The following Fedora 39 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d577604e6a
python3.12-3.12.1-2.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-20feb865d8
podman-tui-0.15.0-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ab77331a34 squid-6.6-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7141950083
filezilla-3.66.4-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-153404713b
proftpd-1.3.8b-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-e77300e4b5
python-asyncssh-2.14.2-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-817ecc703f
xerces-c-3.2.5-1.fc39
The following Fedora 39 Critical Path updates have yet to be approved:
Age URL
58
https://bodhi.fedoraproject.org/updates/FEDORA-2023-60969403d0
go-rpm-macros-3.3.0-1.fc39 go2rpm-1.10.0-1.fc39
24
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0a947db1d0
mock-core-configs-39.3-1.fc39
17
https://bodhi.fedoraproject.org/updates/FEDORA-2023-8fd0890f05 dnf5-5.1.9-1.fc39
14
https://bodhi.fedoraproject.org/updates/FEDORA-2023-68ad6ada3b
podman-4.8.2-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-028fe2a793 kobo-0.35.0-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-3930eeaf4a pungi-4.6.0-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2023-69a7a5775c
tomcat-9.0.83-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae7f558922
guestfs-tools-1.51.7-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-db59cf7cee
libphonenumber-8.13.27-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-2cfc4d36f1
libguestfs-1.51.10-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d577604e6a
python3.12-3.12.1-2.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-212cdaad25 brltty-6.6-9.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-148369da83
gtk3-3.24.39-1.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1cdaa0fa8a
tigervnc-1.13.1-10.fc39
5
https://bodhi.fedoraproject.org/updates/FEDORA-2023-c12a2a84a4
toolbox-0.0.99.5-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-1874834244
dhcpcd-10.0.6-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7746a9c9eb
java-17-openjdk-17.0.9.0.9-3.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d9bca05694
gstreamer1-plugins-bad-free-1.22.8-2.fc39 gstreamer1-plugins-ugly-free-1.22.8-2.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2023-33bc615d45
edk2-20231122-14.fc39
1
https://bodhi.fedoraproject.org/updates/FEDORA-2023-f814176c4d gjs-1.78.1-2.fc39
mozjs115-115.6.0-1.fc39
The following builds have been pushed to Fedora 39 updates-testing
cppcheck-2.13.0-1.fc39
mate-media-1.26.2-1.fc39
nanoflann-1.5.3-1.fc39
nsd-4.8.0-1.fc39
partclone-0.3.27-2.fc39
qmapshack-1.17.1-1.fc39
slurm-22.05.11-2.fc39
texstudio-4.7.2-1.fc39
xdg-desktop-portal-hyprland-1.2.6-1.fc39
Details about builds:
================================================================================
cppcheck-2.13.0-1.fc39 (FEDORA-2023-3c74dc3d4b)
Tool for static C/C++ code analysis
--------------------------------------------------------------------------------
Update Information:
Update to 2.13.0
--------------------------------------------------------------------------------
ChangeLog:
* Sat Dec 23 2023 Wolfgang St��ggl <c72578(a)yahoo.de> - 2.13.0-1
- Update to 2.13.0
--------------------------------------------------------------------------------
================================================================================
mate-media-1.26.2-1.fc39 (FEDORA-2023-827cb10a09)
MATE media programs
--------------------------------------------------------------------------------
Update Information:
- update to 1.26.2 - fix German translation
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 25 2023 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.2-1
- update to 1.26.2
- fix german translation
* Fri Nov 24 2023 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.1-3
- fix building with libxml-2.12.0
--------------------------------------------------------------------------------
================================================================================
nanoflann-1.5.3-1.fc39 (FEDORA-2023-ea3220f17d)
A C++11 header-only library for Nearest Neighbor (NN) search with KD-trees
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 25 2023 topazus <topazus(a)outlook.com> - 1.5.3-1
- initial import; rhbz#2255796
--------------------------------------------------------------------------------
================================================================================
nsd-4.8.0-1.fc39 (FEDORA-2023-bf9ac871e9)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Update to 4.8.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 25 2023 Fabio Alessandro Locati <fale(a)fedoraproject.org> - 4.8.0-1
- Update to 4.8.0
- Resolves: rhbz#2252122
--------------------------------------------------------------------------------
================================================================================
partclone-0.3.27-2.fc39 (FEDORA-2023-262c54f3b1)
Utility to clone and restore a partition
--------------------------------------------------------------------------------
Update Information:
- Build `fail-mbr.bin` on all architectures (using cross-compile)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 25 2023 Robert Scheck <robert(a)fedoraproject.org> 0.3.27-2
- Build fail-mbr.bin on all architectures (using cross-compile)
--------------------------------------------------------------------------------
================================================================================
qmapshack-1.17.1-1.fc39 (FEDORA-2023-c6b879586c)
GPS mapping and management tool
--------------------------------------------------------------------------------
Update Information:
- updated to 1.17.1 - see
https://github.com/Maproom/qmapshack/blob/dev/changelog.txt for details
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 14 2023 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
1.17.1-1
- Update to 1.17.1 (rhbz#2254510)
* Wed Nov 15 2023 Sandro Mani <manisandro(a)gmail.com> - 1.17.0-2
- Rebuild (gdal)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254510 - qmapshack-1.17.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2254510
--------------------------------------------------------------------------------
================================================================================
slurm-22.05.11-2.fc39 (FEDORA-2023-9a74d212f8)
Simple Linux Utility for Resource Management
--------------------------------------------------------------------------------
Update Information:
- Update to 22.05.11 - Closes CVE-2023-49933 through CVE-2023-49938
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Neil Hanlon <neil(a)fedoraproject.org> - 22.05.11-1
- Update to 22.05.11 (#2155310)
- Closes CVE-2023-49933 through CVE-2023-49938; RHBZ bugs:
- #2254496, #2254499, #2254502, #2254505, #2254507, #2254509
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2155310 - slurm-23.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2155310
[ 2 ] Bug #2254496 - CVE-2023-49938 slurm: incorrect access control [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2254496
[ 3 ] Bug #2254499 - CVE-2023-49937 slurm: double free [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2254499
[ 4 ] Bug #2254502 - CVE-2023-49936 slurm: null pointer dereference [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2254502
[ 5 ] Bug #2254505 - CVE-2023-49935 slurm: Incorrect Access Control [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2254505
[ 6 ] Bug #2254507 - CVE-2023-49934 slurm: SQL injection [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2254507
[ 7 ] Bug #2254509 - CVE-2023-49933 slurm: Improper Enforcement of Message Integrity
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2254509
--------------------------------------------------------------------------------
================================================================================
texstudio-4.7.2-1.fc39 (FEDORA-2023-939d646ecf)
A feature-rich editor for LaTeX documents
--------------------------------------------------------------------------------
Update Information:
- update to 4.7.2 -
https://github.com/texstudio-
org/texstudio/blob/master/utilities/manual/source/CHANGELOG.md
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 25 2023 Johannes Lips <hannes(a)fedoraproject.org> 4.7.2-1
- update to 4.7.2
--------------------------------------------------------------------------------
================================================================================
xdg-desktop-portal-hyprland-1.2.6-1.fc39 (FEDORA-2023-92574dd4d4)
xdg-desktop-portal backend for hyprland
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.6
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 25 2023 Pavel Solovev <daron439(a)gmail.com> - 1.2.6-1
- Update to 1.2.6
--------------------------------------------------------------------------------