The following Fedora 39 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-dd32f390b3 podman-4.9.4-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-34aa24af35 micropython-1.22.2-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2fcce4ffb7 kernel-6.7.11-200.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-90b3798199 libopenmpt-0.7.6-1.fc39

The following Fedora 39 Critical Path updates have yet to be approved: Age URL 19 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0385be9862 audit-3.1.3-1.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-426ecf1fd0 bluez-5.73-2.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9bdf343ef9 bolt-0.9.7-1.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f9685bc9ea perl-HTML-Parser-3.82-1.fc39 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-5d8bd9cfbd expat-2.6.2-1.fc39 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a98df0c66a edk2-20240214-7.fc39 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-28f7760be1 libeconf-0.5.2-2.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2f58ad2e7f libgweather4-4.4.2-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-98436d62ba annobin-12.46-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9d4f9f4d2c libphonenumber-8.13.33-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-18e6c40d49 libbsd-0.12.2-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4bdced432c glib-networking-2.78.1-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f6c5ed6d15 gdb-14.2-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-07f60f9ace epiphany-45.3-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8def80f690 at-spi2-core-2.50.2-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d81aa4a097 librepo-1.17.1-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0515dbe60f nss-3.99.0-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8d97d749e7 libblockdev-3.1.1-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-dd32f390b3 podman-4.9.4-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-259beb3a11 passt-0^20240326.g4988e2b-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-3a8d53c92c python-qrcode-7.4.2-12.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-90b3798199 libopenmpt-0.7.6-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2fcce4ffb7 kernel-6.7.11-200.fc39 0 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0a9d621230 zstd-1.5.6-1.fc39

The following builds have been pushed to Fedora 39 updates-testing

bitlbee-facebook-1.2.2-9.fc39 c-ares-1.28.1-1.fc39 goverlay-1.0-1.fc39 perl-Spreadsheet-XLSX-0.18-1.fc39 pipx-1.5.0-1.fc39 proftpd-1.3.8b-5.fc39 rb_libtorrent-2.0.10-1.fc39

Details about builds:

================================================================================ bitlbee-facebook-1.2.2-9.fc39 (FEDORA-2024-ff1e3ba280) Facebook protocol plugin for BitlBee -------------------------------------------------------------------------------- Update Information:

Test whether BitlBee can load plugin during startup (#2272092) -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Robert Scheck robert@fedoraproject.org 1.2.2-9 - Test whether BitlBee can load plugin during startup (#2272092) * Tue Jan 23 2024 Fedora Release Engineering releng@fedoraproject.org - 1.2.2-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 1.2.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272092 - facebook.so plugin fails to load: undefined symbol: SET_INVALID https://bugzilla.redhat.com/show_bug.cgi?id=2272092 --------------------------------------------------------------------------------

================================================================================ c-ares-1.28.1-1.fc39 (FEDORA-2024-835800b552) A library that performs asynchronous DNS operations -------------------------------------------------------------------------------- Update Information:

1.28.1 fixes a significant bug in 1.28.0. Update to 1.28.0. Also fixes CVE-2024-25629. -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Tom Callaway spot@fedoraproject.org - 1.28.1-1 - update to 1.28.1 * Fri Mar 29 2024 Tom Callaway spot@fedoraproject.org - 1.28.0-1 - update to 1.28.0 * Tue Jan 23 2024 Fedora Release Engineering releng@fedoraproject.org - 1.25.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 1.25.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2265714 - CVE-2024-25629 c-ares: Out of bounds read in ares__read_line() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2265714 --------------------------------------------------------------------------------

================================================================================ goverlay-1.0-1.fc39 (FEDORA-2024-72ba7c6326) Project that aims to create a Graphical UI to help manage Linux overlays -------------------------------------------------------------------------------- Update Information:

See commit history -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 1.0-1 - chore: Update to 1.0 * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 0.9-9 - build: Add Packit config * Sun Mar 31 2024 Artem Polishchuk ego.cordatus@gmail.com - 0.9-8 - license: Convert to SPDX * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 0.9-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jan 20 2024 Fedora Release Engineering releng@fedoraproject.org - 0.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ perl-Spreadsheet-XLSX-0.18-1.fc39 (FEDORA-2024-a63af372e9) Perl extension for reading Microsoft Excel 2007 files -------------------------------------------------------------------------------- Update Information:

Spreadsheet::XLSX 0.18 Fix RT #117166: unformatted date values can no longer be retrieved -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Robert Scheck robert@fedoraproject.org 0.18-1 - Upgrade to 0.18 (#2268717) * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 0.17-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 0.17-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2268717 - perl-Spreadsheet-XLSX-0.18 is available https://bugzilla.redhat.com/show_bug.cgi?id=2268717 --------------------------------------------------------------------------------

================================================================================ pipx-1.5.0-1.fc39 (FEDORA-2024-eae210422e) Install and run Python applications in isolated environments -------------------------------------------------------------------------------- Update Information:

1.5.0 - 2024-03-29 Features Add --global option to pipx commands. This will run the action in a global scope and affect environment for all system users. (#754) Add a --fetch-missing-python flag to all commands that accept a --python flag. When combined, this will automatically download a standalone copy of the requested python version if it's not already available on the user's system. (#1242) Add commands to list and prune standalone interpreters (#1248) Revert platform-specific directories on MacOS and Windows They were leading to a lot of issues with Windows sandboxing and spaces in shebangs on MacOS. (#1257) Add --install option to pipx upgrade command. This will install the package given as argument if it is not already installed. (#1262) Bugfixes Correctly resolve home directory in pipx directory environment variables. (#94) Pass through pip arguments when upgrading shared libraries. (#964) Fix installation issues when files in the working directory interfere with venv creation process. (#1091) Report correct filename in tracebacks with pipx run <scriptname> (#1191) Let self-managed pipx uninstall itself on windows again. (#1203) Fix path resolution for python executables looked up in PATH on windows. (#1205) Display help message when pipx install is run without arguments. (#1266) Fix crashes due to superfluous -q flags by discarding exceeding values (#1283) Improved Documentation Update the completion instructions for zipapp users. (#1072) Update the example for running scripts with dependencies. (#1227) Update the docs for package developers on the use of configuration using pyproject.toml (#1229) Add installation instructions for Fedora (#1239) Update the examples for installation from local dir (#1277) Fix inconsistent wording in pipx install command description. (#1307) Deprecations and Removals Deprecate --skip-maintenance flag of pipx list; maintenance is now never executed there (#1256) Misc #1296 -------------------------------------------------------------------------------- ChangeLog:

* Sat Mar 30 2024 Packit hello@packit.dev - 1.5.0-1 - [packit] 1.5.0 upstream release - Resolves: rhbz#2272320 * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 1.4.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 1.4.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272320 - pipx-1.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272320 --------------------------------------------------------------------------------

================================================================================ proftpd-1.3.8b-5.fc39 (FEDORA-2024-4d9873596f) Flexible, stable and highly-configurable FTP server -------------------------------------------------------------------------------- Update Information:

This updates adds mod_proxy in its own sub-package, proftpd-proxy. -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Paul Howarth paul@city-fan.org - 1.3.8b-5 - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051) - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677) * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 1.3.8b-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 1.3.8b-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 1 2024 Paul Howarth paul@city-fan.org - 1.3.8b-2 - Use libsodium to provide ed25519 key support for mod_sftp (#2256340) - Update logrotate snippet to use try-reload-or-restart rather than reload for distributions with systemd 229 or later (PR#3) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272051 - please include proftpd-mod_proxy (and a small bugfix) https://bugzilla.redhat.com/show_bug.cgi?id=2272051 --------------------------------------------------------------------------------

================================================================================ rb_libtorrent-2.0.10-1.fc39 (FEDORA-2024-5624d4169c) A C++ BitTorrent library aiming to be the best alternative -------------------------------------------------------------------------------- Update Information:

Update -------------------------------------------------------------------------------- ChangeLog:

* Sun Mar 31 2024 Leigh Scott leigh123linux@gmail.com - 2.0.10-1 - Upgrade to 2.0.10 * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 2.0.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering releng@fedoraproject.org - 2.0.9-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jan 18 2024 Jonathan Wakely jwakely@redhat.com - 2.0.9-4 - Rebuilt for Boost 1.83 --------------------------------------------------------------------------------