The following Fedora 39 Security updates need testing:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-dd32f390b3
podman-4.9.4-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-34aa24af35
micropython-1.22.2-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2fcce4ffb7
kernel-6.7.11-200.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-90b3798199
libopenmpt-0.7.6-1.fc39
The following Fedora 39 Critical Path updates have yet to be approved:
Age URL
19
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0385be9862 audit-3.1.3-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2024-426ecf1fd0 bluez-5.73-2.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2024-9bdf343ef9 bolt-0.9.7-1.fc39
12
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f9685bc9ea
perl-HTML-Parser-3.82-1.fc39
8
https://bodhi.fedoraproject.org/updates/FEDORA-2024-5d8bd9cfbd expat-2.6.2-1.fc39
8
https://bodhi.fedoraproject.org/updates/FEDORA-2024-a98df0c66a
edk2-20240214-7.fc39
8
https://bodhi.fedoraproject.org/updates/FEDORA-2024-28f7760be1
libeconf-0.5.2-2.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2f58ad2e7f
libgweather4-4.4.2-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-98436d62ba
annobin-12.46-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-9d4f9f4d2c
libphonenumber-8.13.33-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-18e6c40d49
libbsd-0.12.2-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-4bdced432c
glib-networking-2.78.1-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f6c5ed6d15 gdb-14.2-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-07f60f9ace
epiphany-45.3-1.fc39
6
https://bodhi.fedoraproject.org/updates/FEDORA-2024-8def80f690
at-spi2-core-2.50.2-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-d81aa4a097
librepo-1.17.1-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0515dbe60f nss-3.99.0-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-8d97d749e7
libblockdev-3.1.1-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-dd32f390b3
podman-4.9.4-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-259beb3a11
passt-0^20240326.g4988e2b-1.fc39
4
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3a8d53c92c
python-qrcode-7.4.2-12.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-90b3798199
libopenmpt-0.7.6-1.fc39
2
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2fcce4ffb7
kernel-6.7.11-200.fc39
0
https://bodhi.fedoraproject.org/updates/FEDORA-2024-0a9d621230 zstd-1.5.6-1.fc39
The following builds have been pushed to Fedora 39 updates-testing
bitlbee-facebook-1.2.2-9.fc39
c-ares-1.28.1-1.fc39
goverlay-1.0-1.fc39
perl-Spreadsheet-XLSX-0.18-1.fc39
pipx-1.5.0-1.fc39
proftpd-1.3.8b-5.fc39
rb_libtorrent-2.0.10-1.fc39
Details about builds:
================================================================================
bitlbee-facebook-1.2.2-9.fc39 (FEDORA-2024-ff1e3ba280)
Facebook protocol plugin for BitlBee
--------------------------------------------------------------------------------
Update Information:
Test whether BitlBee can load plugin during startup (#2272092)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 31 2024 Robert Scheck <robert(a)fedoraproject.org> 1.2.2-9
- Test whether BitlBee can load plugin during startup (#2272092)
* Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2272092 - facebook.so plugin fails to load: undefined symbol: SET_INVALID
https://bugzilla.redhat.com/show_bug.cgi?id=2272092
--------------------------------------------------------------------------------
================================================================================
c-ares-1.28.1-1.fc39 (FEDORA-2024-835800b552)
A library that performs asynchronous DNS operations
--------------------------------------------------------------------------------
Update Information:
1.28.1 fixes a significant bug in 1.28.0.
Update to 1.28.0. Also fixes CVE-2024-25629.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 31 2024 Tom Callaway <spot(a)fedoraproject.org> - 1.28.1-1
- update to 1.28.1
* Fri Mar 29 2024 Tom Callaway <spot(a)fedoraproject.org> - 1.28.0-1
- update to 1.28.0
* Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2265714 - CVE-2024-25629 c-ares: Out of bounds read in ares__read_line()
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2265714
--------------------------------------------------------------------------------
================================================================================
goverlay-1.0-1.fc39 (FEDORA-2024-72ba7c6326)
Project that aims to create a Graphical UI to help manage Linux overlays
--------------------------------------------------------------------------------
Update Information:
See commit history
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 31 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1.0-1
- chore: Update to 1.0
* Sun Mar 31 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.9-9
- build: Add Packit config
* Sun Mar 31 2024 Artem Polishchuk <ego.cordatus(a)gmail.com> - 0.9-8
- license: Convert to SPDX
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jan 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
perl-Spreadsheet-XLSX-0.18-1.fc39 (FEDORA-2024-a63af372e9)
Perl extension for reading Microsoft Excel 2007 files
--------------------------------------------------------------------------------
Update Information:
Spreadsheet::XLSX 0.18
Fix RT #117166: unformatted date values can no longer be retrieved
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 31 2024 Robert Scheck <robert(a)fedoraproject.org> 0.18-1
- Upgrade to 0.18 (#2268717)
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.17-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2268717 - perl-Spreadsheet-XLSX-0.18 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2268717
--------------------------------------------------------------------------------
================================================================================
pipx-1.5.0-1.fc39 (FEDORA-2024-eae210422e)
Install and run Python applications in isolated environments
--------------------------------------------------------------------------------
Update Information:
1.5.0 - 2024-03-29
Features
Add --global option to pipx commands.
This will run the action in a global scope and affect environment for all system
users. (#754)
Add a --fetch-missing-python flag to all commands that accept a --python flag.
When combined, this will automatically download a standalone copy of the
requested python version if it's not already available on the user's system.
(#1242)
Add commands to list and prune standalone interpreters (#1248)
Revert platform-specific directories on MacOS and Windows
They were leading to a lot of issues with Windows sandboxing and spaces in
shebangs on MacOS. (#1257)
Add --install option to pipx upgrade command.
This will install the package given as argument if it is not already installed.
(#1262)
Bugfixes
Correctly resolve home directory in pipx directory environment variables. (#94)
Pass through pip arguments when upgrading shared libraries. (#964)
Fix installation issues when files in the working directory interfere with venv
creation process. (#1091)
Report correct filename in tracebacks with pipx run <scriptname> (#1191)
Let self-managed pipx uninstall itself on windows again. (#1203)
Fix path resolution for python executables looked up in PATH on windows. (#1205)
Display help message when pipx install is run without arguments. (#1266)
Fix crashes due to superfluous -q flags by discarding exceeding values (#1283)
Improved Documentation
Update the completion instructions for zipapp users. (#1072)
Update the example for running scripts with dependencies. (#1227)
Update the docs for package developers on the use of configuration using
pyproject.toml (#1229)
Add installation instructions for Fedora (#1239)
Update the examples for installation from local dir (#1277)
Fix inconsistent wording in pipx install command description. (#1307)
Deprecations and Removals
Deprecate --skip-maintenance flag of pipx list; maintenance is now never
executed there (#1256)
Misc
#1296
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 30 2024 Packit <hello(a)packit.dev> - 1.5.0-1
- [packit] 1.5.0 upstream release
- Resolves: rhbz#2272320
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2272320 - pipx-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2272320
--------------------------------------------------------------------------------
================================================================================
proftpd-1.3.8b-5.fc39 (FEDORA-2024-4d9873596f)
Flexible, stable and highly-configurable FTP server
--------------------------------------------------------------------------------
Update Information:
This updates adds mod_proxy in its own sub-package, proftpd-proxy.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 31 2024 Paul Howarth <paul(a)city-fan.org> - 1.3.8b-5
- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.8b-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.8b-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 1 2024 Paul Howarth <paul(a)city-fan.org> - 1.3.8b-2
- Use libsodium to provide ed25519 key support for mod_sftp (#2256340)
- Update logrotate snippet to use try-reload-or-restart rather than reload
for distributions with systemd 229 or later (PR#3)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2272051 - please include proftpd-mod_proxy (and a small bugfix)
https://bugzilla.redhat.com/show_bug.cgi?id=2272051
--------------------------------------------------------------------------------
================================================================================
rb_libtorrent-2.0.10-1.fc39 (FEDORA-2024-5624d4169c)
A C++ BitTorrent library aiming to be the best alternative
--------------------------------------------------------------------------------
Update Information:
Update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 31 2024 Leigh Scott <leigh123linux(a)gmail.com> - 2.0.10-1
- Upgrade to 2.0.10
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.9-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.9-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jan 18 2024 Jonathan Wakely <jwakely(a)redhat.com> - 2.0.9-4
- Rebuilt for Boost 1.83
--------------------------------------------------------------------------------