The following Fedora 39 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7c6c696102
unrealircd-6.1.4-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5aa1ebc5e9
minizip-ng-3.0.7-5.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-93aa6807da
tor-0.4.8.10-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c61a7d5227
python3.10-3.10.13-2.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-87771f4249
python3.11-3.11.7-2.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d577604e6a
python3.12-3.12.1-2.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2f86a608b2
python3.9-3.9.18-3.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1bb427c240
python3.8-3.8.18-3.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-555b4d49b1
python3.7-3.7.17-4.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-88fbb78cd3
python3.6-3.6.15-22.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-20feb865d8
podman-tui-0.15.0-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ab77331a34 squid-6.6-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7141950083
filezilla-3.66.4-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-153404713b
proftpd-1.3.8b-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e77300e4b5
python-asyncssh-2.14.2-1.fc39
The following Fedora 39 Critical Path updates have yet to be approved:
Age URL
55
https://bodhi.fedoraproject.org/updates/FEDORA-2023-60969403d0
go-rpm-macros-3.3.0-1.fc39 go2rpm-1.10.0-1.fc39
21
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0a947db1d0
mock-core-configs-39.3-1.fc39
14
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8fd0890f05 dnf5-5.1.9-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a35a58acc1
python-rpds-py-0.13.2-1.fc39 rust-archery-1.1.0-1.fc39 rust-rpds-1.1.0-2.fc39
rust-triomphe-0.1.9-1.fc39
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-68ad6ada3b
podman-4.8.2-1.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-028fe2a793 kobo-0.35.0-1.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3930eeaf4a pungi-4.6.0-1.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-69a7a5775c
tomcat-9.0.83-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae7f558922
guestfs-tools-1.51.7-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-db59cf7cee
libphonenumber-8.13.27-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2cfc4d36f1
libguestfs-1.51.10-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d577604e6a
python3.12-3.12.1-2.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-212cdaad25 brltty-6.6-9.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-148369da83
gtk3-3.24.39-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1cdaa0fa8a
tigervnc-1.13.1-10.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c12a2a84a4
toolbox-0.0.99.5-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e664d047ad
dbus-broker-35-2.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1874834244
dhcpcd-10.0.6-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e4cba558ec
kernel-6.6.8-200.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7746a9c9eb
java-17-openjdk-17.0.9.0.9-3.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d9bca05694
gstreamer1-plugins-bad-free-1.22.8-2.fc39 gstreamer1-plugins-ugly-free-1.22.8-2.fc39
The following builds have been pushed to Fedora 39 updates-testing
CuraEngine_grpc_definitions-0.1.0-1.fc39
asio-grpc-2.8.0-1.fc39
deja-dup-45.2-1.fc39
edk2-20231122-14.fc39
eegdev-0.2-17.fc39
fedora-license-data-1.37-1.fc39
ghc9.4-9.4.8-25.fc39
gnome-shell-extension-no-overview-16-1.fc39
golang-modernc-sqlite-1.27.0-2.fc39
icecat-115.6.0-1.rh1.fc39
imagej-1.54h-1.fc39
labwc-0.7.0-1.fc39
lemonldap-ng-2.18.1-1.fc39
moodle-4.3.2-1.fc39
perl-Authen-WebAuthn-0.002-1.fc39
php-pear-Auth-SASL-1.2.0-1.fc39
php-phpunit-php-code-coverage9-9.2.30-1.fc39
php-sebastian-complexity-2.0.3-1.fc39
php-sebastian-diff5-5.1.0-1.fc39
php-sebastian-lines-of-code-1.0.4-1.fc39
picom-10.2-4.fc39
python-nose2-0.14.0-4.fc39
python-ogr-0.48.0-1.fc39
rpki-client-8.7-1.fc39
rust-as-raw-xcb-connection-1.0.1-1.fc39
rust-xkbcommon-0.7.0-1.fc39
rust-xkbcommon-dl-0.4.1-1.fc39
rust-xkbcommon0.4-0.4.1-1.fc39
rust-xkeysym-0.2.0-1.fc39
xerces-c-3.2.5-1.fc39
Details about builds:
================================================================================
CuraEngine_grpc_definitions-0.1.0-1.fc39 (FEDORA-2023-e2780775fa)
gRPC Proto Definitions for CuraEngine
--------------------------------------------------------------------------------
Update Information:
New package - CuraEngine_grpc_definitions - gRPC Proto Definitions for
CuraEngine
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 22 2023 Tom Callaway <spot(a)fedoraproject.org> - 0.1.0-1
- Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255633 - Review Request: CuraEngine_grpc_definitions - gRPC Proto
Definitions for CuraEngine
https://bugzilla.redhat.com/show_bug.cgi?id=2255633
--------------------------------------------------------------------------------
================================================================================
asio-grpc-2.8.0-1.fc39 (FEDORA-2023-9fde1a5c50)
Asynchronous gRPC with Asio/unified executors
--------------------------------------------------------------------------------
Update Information:
New package: asio-grpc - Asynchronous gRPC with Asio/unified executors
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Tom Callaway <spot(a)fedoraproject.org> - 2.8.0-1
- update to 2.8.0
* Wed Nov 22 2023 Tom Callaway <spot(a)fedoraproject.org> - 2.7.0-1
- Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255630 - Review Request: asio-grpc - Asynchronous gRPC with Asio/unified
executors
https://bugzilla.redhat.com/show_bug.cgi?id=2255630
--------------------------------------------------------------------------------
================================================================================
deja-dup-45.2-1.fc39 (FEDORA-2023-49f383838c)
Simple backup tool and frontend for duplicity
--------------------------------------------------------------------------------
Update Information:
45.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 45.2-1
- 45.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255676 - deja-dup-45.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255676
--------------------------------------------------------------------------------
================================================================================
edk2-20231122-14.fc39 (FEDORA-2023-33bc615d45)
UEFI firmware for 64-bit virtual machines
--------------------------------------------------------------------------------
Update Information:
set PcdSetNxForStack = TRUE for strict nx builds ---- set
PcdImageProtectionPolicy = 0x03 for strict nx builds
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Gerd Hoffmann <kraxel(a)redhat.com> - 20231122-14
- set PcdSetNxForStack = TRUE for strict nx builds
* Fri Dec 22 2023 Gerd Hoffmann <kraxel(a)redhat.com> - 20231122-13
- set PcdImageProtectionPolicy = 0x03 for strict nx builds
--------------------------------------------------------------------------------
================================================================================
eegdev-0.2-17.fc39 (FEDORA-2023-38a8806fbd)
Library to acquire data from various EEG recording devices
--------------------------------------------------------------------------------
Update Information:
Fix build
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
fedora-license-data-1.37-1.fc39 (FEDORA-2023-6b3d054ff0)
Fedora Linux license data
--------------------------------------------------------------------------------
Update Information:
Automatic update for fedora-license-data-1.37-1.fc39. ##### **Changelog for
fedora-license-data** ``` * Fri Dec 22 2023 Miroslav Such�� <msuchy(a)redhat.com>
1.37-1 - add license HPND-Kevlin-Henney - add license FSFAP-no-warranty-
disclaimer - add not allowed license LicenseRef-Nikto - add LicenseRef-Fedora-
Firmware ```
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.37-1
- add license HPND-Kevlin-Henney
- add license FSFAP-no-warranty-disclaimer
- add not allowed license LicenseRef-Nikto
- add LicenseRef-Fedora-Firmware
--------------------------------------------------------------------------------
================================================================================
ghc9.4-9.4.8-25.fc39 (FEDORA-2023-72f137bbde)
Glasgow Haskell Compiler
--------------------------------------------------------------------------------
Update Information:
s390x: patch from @stefansf (IBM) to fix llvm alignment in data sections
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 25 2023 Jens Petersen <petersen(a)redhat.com> - 9.4.8-25
- s390x: patch from @stefansf (IBM) to fix llvm alignment in data sections
which should fix certain runtime crashes (#2248097)
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-no-overview-16-1.fc39 (FEDORA-2023-0a92bdd902)
GNOME Shell extension for no overview at start-up
--------------------------------------------------------------------------------
Update Information:
Bump to 16
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Takao Fujiwara <tfujiwar(a)redhat.com> - 16-1
- Bump to 16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254971 - no-overview extension not working on Fedora 39/Gnome45
https://bugzilla.redhat.com/show_bug.cgi?id=2254971
--------------------------------------------------------------------------------
================================================================================
golang-modernc-sqlite-1.27.0-2.fc39 (FEDORA-2023-ccf1eb30e7)
A port of SQLite/SQLite3 to Go without cgo
--------------------------------------------------------------------------------
Update Information:
Remove upstreamed noarch fix
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 W. Michael Petullo <mike(a)flyn.org> - 1.27.0-2
- Remove upstreamed noarch fix
* Wed Nov 8 2023 W. Michael Petullo <mike(a)flyn.org> - 1.27.0-1
- Remove upstreamed noarch fix
* Wed Oct 4 2023 W. Michael Petullo <mike(a)flyn.org> - 1.25.0-3
- Add reference to upstream merge request
* Wed Oct 4 2023 W. Michael Petullo <mike(a)flyn.org> - 1.25.0-2
- Fix ppc64le build
* Sun Aug 20 2023 W. Michael Petullo <mike(a)flyn.org> - 1.25.0-1
- Initial import (fedora#2231945)
--------------------------------------------------------------------------------
================================================================================
icecat-115.6.0-1.rh1.fc39 (FEDORA-2023-066a39b52f)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Release 115.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Antonio Trande <sagitter(a)fedoraproject.org> - 2:115.6.0-1.rh1
- Release 115.6.0 rh1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255254 - icecat does not launch due to missing dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=2255254
--------------------------------------------------------------------------------
================================================================================
imagej-1.54h-1.fc39 (FEDORA-2023-0ed406fce2)
Image Processing and Analysis in Java
--------------------------------------------------------------------------------
Update Information:
Update to 1.54h (close RHBZ#2254747)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.54h-1
- Update to 1.54h (close RHBZ#2254747)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254747 - imagej-1.54.h is available
https://bugzilla.redhat.com/show_bug.cgi?id=2254747
--------------------------------------------------------------------------------
================================================================================
labwc-0.7.0-1.fc39 (FEDORA-2023-9d160e7e03)
Openbox alternative for Wayland
--------------------------------------------------------------------------------
Update Information:
Automatic update for labwc-0.7.0-1.fc39. ##### **Changelog for labwc** ``` *
Fri Dec 22 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 0.7.0-1 - Update to
0.7.0 and add patch for pipemenus support ```
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 0.7.0-1
- Update to 0.7.0 and add patch for pipemenus support
--------------------------------------------------------------------------------
================================================================================
lemonldap-ng-2.18.1-1.fc39 (FEDORA-2023-bccf42faea)
Web Single Sign On (SSO) and Access Management
--------------------------------------------------------------------------------
Update Information:
Upstream changelog: -
https://gitlab.ow2.org/lemonldap-ng/lemonldap-
ng/-/releases/v2.18.1 -
https://gitlab.ow2.org/lemonldap-ng/lemonldap-
ng/-/releases/v2.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Clement Oudot <clem.oudot(a)gmail.com> - 2.18.1-1
- Update to 2.18.1
* Wed Dec 20 2023 Clement Oudot <clem.oudot(a)gmail.com> - 2.18.0-1
- Update to 2.18.0
--------------------------------------------------------------------------------
================================================================================
moodle-4.3.2-1.fc39 (FEDORA-2023-85c116adef)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
4.3.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 4.3.2-1
- 4.3.2
--------------------------------------------------------------------------------
================================================================================
perl-Authen-WebAuthn-0.002-1.fc39 (FEDORA-2023-591c47cb21)
Library to add Web Authentication support to server applications
--------------------------------------------------------------------------------
Update Information:
New features: * Supported attestation types: none, packed, fido-u2f * Mandatory
attestation trust chain validation
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Xavier Bachelot <xavier(a)bachelot.org> - 0.002-1
- Update to 0.002
- Convert License to SPDX
- Cleanup specfile
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255628 - perl-Authen-WebAuthn-0.002 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255628
--------------------------------------------------------------------------------
================================================================================
php-pear-Auth-SASL-1.2.0-1.fc39 (FEDORA-2023-22b8d1677c)
Abstraction of various SASL mechanism responses
--------------------------------------------------------------------------------
Update Information:
**Version 1.2.0** * feature: PHP8.2 ready * bugfix: scram-sha-224 broken #14 *
task: mark authentication methods cram-md5, digest-md5, and login as deprecated
#14
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 1.2.0-1
- udpate to 1.2.0
--------------------------------------------------------------------------------
================================================================================
php-phpunit-php-code-coverage9-9.2.30-1.fc39 (FEDORA-2023-c2ded55a31)
PHP code coverage information, version 9
--------------------------------------------------------------------------------
Update Information:
**Version 9.2.30** - 2023-12-22 Changed * This component is now compatible
with `nikic/php-parser` 5.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 9.2.30-1
- update to 9.2.30
- raise dependency on nikic/php-parser 4.18 and allow 5.0
--------------------------------------------------------------------------------
================================================================================
php-sebastian-complexity-2.0.3-1.fc39 (FEDORA-2023-704e125298)
Calculating the complexity of PHP code units, version 2
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.3** - 2023-12-22 Changed * This component is now compatible with
`nikic/php-parser` 5.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 2.0.3-1
- update to 2.0.3
- raise dependency on nikic/php-parser 4.18 and allow 5.0
--------------------------------------------------------------------------------
================================================================================
php-sebastian-diff5-5.1.0-1.fc39 (FEDORA-2023-c603b62d43)
Diff implementation, version 5
--------------------------------------------------------------------------------
Update Information:
**Version 5.1.0** - 2023-12-22 Added *
`SebastianBergmann\Diff\Chunk::start()`,
`SebastianBergmann\Diff\Chunk::startRange()`,
`SebastianBergmann\Diff\Chunk::end()`,
`SebastianBergmann\Diff\Chunk::endRange()`, and
`SebastianBergmann\Diff\Chunk::lines()` * `SebastianBergmann\Diff\Diff::from()`,
`SebastianBergmann\Diff\Diff::to()`, and `SebastianBergmann\Diff\Diff::chunks()`
* `SebastianBergmann\Diff\Line::content()` and
`SebastianBergmann\Diff\Diff::type()` * `SebastianBergmann\Diff\Line::isAdded()`
,`SebastianBergmann\Diff\Line::isRemoved()`, and
`SebastianBergmann\Diff\Line::isUnchanged()` Changed *
`SebastianBergmann\Diff\Diff` now implements `IteratorAggregate`, iterating over
it yields the aggregated `SebastianBergmann\Diff\Chunk` objects *
`SebastianBergmann\Diff\Chunk` now implements `IteratorAggregate`, iterating
over it yields the aggregated `SebastianBergmann\Diff\Line` objects Deprecated
* `SebastianBergmann\Diff\Chunk::getStart()`,
`SebastianBergmann\Diff\Chunk::getStartRange()`,
`SebastianBergmann\Diff\Chunk::getEnd()`,
`SebastianBergmann\Diff\Chunk::getEndRange()`, and
`SebastianBergmann\Diff\Chunk::getLines()` *
`SebastianBergmann\Diff\Diff::getFrom()`,
`SebastianBergmann\Diff\Diff::getTo()`, and
`SebastianBergmann\Diff\Diff::getChunks()` *
`SebastianBergmann\Diff\Line::getContent()` and
`SebastianBergmann\Diff\Diff::getType()`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 5.1.0-1
- update to 5.1.0
* Wed Aug 23 2023 Remi Collet <remi(a)remirepo.net> - 5.0.3-3
- Enable test suite
--------------------------------------------------------------------------------
================================================================================
php-sebastian-lines-of-code-1.0.4-1.fc39 (FEDORA-2023-497c8d47ba)
Counting the lines of code in PHP source code, version 1
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.4** - 2023-12-22 Changed * This component is now compatible with
`nikic/php-parser` 5.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 1.0.4-1
- update to 1.0.4
- raise dependency on nikic/php-parser 4.18 and allow 5.0
--------------------------------------------------------------------------------
================================================================================
picom-10.2-4.fc39 (FEDORA-2023-be4004bef2)
Lightweight compositor for X11
--------------------------------------------------------------------------------
Update Information:
Bugfix. See commit history.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 17 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 10.2-4
- build: Add patch to hide picom.desktop in menus by default
--------------------------------------------------------------------------------
================================================================================
python-nose2-0.14.0-4.fc39 (FEDORA-2023-c55d470cf4)
The successor to nose, based on unittest2
--------------------------------------------------------------------------------
Update Information:
Fix test reporter output in Python 3.12.1 and later ---- Skip
test_skip_reason_in_message on Python 3.12.1 and later
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.14.0-4
- Fix test reporter output in Python 3.12.1 and later
* Mon Dec 18 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.14.0-3
- Skip test_skip_reason_in_message on Python 3.12.1 and later
- Close RHBZ#2246281
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2246281 - python-nose2 fails to build with Python 3.13: AssertionError: Regex
didn't match: 'test \\(test_junitxml_skip_reason.Test\\.test\\) \\.* skip' not
found in 'skipped ohai\n
https://bugzilla.redhat.com/show_bug.cgi?id=2246281
--------------------------------------------------------------------------------
================================================================================
python-ogr-0.48.0-1.fc39 (FEDORA-2023-f34526cb3b)
One API for multiple git forges
--------------------------------------------------------------------------------
Update Information:
Automatic update for python-ogr-0.48.0-1.fc39. ##### **Changelog for python-
ogr** ``` * Thu Dec 21 2023 Packit <hello(a)packit.dev> - 0.48.0-1 - There is a
new get_pr_files_diff method supported for Pagure. (#826) - We have fixed a bug
that GithubRelease.url returned an API URL. (#824) - Resolves rhbz#2255524 ```
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Packit <hello(a)packit.dev> - 0.48.0-1
- There is a new get_pr_files_diff method supported for Pagure. (#826)
- We have fixed a bug that GithubRelease.url returned an API URL. (#824)
- Resolves rhbz#2255524
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255524 - python-ogr-0.48.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255524
--------------------------------------------------------------------------------
================================================================================
rpki-client-8.7-1.fc39 (FEDORA-2023-a668ef2cf1)
OpenBSD RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
# rpki-client 8.7 - Add ability to constrain an RPKI Trust Anchor's effective
signing authority to a limited set of Internet numbers. This allows Relying
Parties to enjoy the potential benefits of assuming trust, but within a bounded
scope. This distribution includes curated constraints files. More information:
https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-tr...
anchors - Following a 'failed fetch' (described in RFC 9286), emit a warning
and continue with a previously cached Manifest file, if present and still valid.
- Emit a warning when the same `manifestNumber` is re-used across multiple
issuances. - Emit a warning when the remote repository presents a Manifest
with an unexpected `manifestNumber`. Purported new manifests are expected to
have a higher `manifestNumber` than previously validated manifests. Otherwise
fall back to the previously cached manifest, if it is still valid. This warning
can be indicative of manifest replays or of out-of-order publishing. - Require
RPKI object files to be of a minimum of 100 bytes in both the RRDP and RSYNC
transports. - No longer synchronize directory modtimes in the local cache to
align with remote RSYNC repository sources. - Improved CRL extension checking.
- Experimental support for the P-256 signature algorithm. - Various
refactoring work.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Robert Scheck <robert(a)fedoraproject.org> 8.7-1
- Upgrade to 8.7 (#2255458)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255458 - rpki-client-8.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255458
--------------------------------------------------------------------------------
================================================================================
rust-as-raw-xcb-connection-1.0.1-1.fc39 (FEDORA-2023-6d400e232b)
Trait to facilitate interoperatibility with libxcb C API
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 1.0.1-1
- Initial import (#2255172)
--------------------------------------------------------------------------------
================================================================================
rust-xkbcommon-0.7.0-1.fc39 (FEDORA-2023-6d400e232b)
Rust bindings and wrappers for libxkbcommon
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 0.7.0-1
- Update to 0.7.0 (rhbz#2251774)
--------------------------------------------------------------------------------
================================================================================
rust-xkbcommon-dl-0.4.1-1.fc39 (FEDORA-2023-6d400e232b)
Dynamically loaded xkbcommon and xkbcommon-x11 Rust bindings
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 0.4.1-1
- Initial import (rhbz#2255175)
--------------------------------------------------------------------------------
================================================================================
rust-xkbcommon0.4-0.4.1-1.fc39 (FEDORA-2023-6d400e232b)
Rust bindings and wrappers for libxkbcommon
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 0.4.1-1
- Initial import (xkbcommon 0.4 compat package)
--------------------------------------------------------------------------------
================================================================================
rust-xkeysym-0.2.0-1.fc39 (FEDORA-2023-6d400e232b)
Library for working with X11 keysyms
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 0.2.0-1
- Initial import (#2255174)
--------------------------------------------------------------------------------
================================================================================
xerces-c-3.2.5-1.fc39 (FEDORA-2023-817ecc703f)
Validating XML Parser
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Kalev Lember <klember(a)redhat.com> - 3.2.5-1
- Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1788472 - CVE-2018-1311 xerces-c: XML parser contains a use-after-free error
triggered during the scanning of external DTDs
https://bugzilla.redhat.com/show_bug.cgi?id=1788472
[ 2 ] Bug #2243426 - CVE-2023-37536 xerces-c: An integer overflow issue that allows
remote attackers to cause out-of-bound access via HTTP request
https://bugzilla.redhat.com/show_bug.cgi?id=2243426
--------------------------------------------------------------------------------