The following Fedora 38 Security updates need testing:
Age URL
93
https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaa2b3d20b
containerd-1.6.23-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7bd66f219f
gst-devtools-1.22.7-1.fc38 gstreamer1-1.22.7-1.fc38 gstreamer1-doc-1.22.7-1.fc38
python-gstreamer1-1.22.7-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-56901a79a1 xen-4.17.2-5.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6b20b7807a
poppler-23.02.0-3.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4eff9e2cd6
mingw-poppler-23.02.0-2.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-185f3e8ad7
qbittorrent-4.6.1-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-13b03a90f9
python-pillow-9.5.0-2.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-548163deb1
golang-github-google-dap-0.11.0-1.fc38
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5911638116 libcap-2.48-7.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-00d4509fa9
java-latest-openjdk-21.0.1.0.12-1.rolling.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-433474a567
java-17-openjdk-17.0.9.0.9-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ba2e60e743
motif-2.3.4-30.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-41b9510adb
gnutls-3.8.2-1.fc38
The following Fedora 38 Critical Path updates have yet to be approved:
Age URL
69
https://bodhi.fedoraproject.org/updates/FEDORA-2023-da4a46622f
conmon-2.1.8-2.fc38
31
https://bodhi.fedoraproject.org/updates/FEDORA-2023-06dd18eecb
go-rpm-macros-3.3.0-1.fc38 go2rpm-1.10.0-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-56901a79a1 xen-4.17.2-5.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-73ae14c368
python-rpmautospec-0.3.8-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7bd66f219f
gst-devtools-1.22.7-1.fc38 gstreamer1-1.22.7-1.fc38 gstreamer1-doc-1.22.7-1.fc38
python-gstreamer1-1.22.7-1.fc38
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-18d84cb696
c-ares-1.21.0-1.fc38
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5f9f6a8034 cockpit-305-1.fc38
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-eb30e4e817
libmaxminddb-1.8.0-1.fc38
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-14af01ef1b
freeipa-healthcheck-0.16-2.fc38
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0edc842e04 sssd-2.9.3-1.fc38
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-253c6c92af
libxslt-1.1.39-1.fc38
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ac302d74cf
libgsf-1.14.51-1.fc38
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2caf7f523d
xfconf-4.18.3-1.fc38
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1ed0c00ab3 bind-9.18.20-1.fc38
bind-dyndb-ldap-11.10-22.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-437504c870
netcat-1.226-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6c900ebd4d
librsvg2-2.56.4-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-68592f791f
vte291-0.72.3-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3907013109
pygobject3-3.44.2-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f10720f111 orca-44.2-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-9bbb615d39
libnotify-0.8.3-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0f6253c172
libadwaita-1.3.5-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ba3edb3fe9
libgtop2-2.41.2-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ee2292cb36 gvfs-1.50.7-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5cfc3e12f4 gupnp-1.6.6-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-de5593691d gssdp-1.6.3-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c04bd8d303
gnome-control-center-44.4-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2c43cf1fb8
gnome-bluetooth-42.7-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-05f8de3ce3
glib2-2.76.6-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d604706262
libwnck3-43.0-5.fc38 mate-panel-1.26.3-4.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6b20b7807a
poppler-23.02.0-3.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-df9f30f623
bluedevil-5.27.9-2.fc38
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b2423736bf crun-1.12-1.fc38
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5911638116 libcap-2.48-7.fc38
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e641494b35
passt-0^20231119.g4f1709d-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1b65e21301 dnf5-5.1.8-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-482fa5b5bf kobo-0.34.0-1.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a5dadd2567
pipewire-1.0.0-1.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4436be9cc9 ethtool-6.6-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1e3687a761
firefox-120.0-3.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-41b9510adb
gnutls-3.8.2-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c060480f83
netavark-1.9.0-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-89f6815359
aardvark-dns-1.9.0-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b8a5cf8409
systemd-253.13-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-433474a567
java-17-openjdk-17.0.9.0.9-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b92c99588b
fedora-appstream-metadata-20231124-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec5471d827
qt5-qtbase-5.15.11-7.fc38
The following builds have been pushed to Fedora 38 updates-testing
Zim-0.75.2-4.fc38
ansible-pcp-2.3.0-1.fc38
gdb-13.2-7.fc38
gmailctl-0.10.7-1.fc38
libarrow-11.0.0-4.fc38
libkdumpfile-0.5.4-1.fc38
liborc-1.8.6-1.fc38
llhttp-9.1.3-1.fc38
mame-0.261-1.fc38
matrix-synapse-1.97.0-1.fc38
mozilla-ublock-origin-1.54.0-1.fc38
podman-4.8.0-1.fc38
python-aiohttp-3.8.6-1.fc38
python-podman-4.8.0-1.fc38
python-pytest-venv-0.3-1.fc38
qownnotes-23.11.3-1.fc38
receptor-1.4.3-1.fc38
rust-libslirp-4.2.2-19.fc38
rust-libsystemd-0.7.0-1.fc38
syncthing-1.26.1-1.fc38
ugene-49.1-1.fc38
uxplay-1.66-2.fc38
xmake-2.8.5-2.fc38
xsnow-3.7.6-1.fc38
Details about builds:
================================================================================
Zim-0.75.2-4.fc38 (FEDORA-2023-9efee5d884)
Desktop wiki & notekeeper
--------------------------------------------------------------------------------
Update Information:
Avoid crash report when cancelling template copy (rhbz#2246676)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Otto Liljalaakso <otto.liljalaakso(a)iki.fi> - 0.75.2-4
- Avoid crash report when cancelling template copy (rhbz#2246676)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2246676 - [abrt] Zim: on_copy():
templateeditordialog.py:113:on_copy:AssertionError
https://bugzilla.redhat.com/show_bug.cgi?id=2246676
--------------------------------------------------------------------------------
================================================================================
ansible-pcp-2.3.0-1.fc38 (FEDORA-2023-a83412aa42)
Ansible Metric collection for Performance Co-Pilot
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Nathan Scott <nathans(a)redhat.com> 2.3.0-1
- Latest upstream release
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.9-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gdb-13.2-7.fc38 (FEDORA-2023-a4c8643cc8)
A stub package for GNU source-level debugger
--------------------------------------------------------------------------------
Update Information:
Backport upstream commits which fix several gdb-index problems: They reduce the
size of the generated gdb-index file, and also ensure that the gdb-index and
dwarf-5 index are generated consistently even as the number of worker threads
that GDB uses changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Andrew Burgess <aburgess(a)redhat.com>
- Backport upstream commits 1f0fab7ff86, aa19bc1d259, acc117b57f7,
aff250145af, and 3644f41dc80. These commits reduce the size of the
generated gdb-index file, and also ensure that the gdb-index and
dwarf-5 index are generated consistently even as the number of
worker threads that GDB uses changes (RHBZ 2232086).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2232086 - .gdb_index sections are not reproducible
https://bugzilla.redhat.com/show_bug.cgi?id=2232086
--------------------------------------------------------------------------------
================================================================================
gmailctl-0.10.7-1.fc38 (FEDORA-2023-6f4c5b6331)
Declarative configuration for Gmail filters, stored locally
--------------------------------------------------------------------------------
Update Information:
upgrade to v0.10.7, close rhbz#2249798
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Mark E. Fuller <mark.e.fuller(a)gmx.de> - 0.10.7-1
- upgrade to v0.10.7, close rhbz#2249798
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.6-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2248276 - gmailctl: golang: net/http, x/net/http2: rapid stream resets can
cause excessive work (CVE-2023-39325) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2248276
[ 2 ] Bug #2249798 - gmailctl-0.10.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2249798
--------------------------------------------------------------------------------
================================================================================
libarrow-11.0.0-4.fc38 (FEDORA-2023-ee384fb9e8)
A toolbox for accelerated data interchange and in-memory processing
--------------------------------------------------------------------------------
Update Information:
Apache Arrow 11.0.0, rebuild with liborc 1.8.6
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Kaleb S. KEITHLEY <kkeithle [at] redhat.com> - 11.0.0-4
- Arrow 11.0.0, rebuild with liborc-1.8.6-1
--------------------------------------------------------------------------------
================================================================================
libkdumpfile-0.5.4-1.fc38 (FEDORA-2023-d62ff5109f)
Kernel coredump file access
--------------------------------------------------------------------------------
Update Information:
- Full support for 64-bit RISC-V. - Improved error messages.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.5.4-1
- Update to 0.5.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2250488 - libkdumpfile-0.5.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2250488
--------------------------------------------------------------------------------
================================================================================
liborc-1.8.6-1.fc38 (FEDORA-2023-cca0da441f)
Library for producing small, fast columnar storage for Hadoop workloads
--------------------------------------------------------------------------------
Update Information:
Apache ORC 1.8.6 GA
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Kaleb S. KEITHLEY <kkeithle [at] redhat.com> - 1.8.6-1
- 1.8.6 GA
--------------------------------------------------------------------------------
================================================================================
llhttp-9.1.3-1.fc38 (FEDORA-2023-bc1f081ca0)
Port of http_parser to llparse
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-47627
https://pagure.io/fesco/issue/3106 ## python-
aiohttp 3.8.6 (2023-10-07)
https://github.com/aio-
libs/aiohttp/blob/v3.8.6/CHANGES.rst#386-2023-10-07 ### Security bugfixes -
Upgraded `llhttp` to v9.1.3:
https://github.com/aio-
libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9 - Updated Python parser to
comply with RFCs 9110/9112:
https://github.com/aio-
libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg ### Deprecation - Added
`fallback_charset_resolver` parameter in `ClientSession` to allow a user-
supplied character set detection function. Character set detection will no
longer be included in 3.9 as a default. If this feature is needed, please use [`
fallback_charset_resolver`](https://docs.aiohttp.org/en/stable/client_adv...
tml#character-set-detection). ### Features - Enabled lenient response parsing
for more flexible parsing in the client (this should resolve some regressions
when dealing with badly formatted HTTP responses). ### Bugfixes - Fixed
`PermissionError` when `.netrc` is unreadable due to permissions. - Fixed output
of parsing errors pointing to a `\n`. - Fixed `GunicornWebWorker`
max_requests_jitter not working. - Fixed sorting in `filter_cookies` to use
cookie with longest path. - Fixed display of `BadStatusLine` messages from
`llhttp`. ---- ## llhttp 9.1.3 ### Fixes - Restart the parser on HTTP 100 -
Fix chunk extensions quoted-string value parsing - Fix lenient_flags truncated
on reset - Fix chunk extensions��� parameters parsing when more then one name-
value pair provided ## llhttp 9.1.2 ### What's Changed - Fix HTTP 1xx
handling ## llhttp 9.1.1 ### What's Changed - feat: Expose new lenient
methods ## llhttp 9.1.0 ### What's Changed - New lenient flag to make CR
completely optional - New lenient flag to have spaces after chunk header
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 5 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.3-1
- Update to 9.1.3 (close RHBZ#2242220)
* Tue Oct 3 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.2-1
- Update to 9.1.2
* Thu Sep 14 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.1-1
- Update to 9.1.1
* Thu Sep 14 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.0-1
- Update to 9.1.0
* Mon Aug 21 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.0.1-1
- Update to 9.0.1 (close RHBZ#2228290)
* Tue Aug 1 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.0.0-1
- Update to 9.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2249825 - CVE-2023-47627 python-aiohttp: numerous issues in HTTP parser with
header parsing
https://bugzilla.redhat.com/show_bug.cgi?id=2249825
--------------------------------------------------------------------------------
================================================================================
mame-0.261-1.fc38 (FEDORA-2023-80aa3224c5)
Multiple Arcade Machine Emulator
--------------------------------------------------------------------------------
Update Information:
Update to the latest upstream release: *
https://www.mamedev.org/?p=532
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Julian Sikorski <belegdol(a)fedoraproject.org> - 0.261-1
- Update to 0.261
--------------------------------------------------------------------------------
================================================================================
matrix-synapse-1.97.0-1.fc38 (FEDORA-2023-3d82428b44)
A Matrix reference homeserver written in Python using Twisted
--------------------------------------------------------------------------------
Update Information:
Update to v1.97.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Kai A. Hiller <V02460(a)gmail.com> - 1.97.0-1
- Update to v1.97.0
--------------------------------------------------------------------------------
================================================================================
mozilla-ublock-origin-1.54.0-1.fc38 (FEDORA-2023-c3a1606244)
An efficient blocker for Firefox
--------------------------------------------------------------------------------
Update Information:
Latest upstream release. Changelog:
https://github.com/gorhill/uBlock/releases/tag/1.54.0 . ---- Latest upstream
release for Firefox. Changelog:
https://github.com/gorhill/uBlock/releases/tag/1.53.0 .
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Dominik Mierzejewski <dominik(a)greysector.net> - 1.54.0-1
- update to 1.54.0 (#2251068)
* Tue Nov 21 2023 Dominik Mierzejewski <dominik(a)greysector.net> - 1.53.0-1
- update to 1.53.0 (#2247578)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2247578 - mozilla-ublock-origin-1.53.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2247578
[ 2 ] Bug #2251068 - mozilla-ublock-origin-1.54.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2251068
--------------------------------------------------------------------------------
================================================================================
podman-4.8.0-1.fc38 (FEDORA-2023-2bd0e4904f)
Manage Pods, Containers and Container Images
--------------------------------------------------------------------------------
Update Information:
Automatic update for podman-4.8.0-1.fc38. ##### **Changelog for podman** ``` *
Mon Nov 27 2023 Packit <hello(a)packit.dev> - 5:4.8.0-1 - [packit] 4.8.0 upstream
release * Mon Nov 27 2023 Lokesh Mandvekar <lsm5(a)redhat.com> - 5:4.8.0~rc1-1 -
bump to v4.8.0-rc1 ``` ---- bump to v4.8.0-rc1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Packit <hello(a)packit.dev> - 5:4.8.0-1
- [packit] 4.8.0 upstream release
* Mon Nov 27 2023 Lokesh Mandvekar <lsm5(a)redhat.com> - 5:4.8.0~rc1-1
- bump to v4.8.0-rc1
--------------------------------------------------------------------------------
================================================================================
python-aiohttp-3.8.6-1.fc38 (FEDORA-2023-bc1f081ca0)
Python HTTP client/server for asyncio
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-47627
https://pagure.io/fesco/issue/3106 ## python-
aiohttp 3.8.6 (2023-10-07)
https://github.com/aio-
libs/aiohttp/blob/v3.8.6/CHANGES.rst#386-2023-10-07 ### Security bugfixes -
Upgraded `llhttp` to v9.1.3:
https://github.com/aio-
libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9 - Updated Python parser to
comply with RFCs 9110/9112:
https://github.com/aio-
libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg ### Deprecation - Added
`fallback_charset_resolver` parameter in `ClientSession` to allow a user-
supplied character set detection function. Character set detection will no
longer be included in 3.9 as a default. If this feature is needed, please use [`
fallback_charset_resolver`](https://docs.aiohttp.org/en/stable/client_adv...
tml#character-set-detection). ### Features - Enabled lenient response parsing
for more flexible parsing in the client (this should resolve some regressions
when dealing with badly formatted HTTP responses). ### Bugfixes - Fixed
`PermissionError` when `.netrc` is unreadable due to permissions. - Fixed output
of parsing errors pointing to a `\n`. - Fixed `GunicornWebWorker`
max_requests_jitter not working. - Fixed sorting in `filter_cookies` to use
cookie with longest path. - Fixed display of `BadStatusLine` messages from
`llhttp`. ---- ## llhttp 9.1.3 ### Fixes - Restart the parser on HTTP 100 -
Fix chunk extensions quoted-string value parsing - Fix lenient_flags truncated
on reset - Fix chunk extensions��� parameters parsing when more then one name-
value pair provided ## llhttp 9.1.2 ### What's Changed - Fix HTTP 1xx
handling ## llhttp 9.1.1 ### What's Changed - feat: Expose new lenient
methods ## llhttp 9.1.0 ### What's Changed - New lenient flag to make CR
completely optional - New lenient flag to have spaces after chunk header
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 16 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.8.6-1
- Update to 3.8.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2249825 - CVE-2023-47627 python-aiohttp: numerous issues in HTTP parser with
header parsing
https://bugzilla.redhat.com/show_bug.cgi?id=2249825
--------------------------------------------------------------------------------
================================================================================
python-podman-4.8.0-1.fc38 (FEDORA-2023-f6a03d5581)
RESTful API for Podman
--------------------------------------------------------------------------------
Update Information:
Automatic update for python-podman-4.8.0-1.fc38. ##### **Changelog for python-
podman** ``` * Tue Nov 28 2023 Packit <hello(a)packit.dev> - 3:4.8.0-1 - [packit]
4.8.0 upstream release ```
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Packit <hello(a)packit.dev> - 3:4.8.0-1
- [packit] 4.8.0 upstream release
--------------------------------------------------------------------------------
================================================================================
python-pytest-venv-0.3-1.fc38 (FEDORA-2023-5a1143dc67)
py.test fixture for creating a virtual environment
--------------------------------------------------------------------------------
Update Information:
Update to 0.3 (rhbz#2251136)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 23 2023 Lumir Balhar <lbalhar(a)redhat.com> - 0.3-1
- Update to 0.3 (rhbz#2251136)
* Thu Nov 23 2023 Lumir Balhar <lbalhar(a)redhat.com> - 0.2-16
- SPDX License identifier
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sun Jul 9 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 0.2-11
- Fix virtualenv usage for Python 3.12
* Wed Jun 14 2023 Python Maint <python-maint(a)redhat.com> - 0.2-10
- Rebuilt for Python 3.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2251136 - python-pytest-venv-0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2251136
--------------------------------------------------------------------------------
================================================================================
qownnotes-23.11.3-1.fc38 (FEDORA-2023-fcc2117795)
Plain-text file markdown note taking with Nextcloud integration
--------------------------------------------------------------------------------
Update Information:
Automatic update for qownnotes-23.11.3-1.fc38. ##### **Changelog for
qownnotes** ``` * Sat Nov 25 2023 Packit <hello(a)packit.dev> - 23.11.3-1 -
[packit] 23.11.3 upstream release - Resolves rhbz#2251446 * Sun Nov 19 2023
Packit <hello(a)packit.dev> - 23.11.2-1 - [packit] 23.11.2 upstream release -
Resolves rhbz#2250546 ```
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 25 2023 Packit <hello(a)packit.dev> - 23.11.3-1
- [packit] 23.11.3 upstream release
- Resolves rhbz#2251446
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2250546 - qownnotes-23.11.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2250546
[ 2 ] Bug #2251446 - qownnotes-23.11.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2251446
--------------------------------------------------------------------------------
================================================================================
receptor-1.4.3-1.fc38 (FEDORA-2023-b2141b02b2)
Multi-service relayer with remote execution and orchestration capabilities
--------------------------------------------------------------------------------
Update Information:
Update to 1.4.3 and removed unneeded items
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Andrew Heath <anheath(a)redhat.com> - 1.4.3-1
- Update to 1.4.3 and removed unneeded script
--------------------------------------------------------------------------------
================================================================================
rust-libslirp-4.2.2-19.fc38 (FEDORA-2023-5434301788)
High-level bindings & helper process for libslirp
--------------------------------------------------------------------------------
Update Information:
- Update the libsystemd crate to version 0.7.0. - Adapt the package for the
libslirp crate to build against libsystemd v0.7.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 25 2023 Fabio Valentini <decathorpe(a)gmail.com> - 4.2.2-19
- Bump libsystemd dependency to <0.8
--------------------------------------------------------------------------------
================================================================================
rust-libsystemd-0.7.0-1.fc38 (FEDORA-2023-5434301788)
Pure-Rust client library to interact with systemd
--------------------------------------------------------------------------------
Update Information:
- Update the libsystemd crate to version 0.7.0. - Adapt the package for the
libslirp crate to build against libsystemd v0.7.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 25 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.0-1
- Update to version 0.7.0; Fixes RHBZ#1966652
--------------------------------------------------------------------------------
================================================================================
syncthing-1.26.1-1.fc38 (FEDORA-2023-66a4bd4ac1)
Continuous File Synchronization
--------------------------------------------------------------------------------
Update Information:
Update to version 1.26.1. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v1.26.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.26.1-1
- Update to version 1.26.1; Fixes RHBZ#2250334
--------------------------------------------------------------------------------
================================================================================
ugene-49.1-1.fc38 (FEDORA-2023-54efccf165)
Integrated bioinformatics toolkit
--------------------------------------------------------------------------------
Update Information:
New version 49.1 is released.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 49.1-1
- 49.1
--------------------------------------------------------------------------------
================================================================================
uxplay-1.66-2.fc38 (FEDORA-2023-bc1f081ca0)
AirPlay Unix mirroring server
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2023-47627
https://pagure.io/fesco/issue/3106 ## python-
aiohttp 3.8.6 (2023-10-07)
https://github.com/aio-
libs/aiohttp/blob/v3.8.6/CHANGES.rst#386-2023-10-07 ### Security bugfixes -
Upgraded `llhttp` to v9.1.3:
https://github.com/aio-
libs/aiohttp/security/advisories/GHSA-pjjw-qhg8-p2p9 - Updated Python parser to
comply with RFCs 9110/9112:
https://github.com/aio-
libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg ### Deprecation - Added
`fallback_charset_resolver` parameter in `ClientSession` to allow a user-
supplied character set detection function. Character set detection will no
longer be included in 3.9 as a default. If this feature is needed, please use [`
fallback_charset_resolver`](https://docs.aiohttp.org/en/stable/client_adv...
tml#character-set-detection). ### Features - Enabled lenient response parsing
for more flexible parsing in the client (this should resolve some regressions
when dealing with badly formatted HTTP responses). ### Bugfixes - Fixed
`PermissionError` when `.netrc` is unreadable due to permissions. - Fixed output
of parsing errors pointing to a `\n`. - Fixed `GunicornWebWorker`
max_requests_jitter not working. - Fixed sorting in `filter_cookies` to use
cookie with longest path. - Fixed display of `BadStatusLine` messages from
`llhttp`. ---- ## llhttp 9.1.3 ### Fixes - Restart the parser on HTTP 100 -
Fix chunk extensions quoted-string value parsing - Fix lenient_flags truncated
on reset - Fix chunk extensions��� parameters parsing when more then one name-
value pair provided ## llhttp 9.1.2 ### What's Changed - Fix HTTP 1xx
handling ## llhttp 9.1.1 ### What's Changed - feat: Expose new lenient
methods ## llhttp 9.1.0 ### What's Changed - New lenient flag to make CR
completely optional - New lenient flag to have spaces after chunk header
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 23 2023 Davide Cavalca <dcavalca(a)fedoraproject.org> - 1.66-2
- Rebuild for llhttp SONAME bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2249825 - CVE-2023-47627 python-aiohttp: numerous issues in HTTP parser with
header parsing
https://bugzilla.redhat.com/show_bug.cgi?id=2249825
--------------------------------------------------------------------------------
================================================================================
xmake-2.8.5-2.fc38 (FEDORA-2023-c351059833)
A cross-platform build utility based on Lua
--------------------------------------------------------------------------------
Update Information:
initial packaging
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 18 2023 topazus <topazus(a)outlook.com> - 2.8.5-2
- add .packit.yaml file
* Sat Nov 18 2023 topazus <topazus(a)outlook.com> - 2.8.5-1
- initial import (rhbz#2249796)
--------------------------------------------------------------------------------
================================================================================
xsnow-3.7.6-1.fc38 (FEDORA-2023-64338dc6de)
Let it snow on your desktop
--------------------------------------------------------------------------------
Update Information:
correct spelling error in ChangeLog
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 28 2023 Andrea Musuruane <musuruan(a)gmail.com> - 3.7.6-1
- Updated to new upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2250285 - xsnow-3.7.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2250285
--------------------------------------------------------------------------------