The following Fedora 39 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a854153d7a
opensc-0.24.0-1.fc39
3
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7c6c696102
unrealircd-6.1.4-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5aa1ebc5e9
minizip-ng-3.0.7-5.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-93aa6807da
tor-0.4.8.10-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c61a7d5227
python3.10-3.10.13-2.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-87771f4249
python3.11-3.11.7-2.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d577604e6a
python3.12-3.12.1-2.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2f86a608b2
python3.9-3.9.18-3.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1bb427c240
python3.8-3.8.18-3.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-555b4d49b1
python3.7-3.7.17-4.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-88fbb78cd3
python3.6-3.6.15-22.fc39
The following Fedora 39 Critical Path updates have yet to be approved:
Age URL
53
https://bodhi.fedoraproject.org/updates/FEDORA-2023-60969403d0
go-rpm-macros-3.3.0-1.fc39 go2rpm-1.10.0-1.fc39
19
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0a947db1d0
mock-core-configs-39.3-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8fd0890f05 dnf5-5.1.9-1.fc39
10
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a35a58acc1
python-rpds-py-0.13.2-1.fc39 rust-archery-1.1.0-1.fc39 rust-rpds-1.1.0-2.fc39
rust-triomphe-0.1.9-1.fc39
9
https://bodhi.fedoraproject.org/updates/FEDORA-2023-68ad6ada3b
podman-4.8.2-1.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-028fe2a793 kobo-0.35.0-1.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3930eeaf4a pungi-4.6.0-1.fc39
7
https://bodhi.fedoraproject.org/updates/FEDORA-2023-69a7a5775c
tomcat-9.0.83-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c7001c5b61
libheif-1.17.5-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-a0cc3d5877
ostree-2023.8-2.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-bc6d1e0948
zchunk-1.4.0-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae7f558922
guestfs-tools-1.51.7-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-db59cf7cee
libphonenumber-8.13.27-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2cfc4d36f1
libguestfs-1.51.10-1.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d577604e6a
python3.12-3.12.1-2.fc39
The following builds have been pushed to Fedora 39 updates-testing
EMBOSS-6.6.0-26.fc39
QXlsx-1.4.7-1.fc39
R-littler-0.3.19-1.fc39
algobox-1.1.1-1.fc39
alsa-sof-firmware-2023.12-1.fc39
ardour8-8.2.0-1.fc39
brltty-6.6-9.fc39
crypto-policies-20231204-1.git1e3a2e4.fc39
eccodes-2.33.0-1.fc39
filezilla-3.66.4-1.fc39
firefox-121.0-2.fc39
fts-rest-client-3.12.4-1.fc39
gamescope-3.13.19-1.fc39
gpxsee-13.13-1.fc39
gtk3-3.24.39-1.fc39
ibus-1.5.29~rc2-6.fc39
java-latest-openjdk-21.0.1.0.12-4.rolling.fc39
kontrast-23.08.4-1.fc39
kubernetes-1.27.9-1.fc39
nss-3.95.0-1.fc39
openscap-report-0.2.6-1.fc39
osbuild-102-1.fc39
php-8.2.14-1.fc39
php-pecl-ds-1.5.0-1.fc39
podman-tui-0.15.0-1.fc39
pre-commit-3.6.0-1.fc39
python-alembic-1.13.1-1.fc39
python-alsaaudio-0.10.0-1.fc39
python-flask-session-0.5.0-1.fc39
python-niapy-2.1.0-2.fc39
rstudio-2023.12.0+369-1.fc39
rust-coreos-installer-0.20.0-1.fc39
rust-just-1.17.0-1.fc39
scap-security-guide-0.1.71-1.fc39
squid-6.6-1.fc39
thunderbird-115.6.0-1.fc39
tigervnc-1.13.1-10.fc39
toolbox-0.0.99.5-1.fc39
vdr-live-3.3.3-1.fc39
vkroots-0^20231119git2ceb105-1.fc39
Details about builds:
================================================================================
EMBOSS-6.6.0-26.fc39 (FEDORA-2023-f5e1cc77de)
The European Molecular Biology Open Software Suite
--------------------------------------------------------------------------------
Update Information:
Fix pcre2 support to not segfault, update license tag.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Tom Callaway <spot(a)fedoraproject.org> - 6.6.0-26
- fix pcre2 patch (no more segfaults, hopefully)
- update license tag
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2128289 - Please port your pcre dependency to pcre2. Pcre has been
deprecated
https://bugzilla.redhat.com/show_bug.cgi?id=2128289
[ 2 ] Bug #2242051 - EMBOSS: incomplete pcre2 port is not working
https://bugzilla.redhat.com/show_bug.cgi?id=2242051
--------------------------------------------------------------------------------
================================================================================
QXlsx-1.4.7-1.fc39 (FEDORA-2023-e4d3cb5569)
Excel/XLSX file reader/writer library for Qt
--------------------------------------------------------------------------------
Update Information:
1.4.7
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 1.4.7-1
- 1.4.7
* Wed Nov 29 2023 Jan Grulich <jgrulich(a)redhat.com> - 1.4.6-9
- Rebuild (qt6)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255307 - QXlsx-1.4.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255307
--------------------------------------------------------------------------------
================================================================================
R-littler-0.3.19-1.fc39 (FEDORA-2023-2217e7a8d5)
littler: R at the Command-Line via 'r'
--------------------------------------------------------------------------------
Update Information:
little r 0.3.19
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 19 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.3.19-1
- New upstream release 0.3.19
--------------------------------------------------------------------------------
================================================================================
algobox-1.1.1-1.fc39 (FEDORA-2023-50f9893364)
Algorithmic software
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Nicolas Chauvet <kwizart(a)gmail.com> - 1.1.1-1
- Update to 1.1.1
--------------------------------------------------------------------------------
================================================================================
alsa-sof-firmware-2023.12-1.fc39 (FEDORA-2023-e381459005)
Firmware and topology files for Sound Open Firmware project
--------------------------------------------------------------------------------
Update Information:
Update SOF firmware to version 2023.12. More information:
https://github.com/thesofproject/sof-bin/releases/tag/v2023.12
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Jaroslav Kysela <perex(a)perex.cz> - 2023.12-1
- Update to v2023.12
--------------------------------------------------------------------------------
================================================================================
ardour8-8.2.0-1.fc39 (FEDORA-2023-5854ea0169)
Digital Audio Workstation
--------------------------------------------------------------------------------
Update Information:
This is a bugfix and enhancement release. See the Ardour [upstream
announcement]() and [release
notes](https://ardour.org/whatsnew.html) for a
detailed list of changes in version 8.2.0.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Nils Philippsen <nils(a)tiptoe.de> - 8.2.0-1
- Update to version 8.2.0
* Tue Nov 28 2023 Florian Weimer <fweimer(a)redhat.com> - 8.1.0-6
- Fix C compatibility issue in localtime_r probing
--------------------------------------------------------------------------------
================================================================================
brltty-6.6-9.fc39 (FEDORA-2023-212cdaad25)
Braille display driver for Linux/Unix
--------------------------------------------------------------------------------
Update Information:
Move to sysusers for group creation.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 6.6-9
- Migrate group creation to sysusers
* Mon Dec 18 2023 Richard W.M. Jones <rjones(a)redhat.com> - 6.6-8
- Bump release and rebuild
* Mon Dec 18 2023 Richard W.M. Jones <rjones(a)redhat.com> - 6.6-7
- OCaml 5.1.1 + s390x code gen fix for Fedora 40
* Tue Dec 12 2023 Richard W.M. Jones <rjones(a)redhat.com> - 6.6-6
- OCaml 5.1.1 rebuild for Fedora 40
* Thu Oct 5 2023 Richard W.M. Jones <rjones(a)redhat.com> - 6.6-5
- OCaml 5.1 rebuild for Fedora 40
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255377 - Swich brlapi to use systemd-sysusers to add group
https://bugzilla.redhat.com/show_bug.cgi?id=2255377
--------------------------------------------------------------------------------
================================================================================
crypto-policies-20231204-1.git1e3a2e4.fc39 (FEDORA-2023-eda0357113)
System-wide crypto policies
--------------------------------------------------------------------------------
Update Information:
TEST-PQ: add a subpolicy to test post-quantum algorithms. Do not rely on.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 4 2023 Alexander Sosedkin <asosedkin(a)redhat.com> - 20231204-1.git1e3a2e4
- TEST-PQ: add a subpolicy to test post-quantum algorithms. Do not rely on.
--------------------------------------------------------------------------------
================================================================================
eccodes-2.33.0-1.fc39 (FEDORA-2023-7e92ebf17c)
WMO data format decoding and encoding
--------------------------------------------------------------------------------
Update Information:
Update to 2.33.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 17 2023 Orion Poplawski <orion(a)nwra.com> - 2.33.0-1
- Update to 2.33.0
* Sun Nov 26 2023 Jos de Kloe <josdekloe(a)gmail.com> - 2.32.1-2
- rebuild after so name jump of libjasper
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254174 - eccodes-2.33.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2254174
--------------------------------------------------------------------------------
================================================================================
filezilla-3.66.4-1.fc39 (FEDORA-2023-7141950083)
FTP, FTPS and SFTP client
--------------------------------------------------------------------------------
Update Information:
Fix for Terrapin vulnerability
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.66.4-1
- 3.66.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255454 - TRIAGE filezilla: terrapin vulnerability fixed in 3.66.4
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2255454
--------------------------------------------------------------------------------
================================================================================
firefox-121.0-2.fc39 (FEDORA-2023-9de52d46bd)
Mozilla Firefox Web browser
--------------------------------------------------------------------------------
Update Information:
Update NSS to 3.95 Update Firefox to 121.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 19 2023 Martin Stransky <stransky(a)redhat.com>- 121.0-2
- Added Wayland proxy cache (mzbz#1743144)
* Mon Dec 18 2023 Martin Stransky <stransky(a)redhat.com>- 121.0-2
- Enable Gnome Shell Search provider for Fedora 40+
- Don't ship firefox-x11 and firefox-wayland on Fedora 40+
* Mon Dec 18 2023 Martin Stransky <stransky(a)redhat.com>- 121.0-1
- Updated to 121.0
--------------------------------------------------------------------------------
================================================================================
fts-rest-client-3.12.4-1.fc39 (FEDORA-2023-2ca36d76e1)
File Transfer Service (FTS) -- Python3 Client and CLI
--------------------------------------------------------------------------------
Update Information:
New upstream release v3.12.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 3.12.4-1
- New upstream release 3.12.4
--------------------------------------------------------------------------------
================================================================================
gamescope-3.13.19-1.fc39 (FEDORA-2023-3dba823934)
Micro-compositor for video games on Wayland
--------------------------------------------------------------------------------
Update Information:
- Rebase to 3.13.19
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 13 2023 Franti��ek Zatloukal <fzatlouk(a)redhat.com> - 3.13.19-1
- Rebase to 3.13.19
* Tue Dec 12 2023 Franti��ek Zatloukal <fzatlouk(a)redhat.com> - 3.13.18-1
- Rebase to 3.13.18 (Fixes RHBZ#2249222)
* Fri Oct 27 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.12.7-3
- Add -static BR���s for header-only stb libraries per guidelines
* Fri Oct 27 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.12.7-2
- Ensure stb_image contains the latest CVE patches
--------------------------------------------------------------------------------
================================================================================
gpxsee-13.13-1.fc39 (FEDORA-2023-1c7a613e74)
GPS log file viewer and analyzer
--------------------------------------------------------------------------------
Update Information:
Automatic update for gpxsee-13.13-1.fc39. ##### **Changelog for gpxsee** ``` *
Tue Dec 19 2023 Packit <hello(a)packit.dev> - 13.13-1 - Increase the default
pixmap cache size on Android to 384MB (Martin T��ma) - Fixed broken map scale
(ruler) on HiDPI maps (Martin T��ma) - Limit the overzoom by the resulting tile
size rather than number of levels (Martin T��ma) - Version++ (Martin T��ma) -
Resolves rhbz#2255189 * Tue Dec 12 2023 Packit <hello(a)packit.dev> - 13.12-1 -
Code cleanup (Martin T��ma) - Fixed broken TMS maps rendering (Martin T��ma) -
Asynchronous rendering of online vector maps (Martin T��ma) - Added support for
online vector maps overzoom (Martin T��ma) - Limit the overzoom to max 3 levels
(Martin T��ma) - Added support for MVT overzoom (Martin T��ma) - Code cleanup
(Martin T��ma) - Provide the zoom level to QImageReader when fetching the tile
size (Martin T��ma) - Cosmetics (Martin T��ma) - Added workaround for broken Qt
SVG image plugin colliding with the MVT plugin (Martin T��ma) - Translated using
Weblate (Ukrainian) (Vadym Nekhai) - Translated using Weblate (Esperanto)
(Nikolay Korotkiy) - Translated using Weblate (Ukrainian) (Nikolay Korotkiy) -
Translated using Weblate (Russian) (Nikolay Korotkiy) - Translated using Weblate
(Finnish) (Nikolay Korotkiy) - Fixed possible double delete (Martin T��ma) -
Improved error reporting (Martin T��ma) - Fixed crash on empty MBTiles files
(Martin T��ma) - Version++ (Martin T��ma) - Metadata update (Martin T��ma) -
Translated using Weblate (Catalan) (raf) - Translated using Weblate (Hungarian)
(99 efi) - Translated using Weblate (Swedish) (bittin1ddc447d824349b2) - Code
cleanup (Martin T��ma) - Resolves rhbz#2231722 ```
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 19 2023 Packit <hello(a)packit.dev> - 13.13-1
- Increase the default pixmap cache size on Android to 384MB (Martin T��ma)
- Fixed broken map scale (ruler) on HiDPI maps (Martin T��ma)
- Limit the overzoom by the resulting tile size rather than number of levels (Martin
T��ma)
- Version++ (Martin T��ma)
- Resolves rhbz#2255189
* Tue Dec 12 2023 Packit <hello(a)packit.dev> - 13.12-1
- Code cleanup (Martin T��ma)
- Fixed broken TMS maps rendering (Martin T��ma)
- Asynchronous rendering of online vector maps (Martin T��ma)
- Added support for online vector maps overzoom (Martin T��ma)
- Limit the overzoom to max 3 levels (Martin T��ma)
- Added support for MVT overzoom (Martin T��ma)
- Code cleanup (Martin T��ma)
- Provide the zoom level to QImageReader when fetching the tile size (Martin T��ma)
- Cosmetics (Martin T��ma)
- Added workaround for broken Qt SVG image plugin colliding with the MVT plugin (Martin
T��ma)
- Translated using Weblate (Ukrainian) (Vadym Nekhai)
- Translated using Weblate (Esperanto) (Nikolay Korotkiy)
- Translated using Weblate (Ukrainian) (Nikolay Korotkiy)
- Translated using Weblate (Russian) (Nikolay Korotkiy)
- Translated using Weblate (Finnish) (Nikolay Korotkiy)
- Fixed possible double delete (Martin T��ma)
- Improved error reporting (Martin T��ma)
- Fixed crash on empty MBTiles files (Martin T��ma)
- Version++ (Martin T��ma)
- Metadata update (Martin T��ma)
- Translated using Weblate (Catalan) (raf)
- Translated using Weblate (Hungarian) (99 efi)
- Translated using Weblate (Swedish) (bittin1ddc447d824349b2)
- Code cleanup (Martin T��ma)
- Resolves rhbz#2231722
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2231722 - gpxsee-13.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2231722
[ 2 ] Bug #2255189 - gpxsee-13.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255189
--------------------------------------------------------------------------------
================================================================================
gtk3-3.24.39-1.fc39 (FEDORA-2023-148369da83)
GTK+ graphical user interface library
--------------------------------------------------------------------------------
Update Information:
gtk 3.24.39 release. For details, see
https://download.gnome.org/sources/gtk+/3.24/gtk%2B-3.24.39.news
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 19 2023 Kalev Lember <klember(a)redhat.com> - 3.24.39-1
- Update to 3.24.39
--------------------------------------------------------------------------------
================================================================================
ibus-1.5.29~rc2-6.fc39 (FEDORA-2023-7b6a9bbc23)
Intelligent Input Bus for Linux OS
--------------------------------------------------------------------------------
Update Information:
Fix game control keys with language layout
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Takao Fujiwara <tfujiwar(a)redhat.com> - 1.5.29~rc2-6
- Fix game control keys with language layout
--------------------------------------------------------------------------------
================================================================================
java-latest-openjdk-21.0.1.0.12-4.rolling.fc39 (FEDORA-2023-f0ca8f1f17)
OpenJDK 21 Runtime Environment
--------------------------------------------------------------------------------
Update Information:
repack from single binary -
https://fedoraproject.org/wiki/Changes/BuildJdkOncePackEverywhere
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 16 2023 Jiri Vanek <jvanek(a)redhat.com> - 1:21.0.1.0.12-4.rolling
* using generated sources from portables for final debuginfo
* Sat Dec 9 2023 Jiri Vanek <jvanek(a)redhat.com> - 1:21.0.1.0.12-3.rolling
- proeprly filing debugsources pkg
by addedd symlinks restructuring the structure for original build sources
- according to logs, some are still missing
probably generated during the build, and thus not existing in prep,
when the sources subpkg is created after patching
--------------------------------------------------------------------------------
================================================================================
kontrast-23.08.4-1.fc39 (FEDORA-2023-91fd20aefd)
Color contrast checker
--------------------------------------------------------------------------------
Update Information:
Update to 23.08.4
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 23.08.4-1
- 23.08.4
--------------------------------------------------------------------------------
================================================================================
kubernetes-1.27.9-1.fc39 (FEDORA-2023-b629f2961e)
Open Source Production-Grade Container Scheduling And Management Platform
--------------------------------------------------------------------------------
Update Information:
Kubernetes updates for F39 (v1.27.9) and F38 (v1.26.12). Primarily bug or
regression fixes. v1.27.9 upstream changelog:
https://github.com/kubernetes/kub
ernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#changelog-since-v1278 v1.26.12
upstream changelog:
https://github.com/kubernetes/kubernetes/blob/master/CHANGEL
OG/CHANGELOG-1.26.md#changelog-since-v12611
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Bradley G Smith <bradley.g.smith(a)gmail.com> - 1.27.9-1
- Update to kubernetes v1.27.9 in f39
--------------------------------------------------------------------------------
================================================================================
nss-3.95.0-1.fc39 (FEDORA-2023-9de52d46bd)
Network Security Services
--------------------------------------------------------------------------------
Update Information:
Update NSS to 3.95 Update Firefox to 121.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Frantisek Krenzelok <krenzelok.frantisek(a)gmail.com> - 3.95.0-1
- Update NSS to 3.95.0
--------------------------------------------------------------------------------
================================================================================
openscap-report-0.2.6-1.fc39 (FEDORA-2023-aff309ac61)
A tool for generating human-readable reports from (SCAP) XCCDF and ARF results
--------------------------------------------------------------------------------
Update Information:
0.2.6 (Jan Rodak)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Packit <hello(a)packit.dev> - 0.2.6-1
- 0.2.6 (Jan Rodak)
- Extend the condition to account empty strings in href (Jan ��ern��)
- Add comments for the pylint tool (Jan ��ern��)
- Add special classes to table element (Jan ��ern��)
- Account for missing reference href attribute (Jan ��ern��)
- Add pragmas to avoid PEP8 warnings (Jan ��ern��)
- Present references in a table (Jan ��ern��)
- Collapse CPE tree when is true (Jan Rodak)
- Fix typo (Jan Rodak)
- Add titles (Jan Rodak)
- Fix performace of generation of graphs (Jan Rodak)
- Rearrange fields of rule detail and OVAL definition detail (Jan Rodak)
- Fix bugs in html (Jan Rodak)
--------------------------------------------------------------------------------
================================================================================
osbuild-102-1.fc39 (FEDORA-2023-fa0ebedfe1)
A build system for OS images
--------------------------------------------------------------------------------
Update Information:
Automatic update for osbuild-102-1.fc39. ##### **Changelog for osbuild** ``` *
Wed Dec 20 2023 Packit <hello(a)packit.dev> - 102-1 Changes with 102
---------------- * Add tests for org.osbuild.xz and org.osbuild.zstd (#1496)
* Author: Brian C. Lane, Reviewers: Michael Vogt * Fedora 40 (#1486) *
Author: Jakub Rusz, Reviewers: Alexander Todorov, Simon de Vlieger * HMS-3235
sources/skopeo: check containers-storage (#1489) * Author: Gianluca
Zuccarelli, Reviewers: Achilleas Koutsou * Switch nightly testing to RHEL-8.10
and RHEL-9.4 (#1422) * Author: Jakub Rusz, Reviewers: Alexander Todorov *
Update containers storage conf stage (#1487) * Author: Alexander Larsson,
Reviewers: Giuseppe Scrivano, Simon de Vlieger * create
org.osbuild.ostree.aleph stage (#1475) * Author: Dusty Mabe, Reviewers:
Achilleas Koutsou * fix for inaccurate mountinfo inside bwrap env (#1493)
* Author: Dusty Mabe, Reviewers: Michael Vogt * fscache: implement
"last_used()" helper (#1498) * Author: Michael Vogt, Reviewers: Achilleas
Koutsou, Simon de Vlieger * org.osbuild.systemd: Support masking generators
(#1505) * Author: Alexander Larsson, Reviewers: Michael Vogt * osbuild:
include std{out,err} in FileSystemMountService.mount() errors (#1497) *
Author: Michael Vogt, Reviewers: Simon de Vlieger * osbuild: pytoml is
deprecated, replace with toml (#1499) * Author: Michael Vogt, Reviewers:
Simon de Vlieger * stages(kickstart): add `ostreecontainer` (#1488) *
Author: Simon de Vlieger, Reviewers: Michael Vogt * stages(mkfs.ext4): add
basic unit test (#1502) * Author: Michael Vogt, Reviewers: Brian C. Lane *
stages/skopeo: destinations (#1494) * Author: Simon de Vlieger, Reviewers:
Achilleas Koutsou, Brian C. Lane * test,util: fix mount and add test that
ensures mount output is part of the exception (#1490) * Author: Michael
Vogt, Reviewers: Simon de Vlieger ��� Somewhere on the Internet, 2023-12-20 ```
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Packit <hello(a)packit.dev> - 102-1
Changes with 102
----------------
* Add tests for org.osbuild.xz and org.osbuild.zstd (#1496)
* Author: Brian C. Lane, Reviewers: Michael Vogt
* Fedora 40 (#1486)
* Author: Jakub Rusz, Reviewers: Alexander Todorov, Simon de Vlieger
* HMS-3235 sources/skopeo: check containers-storage (#1489)
* Author: Gianluca Zuccarelli, Reviewers: Achilleas Koutsou
* Switch nightly testing to RHEL-8.10 and RHEL-9.4 (#1422)
* Author: Jakub Rusz, Reviewers: Alexander Todorov
* Update containers storage conf stage (#1487)
* Author: Alexander Larsson, Reviewers: Giuseppe Scrivano, Simon de Vlieger
* create org.osbuild.ostree.aleph stage (#1475)
* Author: Dusty Mabe, Reviewers: Achilleas Koutsou
* fix for inaccurate mountinfo inside bwrap env (#1493)
* Author: Dusty Mabe, Reviewers: Michael Vogt
* fscache: implement "last_used()" helper (#1498)
* Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
* org.osbuild.systemd: Support masking generators (#1505)
* Author: Alexander Larsson, Reviewers: Michael Vogt
* osbuild: include std{out,err} in FileSystemMountService.mount() errors (#1497)
* Author: Michael Vogt, Reviewers: Simon de Vlieger
* osbuild: pytoml is deprecated, replace with toml (#1499)
* Author: Michael Vogt, Reviewers: Simon de Vlieger
* stages(kickstart): add `ostreecontainer` (#1488)
* Author: Simon de Vlieger, Reviewers: Michael Vogt
* stages(mkfs.ext4): add basic unit test (#1502)
* Author: Michael Vogt, Reviewers: Brian C. Lane
* stages/skopeo: destinations (#1494)
* Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Brian C. Lane
* test,util: fix mount and add test that ensures mount output is part of the exception
(#1490)
* Author: Michael Vogt, Reviewers: Simon de Vlieger
��� Somewhere on the Internet, 2023-12-20
--------------------------------------------------------------------------------
================================================================================
php-8.2.14-1.fc39 (FEDORA-2023-09eb808a6a)
PHP scripting language for creating dynamic web sites
--------------------------------------------------------------------------------
Update Information:
**PHP version 8.2.14** (21 Dec 2023) **Core:** * Fixed oss-fuzz php#54325
(Use-after-free of name in var-var with malicious error handler). (ilutov) *
Fixed oss-fuzz php#64209 (In-place modification of filename in
php_message_handler_for_zend). (ilutov) * Fixed bug
[
GH-12758](https://github.com/php/php-src/issues/12758) /
[
GH-12768](https://github.com/php/php-src/issues/12768) (Invalid opline in OOM
handlers within ZEND_FUNC_GET_ARGS and ZEND_BIND_STATIC). (Florian Engelhardt) *
Fix various missing NULL checks. (nielsdos, dstogov) * Fixed bug
[
GH-12835](https://github.com/php/php-src/issues/12835) (Leak of
call->extra_named_params on internal __call). (ilutov) **Date:** * Fixed
improbably integer overflow while parsing really large (or small) Unix
timestamps. (Derick) **DOM:** * Fixed bug
[
GH-12616](https://github.com/php/php-src/issues/12616) (DOM: Removing XMLNS
namespace node results in invalid default: prefix). (nielsdos) **FPM:** *
Fixed bug [
GH-12705](https://github.com/php/php-src/issues/12705) (Segmentation
fault in fpm_status_export_to_zval). (Patrick Prasse) **FTP:** * Fixed bug
[
GH-9348](https://github.com/php/php-src/issues/9348) (FTP & SSL session reuse).
(nielsdos) **Intl:** * Fixed bug [
GH-12635](https://github.com/php/php-
src/issues/12635) (Test bug69398.phpt fails with ICU 74.1). (nielsdos)
**LibXML:** * Fixed bug [
GH-12702](https://github.com/php/php-src/issues/12702)
(libxml2 2.12.0 issue building from src). (nono303) * Fixed test failures for
libxml2 2.12.0. (nielsdos) **MySQLnd:** * Avoid using uninitialised struct.
(mikhainin) * Fixed bug [
GH-12791](https://github.com/php/php-src/issues/12791)
(Possible dereference of NULL in MySQLnd debug code). (nielsdos) **Opcache:**
* Fixed JIT bug (Function JIT emits "Uninitialized string offset" warning at
the
same time as invalid offset Error). (Girgias) * Fixed JIT bug (JIT emits
"Attempt to assign property of non-object" warning at the same time as Error is
being thrown). (Girgias) **OpenSSL:** * Fixed bug php#50713
(openssl_pkcs7_verify() may ignore untrusted CAs). (Jakub Zelenka) **PCRE:** *
Fixed bug [
GH-12628](https://github.com/php/php-src/issues/12628) (The gh11374
test fails on Alpinelinux). (nielsdos) **PDO PGSQL:** * Fixed the default
value of $fetchMode in PDO::pgsqlGetNotify() (kocsismate) **PGSQL:** * Fixed
bug [
GH-12763](https://github.com/php/php-src/issues/12763) wrong argument type
for pg_untrace. (degtyarov) **PHPDBG:** * Fixed bug
[
GH-12675](https://github.com/php/php-src/issues/12675) (MEMORY_LEAK in
phpdbg_prompt.c). (nielsdos) **SOAP:** * Fixed bug
[
GH-12838](https://github.com/php/php-src/issues/12838) ([SOAP] Temporary WSDL
cache files not being deleted). (nielsdos) **SPL:** * Fixed bug
[
GH-12721](https://github.com/php/php-src/issues/12721)
(SplFileInfo::getFilename() segfault in combination with GlobIterator and no
directory separator). (nielsdos) **SQLite3:** * Fixed bug
[
GH-12633](https://github.com/php/php-src/issues/12633) (sqlite3_defensive.phpt
fails with sqlite 3.44.0). (SakiTakamachi) **Standard:** * Fix memory leak in
syslog device handling. (danog) * Fixed bug
[
GH-12621](https://github.com/php/php-src/issues/12621) (browscap segmentation
fault when configured in the vhost). (nielsdos) * Fixed bug
[
GH-12655](https://github.com/php/php-src/issues/12655) (proc_open() does not
take into account references in the descriptor array). (nielsdos) **Streams:**
* Fixed bug php#79945 (Stream wrappers in imagecreatefrompng causes segfault).
(Jakub Zelenka)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Remi Collet <remi(a)remirepo.net> - 8.2.14-1
- Update to 8.2.14 -
http://www.php.net/releases/8_2_14.php
--------------------------------------------------------------------------------
================================================================================
php-pecl-ds-1.5.0-1.fc39 (FEDORA-2023-e1c9bb573f)
Data Structures for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.5.0** - Support for PHP 8.3 - Fix #193: Passing array item by
reference breaks \DS\Set behaviour - Fix #200: Segmentation fault merging keys
of maps containing maps
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Remi Collet <remi(a)remirepo.net> - 1.5.0-1
- update to 1.5.0
- raise dependency on PHP 7.4
- build out of sources tree
--------------------------------------------------------------------------------
================================================================================
podman-tui-0.15.0-1.fc39 (FEDORA-2023-20feb865d8)
Podman Terminal User Interface
--------------------------------------------------------------------------------
Update Information:
release v0.15.0 includes security fix for [CVE-2023-48795]
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Navid Yaghoobi <navidys(a)fedoraproject.org> - 0.15.0-1
- release v0.15.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255104 - CVE-2023-48795 podman-tui: ssh: Prefix truncation attack on Binary
Packet Protocol (BPP) [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2255104
--------------------------------------------------------------------------------
================================================================================
pre-commit-3.6.0-1.fc39 (FEDORA-2023-c534df7ae0)
Framework for managing and maintaining multi-language pre-commit hooks
--------------------------------------------------------------------------------
Update Information:
3.6.0 - 2023-12-09 ================== ### Features - Check
`minimum_pre_commit_version` first when parsing configs. ### Fixes - Fix
deprecation warnings for `importlib.resources`. - Fix deprecation warnings for
rmtree. ### Updating - Drop support for `python<3.9`.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 19 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.6.0-1
- Update to 3.6.0 (close RHBZ#2253802)
* Fri Nov 3 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.5.0-2
- Patch for Python 3.13 (close RHBZ#2247263)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2253802 - pre-commit-3.6.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253802
--------------------------------------------------------------------------------
================================================================================
python-alembic-1.13.1-1.fc39 (FEDORA-2023-cf8df0ea4b)
Database migration tool for SQLAlchemy
--------------------------------------------------------------------------------
Update Information:
- Update to 1.13.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Franti��ek Zatloukal <fzatlouk(a)redhat.com> - 1.13.1-1
- Update to 1.13.1 (Fixes RHBZ#2255427)
--------------------------------------------------------------------------------
================================================================================
python-alsaaudio-0.10.0-1.fc39 (FEDORA-2023-fc1142d945)
Python Alsa Bindings
--------------------------------------------------------------------------------
Update Information:
Update to 0.10.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Nicolas Chauvet <kwizart(a)gmail.com> - 0.10.0-1
- Update to 0.10.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2245787 - python-alsaaudio fails to build with Python 3.13: error: implicit
declaration of function ���PyEval_InitThreads���, 'PyUnicode_AS_DATA'
https://bugzilla.redhat.com/show_bug.cgi?id=2245787
[ 2 ] Bug #2253990 - Import of module fails: undefined symbol: PyUnicode_AS_DATA
https://bugzilla.redhat.com/show_bug.cgi?id=2253990
--------------------------------------------------------------------------------
================================================================================
python-flask-session-0.5.0-1.fc39 (FEDORA-2023-c5209be45e)
Server side session extension for Flask
--------------------------------------------------------------------------------
Update Information:
- Initial Package
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Frantisek Zatloukal <fzatlouk(a)redhat.com> - 0.5.0-1
- Release 0.5.0, Initial Packaging
--------------------------------------------------------------------------------
================================================================================
python-niapy-2.1.0-2.fc39 (FEDORA-2023-d5bf38386f)
Microframework for building nature-inspired algorithms
--------------------------------------------------------------------------------
Update Information:
Update to 2.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Iztok Fister Jr. <iztok(a)iztok-jr-fister.eu> - 2.1.0-1
- Update to 2.1.0
--------------------------------------------------------------------------------
================================================================================
rstudio-2023.12.0+369-1.fc39 (FEDORA-2023-10cb22bb4e)
RStudio base package
--------------------------------------------------------------------------------
Update Information:
Update to 2023.12.0+369
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 I��aki ��car <iucar(a)fedoraproject.org> - 2023.12.0+369-1
- Update to 2023.12.0+369
--------------------------------------------------------------------------------
================================================================================
rust-coreos-installer-0.20.0-1.fc39 (FEDORA-2023-5c81f441fb)
Installer for Fedora CoreOS and RHEL CoreOS
--------------------------------------------------------------------------------
Update Information:
Automatic update for rust-coreos-installer-0.20.0-1.fc39. ##### **Changelog for
rust-coreos-installer** ``` * Wed Dec 20 2023 Packit <hello(a)packit.dev> -
0.20.0-1 - New upstream release * Thu Dec 07 2023 Steven Presti
<spresti(a)redhat.com> - 0.18.0-3 - Remove rdcore patch, and move its logic into
%prep ```
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Packit <hello(a)packit.dev> - 0.20.0-1
- New upstream release
* Thu Dec 7 2023 Steven Presti <spresti(a)redhat.com> - 0.18.0-3
- Remove rdcore patch, and move its logic into %prep
--------------------------------------------------------------------------------
================================================================================
rust-just-1.17.0-1.fc39 (FEDORA-2023-6f7e4cdb41)
Just a command runner
--------------------------------------------------------------------------------
Update Information:
Update to 1.17.0 (#2255312)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Aleksei Bavshin <alebastr(a)fedoraproject.org> - 1.17.0-1
- Update to 1.17.0 (#2255312)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255312 - rust-just-1.17.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255312
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1.71-1.fc39 (FEDORA-2023-301bf51ba3)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream SCAP-Security-Guide-0.1.71 release:
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 19 2023 Vojtech Polasek <vpolasek(a)redhat.com> - 0.1.71-1
- Update to latest upstream SCAP-Security-Guide-0.1.71 release:
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.71
--------------------------------------------------------------------------------
================================================================================
squid-6.6-1.fc39 (FEDORA-2023-ab77331a34)
The Squid proxy caching server
--------------------------------------------------------------------------------
Update Information:
- New version 6.6 - Important security fixes - Removed gopher support
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 13 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 7:6.6-1
- new version 6.6
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2250224 - CVE-2023-46724 squid: Denial of Service in SSL Certificate
validation [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2250224
[ 2 ] Bug #2250229 - TRIAGE CVE-2023-46728 squid: NULL pointer dereference in the gopher
protocol code [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2250229
[ 3 ] Bug #2252919 - CVE-2023-49288 squid: Use-After-Free in the HTTP Collapsed
Forwarding Feature [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2252919
[ 4 ] Bug #2252924 - CVE-2023-49286 squid: Incorrect Check of Function Return Value In
Helper Process management [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2252924
[ 5 ] Bug #2252927 - CVE-2023-49285 squid: Buffer over-read in the HTTP Message
processing feature [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2252927
[ 6 ] Bug #2253417 - squid-6.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2253417
[ 7 ] Bug #2254686 - CVE-2023-50269 squid: denial of service in HTTP request parsing
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2254686
--------------------------------------------------------------------------------
================================================================================
thunderbird-115.6.0-1.fc39 (FEDORA-2023-7dee358171)
Mozilla Thunderbird mail/newsgroup client
--------------------------------------------------------------------------------
Update Information:
Update to 115.6.0 ; -
https://www.mozilla.org/en-
US/security/advisories/mfsa2023-55/ -
https://www.thunderbird.net/en-
US/thunderbird/115.6.0/releasenotes/
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Eike Rathke <erack(a)redhat.com> - 115.6.0-1
- Update to 115.6.0
--------------------------------------------------------------------------------
================================================================================
tigervnc-1.13.1-10.fc39 (FEDORA-2023-1cdaa0fa8a)
A TigerVNC remote display system
--------------------------------------------------------------------------------
Update Information:
Fix cmake builddir creation
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Peter Hutterer <peter.hutterer(a)redhat.com> - 1.13.1-10
- Fix cmake builddir creation
--------------------------------------------------------------------------------
================================================================================
toolbox-0.0.99.5-1.fc39 (FEDORA-2023-c12a2a84a4)
Tool for interactive command line environments on Linux
--------------------------------------------------------------------------------
Update Information:
Overview of changes in 0.0.99.5 =============================== * Add psmisc to
the fedora-toolbox images * Add several new system and unit tests, and make the
existing ones stricter * Add workaround to support configuring the user's
password on some Active Directory set-ups * Be aware of security hardened
mount points marked with 'nosuid,nodev,noexec' * Bump the minimum Bats version
to 1.7.0 to simplify running a subset of the system tests and fix various
warnings * Bump the minimum Go requirement to 1.20 * Bump the minimum
github.com/docker/go-units version to 0.5.0 * Bump the minimum
golang.org/x/sys
version to 0.1.0 for CVE-2022-29526 or GHSA-p782-xgp4-8hr8 * Bump the minimum
golang.org/x/text version to 0.3.8 for CVE-2022-32149 or GHSA-69ch-w2m2-3vjp *
Bump the minimum gopkg.in/yaml.v3 version to 3.0.0 for CVE-2022-28948 or GHSA-
hp87-p4gw-j4gq * Deprecate the --monitor-host option of 'init-container' *
Don't
leak the NAME and VERSION environment variables into containers made from the
fedora-toolbox images * Drop
golang.org/x/term as a dependency * Ensure that
Toolbx containers start even if there aren't sufficient resources for
inotify(7) * Ensure that the fedora-toolbox images retain documentation and
translations * Ensure that toolbox(1) can be built without using podman(1) and
validating subordinate IDs * Fix DNS queries in Toolbx containers made from
images with systemd-resolved, when running on hosts that don't use it * Handle
space-separated input when asking for confirmation * Let the terminal know the
active container also on Fedora Linux Asahi Remix * Offer built-in support for
Arch Linux * Offer built-in support for Ubuntu * Preserve the host's environment
variables for Bash's history facility inside Toolbx containers * Rely on
podman >= 1.6.4 always being present * Report the size of the image that will be
downloaded from a registry * Show welcome message on Fedora Sericea * Support
64-bit RISC-V * Update fallback release to 38 for non-fedora hosts * Unbreak the
line count checks with Bats >= 1.10.0 * Unbreak the manual page checks with GNU
roff >= 1.23 * Various updates to the documentation and manuals Caveat: ======
This update pulls in `subscription-manager` as a weak dependency. You might
want to disable the DNF plugin shipped by `subscription-manager` by editing
`/etc/dnf/plugins/subscription-manager.conf` if you don't want to show up in
your DNF output.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 19 2023 Debarshi Ray <rishi(a)fedoraproject.org> - 0.0.99.5-1
- Update to 0.0.99.5
* Tue Dec 19 2023 Debarshi Ray <rishi(a)fedoraproject.org> - 0.0.99.4-10
- Require openssl(1) for the system tests in the tests subpackage
* Wed Dec 6 2023 Adam Williamson <awilliam(a)redhat.com> - 0.0.99.4-9
- tests subpackage: require httpd-tools for htpasswd
* Tue Dec 5 2023 Debarshi Ray <rishi(a)fedoraproject.org> - 0.0.99.4-8
- Fix the conditionals for 'if RHEL <= 9'
* Thu Nov 30 2023 Debarshi Ray <rishi(a)fedoraproject.org> - 0.0.99.4-7
- Track the active container on Fedora Linux Asahi Remix
* Thu Nov 9 2023 Debarshi Ray <rishi(a)fedoraproject.org> - 0.0.99.4-6
- Drop the custom /etc/containers/toolbox.conf from RHEL 10 onwards
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255336 - toolbox-0.0.99.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255336
--------------------------------------------------------------------------------
================================================================================
vdr-live-3.3.3-1.fc39 (FEDORA-2023-638f9ed85f)
An interactive web interface with HTML5 live stream support for VDR
--------------------------------------------------------------------------------
Update Information:
Update to 3.3.3-1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 20 2023 Martin Gansser <martinkg(a)fedoraproject.org> - 3.3.3-1
- Update to 3.3.3
--------------------------------------------------------------------------------
================================================================================
vkroots-0^20231119git2ceb105-1.fc39 (FEDORA-2023-3dba823934)
A stupid simple method of making Vulkan layers, at home
--------------------------------------------------------------------------------
Update Information:
- Rebase to 3.13.19
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 12 2023 Franti��ek Zatloukal <fzatlouk(a)redhat.com> -
0^20231119git2ceb105-1
- Rebase to 20231119
--------------------------------------------------------------------------------