--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-9062ade4d9
2025-05-30 01:44:07.670136+00:00
--------------------------------------------------------------------------------
Name : suricata
Product : Fedora 41
Version : 7.0.10
Release : 2.fc41
URL : https://suricata-ids.org/
Summary : Intrusion Detection System
Description :
The Suricata Engine is an Open Source Next Generation Intrusion
Detection and Prevention Engine. This engine is not intended to
just replace or emulate the existing tools in the industry, but
will bring new ideas and technologies to the field. This new Engine
supports Multi-threading, Automatic Protocol Detection (IP, TCP,
UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP
Matching, and GeoIP identification.
--------------------------------------------------------------------------------
Update Information:
Fix sysusers.d config to only be F42 and later.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 21 2025 Steve Grubb <sgrubb(a)redhat.com> 7.0.10-2
- Fix sysusers.d config to only be F42 and later
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2367804 - sysuser.d is used but that is only valid for rawhide - instead requires sysusers_compat
https://bugzilla.redhat.com/show_bug.cgi?id=2367804
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-9062ade4d9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-f131b2186f
2025-05-30 01:44:07.670142+00:00
--------------------------------------------------------------------------------
Name : docker-buildkit
Product : Fedora 41
Version : 0.22.0
Release : 2.fc41
URL : https://github.com/moby/buildkit
Summary : Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
Description :
Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit.
--------------------------------------------------------------------------------
Update Information:
Merge branch 'rawhide' into f42
Update to release v0.21.1
Upstream fixes
Update build requires to use more modern registry package
Update .gitignore to exclude rpms and mockbuild results_ directory
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 21 2025 Bradley G Smith <bradley.g.smith(a)gmail.com> - 0.22.0-1
- Update package to release v0.22.0
- Upstream fixes and changes
* Wed Apr 30 2025 Bradley G Smith <bradley.g.smith(a)gmail.com> - 0.21.1-1
- Update to release v0.21.1
- Upstream fixes
- Update build requires to use more modern registry package
- Update .gitignore to exclude rpms and mockbuild results_ directory
* Tue Apr 15 2025 Bradley G Smith <bradley.g.smith(a)gmail.com> - 0.21.0-1
- Update to release v0.21.0
- Upstream new features and fixes
- Add docker-distribution as BuildRequires
* Mon Mar 24 2025 Bradley G Smith <bradley.g.smith(a)gmail.com> - 0.20.2-1
- Update package to release v0.20.2
- Fix possible UID overflow when setting user for container
(CVE-2024-40635)
* Mon Mar 24 2025 Maxwell G <maxwell(a)gtmx.me> - 0.20.1-2
- Update License for latest go-vendor-tools
* Wed Mar 5 2025 Bradley G Smith <bradley.g.smith(a)gmail.com> - 0.20.1-1
- Update to release v0.20.1
- Resolves rhbz#2350122
- Upstream fixes
* Wed Feb 19 2025 Bradley G Smith <bradley.g.smith(a)gmail.com> - 0.20.0-1
- Update to release v0.20.0
- New features and fixes from upstream
* Mon Feb 3 2025 Bradley G Smith <bradley.g.smith(a)gmail.com> - 0.19.0-1
- Initialize repository with release v0.19.0
- Resolves rhbz#2342034
- Replaces golang-github-moby-buildkit package
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-f131b2186f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-687ecaa588
2025-05-30 01:44:07.670130+00:00
--------------------------------------------------------------------------------
Name : rust-crc
Product : Fedora 41
Version : 3.3.0
Release : 1.fc41
URL : https://crates.io/crates/crc
Summary : Rust implementation of CRC with support of various standards
Description :
Rust implementation of CRC with support of various standards.
--------------------------------------------------------------------------------
Update Information:
Update to version 3.3.0; Fixes RHBZ#2364935
https://github.com/mrhooray/crc-
rs/compare/3.2.1...77da9d4e77b55274b47aebb680c78131124dded3
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 20 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.3.0-1
- Update to version 3.3.0; Fixes RHBZ#2364935
* Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2364935 - rust-crc-3.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2364935
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-687ecaa588' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-464c59df2a
2025-05-30 01:44:07.670119+00:00
--------------------------------------------------------------------------------
Name : docker-buildx
Product : Fedora 41
Version : 0.24.0
Release : 1.fc41
URL : https://github.com/docker/buildx
Summary : Docker CLI plugin for extended build capabilities with BuildKit
Description :
Docker CLI plugin for extended build capabilities with BuildKit.
--------------------------------------------------------------------------------
Update Information:
Update package to release v0.24.0
Resolve: rhbz#2366388, rhbz#2360632
Upstream fixes and changes
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 21 2025 Bradley G Smith <bradley.g.smith(a)gmail.com> - 0.24.0-1
- Update package to release v0.24.0
- Resolve: rhbz#2366388, rhbz#2360632
- Upstream fixes and changes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2360632 - CVE-2025-22872 docker-buildx: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2360632
[ 2 ] Bug #2366388 - docker-buildx-0.24.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2366388
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-464c59df2a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-ea9c7851d7
2025-05-30 01:44:07.670125+00:00
--------------------------------------------------------------------------------
Name : python-typing-inspection
Product : Fedora 41
Version : 0.4.1
Release : 1.fc41
URL : https://github.com/pydantic/typing-inspection
Summary : Runtime typing introspection tools
Description :
This module provides tools to inspect type annotations at runtime.
--------------------------------------------------------------------------------
Update Information:
v0.4.1 (2025-05-21)
Use list as a type hint for InspectedAnnotation.metadata
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 21 2025 Packit <hello(a)packit.dev> - 0.4.1-1
- Update to 0.4.1 upstream release
- Resolves: rhbz#2367870
* Fri May 9 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.4.0-5
- Update (delete) .rpmlintrc file for current rpmlint
* Wed Apr 30 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.4.0-3
- F41+: Remove duplicate smoke test
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2367870 - python-typing-inspection-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2367870
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-ea9c7851d7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-5a867f0167
2025-05-30 01:44:07.670112+00:00
--------------------------------------------------------------------------------
Name : rust-which
Product : Fedora 41
Version : 7.0.3
Release : 1.fc41
URL : https://crates.io/crates/which
Summary : Rust equivalent of Unix command "which"
Description :
A Rust equivalent of Unix command "which". Locate installed executable
in cross platforms.
--------------------------------------------------------------------------------
Update Information:
7.0.3
Update rustix to version 1.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 20 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 7.0.3-1
- Update to version 7.0.3; fixes RHBZ#2358454
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2358454 - rust-which-7.0.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2358454
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-5a867f0167' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-575023fff7
2025-05-30 01:44:07.670098+00:00
--------------------------------------------------------------------------------
Name : ruff
Product : Fedora 41
Version : 0.11.5
Release : 2.fc41
URL : https://github.com/astral-sh/ruff
Summary : Extremely fast Python linter and code formatter
Description :
An extremely fast Python linter and code formatter, written in Rust.
Ruff aims to be orders of magnitude faster than alternative tools while
integrating more functionality behind a single, common interface.
Ruff can be used to replace Flake8 (plus dozens of plugins), Black,
isort, pydocstyle, pyupgrade, autoflake, and more, all while executing
tens or hundreds of times faster than any individual tool.
--------------------------------------------------------------------------------
Update Information:
Security update for CVE-2025-4574, GHSA-pg9f-39pc-qf8g: by rebuilding ruff, we
ensure that it uses version 0.5.15 of the crossbeam-channel crate library.
rust-hashlink 0.10.0
API incompatible change: upgrade hashbrown to 0.15
API incompatible change: we now wrap DefaultHashBuilder and DefaultHasher
from hashbrown so that in the future upgrading hashbrown is not an API
incompatible change
--------------------------------------------------------------------------------
ChangeLog:
* Fri May 2 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.11.5-2
- Stop patching for hashbrown/hashlink 0.14/0.9; use 0.15/0.10
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2331134 - rust-hashlink-0.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2331134
[ 2 ] Bug #2366541 - CVE-2025-4574 ruff: crossbeam-channel Vulnerable to Double Free on Drop [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2366541
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-575023fff7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-575023fff7
2025-05-30 01:44:07.670098+00:00
--------------------------------------------------------------------------------
Name : rust-hashlink
Product : Fedora 41
Version : 0.10.0
Release : 1.fc41
URL : https://crates.io/crates/hashlink
Summary : HashMap-like containers that hold their key-value pairs in a user controllable order
Description :
HashMap-like containers that hold their key-value pairs in a user
controllable order.
--------------------------------------------------------------------------------
Update Information:
Security update for CVE-2025-4574, GHSA-pg9f-39pc-qf8g: by rebuilding ruff, we
ensure that it uses version 0.5.15 of the crossbeam-channel crate library.
rust-hashlink 0.10.0
API incompatible change: upgrade hashbrown to 0.15
API incompatible change: we now wrap DefaultHashBuilder and DefaultHasher
from hashbrown so that in the future upgrading hashbrown is not an API
incompatible change
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 1 2025 Cristian Le <git(a)lecris.dev> - 0.10.0-1
- Update to version 0.10.0; Fixes RHBZ#2331134
* Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2331134 - rust-hashlink-0.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2331134
[ 2 ] Bug #2366541 - CVE-2025-4574 ruff: crossbeam-channel Vulnerable to Double Free on Drop [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2366541
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-575023fff7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-575023fff7
2025-05-30 01:44:07.670098+00:00
--------------------------------------------------------------------------------
Name : rust-rusqlite
Product : Fedora 41
Version : 0.31.0
Release : 6.fc41
URL : https://crates.io/crates/rusqlite
Summary : Ergonomic wrapper for SQLite
Description :
Ergonomic wrapper for SQLite.
--------------------------------------------------------------------------------
Update Information:
Security update for CVE-2025-4574, GHSA-pg9f-39pc-qf8g: by rebuilding ruff, we
ensure that it uses version 0.5.15 of the crossbeam-channel crate library.
rust-hashlink 0.10.0
API incompatible change: upgrade hashbrown to 0.15
API incompatible change: we now wrap DefaultHashBuilder and DefaultHasher
from hashbrown so that in the future upgrading hashbrown is not an API
incompatible change
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 21 2025 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.31.0-6
- Allow hashlink 0.10
* Sun Jan 19 2025 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.31.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2331134 - rust-hashlink-0.10.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2331134
[ 2 ] Bug #2366541 - CVE-2025-4574 ruff: crossbeam-channel Vulnerable to Double Free on Drop [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2366541
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-575023fff7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-fb7b9c7c48
2025-05-30 01:44:07.670105+00:00
--------------------------------------------------------------------------------
Name : maturin
Product : Fedora 41
Version : 1.8.6
Release : 1.fc41
URL : https://github.com/PyO3/maturin
Summary : Build and publish Rust crates as Python packages
Description :
Build and publish crates with pyo3, rust-cpython and cffi bindings as
well as rust binaries as python packages.
--------------------------------------------------------------------------------
Update Information:
Update to version 1.8.6.
--------------------------------------------------------------------------------
ChangeLog:
* Wed May 21 2025 Fabio Valentini <decathorpe(a)gmail.com> - 1.8.6-1
- Update to version 1.8.6; Fixes RHBZ#2365325
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2366540 - CVE-2025-4574 maturin: crossbeam-channel Vulnerable to Double Free on Drop [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2366540
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-fb7b9c7c48' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------