The following Fedora 39 Security updates need testing: Age URL 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d0dccd6b96 httpd-2.4.59-2.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9176fdb518 python-idna-3.7-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-78240de990 sssd-2.9.4-2.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1b11432d52 freerdp-2.11.7-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e0057e6044 python-aiohttp-3.9.5-1.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d408b654d6 matrix-synapse-1.105.1-1.fc39 rust-pythonize-0.21.1-1.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-450b75e4a0 libcoap-4.3.4a-2.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-391ed3a61d python-dns-2.4.2-2.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9205c35b11 stalld-1.19.2-1.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-31cac8b8ec ruby-3.2.4-182.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1a79c2ef63 clamav-1.0.6-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a09bfceb28 et-6.2.1-15.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-11821b16ac gdcm-3.0.23-5.fc39

The following Fedora 39 Critical Path updates have yet to be approved: Age URL 47 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0385be9862 audit-3.1.3-1.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-2e8d56bf28 rpm-ostree-2024.5-1.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2024-b020589563 dbus-broker-36-2.fc39 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d0dccd6b96 httpd-2.4.59-2.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-150fccb9fb sdubby-1.0-7.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-7f4e723fce libmediainfo-24.04-1.fc39 mediainfo-24.04-1.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-9176fdb518 python-idna-3.7-1.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0990714a4a libbsd-0.12.2-3.fc39 9 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0eb40ed7c6 python3-docs-3.12.3-1.fc39 python3.12-3.12.3-2.fc39 7 https://bodhi.fedoraproject.org/updates/FEDORA-2024-75f195f1ce gnome-shell-45.6-1.fc39 mutter-45.6-1.fc39 7 https://bodhi.fedoraproject.org/updates/FEDORA-2024-5f20a75ffb libphonenumber-8.13.35-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f93e4dc12d annobin-12.51-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-fd62db84fb bind-9.18.26-1.fc39 bind-dyndb-ldap-11.10-25.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1b11432d52 freerdp-2.11.7-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-a43222a278 gnome-control-center-45.4-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2024-78240de990 sssd-2.9.4-2.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-50122b25a1 container-selinux-2.231.0-1.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-98cd1ec226 selinux-policy-39.6-1.fc39 3 https://bodhi.fedoraproject.org/updates/FEDORA-2024-391ed3a61d python-dns-2.4.2-2.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-423afe625d passt-0^20240426.gd03c4e2-1.fc39

The following builds have been pushed to Fedora 39 updates-testing

crun-vm-0.2.0-1.fc39 js-jquery-ui-1.13.3-1.fc39 kernel-6.8.8-200.fc39 libxeddsa-2.0.0^20240426gitd725c81-5.fc39 python-fsspec-2024.3.1-1.fc39 python-jupyter-kernel-test-0.7.0-1.fc39 python-lsp-server-1.11.0-2.fc39 python-octave-kernel-0.36.0-1.fc39 python-textdistance-4.6.2-2.fc39 spyder-5.5.4-1.fc39 tpm2-tools-5.5.1-1.fc39 tpm2-tss-4.0.2-1.fc39

Details about builds:

================================================================================ crun-vm-0.2.0-1.fc39 (FEDORA-2024-654bcc5ecc) An OCI Runtime that runs VM images -------------------------------------------------------------------------------- Update Information:

Update to 0.2.0 -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 28 2024 Alberto Faria afaria@redhat.com - 0.2.0-1 - Update to 0.2.0 * Sun Apr 28 2024 Alberto Faria afaria@redhat.com - 0.1.3-6 - Drop Fedora 38 support * Mon Apr 15 2024 Alberto Faria afaria@redhat.com - 0.1.3-5 - Add missing dependency on passt * Mon Apr 15 2024 Alberto Faria afaria@redhat.com - 0.1.3-4 - Drop unnecessary dependency on shadow-utils * Tue Apr 2 2024 Alberto Faria afaria@redhat.com - 0.1.3-3 - Avoid missing Requires on Fedora 38 --------------------------------------------------------------------------------

================================================================================ js-jquery-ui-1.13.3-1.fc39 (FEDORA-2024-e6443f8c8b) jQuery user interface -------------------------------------------------------------------------------- Update Information:

JQuery UI 1.13.3 -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 28 2024 Mattias Ellert mattias.ellert@physics.uu.se - 1.13.3-1 - Update to version 1.13.3 * Wed Jan 24 2024 Fedora Release Engineering releng@fedoraproject.org - 1.13.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jan 20 2024 Fedora Release Engineering releng@fedoraproject.org - 1.13.2-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ kernel-6.8.8-200.fc39 (FEDORA-2024-bc0db39a14) The Linux kernel -------------------------------------------------------------------------------- Update Information:

The 6.8.8 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 27 2024 Justin M. Forbes jforbes@fedoraproject.org [6.8.8-200] - Revert "cpupower: Bump soname version" (Justin M. Forbes) - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes) * Sat Apr 27 2024 Justin M. Forbes jforbes@fedoraproject.org [6.8.8-0] - Update BugsFixed for 6.8.8 (Justin M. Forbes) - Turn on ISM for Fedora (Justin M. Forbes) - Turn off some Fedora UBSAN options to avoid false positives (Justin M. Forbes) - fedora: aarch64: Enable a QCom Robotics platforms requirements (Peter Robinson) - Turn on UBSAN for Fedora (Justin M. Forbes) - Linux v6.8.8 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2277155 - Fedora 39 - Device Driver for ISM not configured in kernel https://bugzilla.redhat.com/show_bug.cgi?id=2277155 --------------------------------------------------------------------------------

================================================================================ libxeddsa-2.0.0^20240426gitd725c81-5.fc39 (FEDORA-2024-fad595ace4) Toolkit around Curve25519 and Ed25519 key pairs -------------------------------------------------------------------------------- Update Information:

Initial import -------------------------------------------------------------------------------- ChangeLog:

* Fri Apr 26 2024 Matthieu Saulnier fantom@fedoraproject.org - 2.0.0^20240426gitd725c81-5 - Package Review RHBZ#2227804: - Update git snapshot - Fix Version field and Release field - Fix license * Thu Aug 24 2023 Matthieu Saulnier fantom@fedoraproject.org - 2.0.0-4^20230824git1140086 - Package Review RHBZ#2227804: - Update git snapshot - Improve %description about ref10 library - Fix cmake flags in %build section - Cleanup %install section and remove useless comments - Fix filename in %files section * Wed Aug 2 2023 Matthieu Saulnier fantom@fedoraproject.org - 2.0.0-3^20230730git8ab957a - Package Review RHBZ#2227804: - Improve file ownership in doc subpackage - Add more comments about soname of the library * Tue Aug 1 2023 Matthieu Saulnier fantom@fedoraproject.org - 2.0.0-2^20230730git8ab957a - Package Review RHBZ#2227804: - Remove %cmake_install then manually install library file in %install section * Mon Jul 31 2023 Matthieu Saulnier fantom@fedoraproject.org - 2.0.0-1^20230730git8ab957a - Package Review RHBZ#2227804: - Initial packaging -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2227804 - Review Request: libxeddsa - Toolkit around Curve25519 and Ed25519 key pairs https://bugzilla.redhat.com/show_bug.cgi?id=2227804 --------------------------------------------------------------------------------

================================================================================ python-fsspec-2024.3.1-1.fc39 (FEDORA-2024-38aa50cbe8) Specification for Pythonic file system interfaces -------------------------------------------------------------------------------- Update Information:

Update to latest version (#2269737) -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 27 2024 Elliott Sales de Andrade quantum.analyst@gmail.com - 2024.3.1-1 - Update to latest version (#2269737) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2269737 - python-fsspec-2024.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2269737 --------------------------------------------------------------------------------

================================================================================ python-jupyter-kernel-test-0.7.0-1.fc39 (FEDORA-2024-9245f87cdd) Machinery for testing Jupyter kernels via the messaging protocol -------------------------------------------------------------------------------- Update Information:

Update to latest version (#2269227) -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 27 2024 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.7.0-1 - Update to latest version (#2269227) * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 0.6.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering releng@fedoraproject.org - 0.6.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2269227 - python-jupyter-kernel-test-0.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2269227 --------------------------------------------------------------------------------

================================================================================ python-lsp-server-1.11.0-2.fc39 (FEDORA-2024-2658b34e43) Python implementation of language server protocol -------------------------------------------------------------------------------- Update Information:

Update Spyder and dependencies Spyder 5.5.4 (2024-04-09) Important fixes Update QtAwesome version constraint to >=1.3.1,<1.4.0 (icon fonts access issues). Fix kernel start in conda envs with spaces in their directory paths. Fix installers update (installers download URL handling). Handle no output when trying to process git data. Python LSP Server 1.11.0 (2024/03/29) New features Remove the rope_rename plugin. People that were using it need to install the pylsp-rope third-party plugin instead. Add support for Pylint 3.1 Issues Closed Confusion about rename support Textdistance 4.6.2 Issues Closed Levenstein: ensure the return type is int -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 27 2024 Packit hello@packit.dev - 1.11.0-1 - [packit] 1.11.0 upstream release - Resolves: rhbz#2272238 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272238 - python-lsp-server-1.11.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272238 [ 2 ] Bug #2276877 - python-textdistance-4.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2276877 --------------------------------------------------------------------------------

================================================================================ python-octave-kernel-0.36.0-1.fc39 (FEDORA-2024-08364ea910) A Jupyter kernel for Octave -------------------------------------------------------------------------------- Update Information:

Update to latest version (#2275112) -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 28 2024 Elliott Sales de Andrade quantum.analyst@gmail.com - 0.36.0-1 - Update to latest version (#2275112) * Fri Jan 26 2024 Fedora Release Engineering releng@fedoraproject.org - 0.35.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering releng@fedoraproject.org - 0.35.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2275112 - python-octave-kernel-0.36.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2275112 --------------------------------------------------------------------------------

================================================================================ python-textdistance-4.6.2-2.fc39 (FEDORA-2024-2658b34e43) Compute distance between the two texts -------------------------------------------------------------------------------- Update Information:

Update Spyder and dependencies Spyder 5.5.4 (2024-04-09) Important fixes Update QtAwesome version constraint to >=1.3.1,<1.4.0 (icon fonts access issues). Fix kernel start in conda envs with spaces in their directory paths. Fix installers update (installers download URL handling). Handle no output when trying to process git data. Python LSP Server 1.11.0 (2024/03/29) New features Remove the rope_rename plugin. People that were using it need to install the pylsp-rope third-party plugin instead. Add support for Pylint 3.1 Issues Closed Confusion about rename support Textdistance 4.6.2 Issues Closed Levenstein: ensure the return type is int -------------------------------------------------------------------------------- ChangeLog:

* Sat Apr 27 2024 Packit hello@packit.dev - 4.6.2-1 - Update to 4.6.2 upstream release - Resolves: rhbz#2276877 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272238 - python-lsp-server-1.11.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272238 [ 2 ] Bug #2276877 - python-textdistance-4.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2276877 --------------------------------------------------------------------------------

================================================================================ spyder-5.5.4-1.fc39 (FEDORA-2024-2658b34e43) Scientific Python Development Environment -------------------------------------------------------------------------------- Update Information:

Update Spyder and dependencies Spyder 5.5.4 (2024-04-09) Important fixes Update QtAwesome version constraint to >=1.3.1,<1.4.0 (icon fonts access issues). Fix kernel start in conda envs with spaces in their directory paths. Fix installers update (installers download URL handling). Handle no output when trying to process git data. Python LSP Server 1.11.0 (2024/03/29) New features Remove the rope_rename plugin. People that were using it need to install the pylsp-rope third-party plugin instead. Add support for Pylint 3.1 Issues Closed Confusion about rename support Textdistance 4.6.2 Issues Closed Levenstein: ensure the return type is int -------------------------------------------------------------------------------- ChangeLog:

* Thu Apr 18 2024 Sandro devel@penguinpee.nl - 5.5.4-1 - Update to 5.5.4 - Update QtAwesome version constraint to `>=1.3.1,<1.4.0` - Handle no output when trying to process git data -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272238 - python-lsp-server-1.11.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272238 [ 2 ] Bug #2276877 - python-textdistance-4.6.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2276877 --------------------------------------------------------------------------------

================================================================================ tpm2-tools-5.5.1-1.fc39 (FEDORA-2024-4512dc54af) A bunch of TPM testing toolS build upon tpm2-tss -------------------------------------------------------------------------------- Update Information:

tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 28 2024 Peter Robinson pbrobinson@fedoraproject.org - 5.5.1-1 - Update to 5.5.1 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271763 - tpm2-tss-4.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271763 [ 2 ] Bug #2277437 - tpm2-tools-5.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2277437 --------------------------------------------------------------------------------

================================================================================ tpm2-tss-4.0.2-1.fc39 (FEDORA-2024-4512dc54af) TPM2.0 Software Stack -------------------------------------------------------------------------------- Update Information:

tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 -------------------------------------------------------------------------------- ChangeLog:

* Sun Apr 28 2024 Peter Robinson pbrobinson@fedoraproject.org - 4.0.2-1 - Update to 4.0.2 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271763 - tpm2-tss-4.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271763 [ 2 ] Bug #2277437 - tpm2-tools-5.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2277437 --------------------------------------------------------------------------------