The following Fedora 38 Security updates need testing:
Age URL
117
https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaa2b3d20b
containerd-1.6.23-1.fc38
31
https://bodhi.fedoraproject.org/updates/FEDORA-2023-13b03a90f9
python-pillow-9.5.0-2.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec02e360af
tigervnc-1.13.1-9.fc38 xorg-x11-server-1.20.14-28.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-77c8903bcb
xorg-x11-server-Xwayland-22.1.9-4.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0984b63b23
mingw-gstreamer1-1.22.7-1.fc38 mingw-gstreamer1-plugins-bad-free-1.22.7-1.fc38
mingw-gstreamer1-plugins-base-1.22.7-1.fc38 mingw-gstreamer1-plugins-good-1.22.7-1.fc38
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-41f41fbb69
unrealircd-6.1.4-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2ca76c3aae
minizip-ng-3.0.7-4.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8a1abb6750
tor-0.4.8.10-1.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0583eedde7
python3-docs-3.11.7-1.fc38 python3.11-3.11.7-2.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d296850e7e
libssh-0.10.6-1.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d01f8a69b4
python3.10-3.10.13-2.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8085628fff
python3.9-3.9.18-3.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f96ff39b59
python3.8-3.8.18-3.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c0bf8c0c4e
python3.12-3.12.1-2.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7d223ee343
python3.7-3.7.17-4.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b245e992ea
python3.6-3.6.15-22.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-cb8c606fbb
podman-tui-0.15.0-1.fc38
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6317eaa767 squid-6.6-1.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b87ec6cf47
proftpd-1.3.8b-1.fc38
The following Fedora 38 Critical Path updates have yet to be approved:
Age URL
55
https://bodhi.fedoraproject.org/updates/FEDORA-2023-06dd18eecb
go-rpm-macros-3.3.0-1.fc38 go2rpm-1.10.0-1.fc38
14
https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf471b70ab dnf5-5.1.9-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-882152aab5
zenity-4.0.0-1.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3cbdaecd85
nfs-utils-2.6.4-0.rc2.fc38
13
https://bodhi.fedoraproject.org/updates/FEDORA-2023-fa8cf045e1
passt-0^20231204.gb86afe3-1.fc38
11
https://bodhi.fedoraproject.org/updates/FEDORA-2023-adae9be596
podman-4.8.2-1.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e4ac9b6c23 qemu-7.2.7-1.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2526905ef1 kobo-0.35.0-1.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7b5c84e67a mock-5.3-1.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8c2dac6ed9
tomcat-9.0.83-1.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-77c8903bcb
xorg-x11-server-Xwayland-22.1.9-4.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ec02e360af
tigervnc-1.13.1-9.fc38 xorg-x11-server-1.20.14-28.fc38
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-49ceece9f0 pungi-4.6.0-1.fc38
python-productmd-1.38-1.fc38
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-4aa26fc710 libcap-2.48-8.fc38
8
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d2fed10480
pyproject-rpm-macros-1.11.0-1.fc38
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a7c3351b3e
osinfo-db-20231215-1.fc38
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e5cedffde1 cups-2.4.7-5.fc38
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1bbf4060ec cockpit-307-1.fc38
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-152a43be70 bluez-5.71-1.fc38
iwd-2.11-1.fc38 libell-0.61-1.fc38
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-aeccf7b447
selinux-policy-38.31-1.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-6fe52eb932
bubblewrap-0.8.0-1.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-b9c9759573
zchunk-1.4.0-1.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3745148b5f
gst-devtools-1.22.8-1.fc38 gstreamer1-1.22.8-1.fc38 gstreamer1-doc-1.22.8-1.fc38
gstreamer1-plugin-libav-1.22.8-1.fc38 gstreamer1-plugins-bad-free-1.22.8-1.fc38
gstreamer1-plugins-base-1.22.8-1.fc38 gstreamer1-plugins-good-1.22.8-1.fc38
gstreamer1-plugins-ugly-free-1.22.8-1.fc38 gstreamer1-rtsp-server-1.22.8-1.fc38
gstreamer1-vaapi-1.22.8-1.fc38 python-gstreamer1-1.22.8-1.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d296850e7e
libssh-0.10.6-1.fc38
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0583eedde7
python3-docs-3.11.7-1.fc38 python3.11-3.11.7-2.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-94949899e2
kernel-6.6.8-100.fc38
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e0f7ba1715
java-17-openjdk-17.0.9.0.9-3.fc38
The following builds have been pushed to Fedora 38 updates-testing
CuraEngine_grpc_definitions-0.1.0-1.fc38
asio-grpc-2.8.0-1.fc38
chromium-120.0.6099.129-1.fc38
fedora-license-data-1.37-1.fc38
icecat-115.6.0-1.rh1.fc38
imagej-1.54h-1.fc38
lemonldap-ng-2.18.1-1.fc38
moodle-4.1.8-1.fc38
perl-Authen-WebAuthn-0.002-1.fc38
php-pear-Auth-SASL-1.2.0-1.fc38
php-phpunit-php-code-coverage9-9.2.30-1.fc38
php-sebastian-complexity-2.0.3-1.fc38
php-sebastian-diff5-5.1.0-1.fc38
php-sebastian-lines-of-code-1.0.4-1.fc38
python-nose2-0.14.0-3.fc38
python-ogr-0.48.0-1.fc38
rpki-client-8.7-1.fc38
rust-as-raw-xcb-connection-1.0.1-1.fc38
rust-xkbcommon-0.7.0-1.fc38
rust-xkbcommon-dl-0.4.1-1.fc38
rust-xkbcommon0.4-0.4.1-1.fc38
rust-xkeysym-0.2.0-1.fc38
xerces-c-3.2.5-1.fc38
Details about builds:
================================================================================
CuraEngine_grpc_definitions-0.1.0-1.fc38 (FEDORA-2023-37a8e93b79)
gRPC Proto Definitions for CuraEngine
--------------------------------------------------------------------------------
Update Information:
New package - CuraEngine_grpc_definitions - gRPC Proto Definitions for
CuraEngine
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 22 2023 Tom Callaway <spot(a)fedoraproject.org> - 0.1.0-1
- Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255633 - Review Request: CuraEngine_grpc_definitions - gRPC Proto
Definitions for CuraEngine
https://bugzilla.redhat.com/show_bug.cgi?id=2255633
--------------------------------------------------------------------------------
================================================================================
asio-grpc-2.8.0-1.fc38 (FEDORA-2023-88ffd517b6)
Asynchronous gRPC with Asio/unified executors
--------------------------------------------------------------------------------
Update Information:
New package: asio-grpc - Asynchronous gRPC with Asio/unified executors
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Tom Callaway <spot(a)fedoraproject.org> - 2.8.0-1
- update to 2.8.0
* Wed Nov 22 2023 Tom Callaway <spot(a)fedoraproject.org> - 2.7.0-1
- Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255630 - Review Request: asio-grpc - Asynchronous gRPC with Asio/unified
executors
https://bugzilla.redhat.com/show_bug.cgi?id=2255630
--------------------------------------------------------------------------------
================================================================================
chromium-120.0.6099.129-1.fc38 (FEDORA-2023-ed327967b4)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 120.0.6099.129 - High CVE-2023-7024: Heap buffer overflow in WebRTC
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.129-1
- update to 120.0.6099.129
* High CVE-2023-7024: Heap buffer overflow in WebRTC
--------------------------------------------------------------------------------
================================================================================
fedora-license-data-1.37-1.fc38 (FEDORA-2023-469b3383c3)
Fedora Linux license data
--------------------------------------------------------------------------------
Update Information:
Automatic update for fedora-license-data-1.37-1.fc38. ##### **Changelog for
fedora-license-data** ``` * Fri Dec 22 2023 Miroslav Such�� <msuchy(a)redhat.com>
1.37-1 - add license HPND-Kevlin-Henney - add license FSFAP-no-warranty-
disclaimer - add not allowed license LicenseRef-Nikto - add LicenseRef-Fedora-
Firmware ```
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.37-1
- add license HPND-Kevlin-Henney
- add license FSFAP-no-warranty-disclaimer
- add not allowed license LicenseRef-Nikto
- add LicenseRef-Fedora-Firmware
--------------------------------------------------------------------------------
================================================================================
icecat-115.6.0-1.rh1.fc38 (FEDORA-2023-1a66d35239)
GNU version of Firefox browser
--------------------------------------------------------------------------------
Update Information:
- Release 115.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Antonio Trande <sagitter(a)fedoraproject.org> - 2:115.6.0-1.rh1
- Release 115.6.0 rh1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255254 - icecat does not launch due to missing dependencies
https://bugzilla.redhat.com/show_bug.cgi?id=2255254
--------------------------------------------------------------------------------
================================================================================
imagej-1.54h-1.fc38 (FEDORA-2023-739e397833)
Image Processing and Analysis in Java
--------------------------------------------------------------------------------
Update Information:
Update to 1.54h (close RHBZ#2254747)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.54h-1
- Update to 1.54h (close RHBZ#2254747)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254747 - imagej-1.54.h is available
https://bugzilla.redhat.com/show_bug.cgi?id=2254747
--------------------------------------------------------------------------------
================================================================================
lemonldap-ng-2.18.1-1.fc38 (FEDORA-2023-58c53a8a41)
Web Single Sign On (SSO) and Access Management
--------------------------------------------------------------------------------
Update Information:
Upstream changelog: -
https://gitlab.ow2.org/lemonldap-ng/lemonldap-
ng/-/releases/v2.18.1 -
https://gitlab.ow2.org/lemonldap-ng/lemonldap-
ng/-/releases/v2.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Clement Oudot <clem.oudot(a)gmail.com> - 2.18.1-1
- Update to 2.18.1
* Wed Dec 20 2023 Clement Oudot <clem.oudot(a)gmail.com> - 2.18.0-1
- Update to 2.18.0
--------------------------------------------------------------------------------
================================================================================
moodle-4.1.8-1.fc38 (FEDORA-2023-4e4fd0ac52)
A Course Management System
--------------------------------------------------------------------------------
Update Information:
4.1.8
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 4.1.8-1
- 4.1.8
--------------------------------------------------------------------------------
================================================================================
perl-Authen-WebAuthn-0.002-1.fc38 (FEDORA-2023-0713d6c2e2)
Library to add Web Authentication support to server applications
--------------------------------------------------------------------------------
Update Information:
New features: * Supported attestation types: none, packed, fido-u2f * Mandatory
attestation trust chain validation
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Xavier Bachelot <xavier(a)bachelot.org> - 0.002-1
- Update to 0.002
- Convert License to SPDX
- Cleanup specfile
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.001-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255628 - perl-Authen-WebAuthn-0.002 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255628
--------------------------------------------------------------------------------
================================================================================
php-pear-Auth-SASL-1.2.0-1.fc38 (FEDORA-2023-f9737fc963)
Abstraction of various SASL mechanism responses
--------------------------------------------------------------------------------
Update Information:
**Version 1.2.0** * feature: PHP8.2 ready * bugfix: scram-sha-224 broken #14 *
task: mark authentication methods cram-md5, digest-md5, and login as deprecated
#14
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 1.2.0-1
- udpate to 1.2.0
- use SPDX license ID
--------------------------------------------------------------------------------
================================================================================
php-phpunit-php-code-coverage9-9.2.30-1.fc38 (FEDORA-2023-c8d76ea3e8)
PHP code coverage information, version 9
--------------------------------------------------------------------------------
Update Information:
**Version 9.2.30** - 2023-12-22 Changed * This component is now compatible
with `nikic/php-parser` 5.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 9.2.30-1
- update to 9.2.30
- raise dependency on nikic/php-parser 4.18 and allow 5.0
--------------------------------------------------------------------------------
================================================================================
php-sebastian-complexity-2.0.3-1.fc38 (FEDORA-2023-c996784be8)
Calculating the complexity of PHP code units, version 2
--------------------------------------------------------------------------------
Update Information:
**Version 2.0.3** - 2023-12-22 Changed * This component is now compatible with
`nikic/php-parser` 5.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 2.0.3-1
- update to 2.0.3
- raise dependency on nikic/php-parser 4.18 and allow 5.0
- use SPDX License id
--------------------------------------------------------------------------------
================================================================================
php-sebastian-diff5-5.1.0-1.fc38 (FEDORA-2023-ec196242dc)
Diff implementation, version 5
--------------------------------------------------------------------------------
Update Information:
**Version 5.1.0** - 2023-12-22 Added *
`SebastianBergmann\Diff\Chunk::start()`,
`SebastianBergmann\Diff\Chunk::startRange()`,
`SebastianBergmann\Diff\Chunk::end()`,
`SebastianBergmann\Diff\Chunk::endRange()`, and
`SebastianBergmann\Diff\Chunk::lines()` * `SebastianBergmann\Diff\Diff::from()`,
`SebastianBergmann\Diff\Diff::to()`, and `SebastianBergmann\Diff\Diff::chunks()`
* `SebastianBergmann\Diff\Line::content()` and
`SebastianBergmann\Diff\Diff::type()` * `SebastianBergmann\Diff\Line::isAdded()`
,`SebastianBergmann\Diff\Line::isRemoved()`, and
`SebastianBergmann\Diff\Line::isUnchanged()` Changed *
`SebastianBergmann\Diff\Diff` now implements `IteratorAggregate`, iterating over
it yields the aggregated `SebastianBergmann\Diff\Chunk` objects *
`SebastianBergmann\Diff\Chunk` now implements `IteratorAggregate`, iterating
over it yields the aggregated `SebastianBergmann\Diff\Line` objects Deprecated
* `SebastianBergmann\Diff\Chunk::getStart()`,
`SebastianBergmann\Diff\Chunk::getStartRange()`,
`SebastianBergmann\Diff\Chunk::getEnd()`,
`SebastianBergmann\Diff\Chunk::getEndRange()`, and
`SebastianBergmann\Diff\Chunk::getLines()` *
`SebastianBergmann\Diff\Diff::getFrom()`,
`SebastianBergmann\Diff\Diff::getTo()`, and
`SebastianBergmann\Diff\Diff::getChunks()` *
`SebastianBergmann\Diff\Line::getContent()` and
`SebastianBergmann\Diff\Diff::getType()`
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 5.1.0-1
- update to 5.1.0
- Enable test suite
--------------------------------------------------------------------------------
================================================================================
php-sebastian-lines-of-code-1.0.4-1.fc38 (FEDORA-2023-a4bea15d76)
Counting the lines of code in PHP source code, version 1
--------------------------------------------------------------------------------
Update Information:
**Version 1.0.4** - 2023-12-22 Changed * This component is now compatible with
`nikic/php-parser` 5.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Remi Collet <remi(a)remirepo.net> - 1.0.4-1
- update to 1.0.4
- raise dependency on nikic/php-parser 4.18 and allow 5.0
- use SPDX License id
--------------------------------------------------------------------------------
================================================================================
python-nose2-0.14.0-3.fc38 (FEDORA-2023-1d912d1aac)
The successor to nose, based on unittest2
--------------------------------------------------------------------------------
Update Information:
Fix test reporter output in Python 3.12.1 and later ---- Skip
test_skip_reason_in_message on Python 3.12.1 and later
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.14.0-3
- Fix test reporter output in Python 3.12.1 and later
* Mon Dec 18 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.14.0-2
- Skip test_skip_reason_in_message on Python 3.12.1 and later
- Close RHBZ#2246281
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2246281 - python-nose2 fails to build with Python 3.13: AssertionError: Regex
didn't match: 'test \\(test_junitxml_skip_reason.Test\\.test\\) \\.* skip' not
found in 'skipped ohai\n
https://bugzilla.redhat.com/show_bug.cgi?id=2246281
--------------------------------------------------------------------------------
================================================================================
python-ogr-0.48.0-1.fc38 (FEDORA-2023-a79d235505)
One API for multiple git forges
--------------------------------------------------------------------------------
Update Information:
Automatic update for python-ogr-0.48.0-1.fc38.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Packit <hello(a)packit.dev> - 0.48.0-1
- There is a new get_pr_files_diff method supported for Pagure. (#826)
- We have fixed a bug that GithubRelease.url returned an API URL. (#824)
- Resolves rhbz#2255524
--------------------------------------------------------------------------------
================================================================================
rpki-client-8.7-1.fc38 (FEDORA-2023-769192f49c)
OpenBSD RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
# rpki-client 8.7 - Add ability to constrain an RPKI Trust Anchor's effective
signing authority to a limited set of Internet numbers. This allows Relying
Parties to enjoy the potential benefits of assuming trust, but within a bounded
scope. This distribution includes curated constraints files. More information:
https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-tr...
anchors - Following a 'failed fetch' (described in RFC 9286), emit a warning
and continue with a previously cached Manifest file, if present and still valid.
- Emit a warning when the same `manifestNumber` is re-used across multiple
issuances. - Emit a warning when the remote repository presents a Manifest
with an unexpected `manifestNumber`. Purported new manifests are expected to
have a higher `manifestNumber` than previously validated manifests. Otherwise
fall back to the previously cached manifest, if it is still valid. This warning
can be indicative of manifest replays or of out-of-order publishing. - Require
RPKI object files to be of a minimum of 100 bytes in both the RRDP and RSYNC
transports. - No longer synchronize directory modtimes in the local cache to
align with remote RSYNC repository sources. - Improved CRL extension checking.
- Experimental support for the P-256 signature algorithm. - Various
refactoring work.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Robert Scheck <robert(a)fedoraproject.org> 8.7-1
- Upgrade to 8.7 (#2255458)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255458 - rpki-client-8.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255458
--------------------------------------------------------------------------------
================================================================================
rust-as-raw-xcb-connection-1.0.1-1.fc38 (FEDORA-2023-a8ec77684a)
Trait to facilitate interoperatibility with libxcb C API
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 1.0.1-1
- Initial import (#2255172)
--------------------------------------------------------------------------------
================================================================================
rust-xkbcommon-0.7.0-1.fc38 (FEDORA-2023-a8ec77684a)
Rust bindings and wrappers for libxkbcommon
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 0.7.0-1
- Update to 0.7.0 (rhbz#2251774)
* Sat Aug 5 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.4.0-14
- Regenerate with rust2rpm v24
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-xkbcommon-dl-0.4.1-1.fc38 (FEDORA-2023-a8ec77684a)
Dynamically loaded xkbcommon and xkbcommon-x11 Rust bindings
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 0.4.1-1
- Initial import (rhbz#2255175)
--------------------------------------------------------------------------------
================================================================================
rust-xkbcommon0.4-0.4.1-1.fc38 (FEDORA-2023-a8ec77684a)
Rust bindings and wrappers for libxkbcommon
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 0.4.1-1
- Initial import (xkbcommon 0.4 compat package)
--------------------------------------------------------------------------------
================================================================================
rust-xkeysym-0.2.0-1.fc38 (FEDORA-2023-a8ec77684a)
Library for working with X11 keysyms
--------------------------------------------------------------------------------
Update Information:
rust-as-raw-xcb-connection, rust-xkeysym and rust-xkbcommon-dl
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 0.2.0-1
- Initial import (#2255174)
--------------------------------------------------------------------------------
================================================================================
xerces-c-3.2.5-1.fc38 (FEDORA-2023-52ba628e03)
Validating XML Parser
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Kalev Lember <klember(a)redhat.com> - 3.2.5-1
- Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.3-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1788472 - CVE-2018-1311 xerces-c: XML parser contains a use-after-free error
triggered during the scanning of external DTDs
https://bugzilla.redhat.com/show_bug.cgi?id=1788472
[ 2 ] Bug #2243426 - CVE-2023-37536 xerces-c: An integer overflow issue that allows
remote attackers to cause out-of-bound access via HTTP request
https://bugzilla.redhat.com/show_bug.cgi?id=2243426
--------------------------------------------------------------------------------