The following Fedora 39 Security updates need testing: Age URL 13 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9e9f53d01d xen-4.17.2-8.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-22f1e313dd podman-tui-1.0.0-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-b458482d48 ghc-base64-0.4.2.4-28.fc39 ghc-hakyll-4.16.2.0-4.fc39 ghc-isocline-1.0.9-28.fc39 ghc-toml-parser-1.3.2.0-29.fc39 gitit-0.15.1.1-6.fc39 pandoc-3.1.3-29.fc39 pandoc-cli-3.1.3-29.fc39 patat-0.11.0.0-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-fa7b758114 apache-commons-configuration-2.10.1-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a8a4ce2864 prometheus-podman-exporter-1.11.0-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-99337cc4a1 suricata-6.0.17-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8890015ff3 seamonkey-2.53.18.2-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-de10068888 emacs-29.3-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-dd32f390b3 podman-4.9.4-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-34aa24af35 micropython-1.22.2-1.fc39

The following Fedora 39 Critical Path updates have yet to be approved: Age URL 15 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0385be9862 audit-3.1.3-1.fc39 13 https://bodhi.fedoraproject.org/updates/FEDORA-2024-ac4e52fdda ostree-2024.5-1.fc39 13 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9e9f53d01d xen-4.17.2-8.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-edbb091cad rpm-ostree-2024.4-3.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6f543c8a5f skopeo-1.15.0-1.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-426ecf1fd0 bluez-5.73-2.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9bdf343ef9 bolt-0.9.7-1.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f9685bc9ea perl-HTML-Parser-3.82-1.fc39 7 https://bodhi.fedoraproject.org/updates/FEDORA-2024-23a6f46ab8 kobo-0.36.0-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8e1ba83d6b glibc-2.38-17.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-5d8bd9cfbd expat-2.6.2-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a98df0c66a edk2-20240214-7.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-28f7760be1 libeconf-0.5.2-2.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-07f60f9ace epiphany-45.3-1.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8def80f690 at-spi2-core-2.50.2-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2f58ad2e7f libgweather4-4.4.2-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-de10068888 emacs-29.3-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-98436d62ba annobin-12.46-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9d4f9f4d2c libphonenumber-8.13.33-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-18e6c40d49 libbsd-0.12.2-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4bdced432c glib-networking-2.78.1-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f6c5ed6d15 gdb-14.2-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8157f34d31 dnf-plugins-core-4.6.0-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d81aa4a097 librepo-1.17.1-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0515dbe60f nss-3.99.0-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8d97d749e7 libblockdev-3.1.1-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-dd32f390b3 podman-4.9.4-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-259beb3a11 passt-0^20240326.g4988e2b-1.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-3a8d53c92c python-qrcode-7.4.2-12.fc39

The following builds have been pushed to Fedora 39 updates-testing

bcm283x-firmware-20240229-3.dc94391.fc39 buildah-1.35.2-1.fc39 calc-2.15.0.6-3.fc39 chromium-123.0.6312.86-1.fc39 cockpit-machines-310-1.fc39 cockpit-ostree-201-1.fc39 cockpit-podman-86-1.fc39 darktable-4.6.1-2.fc39 flatseal-2.1.2-1.fc39 free42-3.1.6-1.fc39 fuse-sshfs-3.7.3-9.fc39 git-credential-azure-0.3.0-1.fc39 intel-compute-runtime-24.09.28717.12-1.fc39 intel-igc-1.0.16510.0-1.fc39 jl-0.1.0-2.fc39 mate-themes-3.22.24-3.fc39 netdata-1.45.1-1.fc39 nispor-1.2.18-1.fc39 nodejs20-20.12.0-1.fc39 osbuild-113-1.fc39 perl-CPAN-Plugin-Sysdeps-0.77-1.fc39 python-damo-2.2.7-1.fc39 python3.10-3.10.14-1.fc39 qmc2-0.243-7.fc39 redict-7.3.0~rc1-1.fc39 vokoscreenNG-4.1.0-2.fc39 yubikey-manager-5.4.0-1.20240327git7b1b5a7.fc39

Details about builds:

================================================================================ bcm283x-firmware-20240229-3.dc94391.fc39 (FEDORA-2024-6dd5b62267) Firmware for the Broadcom bcm283x/bcm271x used in the Raspberry Pi -------------------------------------------------------------------------------- Update Information:

Update RPi400 to upstream fix -------------------------------------------------------------------------------- ChangeLog:

* Tue Mar 19 2024 Peter Robinson pbrobinson@fedoraproject.org - 20240229-3.dc94391 - Update RPi400 to upstream fix * Mon Mar 18 2024 Peter Robinson pbrobinson@fedoraproject.org - 20240229-2.dc94391 - Update RPi400 firmware DTB - Reorder config.txt to be closer to upstream * Thu Feb 15 2024 Peter Robinson pbrobinson@fedoraproject.org - 20240229-1.dc94391 - Update to latest firmware - Rebuild RPi4 FW DT to fix dma40 sound/display issue * Thu Feb 15 2024 Peter Robinson pbrobinson@fedoraproject.org - 20240214-2.f01fa5f - Update to latest firmware * Thu Feb 15 2024 Peter Robinson pbrobinson@fedoraproject.org - 20240214-1.b208f8c - Update to latest firmware * Sat Nov 25 2023 Peter Robinson pbrobinson@fedoraproject.org - 20231123-1.93d3f79 - Update to latest firmware - Updates to config.txt * Fri Oct 20 2023 Peter Robinson pbrobinson@fedoraproject.org - 20231017-1.ce3a0b4 - Update to latest firmware - Updates for config.txt and minor fixes -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2246428 - No display on monitor on Server images on some Raspberry Pi variants due to bug in firmware DTB https://bugzilla.redhat.com/show_bug.cgi?id=2246428 --------------------------------------------------------------------------------

================================================================================ buildah-1.35.2-1.fc39 (FEDORA-2024-8f7933faaf) A command line tool used for creating OCI Images -------------------------------------------------------------------------------- Update Information:

Automatic update for buildah-1.35.2-1.fc39. Changelog for buildah * Tue Mar 26 2024 Packit hello@packit.dev - 1.35.2-1 - [packit] 1.35.2 upstream release * Mon Mar 18 2024 Packit hello@packit.dev - 1.35.1-1 - [packit] 1.35.1 upstream release Automatic update for buildah-1.35.1-1.fc39. Changelog for buildah * Mon Mar 18 2024 Packit hello@packit.dev - 1.35.1-1 - [packit] 1.35.1 upstream release -------------------------------------------------------------------------------- ChangeLog:

* Tue Mar 26 2024 Packit hello@packit.dev - 1.35.2-1 - [packit] 1.35.2 upstream release * Mon Mar 18 2024 Packit hello@packit.dev - 1.35.1-1 - [packit] 1.35.1 upstream release --------------------------------------------------------------------------------

================================================================================ calc-2.15.0.6-3.fc39 (FEDORA-2024-916b8e0284) Arbitrary precision arithmetic system and calculator -------------------------------------------------------------------------------- Update Information:

Work around library linking issue, so package will actually install. -------------------------------------------------------------------------------- ChangeLog:

* Tue Mar 26 2024 Matthew Miller mattdm@mattdm.org - 2.15.0.6-3 - Renable custom library by default * Tue Mar 26 2024 Matthew Miller mattdm@mattdm.org - 2.15.0.6-2 - no longer exclude s390 * Sun Feb 25 2024 Matthew Miller mattdm@mattdm.org - 2.15.0.6-1 - upstream 2.15.0.6 * Thu Feb 1 2024 Matthew Miller mattdm@mattdm.org - 2.15.0.4-3 - add build dep on `man` * Thu Feb 1 2024 Matthew Miller mattdm@mattdm.org - 2.15.0.4-2 - update to new upstream release 2.15.0.4 * Thu Feb 1 2024 Matthew Miller mattdm@mattdm.org - 2.15.0.4-1 - new minor upstream release 2.15.0.4 * Tue Jan 23 2024 Fedora Release Engineering releng@fedoraproject.org - 2.15.0.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 2.15.0.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Dec 15 2023 Matthew Miller mattdm@mattdm.org - 2.15.0.2-1 - new minor upstream release 2.15.0.2 * Fri Nov 10 2023 Matthew Miller mattdm@mattdm.org - 2.15.0.1-2 - steps to not build the custom lib have changed * Wed Nov 8 2023 Matthew Miller mattdm@mattdm.org - 2.15.0.1-1 - upstream 2.15.0.1 -- new version with a lot of small changes -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2269953 - calc is not installable https://bugzilla.redhat.com/show_bug.cgi?id=2269953 --------------------------------------------------------------------------------

================================================================================ chromium-123.0.6312.86-1.fc39 (FEDORA-2024-0bb0e8f2a0) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information:

update to 123.0.6312.86 Critical CVE-2024-2883: Use after free in ANGLE High CVE-2024-2885: Use after free in Dawn High CVE-2024-2886: Use after free in WebCodecs High CVE-2024-2887: Type Confusion in WebAssembly -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Than Ngo than@redhat.com - 123.0.6312.86-2 - update to 123.0.6312.86 * Critical CVE-2024-2883: Use after free in ANGLE * High CVE-2024-2885: Use after free in Daw * High CVE-2024-2886: Use after free in WebCodecs * High CVE-2024-2887: Type Confusion in WebAssembly -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271851 - CVE-2024-2883 chromium: Use after free in ANGLE [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271851 [ 2 ] Bug #2271856 - CVE-2024-2885 chromium: Use after free in Dawn [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271856 [ 3 ] Bug #2271862 - CVE-2024-2886 chromium: Use after free in WebCodecs [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271862 [ 4 ] Bug #2271868 - CVE-2024-2887 chromium: Type Confusion in WebAssembly [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2271868 --------------------------------------------------------------------------------

================================================================================ cockpit-machines-310-1.fc39 (FEDORA-2024-0167d7cad6) Cockpit user interface for virtual machines -------------------------------------------------------------------------------- Update Information:

Automatic update for cockpit-machines-310-1.fc39. Changelog for cockpit-machines * Wed Mar 27 2024 Packit hello@packit.dev - 310-1 - Bug fixes and performance improvements -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Packit hello@packit.dev - 310-1 - Bug fixes and performance improvements --------------------------------------------------------------------------------

================================================================================ cockpit-ostree-201-1.fc39 (FEDORA-2024-80a6144d2d) Cockpit user interface for rpm-ostree -------------------------------------------------------------------------------- Update Information:

Automatic update for cockpit-ostree-201-1.fc39. Changelog for cockpit-ostree * Wed Mar 27 2024 Packit hello@packit.dev - 1:201-1 - Show OCI container origin -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Packit hello@packit.dev - 1:201-1 - Show OCI container origin --------------------------------------------------------------------------------

================================================================================ cockpit-podman-86-1.fc39 (FEDORA-2024-c5474a3190) Cockpit component for Podman containers -------------------------------------------------------------------------------- Update Information:

Automatic update for cockpit-podman-86-1.fc39. Changelog for cockpit-podman * Wed Mar 27 2024 Packit hello@packit.dev - 86-1 - Bug fixes and performance improvements -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Packit hello@packit.dev - 86-1 - Bug fixes and performance improvements --------------------------------------------------------------------------------

================================================================================ darktable-4.6.1-2.fc39 (FEDORA-2024-df7ef4ac52) Utility to organize and develop raw images -------------------------------------------------------------------------------- Update Information:

enables back aarch64 architecture -------------------------------------------------------------------------------- ChangeLog:

* Mon Mar 11 2024 Germano Massullo germano.massullo@gmail.com - 4.6.1-2 - aarch64 re-enabled --------------------------------------------------------------------------------

================================================================================ flatseal-2.1.2-1.fc39 (FEDORA-2024-b8f1fc71bd) Manage Flatpak permissions -------------------------------------------------------------------------------- Update Information:

Updated Hungarian translation -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Yaakov Selkowitz yselkowi@redhat.com - 2.1.2-1 - Update to 2.1.2 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271729 - flatseal-2.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271729 --------------------------------------------------------------------------------

================================================================================ free42-3.1.6-1.fc39 (FEDORA-2024-253e116a9b) 42S Calculator Simulator -------------------------------------------------------------------------------- Update Information:

Accuracy improvements: https://thomasokken.com/free42/history.html -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Yaakov Selkowitz yselkowi@redhat.com - 1:3.1.6-1 - Update to 3.1.6 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271700 - free42-3.1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271700 --------------------------------------------------------------------------------

================================================================================ fuse-sshfs-3.7.3-9.fc39 (FEDORA-2024-1a5053a02c) FUSE-Filesystem to access remote filesystems via SSH -------------------------------------------------------------------------------- Update Information:

Lower openssh-askpass dep to recommends Add requires openssh-askpass. -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Dusty Mabe dusty@dustymabe.com - 3.7.3-9 - Lower openssh-askpass dep to recommends * Mon Mar 25 2024 Vasiliy Glazov vascom2@gmail.com - 3.7.3-8 - Add requires openssh-askpass * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 3.7.3-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 3.7.3-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Oct 21 2023 Peter Lemenkov lemenkov@gmail.com - 3.7.3-5 - Check GPG signature -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271402 - ssh-askpass missing when using pkcs11: as IdentityFile in .ssh/config https://bugzilla.redhat.com/show_bug.cgi?id=2271402 --------------------------------------------------------------------------------

================================================================================ git-credential-azure-0.3.0-1.fc39 (FEDORA-2024-a45928659c) Git credential helper for Azure Repos -------------------------------------------------------------------------------- Update Information:

Automatic update for git-credential-azure-0.3.0-1.fc39. Changelog for git-credential-azure * Wed Mar 27 2024 Packit hello@packit.dev - 0.3.0-1 - [packit] 0.3.0 upstream release - Resolves: rhbz#2271735 * Sun Sep 03 2023 M Hickford mirth.hickford@gmail.com - 0.2.3-4 - create dir * Sun Sep 03 2023 M Hickford mirth.hickford@gmail.com - 0.2.3-3 - install man page -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Packit hello@packit.dev - 0.3.0-1 - [packit] 0.3.0 upstream release - Resolves: rhbz#2271735 * Sun Sep 3 2023 M Hickford mirth.hickford@gmail.com - 0.2.3-4 - create dir * Sun Sep 3 2023 M Hickford mirth.hickford@gmail.com - 0.2.3-3 - install man page -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271735 - git-credential-azure-0.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271735 --------------------------------------------------------------------------------

================================================================================ intel-compute-runtime-24.09.28717.12-1.fc39 (FEDORA-2024-1f4cbbf715) Compute API support for Intel graphics -------------------------------------------------------------------------------- Update Information:

intel-igc-1.0.16510.0 intel-compute-runtime-24.09.28717.12 (and backport of CL/GL sharing) -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Frantisek Zatloukal fzatlouk@redhat.com - 24.09.28717.12-1 - intel-compute-runtime-24.09.28717.12 (fixes RHBZ#2242512 and RHBZ#2261248) * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 23.35.27191.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jan 20 2024 Fedora Release Engineering releng@fedoraproject.org - 23.35.27191.9-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ intel-igc-1.0.16510.0-1.fc39 (FEDORA-2024-1f4cbbf715) Intel Graphics Compiler for OpenCL -------------------------------------------------------------------------------- Update Information:

intel-igc-1.0.16510.0 intel-compute-runtime-24.09.28717.12 (and backport of CL/GL sharing) -------------------------------------------------------------------------------- ChangeLog:

* Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 1.0.15313.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jan 20 2024 Fedora Release Engineering releng@fedoraproject.org - 1.0.15313.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ jl-0.1.0-2.fc39 (FEDORA-2024-9235d6f063) Functional sed for JSON -------------------------------------------------------------------------------- Update Information:

Functional sed for JSON https://hackage.haskell.org/package/jl -------------------------------------------------------------------------------- ChangeLog:

* Tue Mar 26 2024 Jens Petersen petersen@redhat.com - 0.1.0-2 - generate manpage with help2man (#2232543) * Thu Aug 17 2023 Jens Petersen petersen@redhat.com - 0.1.0-1 - spec file generated by cabal-rpm-2.1.3 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2232543 - Review Request: jl - Functional sed for JSON https://bugzilla.redhat.com/show_bug.cgi?id=2232543 --------------------------------------------------------------------------------

================================================================================ mate-themes-3.22.24-3.fc39 (FEDORA-2024-64e5a0ff03) MATE Desktop themes -------------------------------------------------------------------------------- Update Information:

add https://github.com/mate-desktop/mate-themes/pull/305 -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Wolfgang Ulbrich fedora@raveit.de - 3.22.24-3 - add https://github.com/mate-desktop/mate-themes/pull/305 --------------------------------------------------------------------------------

================================================================================ netdata-1.45.1-1.fc39 (FEDORA-2024-ac75f800ee) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information:

Update from upstream -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Didier Fabert didier.fabert@gmail.com 1.45.1-1 - Update from upstream * Thu Mar 21 2024 Didier Fabert didier.fabert@gmail.com 1.45.0-1 - Update from upstream -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2270902 - netdata-1.45.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2270902 --------------------------------------------------------------------------------

================================================================================ nispor-1.2.18-1.fc39 (FEDORA-2024-d7e715f950) Unified interface for Linux network state querying -------------------------------------------------------------------------------- Update Information:

Automatic update for nispor-1.2.18-1.fc39. Changelog for nispor * Wed Mar 27 2024 Packit hello@packit.dev - 1.2.18-1 - [packit] 1.2.18 upstream release - Resolves rhbz#2262486 -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Packit hello@packit.dev - 1.2.18-1 - [packit] 1.2.18 upstream release - Resolves rhbz#2262486 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2262486 - nispor-1.2.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=2262486 --------------------------------------------------------------------------------

================================================================================ nodejs20-20.12.0-1.fc39 (FEDORA-2024-31becf3519) JavaScript runtime -------------------------------------------------------------------------------- Update Information:

2024-03-26, Version 20.12.0 'Iron' (LTS), @richardlau Notable Changes crypto: implement crypto.hash() This patch introduces a helper crypto.hash() that computes a digest from the input at one shot. This can be 1.2-2x faster than the object-based createHash() for smaller inputs (<= 5MB) that are readily available (not streamed) and incur less memory overhead since no intermediate objects will be created. const crypto = require('node:crypto'); // Hashing a string and return the result as a hex-encoded string. const string = 'Node.js'; // 10b3493287f831e81a438811a1ffba01f8cec4b7 console.log(crypto.hash('sha1', string)); Contributed by Joyee Cheung in #51044. Loading and parsing environment variables process.loadEnvFile(path): Use this function to load the .env file. If no path is specified, it automatically loads the .env file in the current directory. Example: process.loadEnvFile(). Load a specific .env file by specifying its path. Example: process.loadEnvFile('./development.env'). util.parseEnv(content): Use this function to parse an existing string containing environment variable assignments. Example usage: require('node:util').parseEnv('HELLO=world'). Contributed by Yagiz Nizipli in #51476. New connection attempt events Three new events were added in the net.createConnection flow: connectionAttempt: Emitted when a new connection attempt is established. In case of Happy Eyeballs, this might emitted multiple times. connectionAttemptFailed: Emitted when a connection attempt failed. In case of Happy Eyeballs, this might emitted multiple times. connectionAttemptTimeout: Emitted when a connection attempt timed out. In case of Happy Eyeballs, this will not be emitted for the last attempt. This is not emitted at all if Happy Eyeballs is not used. Additionally, a previous bug has been fixed where a new connection attempt could have been started after a previous one failed and after the connection was destroyed by the user. This led to a failed assertion. Contributed by Paolo Insogna in #51045. Permission Model changes Node.js 20.12.0 comes with several fixes for the experimental permission model and two new semver-minor commits. We're adding a new flag --allow-addons to enable addon usage when using the Permission Model. $ node --experimental-permission --allow-addons Contributed by Rafael Gonzaga in #51183 And relative paths are now supported through the --allow-fs-* flags. Therefore, with this release one can use: $ node --experimental-permission --allow-fs-read=./index.js To give only read access to the entrypoint of the application. Contributed by Rafael Gonzaga and Carlos Espa in #50758. sea: support embedding assets Users can now include assets by adding a key-path dictionary to the configuration as the assets field. At build time, Node.js would read the assets from the specified paths and bundle them into the preparation blob. In the generated executable, users can retrieve the assets using the sea.getAsset() and sea.getAssetAsBlob() API. { "main": "/path/to/bundled/script.js", "output": "/path/to/write/the/generated/blob.blob", "assets": { "a.jpg": "/path/to/a.jpg", "b.txt": "/path/to/b.txt" } } The single-executable application can access the assets as follows: const { getAsset } = require('node:sea'); // Returns a copy of the data in an ArrayBuffer const image = getAsset('a.jpg'); // Returns a string decoded from the asset as UTF8. const text = getAsset('b.txt', 'utf8'); // Returns a Blob containing the asset without copying. const blob = getAssetAsBlob('a.jpg'); Contributed by Joyee Cheung in #50960. Support configurable snapshot through --build-snapshot-config flag We are adding a new flag --build-snapshot-config to configure snapshots through a custom JSON configuration file. $ node --build-snapshot-config=/path/to/myconfig.json When using this flag, additional script files provided on the command line will not be executed and instead be interpreted as regular command line arguments. These changes were contributed by Joyee Cheung and Anna Henningsen in #50453 Text Styling util.styleText(format, text): This function returns a formatted text considering the format passed. A new API has been created to format text based on util.inspect.colors, enabling you to style text in different colors (such as red, blue, ...) and emphasis (italic, bold, ...). const { styleText } = require('node:util'); const errorMessage = styleText('red', 'Error! Error!'); console.log(errorMessage); Contributed by Rafael Gonzaga in #51850. vm: support using the default loader to handle dynamic import() This patch adds support for using vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER as the importModuleDynamically option in all vm APIs that take this option except vm.SourceTextModule. This allows users to have a shortcut to support dynamic import() in the compiled code without missing the compilation cache if they don't need customization of the loading process. We emit an experimental warning when the import() is actually handled by the default loader through this option instead of requiring --experimental-vm-modules. const { Script, constants } = require('node:vm'); const { resolve } = require('node:path'); const { writeFileSync } = require('node:fs'); // Write test.js and test.txt to the directory where the current script // being run is located. writeFileSync(resolve(__dirname, 'test.mjs'), 'export const filename = "./test.json";'); writeFileSync(resolve(__dirname, 'test.json'), '{"hello": "world"}'); // Compile a script that loads test.mjs and then test.json // as if the script is placed in the same directory. const script = new Script( `(async function() { const { filename } = await import('./test.mjs'); return import(filename, { with: { type: 'json' } }) })();`, { filename: resolve(__dirname, 'test-with-default.js'), importModuleDynamically: constants.USE_MAIN_CONTEXT_DEFAULT_LOADER, }); // { default: { hello: 'world' } } script.runInThisContext().then(console.log); Contributed by Joyee Cheung in #51244. Root certificates updated to NSS 3.98 Certificates added: Telekom Security TLS ECC Root 2020 Telekom Security TLS RSA Root 2023 Certificates removed: Security Communication Root CA Updated dependencies acorn updated to 8.11.3. ada updated to 2.7.6. base64 updated to 0.5.2. brotli updated to 1.1.0. c-ares updated to 1.27.0. corepack updated to 0.25.2. ICU updated to 74.2. Includes CLDR 44.1 and Unicode 15.1. nghttp2 updated to 1.60.0. npm updated to 10.5.0. Fixes a regression in signals not being passed onto child processes. simdutf8 updated to 4.0.8. Timezone updated to 2024a. zlib updated to 1.3.0.1-motley-40e35a7. Include Provides: nodejs20-* for non-versioned packages. -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Stephen Gallagher sgallagh@redhat.com - 1:20.12.0-1 - Update to 20.12.0 * Thu Mar 21 2024 Stephen Gallagher sgallagh@redhat.com - 1:20.11.1-3 - Have default versions provide the versioned name * Thu Feb 15 2024 Stephen Gallagher sgallagh@redhat.com - 1:20.11.1-2 - Temporarily add Node.js 20 as default for F41 and RHEL 11+ * Wed Feb 14 2024 Stephen Gallagher sgallagh@redhat.com - 1:20.11.1-1 - Update to 20.11.1 * Wed Feb 14 2024 Lukas Javorsky ljavorsk@redhat.com - 1:20.11.0-9 - Add missing bundled libraries to the spec template * Wed Feb 14 2024 Lukas Javorsky ljavorsk@redhat.com - 1:20.11.0-8 - Add helping script for missing bundled packages, fix typo * Fri Feb 9 2024 Honza Horak hhorak@redhat.com - 1:20.11.0-7 - Update licenses in the template spec * Fri Feb 9 2024 Honza Horak hhorak@redhat.com - 1:20.11.0-6 - Fix typos and add info where to find license-validate * Fri Feb 9 2024 Honza Horak hhorak@redhat.com - 1:20.11.0-5 - SPDX migration and introduction of bundled_licenses.py * Wed Feb 7 2024 Zephyr Lykos git@mochaa.ws - 1:20.11.0-4 - Fix loading unbundled undici builtin (rhbz#2259320) * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 1:20.11.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 1:20.11.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Jan 10 2024 Stephen Gallagher sgallagh@redhat.com - 1:20.11.0-1 - Update to 20.11.0 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2257692 - nodejs20-20.12.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2257692 --------------------------------------------------------------------------------

================================================================================ osbuild-113-1.fc39 (FEDORA-2024-286e59124e) A build system for OS images -------------------------------------------------------------------------------- Update Information:

Automatic update for osbuild-113-1.fc39. Changelog for osbuild * Wed Mar 27 2024 Packit hello@packit.dev - 113-1 Changes with 113 ---------------- * Reformat all JSON files for consistency (#1687) * Author: Achilleas Koutsou, Reviewers: Pawe�� Po��awski, Simon de Vlieger * Revert "osbuild: ensure loop.Loop() has the required device node" (#1646) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Simon de Vlieger * Update snapshots to 20240313 (#1662) * Author: SchutzBot, Reviewers: Brian C. Lane, Simon de Vlieger * doc: document the new json-sequence monitor (HMS-3258) (#1659) * Author: Michael Vogt, Reviewers: Simon Steinbei��, Simon de Vlieger * osbuild: ensure /var/tmp is a real directory (#1673) * Author: Michael Vogt, Reviewers: Gianluca Zuccarelli, Simon de Vlieger * osbuild: first step towards stage separation - allow meta.json for stages (#1618) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger * osbuild: make the entire /etc/selinux avaialble for the buildroot (HMS-3453) (#1675) * Author: Michael Vogt, Reviewers: Colin Walters, Ond��ej Budai, Simon de Vlieger * sources: transform() is only used in the curl sources, remove from ABC and rename (#1667) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger * stage/systemd-unit-create:new systemd unit config params (#1666) * Author: Sayan Paul, Reviewers: Achilleas Koutsou, Simon de Vlieger * stages(selinux): add option exclude_paths (#1670) * Author: Michael Vogt, Reviewers: Pawe�� Po��awski, Simon de Vlieger * stages: add functional user expiredate tests (#1664) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane * stages: add support for options to bootc-install-to-fs (#1658) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Florian Sch��ller, Simon de Vlieger * stages: allow bootc.install-to-filesystem work without selinux (HMS-3453) (#1682) * Author: Michael Vogt, Reviewers: Ond��ej Budai, Simon de Vlieger * stages: convert schemas to external (#1663) * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli * test: Add stage test trigger to makefile (#1660) * Author: Pawe�� Po��awski, Reviewers: Achilleas Koutsou, Simon de Vlieger * test: return container_id in `make_container` (#1657) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger * tests: migrate manifest tests (#1622) * Author: tkoscieln, Reviewers: Alexander Todorov, Jakub Rusz * tox.ini: update autopep8/pyocdestyle to support py3.12 (#1661) * Author: Michael Vogt, Reviewers: Ond��ej Budai, Simon de Vlieger * util: Consolidate parse functions into util (#1615) * Author: Renata Ravanelli, Reviewers: Michael Vogt, Simon de Vlieger * workflow: re-enable parallel runs to improve speed of test_stages and test_assemblers (#1683) * Author: Florian Sch��ller, Reviewers: Michael Vogt, Pawe�� Po��awski ��� Somewhere on the Internet, 2024-03-27 -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Packit hello@packit.dev - 113-1 Changes with 113 ---------------- * Reformat all JSON files for consistency (#1687) * Author: Achilleas Koutsou, Reviewers: Pawe�� Po��awski, Simon de Vlieger * Revert "osbuild: ensure loop.Loop() has the required device node" (#1646) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Simon de Vlieger * Update snapshots to 20240313 (#1662) * Author: SchutzBot, Reviewers: Brian C. Lane, Simon de Vlieger * doc: document the new json-sequence monitor (HMS-3258) (#1659) * Author: Michael Vogt, Reviewers: Simon Steinbei��, Simon de Vlieger * osbuild: ensure /var/tmp is a real directory (#1673) * Author: Michael Vogt, Reviewers: Gianluca Zuccarelli, Simon de Vlieger * osbuild: first step towards stage separation - allow meta.json for stages (#1618) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger * osbuild: make the entire /etc/selinux avaialble for the buildroot (HMS-3453) (#1675) * Author: Michael Vogt, Reviewers: Colin Walters, Ond��ej Budai, Simon de Vlieger * sources: transform() is only used in the curl sources, remove from ABC and rename (#1667) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger * stage/systemd-unit-create:new systemd unit config params (#1666) * Author: Sayan Paul, Reviewers: Achilleas Koutsou, Simon de Vlieger * stages(selinux): add option exclude_paths (#1670) * Author: Michael Vogt, Reviewers: Pawe�� Po��awski, Simon de Vlieger * stages: add functional user expiredate tests (#1664) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane * stages: add support for options to bootc-install-to-fs (#1658) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Florian Sch��ller, Simon de Vlieger * stages: allow bootc.install-to-filesystem work without selinux (HMS-3453) (#1682) * Author: Michael Vogt, Reviewers: Ond��ej Budai, Simon de Vlieger * stages: convert schemas to external (#1663) * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli * test: Add stage test trigger to makefile (#1660) * Author: Pawe�� Po��awski, Reviewers: Achilleas Koutsou, Simon de Vlieger * test: return container_id in `make_container` (#1657) * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger * tests: migrate manifest tests (#1622) * Author: tkoscieln, Reviewers: Alexander Todorov, Jakub Rusz * tox.ini: update autopep8/pyocdestyle to support py3.12 (#1661) * Author: Michael Vogt, Reviewers: Ond��ej Budai, Simon de Vlieger * util: Consolidate parse functions into util (#1615) * Author: Renata Ravanelli, Reviewers: Michael Vogt, Simon de Vlieger * workflow: re-enable parallel runs to improve speed of test_stages and test_assemblers (#1683) * Author: Florian Sch��ller, Reviewers: Michael Vogt, Pawe�� Po��awski

��� Somewhere on the Internet, 2024-03-27 --------------------------------------------------------------------------------

================================================================================ perl-CPAN-Plugin-Sysdeps-0.77-1.fc39 (FEDORA-2024-5529fa7c8b) CPAN client plugin for installing system dependencies -------------------------------------------------------------------------------- Update Information:

This release fixes handling renamed RPM packages. -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Petr Pisar ppisar@redhat.com - 0.77-1 - 0.77 bump -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271097 - perl-CPAN-Plugin-Sysdeps-0.77 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271097 --------------------------------------------------------------------------------

================================================================================ python-damo-2.2.7-1.fc39 (FEDORA-2024-a39b60b0f4) Data Access Monitoring Operator -------------------------------------------------------------------------------- Update Information:

v2.2.7 Support region box right-side aligning (--region_box_align) of 'damo show' Cleanup code v2.2.6 Cleanup code -------------------------------------------------------------------------------- ChangeLog:

* Tue Mar 26 2024 Packit hello@packit.dev - 2.2.7-1 - Update to 2.2.7 - Resolves rhbz#2271542 * Tue Mar 19 2024 Packit hello@packit.dev - 2.2.6-1 - Update to 2.2.6 - Resolves rhbz#2270231 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271542 - python-damo-2.2.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271542 --------------------------------------------------------------------------------

================================================================================ python3.10-3.10.14-1.fc39 (FEDORA-2024-2d5e612d63) Version 3.10 of the Python interpreter -------------------------------------------------------------------------------- Update Information:

Update to 3.10.14 -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 20 2024 Tom���� Hrn��iar thrnciar@redhat.com - 3.10.14-1 - Update to 3.10.14 --------------------------------------------------------------------------------

================================================================================ qmc2-0.243-7.fc39 (FEDORA-2024-9cc614c1ab) M.A.M.E. Catalog / Launcher II -------------------------------------------------------------------------------- Update Information:

Update git patches to their merged versions -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Julian Sikorski belegdol@fedoraproject.org - 0.243-7 - Improvements to upstream git patches: - Add patches updating build configurations - Update patches based on PRs to their respective final versions --------------------------------------------------------------------------------

================================================================================ redict-7.3.0~rc1-1.fc39 (FEDORA-2024-accfc0e13f) A persistent key-value database -------------------------------------------------------------------------------- Update Information:

initial package build -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 24 2024 Jonathan Wright jonathan@almalinux.org - 7.3.0~rc1-1 - Initial package build, release candidate -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271615 - Review Request: redict - A persistent key-value database https://bugzilla.redhat.com/show_bug.cgi?id=2271615 --------------------------------------------------------------------------------

================================================================================ vokoscreenNG-4.1.0-2.fc39 (FEDORA-2024-e3ef1cc707) Powerful screencast creator to record the screen -------------------------------------------------------------------------------- Update Information:

See commit history -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 Artem Polishchuk ego.cordatus@gmail.com - 4.1.0-1 - build: Update to 4.1.0 (rh#2271769) --------------------------------------------------------------------------------

================================================================================ yubikey-manager-5.4.0-1.20240327git7b1b5a7.fc39 (FEDORA-2024-d9043aa7a8) Python library and command line tool for configuring a YubiKey -------------------------------------------------------------------------------- Update Information:

rhbz#2271838 -------------------------------------------------------------------------------- ChangeLog:

* Wed Mar 27 2024 gbcox gbcox@bzb.us - 5.4.0-1 - rhbz#2271838 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271838 - yubikey-manager - upstream release 5.4.0 https://bugzilla.redhat.com/show_bug.cgi?id=2271838 --------------------------------------------------------------------------------