The following Fedora 38 Security updates need testing: Age URL 153 https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaa2b3d20b containerd-1.6.23-1.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-96090dafaf ncurses-6.4-7.20230520.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-05db4bcbec xorg-x11-server-Xwayland-22.1.9-5.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4bd03c989b python-templated-dictionary-1.4-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-633dc7e183 grub2-2.06-114.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-3fd1bc9276 prometheus-podman-exporter-1.7.0-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6fa5af9ea8 sudo-1.9.15-1.p5.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-c43a6cc3f8 gnutls-3.8.3-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-74667e499e indent-2.2.13-5.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4e80b6ea20 atril-1.26.2-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2d35e47af3 libvirt-9.0.0-4.fc38
The following Fedora 38 Critical Path updates have yet to be approved: Age URL 91 https://bodhi.fedoraproject.org/updates/FEDORA-2023-06dd18eecb go-rpm-macros-3.3.0-1.fc38 go2rpm-1.10.0-1.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2024-772079e799 libdrm-2.4.120-1.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2024-69b786bb11 publicsuffix-list-20240107-1.fc38 13 https://bodhi.fedoraproject.org/updates/FEDORA-2024-c8bc092b2b bluez-5.72-1.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-96090dafaf ncurses-6.4-7.20230520.fc38 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-70321a3500 sssd-2.9.4-1.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d9c7816ece tigervnc-1.13.1-11.fc38 xorg-x11-server-1.20.14-29.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4bd03c989b python-templated-dictionary-1.4-1.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-05db4bcbec xorg-x11-server-Xwayland-22.1.9-5.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6a0d961146 gdb-14.1-2.fc38 10 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e1a6fc4b27 gvisor-tap-vsock-0.7.2-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-633dc7e183 grub2-2.06-114.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-3f63b65e2d container-selinux-2.228.1-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-b1be3e10aa pungi-4.6.0-2.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-5ddc734b59 chkconfig-1.26-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1bf1deddf6 linux-firmware-20240115-2.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0b00de5254 libmaxminddb-1.9.1-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0591d0599b libjcat-0.2.1-1.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-7eedf11e4a btrfs-progs-6.7-1.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2f91c5d15f fedora-appstream-metadata-20231129-3.fc38 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-3465db9b65 readline-8.2-4.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-c0d7aae44c annobin-12.38-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0adaaeb3ae crun-1.14-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2c5d3a1ce7 lvm2-2.03.23-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-61628021cd gtk3-3.24.41-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-c43a6cc3f8 gnutls-3.8.3-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6fa5af9ea8 sudo-1.9.15-1.p5.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-dac6a11bde fwupd-1.9.12-1.fc38 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6cf34c2471 podman-4.9.0-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-73595cca54 gst-devtools-1.22.9-1.fc38 gstreamer1-1.22.9-1.fc38 gstreamer1-doc-1.22.9-1.fc38 gstreamer1-plugin-libav-1.22.9-1.fc38 gstreamer1-plugins-bad-free-1.22.9-1.fc38 gstreamer1-plugins-base-1.22.9-1.fc38 gstreamer1-plugins-good-1.22.9-1.fc38 gstreamer1-plugins-ugly-free-1.22.9-1.fc38 gstreamer1-rtsp-server-1.22.9-1.fc38 gstreamer1-vaapi-1.22.9-1.fc38 python-gstreamer1-1.22.9-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6368f77054 libwpe-1.14.2-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-27cde61998 netavark-1.10.1-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2d35e47af3 libvirt-9.0.0-4.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9fbcfea341 aardvark-dns-1.10.0-1.fc38 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a0825ae645 rust-rpm-sequoia-1.6.0-1.fc38 rust-sequoia-octopus-librnp-1.7.0-1.fc38 rust-sequoia-openpgp-1.18.0-1.fc38 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-96ac9f7948 lightdm-1.32.0-7.fc38 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-dcec42f261 pyproject-rpm-macros-1.12.0-1.fc38 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-71840c5566 audit-3.1.2-8.fc38
The following builds have been pushed to Fedora 38 updates-testing
clamtk-6.18-1.fc38 ddnet-18.0.1-1.fc38 fwts-24.01.00-1.fc38 icecat-115.7.0-1.rh1.fc38 inih-58-1.fc38 kernel-6.6.14-100.fc38 leafpad-0.8.19-1.fc38 libidn2-2.3.7-1.fc38 linux-system-roles-1.70.0-1.fc38 mingw-libidn2-2.3.7-1.fc38 mingw-python-pygments-2.15.1-1.fc38 openscap-report-0.2.7-1.fc38 perl-DBIx-SearchBuilder-1.81-1.fc38 perl-IPC-Run3-0.049-1.fc38 perl-YAML-LibYAML-0.89-1.fc38 php-splitbrain-slika-1.0.6-1.fc38 python-apprise-1.7.2-1.fc38 python-ducc0-0.33.0-1.fc38 python-ogr-0.49.0-1.fc38 python-pillow-9.5.0-3.fc38 python-rpmautospec-0.6.0-2.fc38 python-rpmautospec-core-0.1.4-1.fc38 python-rpmautospec-koji-0.4.0-1.fc38 qemu-7.2.8-1.fc38 qgis-3.28.15-1.fc38 rust-curl-0.4.44-6.fc38 siril-1.2.1-2.fc38 wmenu-0.1.6-1.fc38
Details about builds:
================================================================================ clamtk-6.18-1.fc38 (FEDORA-2024-7aa947b4b8) Easy to use graphical user interface for Clam anti virus -------------------------------------------------------------------------------- Update Information:
### 6.18 - 20240126 --------------- * Remove unnecessary line from #154 fix in App.pm * Change default clamtk user directory to .config/clamtk (Github #161) * Fix for scanned directories not showing in logs * Add top-level heading to README.md * Add af, ca, eu, and lt to desktop file * Fix Punjabi (pa) string in desktop file * Updated language files: Bulgarian (bg), Czech (cs), French (fr) -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Dave M. dave.nerd@gmail.com - 6.18-1 - Updated to release 6.18. --------------------------------------------------------------------------------
================================================================================ ddnet-18.0.1-1.fc38 (FEDORA-2024-5459886a8e) DDraceNetwork, a cooperative racing mod of Teeworlds -------------------------------------------------------------------------------- Update Information:
Automatic update for ddnet-18.0.1-1.fc38. ##### **Changelog for ddnet** ``` * Sat Jan 27 2024 S��rgio Basto sergio@serjux.com - 18.0.1-1 - Update ddnet to 18.0.1 (#2258303) Mon Jan 22 2024 Packit hello@packit.dev - 18.0-1 - Update config_variables.h (Samuele Radici) - Resolves rhbz#2258303 * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 17.4.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 17.4.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild ``` -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 S��rgio Basto sergio@serjux.com - 18.0.1-1 - Update ddnet to 18.0.1 (#2258303) Mon Jan 22 2024 Packit hello@packit.dev - 18.0-1 - Update config_variables.h (Samuele Radici) - Resolves rhbz#2258303 * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 17.4.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 17.4.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2258303 - ddnet-18.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2258303 --------------------------------------------------------------------------------
================================================================================ fwts-24.01.00-1.fc38 (FEDORA-2024-46d7dd4595) Firmware Test Suite -------------------------------------------------------------------------------- Update Information:
Update to 24.01.00 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Peter Robinson pbrobinson@fedoraproject.org - 24.01.00-1 - Update to 24.01.00 * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 21.03.00-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 21.03.00-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 21.03.00-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 21.03.00-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1962504 - fwts-24.01.00 is available https://bugzilla.redhat.com/show_bug.cgi?id=1962504 [ 2 ] Bug #2171494 - fwts: FTBFS in Fedora rawhide/f38 https://bugzilla.redhat.com/show_bug.cgi?id=2171494 [ 3 ] Bug #2225814 - fwts: FTBFS in Fedora rawhide/f39 https://bugzilla.redhat.com/show_bug.cgi?id=2225814 --------------------------------------------------------------------------------
================================================================================ icecat-115.7.0-1.rh1.fc38 (FEDORA-2024-5c372546fa) GNU version of Firefox browser -------------------------------------------------------------------------------- Update Information:
- Release 115.7.0 rh1 -------------------------------------------------------------------------------- ChangeLog:
* Thu Jan 25 2024 Antonio Trande sagitter@fedoraproject.org - 2:115.7.0-1 - Release 115.7.0 * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 2:115.6.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jan 20 2024 Fedora Release Engineering releng@fedoraproject.org - 2:115.6.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ inih-58-1.fc38 (FEDORA-2024-8cf47f1427) Simple INI file parser library -------------------------------------------------------------------------------- Update Information:
# inih v58 * [oss-fuzz] fuzzing support * [Fuzzing] fix harness * [Fuzzing] using cifuzz for PR * Specify C++11 std in meson build * Add `ini_` prefix even to static names so inih can be used as an `#include` -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Robert Scheck robert@fedoraproejct.org - 58-1 - New upstream release 58 (#2260272) * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 57-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jan 20 2024 Fedora Release Engineering releng@fedoraproject.org - 57-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Dec 2 2023 Daan De Meyer daan.j.demeyer@gmail.com - 57-3 - Move INIReader C++ library to inih-cpp subpackage * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 57-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2260272 - inih-58 is available https://bugzilla.redhat.com/show_bug.cgi?id=2260272 --------------------------------------------------------------------------------
================================================================================ kernel-6.6.14-100.fc38 (FEDORA-2024-0f89e13079) The Linux kernel -------------------------------------------------------------------------------- Update Information:
The 6.6.14 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:
* Fri Jan 26 2024 Augusto Caringi acaringi@redhat.com [6.6.14-0] - Add some CVE fixes staged for 6.6.14 (Justin M. Forbes) - Linux v6.6.14 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2254052 - CVE-2023-6536 kernel: NULL pointer dereference in __nvmet_req_complete https://bugzilla.redhat.com/show_bug.cgi?id=2254052 [ 2 ] Bug #2254053 - CVE-2023-6535 kernel: NULL pointer dereference in nvmet_tcp_execute_request https://bugzilla.redhat.com/show_bug.cgi?id=2254053 [ 3 ] Bug #2254054 - CVE-2023-6356 kernel: NULL pointer dereference in nvmet_tcp_build_iovec https://bugzilla.redhat.com/show_bug.cgi?id=2254054 [ 4 ] Bug #2259701 - CVE-2023-46838 xen: netback processing of zero-length transmit fragment https://bugzilla.redhat.com/show_bug.cgi?id=2259701 --------------------------------------------------------------------------------
================================================================================ leafpad-0.8.19-1.fc38 (FEDORA-2024-829c90bdaa) GTK+ based simple text editor -------------------------------------------------------------------------------- Update Information:
Update to v0.8.19 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Artur Frenszek-Iwicki fedora@svgames.pl - 0.8.19-1 - Update to v0.8.19 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2152295 - leafpad-0.8.19 is available https://bugzilla.redhat.com/show_bug.cgi?id=2152295 --------------------------------------------------------------------------------
================================================================================ libidn2-2.3.7-1.fc38 (FEDORA-2024-90a89a02db) Library to support IDNA2008 internationalized domain names -------------------------------------------------------------------------------- Update Information:
# libidn2 2.3.7 (2024-01-27) - Really include `tests/standalone.sh` in tarball. # libidn2 2.3.6 (2024-01-27) - Bump libtool version numbers to reflect API/ABI addition. - Include `tests/standalone.sh` in tarball. # libidn2 2.3.5 (2024-01-27) - Declaration of future API/ABI backwards compatibility stability. GNU libc `dlopen` libidn2 and use the name `libidn2.so.0` for this. Upstream believes that it will be too challenging to ever do hard ABI break that for normal libraries is justified to remove deprecated APIs. Thus upstream decided that they will support the current ABI for a long time. Of course, if really convincing arguments for doing a ABI break appears in the future upstream may re-consider, but take this as a declaration of intent of will and that future ABI breaks should be discussed and co-ordinated with the glibc team first. - Add public APIs for raw Punycode encoding/decoding. Normal applications rarely need this, but it cleans up the code and allow for external testing of the APIs, and resolve https://gitlab.com/libidn/libidn2/-/issues/80 due to earlier use of weak symbols for internal symbols `_idn2_punycode_encode` and `_idn2_punycode_decode`. Upstream will support these internal symbols for backwards compatibility. This allows a clean migration path for code that is still using the internal names. - Bump required gettext version to 0.19.8 for musl-libc. - Un-deprecate `idn2_to_ascii_4i` and make it `NUL` terminate output. The API `idn2_to_ascii_4i` was deprecated in version 2.1.1 released in 2019-02-08. In that release, the API was also modified to not `NUL`-terminate the output. That is contrary to the old libidn2 behaviour, the behaviour of libidn's API `idna_to_ascii_4i`, and the API documentation for the function. Since upstream is not likely to ever break backwards API/ABI compatibility in libidn2, and the deprecated gaurds leads to some trouble (see report in https://gitlab.com/libidn/libidn2/-/merge_requests/93 upstream decided to un- deprecate this function, as supporting it is not costly and the majority of code that cares about conformance has likely been modified. This will fix the error code and `NUL` termination report in https://gitlab.com/libidn/libidn2/-/issues/100. Upstream still encourage you to use the replacement API/ABI idn2_to_ascii_4i2 instead, when appropriate. - Compiler warning improvements. As before, compiler warnings are enabled by default. You may disable them using `./configure --disable-gcc-warnings` or turn them into fatal errors using `./configure --enable-gcc-warnings=error` to add `-Werror` and sensible `-Wno-error='s`. Based on gnulib's manywarnings, see https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html. - tests: Added script `tests/standalone.sh` suitable for integrators. The main purpose is to test a system-installed libidn2 library and `idn2` tool, suitable for distributor checking (a'la Debian's autopkgtest/debci). It may also be used to test a newly built libidn2 outside the usual `make check` infrastructure. To check that your system libidn2 library and `idn2` tool is working, invoke the script with `srcdir` as an environment variable indicating where it can be find the source code for libidn2's `tests/` directory (it will use the directory name where the script is by default): `tests/standalone.sh` If your system libidn2 is too old to pass certain tests, disable them using `STANDALONE_DISABLE` like this: `STANDALONE_DISABLE='*punycode*' tests/standalone.sh` See the script for more parameters. If the libidn2 under testing is too old and has known bugs, that should cause tests to fail, which is intentional. - Various minor build fixes and translation updates. - API and ABI is backwards compatible with the previous version. `idn2_punycode_decode`: Add. `idn2_punycode_encode`: Add. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Robert Scheck robert@fedoraproject.org 2.3.7-1 - Upgrade to 2.3.7 (#2260623) * Sat Jan 27 2024 Robert Scheck robert@fedoraproject.org 2.3.6-1 - Upgrade to 2.3.6 * Sat Jan 27 2024 Robert Scheck robert@fedoraproject.org 2.3.5-1 - Upgrade to 2.3.5 * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 2.3.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 2.3.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 2.3.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2260623 - libidn2-2.3.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2260623 --------------------------------------------------------------------------------
================================================================================ linux-system-roles-1.70.0-1.fc38 (FEDORA-2024-d7d94dbb46) Set of interfaces for unified system management -------------------------------------------------------------------------------- Update Information:
Automatic update for linux-system-roles-1.70.0-1.fc38. ##### **Changelog for linux-system-roles** ``` * Sat Jan 27 2024 Packit hello@packit.dev - 1.70.0-1 - Update to upstream version 1.70.0 * Wed Jan 24 2024 Packit hello@packit.dev - 1.69.0-1 - Update to upstream version 1.69.0 * Wed Jan 24 2024 Packit hello@packit.dev - 1.68.0-1 - Update to upstream version 1.68.0 * Thu Jan 18 2024 Rich Megginson rmeggins@redhat.com - 1.67.0-2 - Add ExcludeArch i686 to fix build issues with ansible-core * Thu Jan 18 2024 Packit hello@packit.dev - 1.67.0-1 - Update to upstream version 1.67.0 * Wed Jan 17 2024 Packit hello@packit.dev - 1.66.0-1 - Update to upstream version 1.66.0 * Thu Jan 11 2024 Packit hello@packit.dev - 1.65.1-1 - Update to upstream version 1.65.1 ``` ---- Automatic update for linux-system-roles-1.69.0-1.fc38. ##### **Changelog for linux-system-roles** ``` * Wed Jan 24 2024 Packit hello@packit.dev - 1.69.0-1 - Update to upstream version 1.69.0 * Wed Jan 24 2024 Packit hello@packit.dev - 1.68.0-1 - Update to upstream version 1.68.0 * Thu Jan 18 2024 Rich Megginson rmeggins@redhat.com - 1.67.0-2 - Add ExcludeArch i686 to fix build issues with ansible-core * Thu Jan 18 2024 Packit hello@packit.dev - 1.67.0-1 - Update to upstream version 1.67.0 * Wed Jan 17 2024 Packit hello@packit.dev - 1.66.0-1 - Update to upstream version 1.66.0 * Thu Jan 11 2024 Packit hello@packit.dev - 1.65.1-1 - Update to upstream version 1.65.1 ``` ---- Automatic update for linux-system- roles-1.68.0-1.fc38. ##### **Changelog for linux-system-roles** ``` * Wed Jan 24 2024 Packit hello@packit.dev - 1.68.0-1 - Update to upstream version 1.68.0 * Thu Jan 18 2024 Rich Megginson rmeggins@redhat.com - 1.67.0-2 - Add ExcludeArch i686 to fix build issues with ansible-core * Thu Jan 18 2024 Packit hello@packit.dev - 1.67.0-1 - Update to upstream version 1.67.0 * Wed Jan 17 2024 Packit hello@packit.dev - 1.66.0-1 - Update to upstream version 1.66.0 * Thu Jan 11 2024 Packit hello@packit.dev - 1.65.1-1 - Update to upstream version 1.65.1 ``` ---- Automatic update for linux-system- roles-1.67.0-1.fc38. ##### **Changelog for linux-system-roles** ``` * Thu Jan 18 2024 Packit hello@packit.dev - 1.67.0-1 - Update to upstream version 1.67.0 * Wed Jan 17 2024 Packit hello@packit.dev - 1.66.0-1 - Update to upstream version 1.66.0 * Thu Jan 11 2024 Packit hello@packit.dev - 1.65.1-1 - Update to upstream version 1.65.1 ``` ---- Automatic update for linux-system- roles-1.66.0-1.fc38. ##### **Changelog for linux-system-roles** ``` * Wed Jan 17 2024 Packit hello@packit.dev - 1.66.0-1 - Update to upstream version 1.66.0 * Thu Jan 11 2024 Packit hello@packit.dev - 1.65.1-1 - Update to upstream version 1.65.1 ``` ---- Automatic update for linux-system- roles-1.65.1-1.fc38. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Packit hello@packit.dev - 1.70.0-1 - Update to upstream version 1.70.0 * Wed Jan 24 2024 Packit hello@packit.dev - 1.69.0-1 - Update to upstream version 1.69.0 * Wed Jan 24 2024 Packit hello@packit.dev - 1.68.0-1 - Update to upstream version 1.68.0 * Thu Jan 18 2024 Rich Megginson rmeggins@redhat.com - 1.67.0-2 - Add ExcludeArch i686 to fix build issues with ansible-core * Thu Jan 18 2024 Packit hello@packit.dev - 1.67.0-1 - Update to upstream version 1.67.0 * Wed Jan 17 2024 Packit hello@packit.dev - 1.66.0-1 - Update to upstream version 1.66.0 * Thu Jan 11 2024 Packit hello@packit.dev - 1.65.1-1 - Update to upstream version 1.65.1 --------------------------------------------------------------------------------
================================================================================ mingw-libidn2-2.3.7-1.fc38 (FEDORA-2024-cad695c24b) MinGW Windows Internationalized Domain Name 2008 support library -------------------------------------------------------------------------------- Update Information:
# libidn2 2.3.7 (2024-01-27) - Really include `tests/standalone.sh` in tarball. # libidn2 2.3.6 (2024-01-27) - Bump libtool version numbers to reflect API/ABI addition. - Include `tests/standalone.sh` in tarball. # libidn2 2.3.5 (2024-01-27) - Declaration of future API/ABI backwards compatibility stability. GNU libc `dlopen` libidn2 and use the name `libidn2.so.0` for this. Upstream believes that it will be too challenging to ever do hard ABI break that for normal libraries is justified to remove deprecated APIs. Thus upstream decided that they will support the current ABI for a long time. Of course, if really convincing arguments for doing a ABI break appears in the future upstream may re-consider, but take this as a declaration of intent of will and that future ABI breaks should be discussed and co-ordinated with the glibc team first. - Add public APIs for raw Punycode encoding/decoding. Normal applications rarely need this, but it cleans up the code and allow for external testing of the APIs, and resolve https://gitlab.com/libidn/libidn2/-/issues/80 due to earlier use of weak symbols for internal symbols `_idn2_punycode_encode` and `_idn2_punycode_decode`. Upstream will support these internal symbols for backwards compatibility. This allows a clean migration path for code that is still using the internal names. - Bump required gettext version to 0.19.8 for musl-libc. - Un-deprecate `idn2_to_ascii_4i` and make it `NUL` terminate output. The API `idn2_to_ascii_4i` was deprecated in version 2.1.1 released in 2019-02-08. In that release, the API was also modified to not `NUL`-terminate the output. That is contrary to the old libidn2 behaviour, the behaviour of libidn's API `idna_to_ascii_4i`, and the API documentation for the function. Since upstream is not likely to ever break backwards API/ABI compatibility in libidn2, and the deprecated gaurds leads to some trouble (see report in https://gitlab.com/libidn/libidn2/-/merge_requests/93 upstream decided to un- deprecate this function, as supporting it is not costly and the majority of code that cares about conformance has likely been modified. This will fix the error code and `NUL` termination report in https://gitlab.com/libidn/libidn2/-/issues/100. Upstream still encourage you to use the replacement API/ABI idn2_to_ascii_4i2 instead, when appropriate. - Compiler warning improvements. As before, compiler warnings are enabled by default. You may disable them using `./configure --disable-gcc-warnings` or turn them into fatal errors using `./configure --enable-gcc-warnings=error` to add `-Werror` and sensible `-Wno-error='s`. Based on gnulib's manywarnings, see https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html. - tests: Added script `tests/standalone.sh` suitable for integrators. The main purpose is to test a system-installed libidn2 library and `idn2` tool, suitable for distributor checking (a'la Debian's autopkgtest/debci). It may also be used to test a newly built libidn2 outside the usual `make check` infrastructure. To check that your system libidn2 library and `idn2` tool is working, invoke the script with `srcdir` as an environment variable indicating where it can be find the source code for libidn2's `tests/` directory (it will use the directory name where the script is by default): `tests/standalone.sh` If your system libidn2 is too old to pass certain tests, disable them using `STANDALONE_DISABLE` like this: `STANDALONE_DISABLE='*punycode*' tests/standalone.sh` See the script for more parameters. If the libidn2 under testing is too old and has known bugs, that should cause tests to fail, which is intentional. - Various minor build fixes and translation updates. - API and ABI is backwards compatible with the previous version. `idn2_punycode_decode`: Add. `idn2_punycode_encode`: Add. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Robert Scheck robert@fedoraproject.org 2.3.7-1 - Upgrade to 2.3.7 (#2260624) * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 2.3.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 2.3.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 2.3.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2260624 - mingw-libidn2-2.3.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2260624 --------------------------------------------------------------------------------
================================================================================ mingw-python-pygments-2.15.1-1.fc38 (FEDORA-2024-db87ce2a47) MinGW Windows Python Pygments library -------------------------------------------------------------------------------- Update Information:
Update to 2.15.1. -------------------------------------------------------------------------------- ChangeLog:
* Wed May 10 2023 Sandro Mani manisandro@gmail.com - 2.15.1-1 - Update to 2.15.1 * Fri Feb 17 2023 Sandro Mani manisandro@gmail.com - 2.14.0-1 - Update to 2.14.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2259081 - TRIAGE CVE-2022-40896 mingw-python-pygments: pygments: ReDoS in pygments [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2259081 --------------------------------------------------------------------------------
================================================================================ openscap-report-0.2.7-1.fc38 (FEDORA-2024-da76eb0c37) A tool for generating human-readable reports from (SCAP) XCCDF and ARF results -------------------------------------------------------------------------------- Update Information:
0.2.7 (Jan Rodak) -------------------------------------------------------------------------------- ChangeLog:
* Fri Jan 26 2024 Packit hello@packit.dev - 0.2.7-1 - 0.2.7 (Jan Rodak) - Add tool tip to search bar (Jan Rodak) - Enable search by reference (Jan Rodak) - Add generation search infromation (Jan Rodak) - Use macro for generation of list items (Jan Rodak) - Create two-tier display of Evaluation Characteristics (Jan Rodak) - Add title (Jan Rodak) - Reduce complexity of function generate_referenced_endpoints (Jan Rodak) - Use default dict (Jan Rodak) - Fix JSON schema (Jan Rodak) - Use correct orthography of addresses types acronyms (Jan Rodak) - Add function to update known references (Jan Rodak) - Change the presentation of referenced endpoints (Jan Rodak) - Add new elements (Jan Rodak) - Add onclick function (Jan Rodak) - Add map of OVAL endpoints (Jan Rodak) - Add target addresses to report (Jan Rodak) - Add target addresses to model (Jan Rodak) - Fix width of pre element (Jan Rodak) * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 0.2.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 0.2.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ perl-DBIx-SearchBuilder-1.81-1.fc38 (FEDORA-2024-8358c5d7e9) Encapsulate SQL queries and rows in simple perl objects -------------------------------------------------------------------------------- Update Information:
Upstream update -------------------------------------------------------------------------------- ChangeLog:
* Fri Jan 26 2024 Ralf Cors��pius corsepiu@fedoraproject.org - 1.81-1 - Update to 1.81. --------------------------------------------------------------------------------
================================================================================ perl-IPC-Run3-0.049-1.fc38 (FEDORA-2024-502e04604c) Run a subprocess in batch mode -------------------------------------------------------------------------------- Update Information:
Upstream update. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Fedora Release Engineering releng@fedoraproject.org - 0.049-1 - Update to 0.049. - Do not apply 0001-test-and-fix-for-RT-52317-Calling-run3-garbles-STDIN.patch --------------------------------------------------------------------------------
================================================================================ perl-YAML-LibYAML-0.89-1.fc38 (FEDORA-2024-261f0e86ef) Perl YAML Serialization using XS and libyaml -------------------------------------------------------------------------------- Update Information:
This update adds support for dumping Perl core booleans. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Paul Howarth paul@city-fan.org - 1:0.89-1 - Update to 0.89 (rhbz#2260595) - Recognise core booleans on Perl 5.36+ at dump time (GH#114) * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 1:0.88-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 1:0.88-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 1:0.88-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 11 2023 Jitka Plesnikova jplesnik@redhat.com - 1:0.88-2 - Perl 5.38 rebuild * Fri May 12 2023 Paul Howarth paul@city-fan.org - 1:0.88-1 - Update to 0.88 - REVERT "Turn off internal POK flag for number scalars" * Fri May 5 2023 Paul Howarth paul@city-fan.org - 1:0.87-1 - Update to 0.87 - Turn off internal POK flag for number scalars - Avoid use of deprecated patch syntax -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2260595 - perl-YAML-LibYAML-0.89 is available https://bugzilla.redhat.com/show_bug.cgi?id=2260595 --------------------------------------------------------------------------------
================================================================================ php-splitbrain-slika-1.0.6-1.fc38 (FEDORA-2024-cdb2fabe39) Image handling library for PHP -------------------------------------------------------------------------------- Update Information:
Update to v1.0.6 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Artur Frenszek-Iwicki fedora@svgames.pl - 1.0.6-1 - Update to v1.0.6 --------------------------------------------------------------------------------
================================================================================ python-apprise-1.7.2-1.fc38 (FEDORA-2024-b34bd218fa) A simple wrapper to many popular notification services used today -------------------------------------------------------------------------------- Update Information:
Updated to v1.7.2 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Chris Caron lead2gold@gmail.com - 1.7.2 - Updated to v1.7.2 * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 1.6.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 1.6.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Oct 15 2023 Chris Caron lead2gold@gmail.com - 1.6.0 - Updated to v1.6.0 --------------------------------------------------------------------------------
================================================================================ python-ducc0-0.33.0-1.fc38 (FEDORA-2024-38d8fbff55) Programming tools for numerical computation -------------------------------------------------------------------------------- Update Information:
Update to 0.33.0 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Mattia Verga mattia.verga@proton.me - 0.33.0-1 - Update to 0.33.0 (fedora#2258035) * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 0.32.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering releng@fedoraproject.org - 0.32.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ python-ogr-0.49.0-1.fc38 (FEDORA-2024-7eeabbe191) One API for multiple git forges -------------------------------------------------------------------------------- Update Information:
Automatic update for python-ogr-0.49.0-1.fc38. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Packit hello@packit.dev - 0.49.0-1 - For Pagure there are 2 new methods available: one for getting users with specified access rights and one for getting members of a group. (#834) --------------------------------------------------------------------------------
================================================================================ python-pillow-9.5.0-3.fc38 (FEDORA-2024-4ef97ebbfc) Python image processing library -------------------------------------------------------------------------------- Update Information:
Backport fix for CVE-2023-50447. ---- Update patch for CVE-2023-44271 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Sandro Mani manisandro@gmail.com - 9.5.0-3 - Backport fix for CVE CVE-2023-50447 * Tue Nov 21 2023 Sandro Mani manisandro@gmail.com - 9.5.0-2 - Update patch for CVE-2023-44271 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2247821 - CVE-2023-44271 python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2247821 [ 2 ] Bug #2259480 - TRIAGE CVE-2023-50447 python-pillow: pillow:Arbitrary Code Execution via the environment parameter [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2259480 --------------------------------------------------------------------------------
================================================================================ python-rpmautospec-0.6.0-2.fc38 (FEDORA-2024-7994817014) Package and CLI tool to generate release fields and changelogs -------------------------------------------------------------------------------- Update Information:
This is an upstream bugfix and enhancement release. Salient changes: - Allow bumping releases with a new magic comment and combining magic comments (e.g. `[skip changelog, bump release: 5]` to skip this commit from producing an RPM changelog entry and bump the release number to at least 5). - Finalize splitting off `rpmautospec-core` and `rpmautospec-koji` into their own source packages. - Improve performance with and fix bugs related to parsing spec files. - Don���t process already processed spec files. - Deal better with spec files which can���t be parsed. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Nils Philippsen nils@redhat.com - 0.6.0-1 - Update to 0.6.0 * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 0.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering releng@fedoraproject.org - 0.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Tue Jan 16 2024 Nils Philippsen nils@redhat.com - 0.5.1-1 - Update to 0.5.1 * Mon Jan 15 2024 Nils Philippsen nils@redhat.com - 0.5.0-1 - Update to 0.5.0 * Thu Jan 11 2024 Nils Philippsen nils@redhat.com - 0.4.2-1 - Update to 0.4.2 * Mon Jan 8 2024 Nils Philippsen nils@redhat.com - 0.4.1-2 - Update patch for old poetry versions * Fri Dec 15 2023 Nils Philippsen nils@redhat.com - 0.4.1-1 - Update to 0.4.1 * Sun Dec 3 2023 Yaakov Selkowitz yselkowi@redhat.com - 0.4.0-2 - Drop unwanted python-pytest-cov dependency * Thu Nov 30 2023 Nils Philippsen nils@redhat.com - 0.4.0-1 - Update to 0.4.0 --------------------------------------------------------------------------------
================================================================================ python-rpmautospec-core-0.1.4-1.fc38 (FEDORA-2024-7994817014) Minimum functionality for rpmautospec -------------------------------------------------------------------------------- Update Information:
This is an upstream bugfix and enhancement release. Salient changes: - Allow bumping releases with a new magic comment and combining magic comments (e.g. `[skip changelog, bump release: 5]` to skip this commit from producing an RPM changelog entry and bump the release number to at least 5). - Finalize splitting off `rpmautospec-core` and `rpmautospec-koji` into their own source packages. - Improve performance with and fix bugs related to parsing spec files. - Don���t process already processed spec files. - Deal better with spec files which can���t be parsed. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 9 2024 Nils Philippsen nils@redhat.com - 0.1.4-1 - Update to 0.1.4 --------------------------------------------------------------------------------
================================================================================ python-rpmautospec-koji-0.4.0-1.fc38 (FEDORA-2024-7994817014) Koji plugin for packages using rpmautospec -------------------------------------------------------------------------------- Update Information:
This is an upstream bugfix and enhancement release. Salient changes: - Allow bumping releases with a new magic comment and combining magic comments (e.g. `[skip changelog, bump release: 5]` to skip this commit from producing an RPM changelog entry and bump the release number to at least 5). - Finalize splitting off `rpmautospec-core` and `rpmautospec-koji` into their own source packages. - Improve performance with and fix bugs related to parsing spec files. - Don���t process already processed spec files. - Deal better with spec files which can���t be parsed. -------------------------------------------------------------------------------- ChangeLog:
* Fri Dec 1 2023 Nils Philippsen nils@redhat.com - 0.4.0-1 - Initial import --------------------------------------------------------------------------------
================================================================================ qemu-7.2.8-1.fc38 (FEDORA-2024-c7eeec6f0e) QEMU is a FAST! processor emulator -------------------------------------------------------------------------------- Update Information:
Rebase to qemu 7.2.8 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jan 24 2024 Cole Robinson crobinso@redhat.com - 7.2.8-1 - Rebase to qemu 7.2.8 --------------------------------------------------------------------------------
================================================================================ qgis-3.28.15-1.fc38 (FEDORA-2024-9deec2d156) A user friendly Open Source Geographic Information System -------------------------------------------------------------------------------- Update Information:
Update to qgis-3.28.15. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jan 23 2024 Sandro Mani manisandro@gmail.com - 3.28.15-1 - Update to 3.28.15 --------------------------------------------------------------------------------
================================================================================ rust-curl-0.4.44-6.fc38 (FEDORA-2024-3ac209657c) Rust bindings to libcurl for making HTTP requests -------------------------------------------------------------------------------- Update Information:
Skip some tests that started to hang indefinitely or fail recently - fixes FTBFS issues. -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Fabio Valentini decathorpe@gmail.com - 0.4.44-6 - Skip some tests that either hang indefinitely or fail * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 0.4.44-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 0.4.44-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ siril-1.2.1-2.fc38 (FEDORA-2024-a1128db8d5) Astronomical image processing software -------------------------------------------------------------------------------- Update Information:
Update to 1.2.1 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Mattia Verga mattia.verga@proton.me - 1.2.1-1 - Update to 1.2.1 (fedora#2260367) * Sat Jan 27 2024 Fedora Release Engineering releng@fedoraproject.org - 1.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Jan 10 2024 Mattia Verga mattia.verga@proton.me - 1.2.0-2 - Rebuilt for libwcs soname bump --------------------------------------------------------------------------------
================================================================================ wmenu-0.1.6-1.fc38 (FEDORA-2024-6cf5463e98) Efficient dynamic menu for Wayland -------------------------------------------------------------------------------- Update Information:
Efficient dynamic menu for Wayland - https://sr.ht/~adnano/wmenu -------------------------------------------------------------------------------- ChangeLog:
* Sat Jan 27 2024 Aleksei Bavshin alebastr@fedoraproject.org - 0.1.6-1 - Initial import (#2251438) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2251438 - Review Request: wmenu - Efficient dynamic menu for Wayland https://bugzilla.redhat.com/show_bug.cgi?id=2251438 --------------------------------------------------------------------------------
test-reports@lists.fedoraproject.org
-
updates＠fedoraproject.org