The following Fedora 39 Security updates need testing:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-2024-391ed3a61d
python-dns-2.4.2-2.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-38fb541a75
perl-Email-MIME-1.954-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-4862425658
mingw-libxml2-2.12.7-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-ce7649d28e
python-jinja2-3.1.4-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-5d7c339890
thunderbird-115.11.0-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3136a71490
dotnet7.0-7.0.119-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3acd2ba1d3
dotnet8.0-8.0.105-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-80aa2e0e55
nextcloud-28.0.5-2.fc39
0
https://bodhi.fedoraproject.org/updates/FEDORA-2024-7989718224
libreoffice-7.6.7.2-1.fc39
0
https://bodhi.fedoraproject.org/updates/FEDORA-2024-7e4f058c2f
mingw-python-requests-2.32.0-1.fc39
The following Fedora 39 Critical Path updates have yet to be approved:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-2024-391ed3a61d
python-dns-2.4.2-2.fc39
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-6a369ac3e1
libusb1-1.0.27-2.fc39
11
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f79f6df0bc
osinfo-db-20240510-1.fc39
11
https://bodhi.fedoraproject.org/updates/FEDORA-2024-97286d7a34
passt-0^20240510.g7288448-1.fc39
11
https://bodhi.fedoraproject.org/updates/FEDORA-2024-1391be5b11
selinux-policy-39.7-1.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2024-6754709f47
libadwaita-1.4.4-1.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2024-b6a0e2b223
glibmm2.4-2.66.7-1.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2024-ba81cc019b gjs-1.78.5-1.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2024-469a2d84cc
libguestfs-1.52.1-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-95b3c15bef mock-5.6-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e927925b96
mock-core-configs-40.4-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-83522ac6a6
openexr-3.1.10-3.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-69b24c2a98
skopeo-1.15.1-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-46f914656a cups-2.4.8-3.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-ce7649d28e
python-jinja2-3.1.4-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-4fb18e1fa2 aom-3.9.0-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3e50b41c72
libedit-3.1-51.20240517cvs.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-21281fde38
rust-packaging-26.3-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-227e4ef4fb
conmon-2.1.12-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f717476fc1
fwupd-1.9.20-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2024-d24c458d7b
annobin-12.55-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e34c8cbb70 bluez-5.76-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2e8fea1704 sssd-2.9.5-1.fc39
0
https://bodhi.fedoraproject.org/updates/FEDORA-2024-a49f65d693
firefox-126.0-7.fc39
The following builds have been pushed to Fedora 39 updates-testing
Mars-4.5-27.fc39
bigloo-4.5b-2.fc39
bitcoin-core-27.0-1.fc39
bolt-0.9.8-1.fc39
cacti-1.2.27-1.fc39
cacti-spine-1.2.27-1.fc39
chromium-125.0.6422.76-1.fc39
copr-backend-1.177-1.fc39
copr-cli-1.112-1.fc39
copr-dist-git-0.70-1.fc39
copr-frontend-1.206-1.fc39
copr-rpmbuild-0.73-1.fc39
espresso-4.2.2-1.fc39
focuswriter-1.8.8-1.fc39
git-extras-7.2.0-1.fc39
linux-system-roles-1.78.2-1.fc39
lmdb-0.9.33-1.fc39
osbuild-119-1.fc39
php-cs-fixer-3.57.2-1.fc39
php-pear-PHP-CodeSniffer-3.10.0-1.fc39
python-copr-1.132-1.fc39
python-copr-common-0.24-1.fc39
qgis-3.34.7-1.fc39
qpwgraph-0.7.2-1.fc39
redis-7.2.5-1.fc39
roundcubemail-1.6.7-1.fc39
scap-security-guide-0.1.73-1.fc39
wireshark-4.0.15-1.fc39
Details about builds:
================================================================================
Mars-4.5-27.fc39 (FEDORA-2024-9b7107801d)
An interactive development environment for programming in MIPS assembly language
--------------------------------------------------------------------------------
Update Information:
Use system Java version
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Marian Koncek <mkoncek(a)redhat.com> - 4.5-27
- Use system Java version
* Tue Feb 27 2024 Jiri Vanek <jvanek(a)redhat.com> - 4.5-26
- Rebuilt for java-21-openjdk as system jdk
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5-25
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.5-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
bigloo-4.5b-2.fc39 (FEDORA-2024-a350e08ff9)
A compiler for the Scheme programming language
--------------------------------------------------------------------------------
Update Information:
This update removes references to the build directory in the bigloo scripts in
/usr/bin.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Jerry James <loganjerry(a)gmail.com> - 4.5b-2
- Remove references to build directory in /usr/bin (bz 2282390)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2282390 - Executable shell scripts in /usr/bin contain references to
buildroot
https://bugzilla.redhat.com/show_bug.cgi?id=2282390
--------------------------------------------------------------------------------
================================================================================
bitcoin-core-27.0-1.fc39 (FEDORA-2024-d819942309)
Peer to Peer Cryptographic Currency
--------------------------------------------------------------------------------
Update Information:
Update to Bitcoin Core 27!
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Simone Caronni <negativo17(a)gmail.com> - 27.0-1
- Update to 27.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2272760 - bitcoin-core-27.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2272760
[ 2 ] Bug #2273756 - [abrt] bitcoin-core-desktop:
ExecuteBackedWrapper<CCoinsViewErrorCatcher::GetCoin(const COutPoint&, Coin&)
const::<lambda()> >(): bitcoin-qt killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=2273756
--------------------------------------------------------------------------------
================================================================================
bolt-0.9.8-1.fc39 (FEDORA-2024-263cdf5234)
Thunderbolt device manager
--------------------------------------------------------------------------------
Update Information:
A new NHI for REMBRANDT.
Systemd config enhancement. Don't install an empty DB directory.
Fixed: Determine the string length before writing file.
Fixed: Free on error to prevent resource leak.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Kate Hsuan <hpa(a)redhat.com> - 0.9.8-1
- A new NHI for REMBRANDT.
- systemd configuration improvement.
- Fixed: Determine the string length before writing file.
- Fixed: Free on error to prevent resource leak.
--------------------------------------------------------------------------------
================================================================================
cacti-1.2.27-1.fc39 (FEDORA-2024-27a594f71d)
An rrd based graphing tool
--------------------------------------------------------------------------------
Update Information:
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes
for many CVEs, including a critical remote code execution bug.
https://github.com/Cacti/cacti/blob/release/1.2.27/CHANGELOG
https://github.com/Cacti/spine/blob/release/1.2.27/CHANGELOG
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Carl George <carlwgeorge(a)fedoraproject.org> - 1.2.27-1
- Update to version 1.2.27
- CVE-2024-25641, CVE-2024-29894, CVE-2024-31443, CVE-2024-31444, CVE-2024-31445,
CVE-2024-31458, CVE-2024-31459, CVE-2024-31460, CVE-2024-34340
* Tue May 21 2024 Carl George <carlwgeorge(a)fedoraproject.org> - 1.2.26-1
- Update to version 1.2.26
- CVE-2023-49084, CVE-2023-49085, CVE-2023-49086, CVE-2023-49088, CVE-2023-50250,
CVE-2023-51448
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255602 - CVE-2023-49084 cacti: RCE when managing links [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2255602
[ 2 ] Bug #2255606 - CVE-2023-49086 cacti: XSS when adding new devices [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2255606
[ 3 ] Bug #2255667 - CVE-2023-49085 CVE-2023-49088 CVE-2023-50250 CVE-2023-51448 cacti:
Multiple vulnerabilities [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2255667
[ 4 ] Bug #2280482 - CVE-2024-34340 cacti: authentication bypass when using older
password hashes [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280482
[ 5 ] Bug #2280497 - CVE-2024-29894 cacti: XSS vulnerability when using JavaScript based
messaging API [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280497
[ 6 ] Bug #2280500 - CVE-2024-31458 CVE-2024-31459 CVE-2024-31460 cacti: multiple
vulnerabilities [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280500
[ 7 ] Bug #2280503 - CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 cacti: multiple
vulnerabilties [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280503
[ 8 ] Bug #2280506 - CVE-2024-25641 cacti: remote code execution vulnerability
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280506
--------------------------------------------------------------------------------
================================================================================
cacti-spine-1.2.27-1.fc39 (FEDORA-2024-27a594f71d)
Threaded poller for Cacti written in C
--------------------------------------------------------------------------------
Update Information:
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes
for many CVEs, including a critical remote code execution bug.
https://github.com/Cacti/cacti/blob/release/1.2.27/CHANGELOG
https://github.com/Cacti/spine/blob/release/1.2.27/CHANGELOG
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Carl George <carlwgeorge(a)fedoraproject.org> - 1.2.27-1
- Update to version 1.2.27
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255602 - CVE-2023-49084 cacti: RCE when managing links [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2255602
[ 2 ] Bug #2255606 - CVE-2023-49086 cacti: XSS when adding new devices [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2255606
[ 3 ] Bug #2255667 - CVE-2023-49085 CVE-2023-49088 CVE-2023-50250 CVE-2023-51448 cacti:
Multiple vulnerabilities [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2255667
[ 4 ] Bug #2280482 - CVE-2024-34340 cacti: authentication bypass when using older
password hashes [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280482
[ 5 ] Bug #2280497 - CVE-2024-29894 cacti: XSS vulnerability when using JavaScript based
messaging API [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280497
[ 6 ] Bug #2280500 - CVE-2024-31458 CVE-2024-31459 CVE-2024-31460 cacti: multiple
vulnerabilities [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280500
[ 7 ] Bug #2280503 - CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 cacti: multiple
vulnerabilties [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280503
[ 8 ] Bug #2280506 - CVE-2024-25641 cacti: remote code execution vulnerability
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280506
--------------------------------------------------------------------------------
================================================================================
chromium-125.0.6422.76-1.fc39 (FEDORA-2024-87bb7ffab1)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 125.0.6422.76
* High CVE-2024-5157: Use after free in Scheduling
* High CVE-2024-5158: Type Confusion in V8
* High CVE-2024-5159: Heap buffer overflow in ANGLE
* High CVE-2024-5160: Heap buffer overflow in Dawn
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Than Ngo <than(a)redhat.com> - 125.0.6422.76-1
- fix bz#2282246, update to 125.0.6422.76
* High CVE-2024-5157: Use after free in Scheduling
* High CVE-2024-5158: Type Confusion in V8
* High CVE-2024-5159: Heap buffer overflow in ANGLE
* High CVE-2024-5160: Heap buffer overflow in Dawn
- cleanup
* Mon May 20 2024 Than Ngo <than(a)redhat.com> - 125.0.6422.60-3
- remove unneeded BRs
- workarounds for el7 build
* Sun May 19 2024 Than Ngo <than(a)redhat.com> - 125.0.6422.60-2
- fix build errors on el7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2282246 - 125.0.6422.76 available, fixes multiple High CVES
https://bugzilla.redhat.com/show_bug.cgi?id=2282246
--------------------------------------------------------------------------------
================================================================================
copr-backend-1.177-1.fc39 (FEDORA-2024-9221f17fd9)
Backend for Copr
--------------------------------------------------------------------------------
Update Information:
https://docs.pagure.org/copr.copr/release-notes/2024-05-22.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Jakub Kadlcik <frostyx(a)email.cz> 1.177-1
- Multiple attempts to create repository before giving up
- Run rawhide-to-release for all CoprDirs
- Remove static methods from tests
--------------------------------------------------------------------------------
================================================================================
copr-cli-1.112-1.fc39 (FEDORA-2024-031843ba05)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
https://docs.pagure.org/copr.copr/release-notes/2024-05-22.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Jakub Kadlcik <frostyx(a)email.cz> 1.112-1
- Add per package timeout option
- Remove dependency on simplejson
--------------------------------------------------------------------------------
================================================================================
copr-dist-git-0.70-1.fc39 (FEDORA-2024-9221f17fd9)
Copr services for Dist Git server
--------------------------------------------------------------------------------
Update Information:
https://docs.pagure.org/copr.copr/release-notes/2024-05-22.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Jakub Kadlcik <frostyx(a)email.cz> 0.70-1
- Don't expect remove_unused_sources is in /usr/bin
- Drop unused lookaside-cache cleanup scripts
--------------------------------------------------------------------------------
================================================================================
copr-frontend-1.206-1.fc39 (FEDORA-2024-9221f17fd9)
Frontend for Copr
--------------------------------------------------------------------------------
Update Information:
https://docs.pagure.org/copr.copr/release-notes/2024-05-22.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Jakub Kadlcik <frostyx(a)email.cz> 1.206-1
- Center the outage warning banner text
- Fix unexpected output schema for deleting builds
- Fix parsing build IDs to be deleted
- add per package timeout option
- Alembic: fix a migration syntax warning
- EOL-emails deterministic
- List temporary project after normal projects
- Don't index unlisted and temporary projects
- Speedup the update-indexes command
- Make EOL chroot emails shorter
- Add tests for branching custom directory
- Run rawhide-to-release for all CoprDirs
- Delete compatibility code between flask and flask-restx
- Migrate builds to flask-restx
- Fix bug in reporting failed SRPMs to log-detective
- Commit after every 10 deleted projects instead of 100
- Don't pass raw SQL as string but rather SQLAlchemy text
* Fri Apr 12 2024 Jakub Kadlcik <frostyx(a)email.cz> 1.205-1
- Update download stats footnote
- Migrate more enpoints to flask-restx
- Speedup the removal of temporary projects
- Add link to the Outdated chroots removal policy
- Compatibility with SQLAlchemy 2.0
--------------------------------------------------------------------------------
================================================================================
copr-rpmbuild-0.73-1.fc39 (FEDORA-2024-9221f17fd9)
Run COPR build tasks
--------------------------------------------------------------------------------
Update Information:
https://docs.pagure.org/copr.copr/release-notes/2024-05-22.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Jakub Kadlcik <frostyx(a)email.cz> 0.73-1
- Remove static methods from tests
--------------------------------------------------------------------------------
================================================================================
espresso-4.2.2-1.fc39 (FEDORA-2024-3dbcf568b4)
Extensible Simulation Package for Research on Soft matter
--------------------------------------------------------------------------------
Update Information:
Version bump to v4.2.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Jean-No��l Grad <jgrad(a)icp.uni-stuttgart.de> - 4.2.2-1
- Version bump to v4.2.2
--------------------------------------------------------------------------------
================================================================================
focuswriter-1.8.8-1.fc39 (FEDORA-2024-c157865acc)
A full screen, distraction-free writing program
--------------------------------------------------------------------------------
Update Information:
Update to 1.8.8
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Vojtech Trefny <vtrefny(a)redhat.com> - 1.8.8-1
- Update to 1.8.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2278858 - focuswriter-1.8.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2278858
--------------------------------------------------------------------------------
================================================================================
git-extras-7.2.0-1.fc39 (FEDORA-2024-1535b83594)
Little git extras
--------------------------------------------------------------------------------
Update Information:
Update git-extras to 7.2.0 (#2276888)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 S��rgio Basto <sergio(a)serjux.com> - 7.2.0-1
- Update git-extras to 7.2.0 (#2276888)
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.1.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2276888 - git-extras-7.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2276888
--------------------------------------------------------------------------------
================================================================================
linux-system-roles-1.78.2-1.fc39 (FEDORA-2024-7f91f5e5fd)
Set of interfaces for unified system management
--------------------------------------------------------------------------------
Update Information:
Automatic update for linux-system-roles-1.78.2-1.fc39.
Changelog for linux-system-roles
* Wed May 22 2024 Packit <hello(a)packit.dev> - 1.78.2-1
- Update to upstream version 1.78.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Packit <hello(a)packit.dev> - 1.78.2-1
- Update to upstream version 1.78.2
--------------------------------------------------------------------------------
================================================================================
lmdb-0.9.33-1.fc39 (FEDORA-2024-e292bc904a)
Memory-mapped key-value database
--------------------------------------------------------------------------------
Update Information:
Update to version 0.9.33.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Jan Stan��k <jstanek(a)redhat.com> - 0.9.33-1
- Update to version 0.9.33 (rhbz#2282268)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2282268 - lmdb-0.9.33 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2282268
--------------------------------------------------------------------------------
================================================================================
osbuild-119-1.fc39 (FEDORA-2024-e84972c09a)
A build system for OS images
--------------------------------------------------------------------------------
Update Information:
Automatic update for osbuild-119-1.fc39.
Changelog for osbuild
* Wed May 22 2024 Packit <hello(a)packit.dev> - 119-1
Changes with 119
----------------
* Add user force password reset (#1778)
* Author: andremarianiello, Reviewers: Brian C. Lane, Pawe�� Po��awski
* Tests: Add unit tests for org.osbuild.mkfs.fat stage (#1677)
* Author: Pawe�� Po��awski, Reviewers: Brian C. Lane, Michael Vogt
* Update snapshots to 20240514 (#1784)
* Author: SchutzBot, Reviewers: Achilleas Koutsou, Brian C. Lane
* runners: revert "runners: clean up temp files before exiting the runner"
(#1788)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tom���� Hozza
* stage/systemd.unit.create: add Before option (#1782)
* Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Michael Vogt
* stages/systemd.unit.create: update schema to support [Mount] (#1748)
* Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Michael Vogt
* test/buildroot: fix checking /var/tmp mode (#1787)
* Author: Tom���� Hozza, Reviewers: Michael Vogt, Ond��ej Budai
* tests: update stage tests readme (#1738)
* Author: Pawe�� Po��awski, Reviewers: Michael Vogt, Ond��ej Budai, Tom���� Hozza
��� Somewhere on the Internet, 2024-05-22
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Packit <hello(a)packit.dev> - 119-1
Changes with 119
----------------
* Add user force password reset (#1778)
* Author: andremarianiello, Reviewers: Brian C. Lane, Pawe�� Po��awski
* Tests: Add unit tests for org.osbuild.mkfs.fat stage (#1677)
* Author: Pawe�� Po��awski, Reviewers: Brian C. Lane, Michael Vogt
* Update snapshots to 20240514 (#1784)
* Author: SchutzBot, Reviewers: Achilleas Koutsou, Brian C. Lane
* runners: revert "runners: clean up temp files before exiting the runner"
(#1788)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tom���� Hozza
* stage/systemd.unit.create: add Before option (#1782)
* Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Michael Vogt
* stages/systemd.unit.create: update schema to support [Mount] (#1748)
* Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Michael Vogt
* test/buildroot: fix checking /var/tmp mode (#1787)
* Author: Tom���� Hozza, Reviewers: Michael Vogt, Ond��ej Budai
* tests: update stage tests readme (#1738)
* Author: Pawe�� Po��awski, Reviewers: Michael Vogt, Ond��ej Budai, Tom���� Hozza
��� Somewhere on the Internet, 2024-05-22
--------------------------------------------------------------------------------
================================================================================
php-cs-fixer-3.57.2-1.fc39 (FEDORA-2024-eca92408c0)
PHP Coding Standards Fixer
--------------------------------------------------------------------------------
Update Information:
Changelog for version 3.57.2
docs: better ConfigurableFixer allowed types (#8024)
docs: Improve Docker usage example (#8021)
feat: Report used memory to 2 decimal digits only (#8017)
fix: Support named args in ParallelConfigFactory::detect() (#8026)
fix: php_unit_test_class_requires_covers Attribute detection when class is final
(#8016)
Changelog for version 3.57.1
chore: update PHPDoc in Preg::matchAll (#8012)
fix: Runner - handle no files while in parallel runner (#8015)
Changelog for version 3.57.0
feat: Ability to run Fixer with parallel runner ���� (#7777)
Changelog for version 3.56.2
chore: update PHPStan (#8010)
DX: Fix Mess Detector violations (#8007)
DX: Install PCov extension for local Docker (#8006)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Remi Collet <remi(a)remirepo.net> - 3.57.2-1
- update to 3.57.2
--------------------------------------------------------------------------------
================================================================================
php-pear-PHP-CodeSniffer-3.10.0-1.fc39 (FEDORA-2024-07faf75715)
PHP coding standards enforcement tool
--------------------------------------------------------------------------------
Update Information:
Version 3.10.0 - 2024-05-20
Added
Tokenizer support for PHP 8.2 Disjunctive Normal Form (DNF) types.
[#3731][sq-3731], [#387], [#461]
Includes new T_TYPE_OPEN_PARENTHESIS and T_TYPE_CLOSE_PARENTHESIS tokens to
represent the parentheses in DNF types.
These new tokens, like other parentheses, will have the parenthesis_opener and
parenthesis_closer token array indexes set and the tokens between them will have
the nested_parenthesis index.
The File::getMethodProperties(), File::getMethodParameters() and
File::getMemberProperties() methods now all support DNF types. [#471], [#472],
[#473]
Additionally, the following sniff has been updated to support DNF types:
Generic.PHP.LowerCaseType [#478]
Thanks to [Juliette Reinders Folmer][@jrfnl] for the patches.
Documentation for the following sniffs:
Squiz.WhiteSpace.FunctionClosingBraceSpace
Thanks to [Przemek Hernik][@przemekhernik] for the patch.
Changed
The help screens have received a face-lift for improved usability and
readability. [#447]
Thanks to [Juliette Reinders Folmer][@jrfnl] for the patch and thanks to [Colin
Stewart][@costdev], [Gary Jones][@GaryJones] and [@mbomb007] for reviewing.
The Squiz.Commenting.ClosingDeclarationComment sniff will now also examine and
flag closing comments for traits. [#442]
Thanks to [Rodrigo Primo][@rodrigoprimo] for the patch.
The following sniff(s) have efficiency improvements:
Generic.Arrays.ArrayIndent
Thanks to [Rodrigo Primo][@rodrigoprimo] for the patch.
The autoloader will now always return a boolean value indicating whether it has
loaded a class or not. [#479]
Thanks to [Juliette Reinders Folmer][@jrfnl] for the patch.
Various housekeeping, including improvements to the tests and documentation.
Thanks to [Dan Wallis][@fredden], [Danny van der Sluijs][@DannyvdSluijs],
[Rodrigo Primo][@rodrigoprimo] and [Juliette Reinders Folmer][@jrfnl] for their
contributions.
Fixed
Fixed bug [#466] : Generic.Functions.CallTimePassByReference was not flagging
call-time pass-by-reference in class instantiations using the self/parent/static
keywords.
Thanks to [Rodrigo Primo][@rodrigoprimo] for the patch.
Fixed bug [#494] : edge case bug in tokenization of an empty block comment.
Thanks to [Juliette Reinders Folmer][@jrfnl] for the patch
Fixed bug [#494] : edge case bug in tokenization of an empty single-line
DocBlock.
Thanks to [Juliette Reinders Folmer][@jrfnl] for the patch
Fixed bug [#499] : Generic.ControlStructures.InlineControlStructure now handles
statements with a comment between else and if correctly.
Thanks to [Rodrigo Primo][@rodrigoprimo] for the patch.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Remi Collet <remi(a)remirepo.net> - 3.10.0-1
- update to 3.10.0
--------------------------------------------------------------------------------
================================================================================
python-copr-1.132-1.fc39 (FEDORA-2024-031843ba05)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
https://docs.pagure.org/copr.copr/release-notes/2024-05-22.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Jakub Kadlcik <frostyx(a)email.cz> 1.132-1
- Discourage from deleting objects while paginating over them
- Suggest pagination only when a GET request timeouts
--------------------------------------------------------------------------------
================================================================================
python-copr-common-0.24-1.fc39 (FEDORA-2024-9221f17fd9)
Python code used by Copr
--------------------------------------------------------------------------------
Update Information:
https://docs.pagure.org/copr.copr/release-notes/2024-05-22.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Jakub Kadlcik <frostyx(a)email.cz> 0.24-1
- Fix chroot_to_branch default
--------------------------------------------------------------------------------
================================================================================
qgis-3.34.7-1.fc39 (FEDORA-2024-09d42f4f9c)
A user friendly Open Source Geographic Information System
--------------------------------------------------------------------------------
Update Information:
Update to qgis-3.34.7.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 21 2024 Sandro Mani <manisandro(a)gmail.com> - 3.34.7-1
- Update to 3.34.7
--------------------------------------------------------------------------------
================================================================================
qpwgraph-0.7.2-1.fc39 (FEDORA-2024-c9ca019d77)
PipeWire Graph Qt GUI Interface
--------------------------------------------------------------------------------
Update Information:
Update to 0.7.2-1
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Martin Gansser <martinkg(a)fedoraproject.org> - 0.7.2-1
- Update to 0.7.2
--------------------------------------------------------------------------------
================================================================================
redis-7.2.5-1.fc39 (FEDORA-2024-9f63ed0f3d)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
Redis 7.2.5 Released Thu 16 May 2024 12:00:00 IST
Upgrade urgency MODERATE: Program an upgrade of the server, but it's not urgent.
Bug fixes
A single shard cluster leaves failed replicas in CLUSTER SLOTS instead of
removing them (#12824)
Crash in LSET command when replacing small items and exceeding 4GB (#12955)
Blocking commands timeout is reset due to re-processing command (#13004)
Conversion of numbers in Lua args to redis args can fail. Bug introduced in
7.2.0 (#13115)
Bug fixes in CLI tools
redis-cli: --count (for --scan, --bigkeys, etc) was ignored unless --pattern was
also used (#13092)
redis-check-aof: incorrectly considering data in manifest format as MP-AOF
(#12958)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Remi Collet <remi(a)remirepo.net> - 7.2.5-1
- Upstream 7.2.5 release
--------------------------------------------------------------------------------
================================================================================
roundcubemail-1.6.7-1.fc39 (FEDORA-2024-a591b4dc74)
Round Cube Webmail is a browser-based multilingual IMAP client
--------------------------------------------------------------------------------
Update Information:
Release 1.6.7
Makefile: Use phpDocumentor v3.4 for the Framework docs (#9313)
Fix bug where HTML entities in URLs were not decoded on HTML to plain text
conversion (#9312)
Fix bug in collapsing/expanding folders with some special characters in names
(#9324)
Fix PHP8 warnings (#9363, #9365, #9429)
Fix missing field labels in CSV import, for some locales (#9393)
Fix command injection via crafted im_convert_path/im_identify_path on Windows
Fix cross-site scripting (XSS) vulnerability in handling list columns from user
preferences
Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 20 2024 Remi Collet <remi(a)remirepo.net> - 1.6.7-1
- update to 1.6.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2281597 - roundcubemail: fix for several security vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=2281597
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1.73-1.fc39 (FEDORA-2024-c2b3fe51a5)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
Important Highlights
CMP 2417: Implement PCI-DSS v4.0 outline for OpenShift (#11651)
Update all RHEL ANSSI BP028 profiles to be aligned with configuration
recommendations version 2.0
Generate rule references from control files (#11540)
Initial implementation of STIG V1R1 profile for Ubuntu 22.04 LTS (#11820)
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Jan ��ern�� <jcerny(a)redhat.com> - 0.1.73-1
- Update to latest upstream release
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.73
--------------------------------------------------------------------------------
================================================================================
wireshark-4.0.15-1.fc39 (FEDORA-2024-ed93e6d44f)
Network traffic analyzer
--------------------------------------------------------------------------------
Update Information:
New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854,
CVE-2024-4855.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 22 2024 Michal Ruprich <mruprich(a)redhat.com> - 1:4.0.15-1
- New version 4.0.15
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2280712 - CVE-2024-4855 wireshark: Editcap byte chopping crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280712
[ 2 ] Bug #2280716 - CVE-2024-4854 wireshark: dissector infinite loop [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280716
[ 3 ] Bug #2280719 - CVE-2024-4853 wireshark: Editcap byte chopping crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2280719
[ 4 ] Bug #2282006 - wireshark-4.2.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2282006
--------------------------------------------------------------------------------