The following Fedora 38 Security updates need testing:
Age URL
254
https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaa2b3d20b
containerd-1.6.23-1.fc38
101
https://bodhi.fedoraproject.org/updates/FEDORA-2024-4ef97ebbfc
python-pillow-9.5.0-3.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-c702ea0fb1
freerdp-2.11.7-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-bbd76d7c63
python-dns-2.3.0-3.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3265d70b61
tpm2-tools-5.5.1-1.fc38 tpm2-tss-4.0.2-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-797928fed3 pypy-7.3.15-3.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-191c252b75
chromium-124.0.6367.118-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-5e5d8c2581
stb-0^20240213gitae721c5-5.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e513c6594d
kernel-6.8.9-100.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-410d4ecabe
uriparser-0.9.8-1.fc38
The following Fedora 38 Critical Path updates have yet to be approved:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-643acecf77
container-selinux-2.231.0-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-c92737ccc0
selinux-policy-38.33-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-bbd76d7c63
python-dns-2.3.0-3.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-cb12414f82
fedora-appstream-metadata-20240423-2.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-228e339909
file-roller-44.1-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e080a64cfe
glibmm2.4-2.66.7-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-d1278faebb bluez-5.75-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-7febe7b4f0
gnome-online-accounts-3.48.1-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-a4a9a6d8c0 bind-9.18.26-1.fc38
bind-dyndb-ldap-11.10-24.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-1fbcb9d3f1
libmanette-0.2.7-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-c702ea0fb1
freerdp-2.11.7-1.fc38
11
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3b996678db
passt-0^20240426.gd03c4e2-1.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3265d70b61
tpm2-tools-5.5.1-1.fc38 tpm2-tss-4.0.2-1.fc38
7
https://bodhi.fedoraproject.org/updates/FEDORA-2024-51d982fd52 git-2.45.0-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e513c6594d
kernel-6.8.9-100.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-99a50e0666 crun-1.15-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f05c0016fc
firefox-125.0.3-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-076ddb0c6c
java-17-openjdk-17.0.11.0.9-1.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-07b7f68668
kwin-5.27.11-2.fc38
0
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3cb80e1393 vim-9.1.393-1.fc38
0
https://bodhi.fedoraproject.org/updates/FEDORA-2024-133484fa74
hwdata-0.382-1.fc38
0
https://bodhi.fedoraproject.org/updates/FEDORA-2024-fa6b29667c kobo-0.36.2-1.fc38
The following builds have been pushed to Fedora 38 updates-testing
appstream-data-38-9.fc38
candy-icon-theme-0-40.20240507gitf41d894.fc38
cascadia-code-fonts-2404.23-1.fc38
djvulibre-3.5.28-6.fc38
fail2ban-1.0.2-14.fc38
glinf-1.0-1.fc38
gnome-calendar-44.1-2.fc38
libretro-beetle-pce-fast-0-0.10.23.20240507gite2c0259.fc38
libretro-gambatte-0-0.9.23.20240507git1030f93.fc38
libsolv-0.7.29-1.fc38
luarocks-3.9.2-5.fc38
mmtests-0.27-3.fc38
openttd-14.1-1.fc38
python-tqdm-4.66.4-2.fc38
rust-duct_sh-0.13.7-1.fc38
rust-mac_address-1.1.6-1.fc38
rust-prettyplease-0.2.20-1.fc38
totem-43.0-5.fc38
Details about builds:
================================================================================
appstream-data-38-9.fc38 (FEDORA-2024-6dc419138b)
Fedora AppStream metadata
--------------------------------------------------------------------------------
Update Information:
New metadata version
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Richard Hughes <richard(a)hughsie.com> - 38-9
- New metadata version
--------------------------------------------------------------------------------
================================================================================
candy-icon-theme-0-40.20240507gitf41d894.fc38 (FEDORA-2024-d9bf269e15)
Sweet gradient icon theme
--------------------------------------------------------------------------------
Update Information:
Update to latest git snapshot (2024-05-07)
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Artur Frenszek-Iwicki <fedora(a)svgames.pl> -
0-40.20240507gitf41d894
- Update to latest git snapshot (2024-05-07)
--------------------------------------------------------------------------------
================================================================================
cascadia-code-fonts-2404.23-1.fc38 (FEDORA-2024-9e73ae7e6e)
A mono-spaced font designed for programming and terminal emulation
--------------------------------------------------------------------------------
Update Information:
Update to the latest cascadia-code-fonts, new "nf" (nerd-fonts) variant.
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 2 2024 Tom Callaway <spot(a)fedoraproject.org> - 2404.23-1
- update to 2404.23
- add "nerd fonts" variants and subpackages
* Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2111.01-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2111.01-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Sep 20 2023 Matej Focko <mfocko(a)redhat.com> - 2111.01-6
- migrated to SPDX license
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2111.01-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2278347 - cascadia-code-fonts-2404.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2278347
--------------------------------------------------------------------------------
================================================================================
djvulibre-3.5.28-6.fc38 (FEDORA-2024-e8b9bedd36)
DjVu viewers, encoders, and utilities
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-46310 and CVE-2021-46312.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Marek Kasik <mkasik(a)redhat.com> - 3.5.28-6
- Check for zero-size image when allocating GBuffer
- Resolves: #2234738
* Tue May 7 2024 Marek Kasik <mkasik(a)redhat.com> - 3.5.28-5
- Improve image size fix
- Resolves: #2234741
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2234736 - CVE-2021-46312 djvulibre: divide by zero in IW44EncodeCodec.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=2234736
[ 2 ] Bug #2234739 - CVE-2021-46310 djvulibre: divide by zero in IW44Image.cpp
https://bugzilla.redhat.com/show_bug.cgi?id=2234739
--------------------------------------------------------------------------------
================================================================================
fail2ban-1.0.2-14.fc38 (FEDORA-2024-11e538db5a)
Daemon to ban hosts that cause multiple authentication errors
--------------------------------------------------------------------------------
Update Information:
Hopefully fix selinux issues from previous two builds.
--------------------------------------------------------------------------------
ChangeLog:
* Sun May 5 2024 Richard Shaw <hobbes1069(a)gmail.com> - 1.0.2-14
- Increment SELinux module version.
- Tweak selinux regex for /run/fail2ban.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2279054 - Fail2ban.service fails to start after upgrade to version 1.2.0-13
https://bugzilla.redhat.com/show_bug.cgi?id=2279054
--------------------------------------------------------------------------------
================================================================================
glinf-1.0-1.fc38 (FEDORA-2024-4d25182d9d)
Print information about OpenGL or OpenGLES contexts
--------------------------------------------------------------------------------
Update Information:
Initial import; Fixes: RHBZ#2246852
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2024 Davide Cavalca <dcavalca(a)fedoraproject.org> - 1.0-1
- Initial import; Fixes: RHBZ#2246852
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2246852 - Review Request: glinf - Print information about OpenGL or OpenGLES
contexts
https://bugzilla.redhat.com/show_bug.cgi?id=2246852
--------------------------------------------------------------------------------
================================================================================
gnome-calendar-44.1-2.fc38 (FEDORA-2024-79d878f528)
Simple and beautiful calendar application designed to fit GNOME 3
--------------------------------------------------------------------------------
Update Information:
This update backports the fix for a crash that could happen when clicking a
Google calendar event immediately after modifying it.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Adam Williamson <awilliam(a)redhat.com> - 44.1-2
- Backport upstream fix for a crasher bug (#2177993)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2177993 - Crash/Hang when clicking a modified Google event right after
editing it (due to the preview popover)
https://bugzilla.redhat.com/show_bug.cgi?id=2177993
--------------------------------------------------------------------------------
================================================================================
libretro-beetle-pce-fast-0-0.10.23.20240507gite2c0259.fc38 (FEDORA-2024-25f2bd3819)
Standalone port of Mednafen PCE Fast to libretro
--------------------------------------------------------------------------------
Update Information:
See commit history
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-23
- build: Use forge macros
* Tue May 7 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-22
- license: Convert to SPDX
* Tue May 7 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-21
- chore: Update to latest git snapshot
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Sep 7 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-18
- chore: Update to latest git snapshot
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Mar 28 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-16
- chore: Update to latest git snapshot
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Mon Oct 3 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-14
- chore(update): Latest git snapshot
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-0.10.20220205gite880168
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libretro-gambatte-0-0.9.23.20240507git1030f93.fc38 (FEDORA-2024-1eaa218b4c)
Libretro implementation of libgambatte
--------------------------------------------------------------------------------
Update Information:
See commit history
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-23
- license: Convert to SPDX
* Tue May 7 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-22
- chore: Update to latest git snapshot
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Sep 7 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-19
- chore: Update to latest git snapshot
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Mar 28 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-17
- chore: Update to latest git snapshot
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Tue Oct 4 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0-15
- chore(update): Latest git snapshot
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
libsolv-0.7.29-1.fc38 (FEDORA-2024-abaf3a05fa)
Package dependency solver
--------------------------------------------------------------------------------
Update Information:
Update to version 0.7.29, which fixes building with Python 3.13.
Upstream changelog:
selected bug fixes:
improve updating of installed multiversion packages
fix decision introspection going into an endless loop in some cases
new features:
added experimental lua bindings
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2024 Evan Goode <mail(a)evangoo.de> - 0.7.29-1
- Update to 0.7.29
--------------------------------------------------------------------------------
================================================================================
luarocks-3.9.2-5.fc38 (FEDORA-2024-d110dd38c0)
A deployment and management system for Lua modules
--------------------------------------------------------------------------------
Update Information:
Allow using luarocks with Lua 5.1:
luarocks --lua-version 5.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 15 2024 Andreas Schneider <asn(a)redhat.com> - 3.9.2-5
- Add support for lua 5.1
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.9.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.9.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.9.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mmtests-0.27-3.fc38 (FEDORA-2024-09b0313bb1)
Configurable test framework
--------------------------------------------------------------------------------
Update Information:
ExcludeArch s390x, due to cpupower not being available
Bump expect-devel to Requires now that RHEL 9.4 is out
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Michel Lind <salimma(a)fedoraproject.org> - 0.27-3
- ExcludeArch s390x as cpupower is not available
* Wed May 1 2024 Michel Lind <salimma(a)fedoraproject.org> - 0.27-2
- Bump expect-devel to Requires now that RHEL 9.4 is out
--------------------------------------------------------------------------------
================================================================================
openttd-14.1-1.fc38 (FEDORA-2024-6581a7ddb4)
Transport system simulation game
--------------------------------------------------------------------------------
Update Information:
Add: Check that towns can build roads before generating map (#12503)
Fix #12228: Ships could get lost due to pathfinder not considering reversing in
some cases (#12474)
Fix #12433: Width of unit number display was too narrow (#12534)
Fix #12502: Desync related to vehicle replacement (#12512)
Fix #12506: Desync after new oil rig is constructed (#12511)
Fix #12584: Crash on some tar files during tar scan (#12586)
Fix: [SDL2] Keypad numbers did not function (#12596)
Fix: Houses and industry tiles could accept incorrect cargo (#12547)
Fix: Map generation stage strings were incorrect (#12549)
Fix: [Script] Allow only 255 league tables, as 255 itself is the invalid id
sentinel (#12545)
Fix: Mark vehicle status bars dirty when a vehicle leaves unbunching depot
(#12516)
Fix: Do not show train waiting for unbunching as waiting for free path (#12515)
Fix: Smooth outliers in unbunching round trip calculations (#12513)
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 3 2024 Felix Kaechele <felix(a)kaechele.ca> - 14.1-1
- update to 14.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2279004 - openttd-14.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2279004
--------------------------------------------------------------------------------
================================================================================
python-tqdm-4.66.4-2.fc38 (FEDORA-2024-24e4bba70f)
Fast, Extensible Progress Meter
--------------------------------------------------------------------------------
Update Information:
Address CVE-2024-34062 (local code execution)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2024 Stephen Gallagher <sgallagh(a)redhat.com> - 4.66.4-2
- Remove unused package.cfg file
* Mon May 6 2024 Stephen Gallagher <sgallagh(a)redhat.com> - 4.66.4-1
- Update to 4.66.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2278747 - python-tqdm-4.66.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2278747
[ 2 ] Bug #2278915 - CVE-2024-34062 python-tqdm: non-boolean CLI arguments may lead to
local code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2278915
--------------------------------------------------------------------------------
================================================================================
rust-duct_sh-0.13.7-1.fc38 (FEDORA-2024-a775a99c24)
Sub-crate for the sh function, formerly in duct
--------------------------------------------------------------------------------
Update Information:
Update to version 0.13.7
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Jan Macku <jamacku(a)redhat.com> - 0.13.7-1
- Update to version 0.13.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255657 - rust-duct_sh-0.13.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255657
--------------------------------------------------------------------------------
================================================================================
rust-mac_address-1.1.6-1.fc38 (FEDORA-2024-9b6418a926)
Cross-platform retrieval of a network interface MAC address
--------------------------------------------------------------------------------
Update Information:
Update to version 1.1.6
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Jan Macku <jamacku(a)redhat.com> - 1.1.6-1
- Update to version 1.1.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2275380 - rust-mac_address-1.1.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2275380
--------------------------------------------------------------------------------
================================================================================
rust-prettyplease-0.2.20-1.fc38 (FEDORA-2024-288f5429d6)
Minimal syn syntax tree pretty-printer
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.20
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Jan Macku <jamacku(a)redhat.com> - 0.2.20-1
- Update to version 0.2.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2279462 - rust-prettyplease-0.2.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2279462
--------------------------------------------------------------------------------
================================================================================
totem-43.0-5.fc38 (FEDORA-2024-bafaae1de7)
Movie player for GNOME
--------------------------------------------------------------------------------
Update Information:
This update backports the fix for a crash that can occur when deleting the last
video in the library.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 7 2024 Adam Williamson <awilliam(a)redhat.com> - 43.0-5
- Backport MR #369 to fix crash when deleting last video
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:43.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:43.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2176726 - totem crashes everytime when users try to delete a video
https://bugzilla.redhat.com/show_bug.cgi?id=2176726
--------------------------------------------------------------------------------