https://bugzilla.redhat.com/show_bug.cgi?id=2266182 --- Comment #1 from Zack Miele <zmiele(a)redhat.com&gt; --- Use the following template to for the 'fedpkg update' request to submit an update for this issue as it contains the top-level parent bug(s) as well as this tracking bug. This will ensure that all associated bugs get updated when new packages are pushed to stable. ===== # bugfix, security, enhancement, newpackage (required) type=security # low, medium, high, urgent (required) severity=medium # testing, stable request=testing # Bug numbers: 1234,9876 bugs=2266180,2266181,2266182 # Description of your update notes=Security fix for [PUT CVEs HERE] # Enable request automation based on the stable/unstable karma thresholds autokarma=True stable_karma=3 unstable_karma=-3 # Automatically close bugs when this marked as stable close_bugs=True # Suggest that users restart after update suggest_reboot=False ====== Additionally, you may opt to use the bodhi web interface to submit updates: https://bodhi.fedoraproject.org/updates/new -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2266182 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...

https://bugzilla.redhat.com/show_bug.cgi?id=2266182 Zack Miele <zmiele(a)redhat.com&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |2266181 (CVE-2024-25081) Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2266181 [Bug 2266181] CVE-2024-25081 fontforge: command injection via crafted filenames. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2266182

https://bugzilla.redhat.com/show_bug.cgi?id=2266182 Parag Nemade <pnemade(a)redhat.com&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kevin(a)scrye.com |pnemade(a)redhat.com -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2266182

https://bugzilla.redhat.com/show_bug.cgi?id=2266182 Fedora Update System <updates(a)fedoraproject.org&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |ON_QA --- Comment #3 from Fedora Update System <updates(a)fedoraproject.org&gt; --- FEDORA-2024-e01ef71e64 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-e01ef71e64` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-e01ef71e64 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2266182 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...