The following Fedora 39 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-2024-d0dccd6b96
httpd-2.4.59-2.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2024-9176fdb518
python-idna-3.7-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-78240de990 sssd-2.9.4-2.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-1b11432d52
freerdp-2.11.7-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e0057e6044
python-aiohttp-3.9.5-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-d408b654d6
matrix-synapse-1.105.1-1.fc39 rust-pythonize-0.21.1-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-450b75e4a0
libcoap-4.3.4a-2.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-391ed3a61d
python-dns-2.4.2-2.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-9205c35b11
stalld-1.19.2-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-31cac8b8ec
ruby-3.2.4-182.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-1a79c2ef63
clamav-1.0.6-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-a09bfceb28 et-6.2.1-15.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-11821b16ac gdcm-3.0.23-5.fc39
The following Fedora 39 Critical Path updates have yet to be approved:
Age URL
47
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0385be9862 audit-3.1.3-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2e8d56bf28
rpm-ostree-2024.5-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2024-b020589563
dbus-broker-36-2.fc39
11
https://bodhi.fedoraproject.org/updates/FEDORA-2024-d0dccd6b96
httpd-2.4.59-2.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2024-150fccb9fb sdubby-1.0-7.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2024-7f4e723fce
libmediainfo-24.04-1.fc39 mediainfo-24.04-1.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2024-9176fdb518
python-idna-3.7-1.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0990714a4a
libbsd-0.12.2-3.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0eb40ed7c6
python3-docs-3.12.3-1.fc39 python3.12-3.12.3-2.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2024-75f195f1ce
gnome-shell-45.6-1.fc39 mutter-45.6-1.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2024-5f20a75ffb
libphonenumber-8.13.35-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f93e4dc12d
annobin-12.51-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-fd62db84fb bind-9.18.26-1.fc39
bind-dyndb-ldap-11.10-25.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-1b11432d52
freerdp-2.11.7-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-a43222a278
gnome-control-center-45.4-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2024-78240de990 sssd-2.9.4-2.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-50122b25a1
container-selinux-2.231.0-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-98cd1ec226
selinux-policy-39.6-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2024-391ed3a61d
python-dns-2.4.2-2.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-423afe625d
passt-0^20240426.gd03c4e2-1.fc39
The following builds have been pushed to Fedora 39 updates-testing
crun-vm-0.2.0-1.fc39
js-jquery-ui-1.13.3-1.fc39
kernel-6.8.8-200.fc39
libxeddsa-2.0.0^20240426gitd725c81-5.fc39
python-fsspec-2024.3.1-1.fc39
python-jupyter-kernel-test-0.7.0-1.fc39
python-lsp-server-1.11.0-2.fc39
python-octave-kernel-0.36.0-1.fc39
python-textdistance-4.6.2-2.fc39
spyder-5.5.4-1.fc39
tpm2-tools-5.5.1-1.fc39
tpm2-tss-4.0.2-1.fc39
Details about builds:
================================================================================
crun-vm-0.2.0-1.fc39 (FEDORA-2024-654bcc5ecc)
An OCI Runtime that runs VM images
--------------------------------------------------------------------------------
Update Information:
Update to 0.2.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 28 2024 Alberto Faria <afaria(a)redhat.com> - 0.2.0-1
- Update to 0.2.0
* Sun Apr 28 2024 Alberto Faria <afaria(a)redhat.com> - 0.1.3-6
- Drop Fedora 38 support
* Mon Apr 15 2024 Alberto Faria <afaria(a)redhat.com> - 0.1.3-5
- Add missing dependency on passt
* Mon Apr 15 2024 Alberto Faria <afaria(a)redhat.com> - 0.1.3-4
- Drop unnecessary dependency on shadow-utils
* Tue Apr 2 2024 Alberto Faria <afaria(a)redhat.com> - 0.1.3-3
- Avoid missing Requires on Fedora 38
--------------------------------------------------------------------------------
================================================================================
js-jquery-ui-1.13.3-1.fc39 (FEDORA-2024-e6443f8c8b)
jQuery user interface
--------------------------------------------------------------------------------
Update Information:
JQuery UI 1.13.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 28 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1.13.3-1
- Update to version 1.13.3
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.13.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jan 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.13.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
kernel-6.8.8-200.fc39 (FEDORA-2024-bc0db39a14)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 6.8.8 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2024 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.8.8-200]
- Revert "cpupower: Bump soname version" (Justin M. Forbes)
- Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)
* Sat Apr 27 2024 Justin M. Forbes <jforbes(a)fedoraproject.org> [6.8.8-0]
- Update BugsFixed for 6.8.8 (Justin M. Forbes)
- Turn on ISM for Fedora (Justin M. Forbes)
- Turn off some Fedora UBSAN options to avoid false positives (Justin M. Forbes)
- fedora: aarch64: Enable a QCom Robotics platforms requirements (Peter Robinson)
- Turn on UBSAN for Fedora (Justin M. Forbes)
- Linux v6.8.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2277155 - Fedora 39 - Device Driver for ISM not configured in kernel
https://bugzilla.redhat.com/show_bug.cgi?id=2277155
--------------------------------------------------------------------------------
================================================================================
libxeddsa-2.0.0^20240426gitd725c81-5.fc39 (FEDORA-2024-fad595ace4)
Toolkit around Curve25519 and Ed25519 key pairs
--------------------------------------------------------------------------------
Update Information:
Initial import
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2024 Matthieu Saulnier <fantom(a)fedoraproject.org> -
2.0.0^20240426gitd725c81-5
- Package Review RHBZ#2227804:
- Update git snapshot
- Fix Version field and Release field
- Fix license
* Thu Aug 24 2023 Matthieu Saulnier <fantom(a)fedoraproject.org> -
2.0.0-4^20230824git1140086
- Package Review RHBZ#2227804:
- Update git snapshot
- Improve %description about ref10 library
- Fix cmake flags in %build section
- Cleanup %install section and remove useless comments
- Fix filename in %files section
* Wed Aug 2 2023 Matthieu Saulnier <fantom(a)fedoraproject.org> -
2.0.0-3^20230730git8ab957a
- Package Review RHBZ#2227804:
- Improve file ownership in doc subpackage
- Add more comments about soname of the library
* Tue Aug 1 2023 Matthieu Saulnier <fantom(a)fedoraproject.org> -
2.0.0-2^20230730git8ab957a
- Package Review RHBZ#2227804:
- Remove %cmake_install then manually install library file in %install section
* Mon Jul 31 2023 Matthieu Saulnier <fantom(a)fedoraproject.org> -
2.0.0-1^20230730git8ab957a
- Package Review RHBZ#2227804:
- Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2227804 - Review Request: libxeddsa - Toolkit around Curve25519 and Ed25519
key pairs
https://bugzilla.redhat.com/show_bug.cgi?id=2227804
--------------------------------------------------------------------------------
================================================================================
python-fsspec-2024.3.1-1.fc39 (FEDORA-2024-38aa50cbe8)
Specification for Pythonic file system interfaces
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#2269737)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2024 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 2024.3.1-1
- Update to latest version (#2269737)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2269737 - python-fsspec-2024.3.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2269737
--------------------------------------------------------------------------------
================================================================================
python-jupyter-kernel-test-0.7.0-1.fc39 (FEDORA-2024-9245f87cdd)
Machinery for testing Jupyter kernels via the messaging protocol
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#2269227)
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2024 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.7.0-1
- Update to latest version (#2269227)
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2269227 - python-jupyter-kernel-test-0.7.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2269227
--------------------------------------------------------------------------------
================================================================================
python-lsp-server-1.11.0-2.fc39 (FEDORA-2024-2658b34e43)
Python implementation of language server protocol
--------------------------------------------------------------------------------
Update Information:
Update Spyder and dependencies
Spyder 5.5.4 (2024-04-09)
Important fixes
Update QtAwesome version constraint to >=1.3.1,<1.4.0 (icon fonts access
issues).
Fix kernel start in conda envs with spaces in their directory paths.
Fix installers update (installers download URL handling).
Handle no output when trying to process git data.
Python LSP Server 1.11.0 (2024/03/29)
New features
Remove the rope_rename plugin. People that were using it need to install the
pylsp-rope third-party plugin instead.
Add support for Pylint 3.1
Issues Closed
Confusion about rename support
Textdistance 4.6.2
Issues Closed
Levenstein: ensure the return type is int
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2024 Packit <hello(a)packit.dev> - 1.11.0-1
- [packit] 1.11.0 upstream release
- Resolves: rhbz#2272238
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2272238 - python-lsp-server-1.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2272238
[ 2 ] Bug #2276877 - python-textdistance-4.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2276877
--------------------------------------------------------------------------------
================================================================================
python-octave-kernel-0.36.0-1.fc39 (FEDORA-2024-08364ea910)
A Jupyter kernel for Octave
--------------------------------------------------------------------------------
Update Information:
Update to latest version (#2275112)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 28 2024 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.36.0-1
- Update to latest version (#2275112)
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.35.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.35.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2275112 - python-octave-kernel-0.36.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2275112
--------------------------------------------------------------------------------
================================================================================
python-textdistance-4.6.2-2.fc39 (FEDORA-2024-2658b34e43)
Compute distance between the two texts
--------------------------------------------------------------------------------
Update Information:
Update Spyder and dependencies
Spyder 5.5.4 (2024-04-09)
Important fixes
Update QtAwesome version constraint to >=1.3.1,<1.4.0 (icon fonts access
issues).
Fix kernel start in conda envs with spaces in their directory paths.
Fix installers update (installers download URL handling).
Handle no output when trying to process git data.
Python LSP Server 1.11.0 (2024/03/29)
New features
Remove the rope_rename plugin. People that were using it need to install the
pylsp-rope third-party plugin instead.
Add support for Pylint 3.1
Issues Closed
Confusion about rename support
Textdistance 4.6.2
Issues Closed
Levenstein: ensure the return type is int
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2024 Packit <hello(a)packit.dev> - 4.6.2-1
- Update to 4.6.2 upstream release
- Resolves: rhbz#2276877
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2272238 - python-lsp-server-1.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2272238
[ 2 ] Bug #2276877 - python-textdistance-4.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2276877
--------------------------------------------------------------------------------
================================================================================
spyder-5.5.4-1.fc39 (FEDORA-2024-2658b34e43)
Scientific Python Development Environment
--------------------------------------------------------------------------------
Update Information:
Update Spyder and dependencies
Spyder 5.5.4 (2024-04-09)
Important fixes
Update QtAwesome version constraint to >=1.3.1,<1.4.0 (icon fonts access
issues).
Fix kernel start in conda envs with spaces in their directory paths.
Fix installers update (installers download URL handling).
Handle no output when trying to process git data.
Python LSP Server 1.11.0 (2024/03/29)
New features
Remove the rope_rename plugin. People that were using it need to install the
pylsp-rope third-party plugin instead.
Add support for Pylint 3.1
Issues Closed
Confusion about rename support
Textdistance 4.6.2
Issues Closed
Levenstein: ensure the return type is int
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 18 2024 Sandro <devel(a)penguinpee.nl> - 5.5.4-1
- Update to 5.5.4
- Update QtAwesome version constraint to `>=1.3.1,<1.4.0`
- Handle no output when trying to process git data
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2272238 - python-lsp-server-1.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2272238
[ 2 ] Bug #2276877 - python-textdistance-4.6.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2276877
--------------------------------------------------------------------------------
================================================================================
tpm2-tools-5.5.1-1.fc39 (FEDORA-2024-4512dc54af)
A bunch of TPM testing toolS build upon tpm2-tss
--------------------------------------------------------------------------------
Update Information:
tpm2-tss:
Fixed CVE-2024-29040
tpm2-tools:
Fixed CVE-2024-29038
Fixed CVE-2024-29039
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 28 2024 Peter Robinson <pbrobinson(a)fedoraproject.org> - 5.5.1-1
- Update to 5.5.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2271763 - tpm2-tss-4.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2271763
[ 2 ] Bug #2277437 - tpm2-tools-5.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2277437
--------------------------------------------------------------------------------
================================================================================
tpm2-tss-4.0.2-1.fc39 (FEDORA-2024-4512dc54af)
TPM2.0 Software Stack
--------------------------------------------------------------------------------
Update Information:
tpm2-tss:
Fixed CVE-2024-29040
tpm2-tools:
Fixed CVE-2024-29038
Fixed CVE-2024-29039
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 28 2024 Peter Robinson <pbrobinson(a)fedoraproject.org> - 4.0.2-1
- Update to 4.0.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2271763 - tpm2-tss-4.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2271763
[ 2 ] Bug #2277437 - tpm2-tools-5.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2277437
--------------------------------------------------------------------------------