The following Fedora 38 Security updates need testing: Age URL 215 https://bodhi.fedoraproject.org/updates/FEDORA-2023-aaa2b3d20b containerd-1.6.23-1.fc38 61 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4ef97ebbfc python-pillow-9.5.0-3.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f1ae7b7ac5 webkitgtk-2.44.0-2.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-af55471f75 gnutls-3.8.4-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-6ad6b9f417 ghc-base64-0.4.2.4-28.fc38 ghc-hakyll-4.16.2.0-1.fc38 gitit-0.15.1.1-3.fc38 pandoc-2.19.2-22.fc38 patat-0.8.8.0-2.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-45f0a1df95 prometheus-podman-exporter-1.11.0-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-34eba1b1a6 suricata-6.0.17-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-ad50671f6c seamonkey-2.53.18.2-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-53b69fdd40 emacs-29.3-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8409b5fa8e podman-4.9.4-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-51e55a7065 micropython-1.22.2-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e95585dfb9 kernel-6.7.11-100.fc38

The following Fedora 38 Critical Path updates have yet to be approved: Age URL 14 https://bodhi.fedoraproject.org/updates/FEDORA-2024-5a6028442d vim-9.1.181-1.fc38 11 https://bodhi.fedoraproject.org/updates/FEDORA-2024-f1ae7b7ac5 webkitgtk-2.44.0-2.fc38 10 https://bodhi.fedoraproject.org/updates/FEDORA-2024-4c0816e727 libtirpc-1.3.4-1.rc3.fc38 10 https://bodhi.fedoraproject.org/updates/FEDORA-2024-83b47f54e5 rpcbind-1.2.6-4.rc3.fc38 10 https://bodhi.fedoraproject.org/updates/FEDORA-2024-1ad45eaec7 bluez-5.73-2.fc38 10 https://bodhi.fedoraproject.org/updates/FEDORA-2024-79e4e864ba bolt-0.9.7-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-af55471f75 gnutls-3.8.4-1.fc38 8 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e0cc4e593b kobo-0.36.0-1.fc38 6 https://bodhi.fedoraproject.org/updates/FEDORA-2024-52e04ffd96 koji-1.34.0-3.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-53b69fdd40 emacs-29.3-1.fc38 4 https://bodhi.fedoraproject.org/updates/FEDORA-2024-ebee8ef7fd libbsd-0.12.2-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-569b61ab6a dnf-plugins-core-4.6.0-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-cb1a0626a3 librepo-1.17.1-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-abe27f6517 firefox-124.0.1-2.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-370124bf58 nss-3.99.0-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-0a62247f0e libblockdev-2.29-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-8409b5fa8e podman-4.9.4-1.fc38 2 https://bodhi.fedoraproject.org/updates/FEDORA-2024-d2860c0bd5 passt-0^20240326.g4988e2b-1.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-e95585dfb9 kernel-6.7.11-100.fc38 1 https://bodhi.fedoraproject.org/updates/FEDORA-2024-143853fac6 btrfs-progs-6.8-1.fc38

The following builds have been pushed to Fedora 38 updates-testing

3proxy-0.9.4-4.fc38 c-ares-1.28.0-1.fc38 distrobox-1.7.1-2.fc38 dnf-4.19.2-1.fc38 libdnf-0.73.1-1.fc38 libopenmpt-0.7.6-1.fc38 magic-8.3.466-1.fc38 meld-3.22.2-1.fc38 neomutt-20240329-1.fc38 python-scikit-build-core-0.8.2-2.fc38 python-wsgidav-4.3.2-1.fc38 pythoncapi-compat-0^20240329gitf667991-1.fc38 rust-selinux-sys-0.6.9-1.fc38 tomcli-0.6.0-1.fc38 xsnow-3.7.9-1.fc38

Details about builds:

================================================================================ 3proxy-0.9.4-4.fc38 (FEDORA-2024-e96b8914e0) Tiny but very powerful proxy -------------------------------------------------------------------------------- Update Information:

Adapt manpages to reflect renamed proxy binary (fixes rhbz#2271587) -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Tim Semeijn tim@goat.re - 0.9.4-4 - Adapt manpages to reflect renamed proxy binary (fixes rhbz#2271587) --------------------------------------------------------------------------------

================================================================================ c-ares-1.28.0-1.fc38 (FEDORA-2024-f0f67dd020) A library that performs asynchronous DNS operations -------------------------------------------------------------------------------- Update Information:

Update to 1.28.0. Also fixes CVE-2024-25629. -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Tom Callaway spot@fedoraproject.org - 1.28.0-1 - update to 1.28.0 * Tue Jan 23 2024 Fedora Release Engineering releng@fedoraproject.org - 1.25.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 1.25.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2265714 - CVE-2024-25629 c-ares: Out of bounds read in ares__read_line() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2265714 --------------------------------------------------------------------------------

================================================================================ distrobox-1.7.1-2.fc38 (FEDORA-2024-74538ba691) Another tool for containerized command line environments on Linux -------------------------------------------------------------------------------- Update Information:

Added distrobox-host-exec to mangle_shebangs_exclude as per BZ#2271765 Update to 1.7.1 -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Alessio alciregi@fedoraproject.org - 1.7.1-2 - Added distrobox-host-exec to mangle_shebangs_exclude as per BZ#2271765 * Mon Mar 25 2024 Alessio alciregi@fedoraproject.org - 1.7.1-1 - Update to 1.7.1 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271707 - distrobox-1.7.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271707 [ 2 ] Bug #2271765 - Exclude distrobox-host-exec from shebang mangling https://bugzilla.redhat.com/show_bug.cgi?id=2271765 --------------------------------------------------------------------------------

================================================================================ dnf-4.19.2-1.fc38 (FEDORA-2024-f0f1a3ac1a) Package manager -------------------------------------------------------------------------------- Update Information:

DNF 4.19.2: Bump libdnf version to 0.73.1 DNF 4.19.1: Add required .readthedocs.yaml, conf.py and set sphinx_rtd_theme Drop dnf obsoletion temporarily doc: Update FAQ entry on filelists build: Adapt to changes in Fedora packaging of bash-completion Support RPMTRANS_FLAG_DEPLOOPS Add all candidates for reinstall to solver Fix handling installonly packages reasons Remove confusing sentence from documentation Remove "leaf" word from documentation Update documentation of history userinstalled command Onboard packit tests doc: Makecache with timer tries only one mirror ELN: Don't obsolete DNF with DNF5 yet bash-completion: Complete dnf command only if we own it bash-completion: Prepare ownerships for dnf5 switch libdnf 0.73.1: Bug fixes: Fix https://issues.redhat.com/browse/RHEL-27657 subject-py: Fix memory leak Others: MergedTransaction: Calculate RPM difference between two same versions as no-op Onboard packit tests Add virtual destructor to TransactionItem -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Evan Goode mail@evangoo.de - 4.19.2-1 - Update to 4.19.2 - Bump libdnf requirement to 0.73.1 * Thu Mar 28 2024 Evan Goode egoode@redhat.com - 4.19.1-1 - Update to 4.19.1 - Add required `.readthedocs.yaml`, `conf.py` and set `sphinx_rtd_theme` - Drop dnf obsoletion temporarily - doc: Update FAQ entry on filelists - build: Adapt to changes in Fedora packaging of bash-completion - Support RPMTRANS_FLAG_DEPLOOPS - Add all candidates for reinstall to solver - Fix handling installonly packages reasons - Remove confusing sentence from documentation - Remove "leaf" word from documentation - Update documentation of history userinstalled command - Onboard packit tests - doc: Makecache with timer tries only one mirror - ELN: Don't obsolete DNF with DNF5 yet - bash-completion: Complete dnf command only if we own it - bash-completion: Prepare ownerships for dnf5 switch --------------------------------------------------------------------------------

================================================================================ libdnf-0.73.1-1.fc38 (FEDORA-2024-f0f1a3ac1a) Library providing simplified C and Python API to libsolv -------------------------------------------------------------------------------- Update Information:

DNF 4.19.2: Bump libdnf version to 0.73.1 DNF 4.19.1: Add required .readthedocs.yaml, conf.py and set sphinx_rtd_theme Drop dnf obsoletion temporarily doc: Update FAQ entry on filelists build: Adapt to changes in Fedora packaging of bash-completion Support RPMTRANS_FLAG_DEPLOOPS Add all candidates for reinstall to solver Fix handling installonly packages reasons Remove confusing sentence from documentation Remove "leaf" word from documentation Update documentation of history userinstalled command Onboard packit tests doc: Makecache with timer tries only one mirror ELN: Don't obsolete DNF with DNF5 yet bash-completion: Complete dnf command only if we own it bash-completion: Prepare ownerships for dnf5 switch libdnf 0.73.1: Bug fixes: Fix https://issues.redhat.com/browse/RHEL-27657 subject-py: Fix memory leak Others: MergedTransaction: Calculate RPM difference between two same versions as no-op Onboard packit tests Add virtual destructor to TransactionItem -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 28 2024 Evan Goode egoode@redhat.com - 0.73.1-1 - Update to 0.73.1 - Fix https://issues.redhat.com/browse/RHEL-27657 - subject-py: Fix memory leak - MergedTransaction: Calculate RPM difference between two same versions as no-op - Onboard packit tests - Add virtual destructor to TransactionItem --------------------------------------------------------------------------------

================================================================================ libopenmpt-0.7.6-1.fc38 (FEDORA-2024-85b6c6fa92) C/C++ library to decode tracker music module (MOD) files -------------------------------------------------------------------------------- Update Information:

Bring all current releases to from either version 0.7.3 or 0.6.12 to version 0.7.6 for more bug-fixes and as to reclose potential security issues: https://lib.openmpt.org/libopenmpt/news/ -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Michael Schwendt mschwendt@fedoraproject.org - 0.7.6-1 - update to 0.7.6 * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 0.7.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 0.7.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2267561 - libopenmpt-0.7.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2267561 --------------------------------------------------------------------------------

================================================================================ magic-8.3.466-1.fc38 (FEDORA-2024-6fe5558b8a) A very capable VLSI layout tool -------------------------------------------------------------------------------- Update Information:

New version 8.3.466 is released. -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Mamoru TASAKA mtasaka@fedoraproject.org - 8.3.466-1 - 8.3.466 --------------------------------------------------------------------------------

================================================================================ meld-3.22.2-1.fc38 (FEDORA-2024-2105ccafd9) Visual diff and merge tool -------------------------------------------------------------------------------- Update Information:

This update brings a new bugfix release of meld to a Fedora box near you. -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Dominic Hopf dmaphy@fedoraproject.org - 3.22.2-1 - New upstream release 3.22.2 (RHBZ#2271242) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272016 - meld package downgraded while updating to f40 beta https://bugzilla.redhat.com/show_bug.cgi?id=2272016 --------------------------------------------------------------------------------

================================================================================ neomutt-20240329-1.fc38 (FEDORA-2024-63706528b1) Text mode Mail Client -------------------------------------------------------------------------------- Update Information:

This is a small Bug-Fix release. Last week's release was faulty. This one is much better. Release Notes: https://github.com/neomutt/neomutt/releases/tag/20240329 -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Richard Russon rich@flatcap.org - 20240323-1 - Bug Fixes - #4185 c441f5957 Fix memory leak in trash_append() - #4189 Fix off-by-one error in %b with notmuch - #4190 Zero-out mailbox counters on delete - #4204 colour: honour the normal colour - #4205 match folder-hook also against mailbox name (fixes #4201) - wrap colour in <show-log-messages> - history: fix saving file - history: improve error message format - Docs - #4182 docs: -C: Fix some accidents - #4188 Update oauth2 README - #4193 Update oauth2 README - fix typos, lots of tidying - tidy license info - Build - #4196 use FreeBSD 14.0 in Cirrus CI - actions: update cpu count - actions: use codeql v3 - Code - #4186 Buffer refactoring: make_entry() - address: tidy config handling - coverage: buf, slist - graphviz: link labels - tidy buf_strcpy() calls - tidy char buffers - test: default timezone to UTC * Sat Mar 23 2024 Richard Russon rich@flatcap.org - 20240323-1 - Do NOT use this release --------------------------------------------------------------------------------

================================================================================ python-scikit-build-core-0.8.2-2.fc38 (FEDORA-2024-5b3f8ee7d2) Build backend for CMake based projects -------------------------------------------------------------------------------- Update Information:

Package pyproject extra optional dependencies -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 28 2024 Benjamin A. Beasley code@musicinmybrain.net - 0.8.2-2 - Produce a metapackage for the pyproject extra --------------------------------------------------------------------------------

================================================================================ python-wsgidav-4.3.2-1.fc38 (FEDORA-2024-88888f32ed) Generic and extendable WebDAV server based on WSGI -------------------------------------------------------------------------------- Update Information:

4.3.2 / 2024-03-29 Fix https://github.com/mar10/wsgidav/issues/318, release 4.3.1 uses an etree.XML keyword not supported by lxml 4.3.1 / 2024-03-24 New option suppress_version_info to suppress WsgiDAV's version info in responses (default: false). --root argument honors fs_dav_provider configuration. _DAVResource should have is_link() method to avoid dir_browser issues. remove defusedxml dependency. -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Packit hello@packit.dev - 4.3.2-1 - [packit] 4.3.2 upstream release - Resolves rhbz#2271268 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271268 - python-wsgidav-4.3.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271268 --------------------------------------------------------------------------------

================================================================================ pythoncapi-compat-0^20240329gitf667991-1.fc38 (FEDORA-2024-cc86cf6548) Python C API compatibility -------------------------------------------------------------------------------- Update Information:

Update to 0^20240329gitf667991: Add PyList_GetItemRef() Update to 0^20240328gitd16872a: Fix test_unicode() -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Benjamin A. Beasley code@musicinmybrain.net - 0^20240329gitf667991-1 - Update to 0^20240329gitf667991: Add `PyList_GetItemRef()` * Fri Mar 29 2024 Benjamin A. Beasley code@musicinmybrain.net - 0^20240328gitd16872a-1 - Update to 0^20240328gitd16872a - Fix test_unicode() * Fri Mar 29 2024 Benjamin A. Beasley code@musicinmybrain.net - 0^20240321gitb16ff9a-2 - Add an rpmlintrc file --------------------------------------------------------------------------------

================================================================================ rust-selinux-sys-0.6.9-1.fc38 (FEDORA-2024-15adebf725) Flexible Mandatory Access Control (MAC) for Linux -------------------------------------------------------------------------------- Update Information:

Update to 0.6.9 -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Michel Lind salimma@fedoraproject.org - 0.6.9-1 - Update to 0.6.9 (rhbz#2271953) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2271953 - rust-selinux-sys-0.6.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2271953 --------------------------------------------------------------------------------

================================================================================ tomcli-0.6.0-1.fc38 (FEDORA-2024-cdc38fa1ac) CLI for working with TOML files. Pronounced "tom clee." -------------------------------------------------------------------------------- Update Information:

Update to latest upstream version -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 28 2024 Maxwell G maxwell@gtmx.me - 0.6.0-1 - Update to 0.6.0. * Sat Jan 27 2024 Fedora Release Engineering releng@fedoraproject.org - 0.5.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ xsnow-3.7.9-1.fc38 (FEDORA-2024-c9b6c779be) Let it snow on your desktop -------------------------------------------------------------------------------- Update Information:

Updated to v3.7.9 https://ratrabbit.nl/ratrabbit/xsnow/changelog/index.html -------------------------------------------------------------------------------- ChangeLog:

* Fri Mar 29 2024 Andrea Musuruane musuruan@gmail.com - 3.7.9-1 - Updated to new upstream release -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2272035 - xsnow-3.7.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272035 --------------------------------------------------------------------------------