28.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-3ab90a5b01 python2.7-2.7.18-37.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-39a8c72ea9 python-paramiko-3.4.0-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-71c2c6526c putty-0.80-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-5c186175f2 postfix-3.7.9-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-06ebb70bdd podman-4.8.3-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-c9dc0ac419 tinyxml-2.6.2-28.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e0841c83bb exim-4.97.1-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-698737a3c5 espeak-ng-1.51.1-6.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f0f2f19820 ppp-2.4.9-10.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a5aad4eede rubygem-httparty-0.18.1-9.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-43b9d9bff9 tkimg-1.4.16-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a7bec8b0bd zabbix-6.0.25-1.fc38
The following Fedora 38 Critical Path updates have yet to be approved: Age URL 73 https://bodhi.fedoraproject.org/updates/FEDORA-2023-06dd18eecb go-rpm-macros-3.3.0-1.fc38 go2rpm-1.10.0-1.fc38 26 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec02e360af tigervnc-1.13.1-9.fc38 xorg-x11-server-1.20.14-28.fc38 21 https://bodhi.fedoraproject.org/updates/FEDORA-2023-6fe52eb932 bubblewrap-0.8.0-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e11409a2bd breeze-icon-theme-5.113.0-1.fc38 extra-cmake-modules-5.113.0-1.fc38 kf5-5.113.0-1.fc38 kf5-attica-5.113.0-1.fc38 kf5-baloo-5.113.0-1.fc38 kf5-bluez-qt-5.113.0-1.fc38 kf5-frameworkintegration-5.113.0-1.fc38 kf5-kactivities-5.113.0-1.fc38 kf5-kactivities-stats-5.113.0-1.fc38 kf5-karchive-5.113.0-1.fc38 kf5-kauth-5.113.0-1.fc38 kf5-kbookmarks-5.113.0-1.fc38 kf5-kcalendarcore-5.113.0-1.fc38 kf5-kcmutils-5.113.0-1.fc38 kf5-kcodecs-5.113.0-1.fc38 kf5-kcompletion-5.113.0-1.fc38 kf5-kconfig-5.113.0-1.fc38 kf5-kconfigwidgets-5.113.0-1.fc38 kf5-kcontacts-5.113.0-1.fc38 kf5-kcoreaddons-5.113.0-1.fc38 kf5-kcrash-5.113.0-1.fc38 kf5-kdav-5.113.0-1.fc38 kf5-kdbusaddons-5.113.0-1.fc38 kf5-kdeclarative-5.113.0-1.fc38 kf5-kded-5.113.0-1.fc38 kf5-kdelibs4support-5.113.0-1.fc38 kf5-kdesignerplugin-5.113.0-1.fc38 kf5-kdesu-5.113.0-1.fc38 kf5-kdewebkit-5.113.0-1.fc38 kf5-kdnssd-5.113.0-1.fc38 kf5-kdoctools-5.113.0-1.fc38 kf5-kemoticons -5.113.0-1.fc38 kf5-kfilemetadata-5.113.0-2.fc38 kf5-kglobalaccel-5.113.0-1.fc38 kf5-kguiaddons-5.113.0-1.fc38 kf5-kholidays-5.113.0-1.fc38 kf5-khtml-5.113.0-1.fc38 kf5-ki18n-5.113.0-1.fc38 kf5-kiconthemes-5.113.0-1.fc38 kf5-kidletime-5.113.0-1.fc38 kf5-kimageformats-5.113.0-1.fc38 kf5-kinit-5.113.0-1.fc38 kf5-kio-5.113.0-1.fc38 kf5-kirigami2-5.113.0-1.fc38 kf5-kitemmodels-5.113.0-1.fc38 kf5-kitemviews-5.113.0-1.fc38 kf5-kjobwidgets-5.113.0-1.fc38 kf5-kjs-5.113.0-1.fc38 kf5-kjsembed-5.113.0-1.fc38 kf5-kmediaplayer-5.113.0-1.fc38 kf5-knewstuff-5.113.0-1.fc38 kf5-knotifications-5.113.0-1.fc38 kf5-knotifyconfig-5.113.0-1.fc38 kf5-kpackage-5.113.0-1.fc38 kf5-kparts-5.113.0-1.fc38 kf5-kpeople-5.113.0-1.fc38 kf5-kplotting-5.113.0-1.fc38 kf5-kpty-5.113.0-1.fc38 kf5-kquickcharts-5.113.0-1.fc38 kf5-kross-5.113.0-1.fc38 kf5-krunner-5.113.0-1.fc38 kf5-kservice-5.113.0-1.fc38 kf5-ktexteditor-5.113.0-1.fc38 kf5-ktextwidgets-5.113.0-1.fc38 kf5-kunitconversion-5.113.0-1.fc38 kf5-kwallet-5.113.0-1. fc38 kf5-kwayland-5.113.0-1.fc38 kf5-kwidgetsaddons-5.113.0-1.fc38 kf5-kwindowsystem-5.113.0-1.fc38 kf5-kxmlgui-5.113.0-1.fc38 kf5-kxmlrpcclient-5.113.0-1.fc38 kf5-modemmanager-qt-5.113.0-1.fc38 kf5-networkmanager-qt-5.113.0-1.fc38 kf5-plasma-5.113.0-1.fc38 kf5-prison-5.113.0-1.fc38 kf5-purpose-5.113.0-1.fc38 kf5-solid-5.113.0-1.fc38 kf5-sonnet-5.113.0-1.fc38 kf5-syndication-5.113.0-1.fc38 kf5-syntax-highlighting-5.113.0-1.fc38 kf5-threadweaver-5.113.0-1.fc38 oxygen-icon-theme-5.113.0-1.fc38 qqc2-desktop-style-5.113.0-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e492f3ffa0 tzdata-2023d-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-698737a3c5 espeak-ng-1.51.1-6.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1a8712f643 fwupd-1.9.11-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-06ebb70bdd podman-4.8.3-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-650a97dfd0 cockpit-308-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-dbd79805d8 nss-3.96.1-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d011fd4656 python-wrapt-1.15.0-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-ed8ffa1ffb passt-0^20231230.gf091893-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4602947752 container-selinux-2.227.0-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-33badc181a kobo-0.35.1-1.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8a0d67d142 speech-dispatcher-0.11.5-2.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-33cfed20da mock-5.4-1.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-5ace93d5b8 annobin-12.35-1.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4c8850d6a6 appstream-data-38-7.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a05e0cc365 ldns-1.8.3-7.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-630050b891 nfs-utils-2.6.4-0.rc3.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8e0a0d0e3a papirus-icon-theme-20231201-2.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6eff0fcdae libtirpc-1.3.4-0.rc2.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f928bc9305 device-mapper-persistent-data-1.0.9-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-93d2d0bf55 bluez-5.71-3.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-84a4b48f03 gstreamer1-plugins-bad-free-1.22.8-3.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-7994817014 python-rpmautospec-0.4.1-2.fc38 python-rpmautospec-koji-0.4.0-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a88b7b5fe4 mariadb-connector-c-3.3.8-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-775c2c657f gdb-14.1-1.fc382 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6670cd241d lshw-B.02.20-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2554751ea6 gnome-extensions-app-44.8-1.fc38 gnome-shell-44.8-1.fc38 mutter-44.8-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-991a9c6905 kernel-6.6.10-100.fc38
The following builds have been pushed to Fedora 38 updates-testing
LibRaw-0.21.2-2.fc38 PyDrive2-1.19.0-1.fc38 cfn-lint-0.83.8-1.fc38 distribution-gpg-keys-1.100-1.fc38 golang-github-pierrec-lz4-4.1.21-3.fc38 golang-x-crypto-0.18.0-1.fc38 golang-x-mod-0.14.0-1.fc38 golang-x-net-0.20.0-1.fc38 golang-x-sys-0.16.0-1.fc38 golang-x-text-0.14.0-1.fc38 gtkwave-3.3.118-1.fc38 hplip-3.23.12-1.fc38 hwdata-0.378-1.fc38 kubernetes-1.26.12-3.fc38 minder-1.16.0-1.fc38 nwg-panel-0.9.20-1.fc38 python-aws-sam-translator-1.83.0-1.fc38 python-basemap-1.4.0-1.fc38 python-chalice-1.30.0-1.fc38 python-graph-tool-2.59-1.fc38 python-inquirer-3.1.3-1.fc38 python-numpoly-1.2.11-6.fc38 python-readchar-4.0.5-2.fc38 python-sciunit-0.2.8-1.fc38 python-virt-firmware-24.1-2.fc38 python-xdfile-1.9.0~20240101git3349ddc-1.fc38 python-zstd-1.5.5.1-1.fc38 qownnotes-24.1.2-1.fc38 redis-7.0.15-1.fc38 rust-reference-counted-singleton-0.1.2-1.fc38 rust-selinux-sys-0.6.7-1.fc38 rust-uu_mkdir-0.0.23-1.fc38 rust-uu_mktemp-0.0.23-1.fc38 rust-uu_whoami-0.0.23-1.fc38 timew-1.7.0-2.fc38 zbar-0.23.93-1.fc38
Details about builds:
================================================================================ LibRaw-0.21.2-2.fc38 (FEDORA-2024-645618d5e3) Library for reading RAW files obtained from digital photo cameras -------------------------------------------------------------------------------- Update Information:
CR3-Qstep table: avoid wrong 64-bit code generation patch -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gwyn Ciesla gwync@protonmail.com - 0.21.2-2 - CR3-Qstep table: avoid wrong 64-bit code generation patch --------------------------------------------------------------------------------
================================================================================ PyDrive2-1.19.0-1.fc38 (FEDORA-2024-612a074473) Google Drive API Python wrapper library, maintained fork of PyDrive -------------------------------------------------------------------------------- Update Information:
Update to 1.19 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Mikel Olasagasti Uranga mikel@olasagasti.info - 1.19.0-1 - Update to 1.19.0 - Closes rhbz#2256707 --------------------------------------------------------------------------------
================================================================================ cfn-lint-0.83.8-1.fc38 (FEDORA-2024-f61ee0dc53) CloudFormation Linter -------------------------------------------------------------------------------- Update Information:
Update `python-aws-sam-translator` to 1.83.0 and `cfn-lint` to 0.83.8. https://github.com/aws/serverless-application-model/releases/tag/v1.83.0 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.6 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.7 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.8 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.83.8-1 - Update to 0.83.8 * Fri Jan 5 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.83.7-1 - Update to 0.83.7 * Fri Jan 5 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.83.6-1 - Update to 0.83.6 * Fri Jan 5 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.83.5-2 - Assert that %pyproject_files contains a license file -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256890 - python-aws-sam-translator-1.83.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256890 --------------------------------------------------------------------------------
================================================================================ distribution-gpg-keys-1.100-1.fc38 (FEDORA-2024-36d4ffe303) GPG keys of various Linux distributions -------------------------------------------------------------------------------- Update Information:
Automatic update for distribution-gpg-keys-1.100-1.fc38. ##### **Changelog for distribution-gpg-keys** ``` * Tue Jan 09 2024 Miroslav Such�� msuchy@redhat.com 1.100-1 - update copr keys - Add remi 2024 Key * Thu Dec 28 2023 Miroslav Such�� msuchy@redhat.com 1.99-1 - update copr keys - Add Qubes OS 4.2 release key - Split AlmaLinux OS 8 GPG public keys to fix microdnf - Update AlmaLinux OS 8 public key ``` ---- Automatic update for distribution-gpg- keys-1.99-1.fc38. ##### **Changelog for distribution-gpg-keys** ``` * Thu Dec 28 2023 Miroslav Such�� msuchy@redhat.com 1.99-1 - update copr keys - Add Qubes OS 4.2 release key - Split AlmaLinux OS 8 GPG public keys to fix microdnf - Update AlmaLinux OS 8 public key ``` -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Miroslav Such�� msuchy@redhat.com 1.100-1 - update copr keys - Add remi 2024 Key * Thu Dec 28 2023 Miroslav Such�� msuchy@redhat.com 1.99-1 - update copr keys - Add Qubes OS 4.2 release key - Split AlmaLinux OS 8 GPG public keys to fix microdnf - Update AlmaLinux OS 8 public key --------------------------------------------------------------------------------
================================================================================ golang-github-pierrec-lz4-4.1.21-3.fc38 (FEDORA-2024-d33e1da75e) LZ4 compression and decompression in pure Go -------------------------------------------------------------------------------- Update Information:
Update to 4.1.21 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Mikel Olasagasti Uranga mikel@olasagasti.info - Update to 4.1.21 - Closes rhbz#2257337 * Thu Dec 7 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - Update to 4.1.19 - Closes rhbz#2253506 * Sat Jul 29 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 4.1.18-1 - Update to 4.1.18 - Closes rhbz#2125794 * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 4.1.16-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ golang-x-crypto-0.18.0-1.fc38 (FEDORA-2024-2705241461) Go supplementary cryptography libraries -------------------------------------------------------------------------------- Update Information:
Update golang-x-crypto to v0.18.0, fix for CVE-2023-48795 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Mark E. Fuller mark.e.fuller@gmx.de - 0.18.0-1 - update to v0.18.0, close rhbz#2255095 - CVE-2023-48795 golang-x-crypto: ssh: Prefix truncation attack on Binary Packet Protocol * Tue Dec 19 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.17.0-1 - update to v0.17.0, close rhbz#2255153 * Tue Nov 28 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.16.0-1 - update to v0.16.0, close rhbz#2251962 * Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.15.0-1 - update to 0.15.0, close rhbz#2248796 * Mon Oct 9 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.14.0-1 - update to v0.14.0, close rhbz#2242424 * Wed Sep 6 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.13.0-1 - update to v0.13.0, close rhbz#2237488 * Sat Aug 12 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.12.0-1 - update to v0.12.0 * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.11.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Jul 14 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.11.0-1 - update to v0.11.0, close rhbz#2214859 * Thu Jun 22 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.10.0-1 - update to v0.10.0, close rhbz#2214859 * Sun Jun 11 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.9.0-1 - bump to v0.9.0, close rhbz#2175556 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) https://bugzilla.redhat.com/show_bug.cgi?id=2254210 --------------------------------------------------------------------------------
================================================================================ golang-x-mod-0.14.0-1.fc38 (FEDORA-2024-ae653fb07b) Go module mechanics libraries -------------------------------------------------------------------------------- Update Information:
Update to v0.14.0 to address CVE-2022-41717 and CVE-2023-39325 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.14.0-1 - update to v0.14.0, close rhbz#2247966 * Sat Oct 7 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.13.0-1 - update to v0.13.0, close rhbz#2242566 * Sat Aug 12 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.12.0-1 - update to v0.12.0, close rhbz#2175444 * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.11.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jun 22 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.11.0-1 - update to v0.11.0, close rhbz#2175444 * Sun Jun 11 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.10.0-1 - update to v0.10.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2248209 - golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) https://bugzilla.redhat.com/show_bug.cgi?id=2248209 [ 2 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) https://bugzilla.redhat.com/show_bug.cgi?id=2254210 --------------------------------------------------------------------------------
================================================================================ golang-x-net-0.20.0-1.fc38 (FEDORA-2024-0ac454dafc) Go supplementary network libraries -------------------------------------------------------------------------------- Update Information:
update to v0.20.0 for CVE-2023-39325 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Mark E. Fuller mark.e.fuller@gmx.de - 0.20.0-1 - update to v0.20.0, close rhbz#2257356 * Fri Dec 1 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.19.0-1 - upgrade to v0.19.0, close rhbz#2252108 * Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.18.0-1 - update to v0.18.0, close rhbz#2249006 * Wed Oct 11 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.17.0-1 - update to v0.17.0, close rhbz#2243117 * Sat Oct 7 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.16.0-1 - update to v0.16.0, close rhbz#2242574 * Wed Sep 6 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.15.0-1 - update to v0.15.0, close rhbz#2237715 * Mon Aug 7 2023 Mikel Olasagasti Uranga mikel@olasagasti.info - 0.14.0-1 - Update to 0.14.0 - Closes rhbz#2229647 rhbz#2229599 rhbz#2178463 * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.10.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sun Jun 11 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.10.0-1 - update to v0.10.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2248209 - golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) https://bugzilla.redhat.com/show_bug.cgi?id=2248209 --------------------------------------------------------------------------------
================================================================================ golang-x-sys-0.16.0-1.fc38 (FEDORA-2024-c76f730050) Go packages for low-level interaction with the operating system -------------------------------------------------------------------------------- Update Information:
update to v0.16.0 -------------------------------------------------------------------------------- ChangeLog:
* Sun Jan 7 2024 Mark E. Fuller mark.e.fuller@gmx.de - 0.16.0-1 - update to v0.16.0, close rhbz#2257072 * Tue Nov 28 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.15.0-1 - update to v0.15.0, close rhbz#2251810 * Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.14.0-1 - update to v0.14.0, close rhbz#2248031 * Wed Oct 11 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.13.0-1 - update to v0.13.0, close rhbz#2242352 * Mon Sep 4 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.12.0-1 - upgrade to v0.12.0, close rhbz#2237068 * Sat Aug 12 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.11.0-1 - update to v0.11.0, close rhbz#2229385 --------------------------------------------------------------------------------
================================================================================ golang-x-text-0.14.0-1.fc38 (FEDORA-2024-fd3545a844) Go text processing support -------------------------------------------------------------------------------- Update Information:
update to v0.14.0, address CVE-2023-39325 -------------------------------------------------------------------------------- ChangeLog:
* Mon Nov 20 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.14.0-1 - update to v0.14.0, close rhbz#2248051 * Mon Sep 4 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.13.0-1 - update to v0.13.0, close rhbz#2237073 * Sat Aug 12 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.12.0-1 - v0.12.0, close rhbz#2214528 * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.10.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jun 22 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.10.0-1 - update to v0.10.0, close rhbz#2214528 * Sun Jun 11 2023 Mark E. Fuller mark.e.fuller@gmx.de - 0.9.0-1 - bump to v0.9.0, close rhbz#2175494 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2161274 - CVE-2022-41717 golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests https://bugzilla.redhat.com/show_bug.cgi?id=2161274 [ 2 ] Bug #2248209 - golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) https://bugzilla.redhat.com/show_bug.cgi?id=2248209 --------------------------------------------------------------------------------
================================================================================ gtkwave-3.3.118-1.fc38 (FEDORA-2024-c990070fa4) Waveform Viewer -------------------------------------------------------------------------------- Update Information:
Cumulative bug-fix update. This update includes fixes for multiple security issues found by Talos in which specially crafted input files could lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Paul Howarth paul@city-fan.org - 3.3.118-1 - Update to 3.3.118 - Update xml2stems to handle newer "loc" vs. "fl" xml tags - Change preg_regex_c_1 decl to use regex_t* as datatype - Move gtkwave.appdata.xml to io.github.gtkwave.GTKWave.metainfo.xml - Fixed popen security advisories: - TALOS-2023-1786 (CVE-2023-35963, CVE-2023-35960, CVE-2023-35964, CVE-2023-35959, CVE-2023-35961, CVE-2023-35962) - Fixed FST security advisories: - TALOS-2023-1777 (CVE-2023-32650) - TALOS-2023-1783 (CVE-2023-35704, CVE-2023-35703, CVE-2023-35702) - TALOS-2023-1785 (CVE-2023-35956, CVE-2023-35957, CVE-2023-35958, CVE-2023-35955) - TALOS-2023-1789 (CVE-2023-35969, CVE-2023-35970) - TALOS-2023-1790 (CVE-2023-35992) - TALOS-2023-1791 (CVE-2023-35994, CVE-2023-35996, CVE-2023-35997, CVE-2023-35995) - TALOS-2023-1792 (CVE-2023-35128) - TALOS-2023-1793 (CVE-2023-36747, CVE-2023-36746) - TALOS-2023-1797 (CVE-2023-36864) - TALOS-2023-1798 (CVE-2023-36915, CVE-2023-36916) - Fixed evcd2vcd security advisories: - TALOS-2023-1803 (CVE-2023-34087) - Fixed VCD security advisories: - TALOS-2023-1804 (CVE-2023-37416, CVE-2023-37419, CVE-2023-37420, CVE-2023-37418, CVE-2023-37417) - TALOS-2023-1805 (CVE-2023-37447, CVE-2023-37446, CVE-2023-37445, CVE-2023-37444, CVE-2023-37442, CVE-2023-37443) - TALOS-2023-1806 (CVE-2023-37576, CVE-2023-37577, CVE-2023-37573, CVE-2023-37578, CVE-2023-37575, CVE-2023-37574) - TALOS-2023-1807 (CVE-2023-37921, CVE-2023-37923, CVE-2023-37922) - Fixed VZT security advisories: - TALOS-2023-1810 (CVE-2023-37282) - TALOS-2023-1811 (CVE-2023-36861) - TALOS-2023-1812 (CVE-2023-38618, CVE-2023-38621, CVE-2023-38620, CVE-2023-38619, CVE-2023-38623, CVE-2023-38622) - TALOS-2023-1813 (CVE-2023-38649, CVE-2023-38648) - TALOS-2023-1814 (CVE-2023-38651, CVE-2023-38650) - TALOS-2023-1815 (CVE-2023-38653, CVE-2023-38652) - TALOS-2023-1816 (CVE-2023-35004) - TALOS-2023-1817 (CVE-2023-39235, CVE-2023-39234) - Fixed LXT2 security advisories: - TALOS-2023-1818 (CVE-2023-39273, CVE-2023-39271, CVE-2023-39274, CVE-2023-39275, CVE-2023-39272, CVE-2023-39270) - TALOS-2023-1819 (CVE-2023-34436) - TALOS-2023-1820 (CVE-2023-39316, CVE-2023-39317) - TALOS-2023-1821 (CVE-2023-35057) - TALOS-2023-1822 (CVE-2023-35989) - TALOS-2023-1823 (CVE-2023-38657) - TALOS-2023-1824 (CVE-2023-39413, CVE-2023-39414) - TALOS-2023-1826 (CVE-2023-39443, CVE-2023-39444) - TALOS-2023-1827 (CVE-2023-38583) * Mon Aug 14 2023 Paul Howarth paul@city-fan.org - 3.3.117-1 - Update to 3.3.117 - Fix stems reader processing code broken in 3.3.114 * Sun Jul 23 2023 Paul Howarth paul@city-fan.org - 3.3.116-1 - Update to 3.3.116 - Fix manpage/odt for vcd2fst command switch documentation for zlibpack - Add GDK_WINDOWING_WAYLAND check for gdkwayland.h header usage - Change sprintf to snprintf in fstapi.c - Fix init crash on show_base_symbols enabled * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 3.3.115-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257435 - gtkwave: Multiple CVEs published by Talos https://bugzilla.redhat.com/show_bug.cgi?id=2257435 --------------------------------------------------------------------------------
================================================================================ hplip-3.23.12-1.fc38 (FEDORA-2024-5c7de12328) HP Linux Imaging and Printing Project -------------------------------------------------------------------------------- Update Information:
2252302 - hplip-3.23.12 is available -------------------------------------------------------------------------------- ChangeLog:
* Mon Jan 8 2024 Zdenek Dohnal zdohnal@redhat.com - 3.23.12-1 - 2252302 - hplip-3.23.12 is available -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2252302 - hplip-3.23.12 is available https://bugzilla.redhat.com/show_bug.cgi?id=2252302 --------------------------------------------------------------------------------
================================================================================ hwdata-0.378-1.fc38 (FEDORA-2024-07a1eabd24) Hardware identification and configuration data -------------------------------------------------------------------------------- Update Information:
Update vendor ids -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 3 2024 Vitezslav Crhonek vcrhonek@redhat.com - 0.378-1 - Update vendor ids --------------------------------------------------------------------------------
================================================================================ kubernetes-1.26.12-3.fc38 (FEDORA-2024-ec3dc4a751) Container cluster management -------------------------------------------------------------------------------- Update Information:
Implements the shell completion macro in the spec file. This changes where the bash, fish, and zsh completions for kubectl are placed. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Bradley G Smith bradley.g.smith@gmail.com - 1.26.12-3 - Implement shell completion macro * Tue Jan 9 2024 blinxen h-k-81@hotmail.com - 1.26.12-2 - Use shell completion macro to specify completion directory This makes sure that the shell completion scripts are always installed in the correct directory. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257436 - kubectl zsh completion file is installed to the wrong directory https://bugzilla.redhat.com/show_bug.cgi?id=2257436 --------------------------------------------------------------------------------
================================================================================ minder-1.16.0-1.fc38 (FEDORA-2024-f763cca84a) Mind-mapping application -------------------------------------------------------------------------------- Update Information:
Automatic update for minder-1.16.0-1.fc38. ##### **Changelog for minder** ``` * Tue Jan 09 2024 Packit hello@packit.dev - 1.16.0-1 - [packit] 1.16.0 upstream release - Resolves rhbz#2257464 * Tue Jan 09 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-5 - packit: Update config * Sun Oct 08 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-4 - build: Add Packit config * Sun Oct 08 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-3 - license: Convert to SPDX * Sun Oct 08 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-2 - build: Use forge macros ``` -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Packit hello@packit.dev - 1.16.0-1 - [packit] 1.16.0 upstream release - Resolves rhbz#2257464 * Tue Jan 9 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-5 - packit: Update config * Sun Oct 8 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-4 - build: Add Packit config * Sun Oct 8 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-3 - license: Convert to SPDX * Sun Oct 8 2023 Artem Polishchuk ego.cordatus@gmail.com - 1.15.6-2 - build: Use forge macros -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257464 - minder-1.16.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257464 --------------------------------------------------------------------------------
================================================================================ nwg-panel-0.9.20-1.fc38 (FEDORA-2024-4e65df5f3e) GTK3-based panel for sway window manager -------------------------------------------------------------------------------- Update Information:
Automatic update for nwg-panel-0.9.20-1.fc38. ##### **Changelog for nwg-panel** ``` * Tue Jan 09 2024 Packit hello@packit.dev - 0.9.20-1 - [packit] 0.9.20 upstream release - Resolves rhbz#2257358 ``` -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Packit hello@packit.dev - 0.9.20-1 - [packit] 0.9.20 upstream release - Resolves rhbz#2257358 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257358 - nwg-panel-0.9.20 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257358 --------------------------------------------------------------------------------
================================================================================ python-aws-sam-translator-1.83.0-1.fc38 (FEDORA-2024-f61ee0dc53) Transform SAM templates into AWS CloudFormation templates -------------------------------------------------------------------------------- Update Information:
Update `python-aws-sam-translator` to 1.83.0 and `cfn-lint` to 0.83.8. https://github.com/aws/serverless-application-model/releases/tag/v1.83.0 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.6 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.7 https://github.com/aws-cloudformation/cfn-lint/releases/tag/v0.83.8 -------------------------------------------------------------------------------- ChangeLog:
* Fri Jan 5 2024 Benjamin A. Beasley code@musicinmybrain.net - 1.83.0-1 - Update to 1.83.0 (close RHBZ#2256890) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256890 - python-aws-sam-translator-1.83.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256890 --------------------------------------------------------------------------------
================================================================================ python-basemap-1.4.0-1.fc38 (FEDORA-2024-13e416b18d) Plots data on map projections (with continental and political boundaries) -------------------------------------------------------------------------------- Update Information:
1.4.0 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gwyn Ciesla gwync@protonmail.com - 1.4.0-1 - 1.4.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257458 - python-basemap-1.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257458 --------------------------------------------------------------------------------
================================================================================ python-chalice-1.30.0-1.fc38 (FEDORA-2024-494a8985f9) Python Serverless Microframework for AWS -------------------------------------------------------------------------------- Update Information:
Initial python-inquirer and python-chalice builds -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Davide Cavalca dcavalca@fedoraproject.org - 1.30.0-1 - Initial import; Fixes: RHBZ#2223011 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2223010 - Review Request: python-inquirer - Collection of common interactive command line user interfaces https://bugzilla.redhat.com/show_bug.cgi?id=2223010 [ 2 ] Bug #2223011 - Review Request: python-chalice - Python Serverless Microframework for AWS https://bugzilla.redhat.com/show_bug.cgi?id=2223011 --------------------------------------------------------------------------------
================================================================================ python-graph-tool-2.59-1.fc38 (FEDORA-2024-1d517772f0) Efficient network analysis tool written in Python -------------------------------------------------------------------------------- Update Information:
Update to 2.59 (close RHBZ#2256970) -------------------------------------------------------------------------------- ChangeLog:
* Mon Jan 8 2024 Benjamin A. Beasley code@musicinmybrain.net - 2.59-1 - Update to 2.59 (close RHBZ#2256970) * Mon Jan 8 2024 Benjamin A. Beasley code@musicinmybrain.net - 2.58-3 - Break a long line in the spec file -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256970 - python-graph-tool-2.59 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256970 --------------------------------------------------------------------------------
================================================================================ python-inquirer-3.1.3-1.fc38 (FEDORA-2024-494a8985f9) Collection of common interactive command line user interfaces -------------------------------------------------------------------------------- Update Information:
Initial python-inquirer and python-chalice builds -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Davide Cavalca dcavalca@fedoraproject.org - 3.1.3-1 - Initial import; Fixes: RHBZ#2223010 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2223010 - Review Request: python-inquirer - Collection of common interactive command line user interfaces https://bugzilla.redhat.com/show_bug.cgi?id=2223010 [ 2 ] Bug #2223011 - Review Request: python-chalice - Python Serverless Microframework for AWS https://bugzilla.redhat.com/show_bug.cgi?id=2223011 --------------------------------------------------------------------------------
================================================================================ python-numpoly-1.2.11-6.fc38 (FEDORA-2024-0ff58c08a5) Polynomials as a numpy datatype -------------------------------------------------------------------------------- Update Information:
Update to 1.2.11 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Sandro devel@penguinpee.nl - 1.2.11-6 - Add Packit config * Tue Jan 9 2024 Sandro devel@penguinpee.nl - 1.2.11-5 - Drop `%{arm32}` from `ExcludeArch` (deprecated) * Tue Jan 9 2024 Sandro devel@penguinpee.nl - 1.2.11-4 - Make tests verbose * Tue Jan 9 2024 Sandro devel@penguinpee.nl - 1.2.11-3 - Update description (following upstream) * Tue Jan 9 2024 Sandro devel@penguinpee.nl - 1.2.11-2 - Assert existence of license file * Tue Jan 9 2024 Sandro devel@penguinpee.nl - 1.2.11-1 - Update to 1.2.11 (RHBZ#2212046) * Tue Jan 9 2024 Sandro devel@penguinpee.nl - 1.2.7-4 - Use forge macros * Tue Jan 9 2024 Benjamin A. Beasley code@musicinmybrain.net - 1.2.7-3 - Fix FTBFS due to SPECPARTS interference (close RHBZ#2220368) - Work around https://github.com/rpm-software-management/rpm/issues/2532 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2212046 - python-numpoly-1.2.11 is available https://bugzilla.redhat.com/show_bug.cgi?id=2212046 --------------------------------------------------------------------------------
================================================================================ python-readchar-4.0.5-2.fc38 (FEDORA-2024-494a8985f9) Library to easily read single chars and key strokes -------------------------------------------------------------------------------- Update Information:
Initial python-inquirer and python-chalice builds -------------------------------------------------------------------------------- ChangeLog:
* Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 4.0.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 18 2023 Davide Cavalca dcavalca@fedoraproject.org - 4.0.5-1 - Initial import; Fixes: RHBZ#2223009 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2223010 - Review Request: python-inquirer - Collection of common interactive command line user interfaces https://bugzilla.redhat.com/show_bug.cgi?id=2223010 [ 2 ] Bug #2223011 - Review Request: python-chalice - Python Serverless Microframework for AWS https://bugzilla.redhat.com/show_bug.cgi?id=2223011 --------------------------------------------------------------------------------
================================================================================ python-sciunit-0.2.8-1.fc38 (FEDORA-2024-f9b9d25ecf) Framework for test-driven validation of scientific models -------------------------------------------------------------------------------- Update Information:
Update to 0.2.8, with minor bugfixes. -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 4 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.2.8-1 - Update to 0.2.8 (close RHBZ#2256667) * Thu Jan 4 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.2.7-14 - Assert that the .dist-info directory contains a license file * Tue Dec 19 2023 Lumir Balhar lbalhar@redhat.com - 0.2.7-12 - Compatibility with nbconvert 7.13.0 * Fri Oct 13 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.2.7-11 - F38+: Use %{py3_test_envvars} to set up test environment * Tue Sep 5 2023 Sandro devel@penguinpee.nl - 0.2.7-10 - Get rid of da (l)imp - Apply upstream pacth replacing `imp` with `importlib` - Disable failing tests (reported upstream) - Close RHBZ#2220493 and RHBZ#2226540 * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 0.2.7-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed May 24 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.2.7-8 - Document cypy bundling * Wed May 24 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.2.7-7 - Remove some obsolete details from the spec file - Don���t use a macro form of ���tar��� - No need to manually enable the Python run-time dependency generator - No need to remove upstream egg-info when using pyproject-rpm-macros -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256667 - python-sciunit-0.2.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256667 --------------------------------------------------------------------------------
================================================================================ python-virt-firmware-24.1-2.fc38 (FEDORA-2024-44feaed207) Tools for virtual machine firmware volumes -------------------------------------------------------------------------------- Update Information:
update to version 24.1 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gerd Hoffmann kraxel@redhat.com - 24.1-2 - add pe-inspect manpage to file list * Tue Jan 9 2024 Gerd Hoffmann kraxel@redhat.com - 24.1-1 - update to version 24.1 --------------------------------------------------------------------------------
================================================================================ python-xdfile-1.9.0~20240101git3349ddc-1.fc38 (FEDORA-2024-64cd168f57) Python parser for .xd crossword format -------------------------------------------------------------------------------- Update Information:
Initial import; Fixes: RHBZ#2138487 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Davide Cavalca dcavalca@fedoraproject.org - 1.9.0~20240101git3349ddc-1 - Initial import; Fixes: RHBZ#2138487 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2138487 - Review Request: python-xdfile - Python parser for .xd crossword format https://bugzilla.redhat.com/show_bug.cgi?id=2138487 --------------------------------------------------------------------------------
================================================================================ python-zstd-1.5.5.1-1.fc38 (FEDORA-2024-f43c2b602b) Zstd Bindings for Python -------------------------------------------------------------------------------- Update Information:
Update the Python bindings for `zstd` to match the system `zstd` version -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 1.5.5.1-1 - Update to 1.5.5.1 * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 1.4.5.1-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 13 2023 Python Maint python-maint@redhat.com - 1.4.5.1-11 - Rebuilt for Python 3.12 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2169048 - python-zstd-1.5.5.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2169048 --------------------------------------------------------------------------------
================================================================================ qownnotes-24.1.2-1.fc38 (FEDORA-2024-7f821c6831) Plain-text file markdown note taking with Nextcloud integration -------------------------------------------------------------------------------- Update Information:
Automatic update for qownnotes-24.1.2-1.fc38. ##### **Changelog for qownnotes** ``` * Tue Jan 09 2024 Packit hello@packit.dev - 24.1.2-1 - [packit] 24.1.2 upstream release - Resolves rhbz#2257369 * Tue Jan 02 2024 Packit hello@packit.dev - 24.1.1-1 - [packit] 24.1.1 upstream release - Resolves rhbz#2256460 ``` -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Packit hello@packit.dev - 24.1.2-1 - [packit] 24.1.2 upstream release - Resolves rhbz#2257369 * Tue Jan 2 2024 Packit hello@packit.dev - 24.1.1-1 - [packit] 24.1.1 upstream release - Resolves rhbz#2256460 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2256460 - qownnotes-24.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256460 [ 2 ] Bug #2257369 - qownnotes-24.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257369 --------------------------------------------------------------------------------
================================================================================ redis-7.0.15-1.fc38 (FEDORA-2024-694899d442) A persistent key-value database -------------------------------------------------------------------------------- Update Information:
**Redis 7.0.15** Released Tue 09 Jan 2024 10:45:52 IST Upgrade urgency SECURITY: See security fixes below. Security fixes * (**CVE-2023-41056**) In some cases, Redis may incorrectly handle resizing of memory buffers which can result in incorrect accounting of buffer sizes and lead to heap overflow and potential remote code execution. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Remi Collet remi@remirepo.net - 7.0.15-1 - Upstream 7.0.15 release --------------------------------------------------------------------------------
================================================================================ rust-reference-counted-singleton-0.1.2-1.fc38 (FEDORA-2024-3be808720f) Reference-counted singleton whose protected data can be recreated as needed -------------------------------------------------------------------------------- Update Information:
Initial Fedora package -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.1.2-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257189 - Review Request: rust-reference-counted-singleton - Reference-counted singleton whose protected data can be recreated as needed https://bugzilla.redhat.com/show_bug.cgi?id=2257189 --------------------------------------------------------------------------------
================================================================================ rust-selinux-sys-0.6.7-1.fc38 (FEDORA-2024-b57906a84a) Flexible Mandatory Access Control (MAC) for Linux -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.6.7-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257186 - Review Request: rust-selinux-sys - Flexible Mandatory Access Control (MAC) for Linux https://bugzilla.redhat.com/show_bug.cgi?id=2257186 --------------------------------------------------------------------------------
================================================================================ rust-uu_mkdir-0.0.23-1.fc38 (FEDORA-2024-647453ec48) mkdir ~ (uutils) create DIRECTORY -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.0.23-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257194 - Review Request: rust-uu_mkdir - Mkdir ~ (uutils) create DIRECTORY https://bugzilla.redhat.com/show_bug.cgi?id=2257194 --------------------------------------------------------------------------------
================================================================================ rust-uu_mktemp-0.0.23-1.fc38 (FEDORA-2024-d0613276af) mktemp ~ (uutils) create and display a temporary file or directory from TEMPLATE -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.0.23-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257196 - Review Request: rust-uu_mktemp - mktemp ~ (uutils) create and display a temporary file or directory from TEMPLATE https://bugzilla.redhat.com/show_bug.cgi?id=2257196 --------------------------------------------------------------------------------
================================================================================ rust-uu_whoami-0.0.23-1.fc38 (FEDORA-2024-28b261a8df) whoami ~ (uutils) display user name of current effective user ID -------------------------------------------------------------------------------- Update Information:
Initial Fedora release -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Michel Lind salimma@fedoraproject.org - 0.0.23-1 - Initial package -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2257200 - Review Request: rust-uu_whoami - whoami ~ (uutils) display user name of current effective user ID https://bugzilla.redhat.com/show_bug.cgi?id=2257200 --------------------------------------------------------------------------------
================================================================================ timew-1.7.0-2.fc38 (FEDORA-2024-c3c0bd8c93) Timewarrior tracks and reports time -------------------------------------------------------------------------------- Update Information:
Fix regression: tag completion is broken in 1.7.0: https://github.com/GothenburgBitFactory/timewarrior/issues/581 -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Ankur Sinha (Ankur Sinha Gmail) sanjay.ankur@gmail.com - 1.7.0-2 - fix: revert completion changes that break tag completion --------------------------------------------------------------------------------
================================================================================ zbar-0.23.93-1.fc38 (FEDORA-2024-583e4098b9) Bar code reader -------------------------------------------------------------------------------- Update Information:
0.23.93, fixes for two CVEs -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Gwyn Ciesla gwync@protonmail.com - 0.23.93-1 - 0.23.93 * Fri Jan 5 2024 Florian Weimer fweimer@redhat.com - 0.23.90-12 - Add missing Py_SIZE to py311.patch * Sat Jul 22 2023 Fedora Release Engineering releng@fedoraproject.org - 0.23.90-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Jul 7 2023 Michael J Gruber mjg@fedoraproject.org - 0.23.90-10 - Fix FTBFS with python 3.12 (rhbz#2220630) * Thu Jun 15 2023 Python Maint python-maint@redhat.com - 0.23.90-9 - Rebuilt for Python 3.12 * Wed Mar 1 2023 Gwyn Ciesla gwync@protonmail.com - 0.23.90-8 - migrated to SPDX license -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2235860 - CVE-2023-40890 zbar: stack overflow caused malicious qr code may lead to information diusclosure or arbitrary code execution. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235860 [ 2 ] Bug #2235863 - CVE-2023-40889 zbar: buffer overflow via crafted qr code [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235863 [ 3 ] Bug #2257396 - Affect by CVE-2023-40889 https://bugzilla.redhat.com/show_bug.cgi?id=2257396 [ 4 ] Bug #2257428 - zbar-0.23.93 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257428 --------------------------------------------------------------------------------