The following Fedora 39 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-d577604e6a python3.12-3.12.1-2.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-20feb865d8 podman-tui-0.15.0-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ab77331a34 squid-6.6-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-7141950083 filezilla-3.66.4-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-153404713b proftpd-1.3.8b-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-e77300e4b5 python-asyncssh-2.14.2-1.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-817ecc703f xerces-c-3.2.5-1.fc39

The following Fedora 39 Critical Path updates have yet to be approved: Age URL 58 https://bodhi.fedoraproject.org/updates/FEDORA-2023-60969403d0 go-rpm-macros-3.3.0-1.fc39 go2rpm-1.10.0-1.fc39 24 https://bodhi.fedoraproject.org/updates/FEDORA-2023-0a947db1d0 mock-core-configs-39.3-1.fc39 17 https://bodhi.fedoraproject.org/updates/FEDORA-2023-8fd0890f05 dnf5-5.1.9-1.fc39 14 https://bodhi.fedoraproject.org/updates/FEDORA-2023-68ad6ada3b podman-4.8.2-1.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-028fe2a793 kobo-0.35.0-1.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-3930eeaf4a pungi-4.6.0-1.fc39 12 https://bodhi.fedoraproject.org/updates/FEDORA-2023-69a7a5775c tomcat-9.0.83-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-ae7f558922 guestfs-tools-1.51.7-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-db59cf7cee libphonenumber-8.13.27-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-2cfc4d36f1 libguestfs-1.51.10-1.fc39 6 https://bodhi.fedoraproject.org/updates/FEDORA-2023-d577604e6a python3.12-3.12.1-2.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-212cdaad25 brltty-6.6-9.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-148369da83 gtk3-3.24.39-1.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1cdaa0fa8a tigervnc-1.13.1-10.fc39 5 https://bodhi.fedoraproject.org/updates/FEDORA-2023-c12a2a84a4 toolbox-0.0.99.5-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-1874834244 dhcpcd-10.0.6-1.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-7746a9c9eb java-17-openjdk-17.0.9.0.9-3.fc39 4 https://bodhi.fedoraproject.org/updates/FEDORA-2023-d9bca05694 gstreamer1-plugins-bad-free-1.22.8-2.fc39 gstreamer1-plugins-ugly-free-1.22.8-2.fc39 2 https://bodhi.fedoraproject.org/updates/FEDORA-2023-33bc615d45 edk2-20231122-14.fc39 1 https://bodhi.fedoraproject.org/updates/FEDORA-2023-f814176c4d gjs-1.78.1-2.fc39 mozjs115-115.6.0-1.fc39

The following builds have been pushed to Fedora 39 updates-testing

cppcheck-2.13.0-1.fc39 mate-media-1.26.2-1.fc39 nanoflann-1.5.3-1.fc39 nsd-4.8.0-1.fc39 partclone-0.3.27-2.fc39 qmapshack-1.17.1-1.fc39 slurm-22.05.11-2.fc39 texstudio-4.7.2-1.fc39 xdg-desktop-portal-hyprland-1.2.6-1.fc39

Details about builds:

================================================================================ cppcheck-2.13.0-1.fc39 (FEDORA-2023-3c74dc3d4b) Tool for static C/C++ code analysis -------------------------------------------------------------------------------- Update Information:

Update to 2.13.0 -------------------------------------------------------------------------------- ChangeLog:

* Sat Dec 23 2023 Wolfgang St��ggl c72578@yahoo.de - 2.13.0-1 - Update to 2.13.0 --------------------------------------------------------------------------------

================================================================================ mate-media-1.26.2-1.fc39 (FEDORA-2023-827cb10a09) MATE media programs -------------------------------------------------------------------------------- Update Information:

- update to 1.26.2 - fix German translation -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 25 2023 Wolfgang Ulbrich fedora@raveit.de - 1.26.2-1 - update to 1.26.2 - fix german translation * Fri Nov 24 2023 Wolfgang Ulbrich fedora@raveit.de - 1.26.1-3 - fix building with libxml-2.12.0 --------------------------------------------------------------------------------

================================================================================ nanoflann-1.5.3-1.fc39 (FEDORA-2023-ea3220f17d) A C++11 header-only library for Nearest Neighbor (NN) search with KD-trees -------------------------------------------------------------------------------- Update Information:

update -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 25 2023 topazus topazus@outlook.com - 1.5.3-1 - initial import; rhbz#2255796 --------------------------------------------------------------------------------

================================================================================ nsd-4.8.0-1.fc39 (FEDORA-2023-bf9ac871e9) Fast and lean authoritative DNS Name Server -------------------------------------------------------------------------------- Update Information:

Update to 4.8.0 -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 25 2023 Fabio Alessandro Locati fale@fedoraproject.org - 4.8.0-1 - Update to 4.8.0 - Resolves: rhbz#2252122 --------------------------------------------------------------------------------

================================================================================ partclone-0.3.27-2.fc39 (FEDORA-2023-262c54f3b1) Utility to clone and restore a partition -------------------------------------------------------------------------------- Update Information:

- Build `fail-mbr.bin` on all architectures (using cross-compile) -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 25 2023 Robert Scheck robert@fedoraproject.org 0.3.27-2 - Build fail-mbr.bin on all architectures (using cross-compile) --------------------------------------------------------------------------------

================================================================================ qmapshack-1.17.1-1.fc39 (FEDORA-2023-c6b879586c) GPS mapping and management tool -------------------------------------------------------------------------------- Update Information:

- updated to 1.17.1 - see https://github.com/Maproom/qmapshack/blob/dev/changelog.txt for details -------------------------------------------------------------------------------- ChangeLog:

* Thu Dec 14 2023 Fedora Release Monitoring release-monitoring@fedoraproject.org - 1.17.1-1 - Update to 1.17.1 (rhbz#2254510) * Wed Nov 15 2023 Sandro Mani manisandro@gmail.com - 1.17.0-2 - Rebuild (gdal) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2254510 - qmapshack-1.17.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2254510 --------------------------------------------------------------------------------

================================================================================ slurm-22.05.11-2.fc39 (FEDORA-2023-9a74d212f8) Simple Linux Utility for Resource Management -------------------------------------------------------------------------------- Update Information:

- Update to 22.05.11 - Closes CVE-2023-49933 through CVE-2023-49938 -------------------------------------------------------------------------------- ChangeLog:

* Fri Dec 22 2023 Neil Hanlon neil@fedoraproject.org - 22.05.11-1 - Update to 22.05.11 (#2155310) - Closes CVE-2023-49933 through CVE-2023-49938; RHBZ bugs: - #2254496, #2254499, #2254502, #2254505, #2254507, #2254509 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2155310 - slurm-23.11.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2155310 [ 2 ] Bug #2254496 - CVE-2023-49938 slurm: incorrect access control [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254496 [ 3 ] Bug #2254499 - CVE-2023-49937 slurm: double free [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254499 [ 4 ] Bug #2254502 - CVE-2023-49936 slurm: null pointer dereference [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254502 [ 5 ] Bug #2254505 - CVE-2023-49935 slurm: Incorrect Access Control [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254505 [ 6 ] Bug #2254507 - CVE-2023-49934 slurm: SQL injection [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254507 [ 7 ] Bug #2254509 - CVE-2023-49933 slurm: Improper Enforcement of Message Integrity [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254509 --------------------------------------------------------------------------------

================================================================================ texstudio-4.7.2-1.fc39 (FEDORA-2023-939d646ecf) A feature-rich editor for LaTeX documents -------------------------------------------------------------------------------- Update Information:

- update to 4.7.2 - https://github.com/texstudio- org/texstudio/blob/master/utilities/manual/source/CHANGELOG.md -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 25 2023 Johannes Lips hannes@fedoraproject.org 4.7.2-1 - update to 4.7.2 --------------------------------------------------------------------------------

================================================================================ xdg-desktop-portal-hyprland-1.2.6-1.fc39 (FEDORA-2023-92574dd4d4) xdg-desktop-portal backend for hyprland -------------------------------------------------------------------------------- Update Information:

Update to 1.2.6 -------------------------------------------------------------------------------- ChangeLog:

* Mon Dec 25 2023 Pavel Solovev daron439@gmail.com - 1.2.6-1 - Update to 1.2.6 --------------------------------------------------------------------------------