The following Fedora 38 Security updates need testing: Age URL 217 https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaa2b3d20b containerd-1.6.23-1.fc38 63 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4ef97ebbfc python-pillow-9.5.0-3.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f1ae7b7ac5 webkitgtk-2.44.0-2.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-53b69fdd40 emacs-29.3-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8409b5fa8e podman-4.9.4-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-51e55a7065 micropython-1.22.2-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e95585dfb9 kernel-6.7.11-100.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-85b6c6fa92 libopenmpt-0.7.6-1.fc38

The following Fedora 38 Critical Path updates have yet to be approved: Age URL 15 https://bodhi.fedoraproject.org/updates/FEDORA-2024-5a6028442d vim-9.1.181-1.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f1ae7b7ac5 webkitgtk-2.44.0-2.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4c0816e727 libtirpc-1.3.4-1.rc3.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-83b47f54e5 rpcbind-1.2.6-4.rc3.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1ad45eaec7 bluez-5.73-2.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-79e4e864ba bolt-0.9.7-1.fc38 10 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e0cc4e593b kobo-0.36.0-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-52e04ffd96 koji-1.34.0-3.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-53b69fdd40 emacs-29.3-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-ebee8ef7fd libbsd-0.12.2-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-cb1a0626a3 librepo-1.17.1-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-370124bf58 nss-3.99.0-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0a62247f0e libblockdev-2.29-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8409b5fa8e podman-4.9.4-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d2860c0bd5 passt-0^20240326.g4988e2b-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e95585dfb9 kernel-6.7.11-100.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-85b6c6fa92 libopenmpt-0.7.6-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f0f1a3ac1a dnf-4.19.2-1.fc38 libdnf-0.73.1-1.fc38 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-c07fefe19a zstd-1.5.6-1.fc38

The following builds have been pushed to Fedora 38 updates-testing

bitlbee-facebook-1.2.2-9.fc38 c-ares-1.28.1-1.fc38 goverlay-1.0-2.fc38 perl-Spreadsheet-XLSX-0.18-1.fc38 pipx-1.5.0-1.fc38 proftpd-1.3.8b-5.fc38 rb_libtorrent-2.0.10-1.fc38

Details about builds:

================================================================================ bitlbee-facebook-1.2.2-9.fc38 (FEDORA-2024-83105ca971) Facebook protocol plugin for BitlBee -------------------------------------------------------------------------------- Update Information:

Test whether BitlBee can load plugin during startup (#2272092) -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Robert Scheck robert@fedoraproject.org 1.2.2-9 - Test whether BitlBee can load plugin during startup (#2272092) * Tue Jan 23 2024 Fedora Release Engineering releng@fedoraproject.org - 1.2.2-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 1.2.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.2.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272092 - facebook.so plugin fails to load: undefined symbol: SET_INVALID https://bugzilla.redhat.com/show_bug.cgi?id=2272092 --------------------------------------------------------------------------------

================================================================================ c-ares-1.28.1-1.fc38 (FEDORA-2024-d351e7318e) A library that performs asynchronous DNS operations -------------------------------------------------------------------------------- Update Information:

1.28.1 fixes a significant bug in 1.28.0. Update to 1.28.0. Also fixes CVE-2024-25629. -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Tom Callaway spot@fedoraproject.org - 1.28.1-1 - update to 1.28.1 * Fri Mar 29 2024 Tom Callaway spot@fedoraproject.org - 1.28.0-1 - update to 1.28.0 * Tue Jan 23 2024 Fedora Release Engineering releng@fedoraproject.org - 1.25.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 1.25.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2265714 - CVE-2024-25629 c-ares: Out of bounds read in ares__read_line() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2265714 --------------------------------------------------------------------------------

================================================================================ goverlay-1.0-2.fc38 (FEDORA-2024-eaa0c1aec4) Project that aims to create a Graphical UI to help manage Linux overlays -------------------------------------------------------------------------------- Update Information:

Automatic update for goverlay-1.0-2.fc38. Changelog for goverlay * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.0-2 - build: lazarus-lcl-qt5 only for >=f39 * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.0-1 - chore: Update to 1.0 * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 0.9-9 - build: Add Packit config * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 0.9-8 - license: Convert to SPDX * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 0.9-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jan 20 2024 Fedora Release Engineering releng@fedoraproject.org - 0.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Aug 24 2023 Artem Polishchuk ego.cordatus@gmail.com - 0.9-5 - build: Add BR: lazarus-lcl-qt5 (rh#2225909) * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.0-2 - build: lazarus-lcl-qt5 only for >=f39 * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.0-1 - chore: Update to 1.0 * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 0.9-9 - build: Add Packit config * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 0.9-8 - license: Convert to SPDX * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 0.9-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jan 20 2024 Fedora Release Engineering releng@fedoraproject.org - 0.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Aug 24 2023 Artem Polishchuk ego.cordatus@gmail.com - 0.9-5 - build: Add BR: lazarus-lcl-qt5 (rh#2225909) * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ perl-Spreadsheet-XLSX-0.18-1.fc38 (FEDORA-2024-217b7b1eb8) Perl extension for reading Microsoft Excel 2007 files -------------------------------------------------------------------------------- Update Information:

Spreadsheet::XLSX 0.18 Fix RT #117166: unformatted date values can no longer be retrieved -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Robert Scheck robert@fedoraproject.org 0.18-1 - Upgrade to 0.18 (#2268717) * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 0.17-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 0.17-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 0.17-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2268717 - perl-Spreadsheet-XLSX-0.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=2268717 --------------------------------------------------------------------------------

================================================================================ pipx-1.5.0-1.fc38 (FEDORA-2024-9d905f0600) Install and run Python applications in isolated environments -------------------------------------------------------------------------------- Update Information:

1.5.0 - 2024-03-29 Features Add --global option to pipx commands. This will run the action in a global scope and affect environment for all system users. (#754) Add a --fetch-missing-python flag to all commands that accept a --python flag. When combined, this will automatically download a standalone copy of the requested python version if it's not already available on the user's system. (#1242) Add commands to list and prune standalone interpreters (#1248) Revert platform-specific directories on MacOS and Windows They were leading to a lot of issues with Windows sandboxing and spaces in shebangs on MacOS. (#1257) Add --install option to pipx upgrade command. This will install the package given as argument if it is not already installed. (#1262) Bugfixes Correctly resolve home directory in pipx directory environment variables. (#94) Pass through pip arguments when upgrading shared libraries. (#964) Fix installation issues when files in the working directory interfere with venv creation process. (#1091) Report correct filename in tracebacks with pipx run <scriptname> (#1191) Let self-managed pipx uninstall itself on windows again. (#1203) Fix path resolution for python executables looked up in PATH on windows. (#1205) Display help message when pipx install is run without arguments. (#1266) Fix crashes due to superfluous -q flags by discarding exceeding values (#1283) Improved Documentation Update the completion instructions for zipapp users. (#1072) Update the example for running scripts with dependencies. (#1227) Update the docs for package developers on the use of configuration using pyproject.toml (#1229) Add installation instructions for Fedora (#1239) Update the examples for installation from local dir (#1277) Fix inconsistent wording in pipx install command description. (#1307) Deprecations and Removals Deprecate --skip-maintenance flag of pipx list; maintenance is now never executed there (#1256) Misc #1296 -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Packit hello@packit.dev - 1.5.0-1 - [packit] 1.5.0 upstream release - Resolves: rhbz#2272320 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272320 - pipx-1.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272320 --------------------------------------------------------------------------------

================================================================================ proftpd-1.3.8b-5.fc38 (FEDORA-2024-23137adcf5) Flexible, stable and highly-configurable FTP server -------------------------------------------------------------------------------- Update Information:

This updates adds mod_proxy in its own sub-package, proftpd-proxy. -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Paul Howarth paul@city-fan.org - 1.3.8b-5 - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051) - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677) * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 1.3.8b-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 1.3.8b-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 1 2024 Paul Howarth paul@city-fan.org - 1.3.8b-2 - Use libsodium to provide ed25519 key support for mod_sftp (#2256340) - Update logrotate snippet to use try-reload-or-restart rather than reload for distributions with systemd 229 or later (PR#3) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272051 - please include proftpd-mod_proxy (and a small bugfix) https://bugzilla.redhat.com/show_bug.cgi?id=2272051 --------------------------------------------------------------------------------

================================================================================ rb_libtorrent-2.0.10-1.fc38 (FEDORA-2024-f895f0b9ed) A C++ BitTorrent library aiming to be the best alternative -------------------------------------------------------------------------------- Update Information:

Update -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Leigh Scott leigh123linux@gmail.com - 2.0.10-1 - Upgrade to 2.0.10 * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 2.0.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering releng@fedoraproject.org - 2.0.9-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jan 18 2024 Jonathan Wakely jwakely@redhat.com - 2.0.9-4 - Rebuilt for Boost 1.83 * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 2.0.9-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jun 15 2023 Python Maint python-maint@redhat.com - 2.0.9-2 - Rebuilt for Python 3.12 --------------------------------------------------------------------------------