Fedora Linux 8815 Published by

The following updates are available for Fedora Linux:

Fedora 38 Update: chromium-123.0.6312.122-1.fc38
Fedora 38 Update: kernel-6.8.5-101.fc38
Fedora 38 Update: libopenmpt-0.7.6-1.fc38
Fedora 39 Update: libopenmpt-0.7.6-1.fc39



Fedora 38 Update: chromium-123.0.6312.122-1.fc38


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-f94660c56d
2024-04-14 03:07:59.493280
--------------------------------------------------------------------------------

Name : chromium
Product : Fedora 38
Version : 123.0.6312.122
Release : 1.fc38
URL : http://www.chromium.org/Home
Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use
Description :
Chromium is an open-source web browser, powered by WebKit (Blink).

--------------------------------------------------------------------------------
Update Information:

update to 123.0.6312.122
* High CVE-2024-3157: Out of bounds write in Compositing
* High CVE-2024-3516: Heap buffer overflow in ANGLE
* High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 11 2024 Than Ngo [than@redhat.com] - 123.0.6312.122-1
- update to 123.0.6312.122
* High CVE-2024-3157: Out of bounds write in Compositing
* High CVE-2024-3516: Heap buffer overflow in ANGLE
* High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2274472 - CVE-2024-3157 CVE-2024-3515 CVE-2024-3516 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2274472
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-f94660c56d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--



Fedora 38 Update: kernel-6.8.5-101.fc38


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-a56a47ef1b
2024-04-14 03:07:59.493266
--------------------------------------------------------------------------------

Name : kernel
Product : Fedora 38
Version : 6.8.5
Release : 101.fc38
URL : https://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel meta package

--------------------------------------------------------------------------------
Update Information:

The 6.8.5 stable kernel update contains a number of important fixes across the
tree.
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 11 2024 Justin M. Forbes [jforbes@fedoraproject.org] [6.8.5-101]
- Revert "cpupower: Bump soname version" (Justin M. Forbes)
- Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)
- nouveau: fix devinit paths to only handle display on GSP. (Dave Airlie)
- Add bluetooth bug to Bugsfixed for 6.8.6 (Justin M. Forbes)
- Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit (Archie Pusaka)
* Wed Apr 10 2024 Justin M. Forbes [jforbes@fedoraproject.org] [6.8.5-0]
- Set configs for SPECTRE_BHI (Justin M. Forbes)
- Add AMD PMF bug (Justin M. Forbes)
- redhat/configs: Enable CONFIG_AMDTEE for x86 (David Arcari)
- Add CVE fix for 6.8.5 (Justin M. Forbes)
- Linux v6.8.5
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2273968 - CVE-2024-26811 kernel: ksmbd: validate payload size in ipc response [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2273968
[ 2 ] Bug #2274047 - Bluetooth headset partially connects under some circumstances with blues 5.73-3.fc40.x86_64
https://bugzilla.redhat.com/show_bug.cgi?id=2274047
[ 3 ] Bug #2274069 - AMD-PMF driver fails to load on kernel- 6.8.4-300.fc40.x86_64. Resulting in GPU failing to use full gpu available watts.
https://bugzilla.redhat.com/show_bug.cgi?id=2274069
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-a56a47ef1b' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--



Fedora 38 Update: libopenmpt-0.7.6-1.fc38


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-85b6c6fa92
2024-04-14 03:07:59.493199
--------------------------------------------------------------------------------

Name : libopenmpt
Product : Fedora 38
Version : 0.7.6
Release : 1.fc38
URL : https://lib.openmpt.org/libopenmpt/
Summary : C/C++ library to decode tracker music module (MOD) files
Description :
libopenmpt is a cross-platform C++ and C library to decode tracked music
files (modules) into a raw PCM audio stream.

libopenmpt is based on the player code of the OpenMPT project (Open
ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is
developed in the same source code repository as OpenMPT.

--------------------------------------------------------------------------------
Update Information:

Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6
for more bug-fixes and also as to resolve potential security issues:
https://lib.openmpt.org/libopenmpt/news/
--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar 29 2024 Michael Schwendt [mschwendt@fedoraproject.org] - 0.7.6-1
- update to 0.7.6
* Thu Jan 25 2024 Fedora Release Engineering [releng@fedoraproject.org] - 0.7.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering [releng@fedoraproject.org] - 0.7.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2267561 - libopenmpt-0.7.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2267561
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-85b6c6fa92' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--



Fedora 39 Update: libopenmpt-0.7.6-1.fc39


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-90b3798199
2024-04-14 01:35:44.639119
--------------------------------------------------------------------------------

Name : libopenmpt
Product : Fedora 39
Version : 0.7.6
Release : 1.fc39
URL : https://lib.openmpt.org/libopenmpt/
Summary : C/C++ library to decode tracker music module (MOD) files
Description :
libopenmpt is a cross-platform C++ and C library to decode tracked music
files (modules) into a raw PCM audio stream.

libopenmpt is based on the player code of the OpenMPT project (Open
ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is
developed in the same source code repository as OpenMPT.

--------------------------------------------------------------------------------
Update Information:

Bring all current releases from either version 0.7.3 or 0.6.12 to version 0.7.6
for more bug-fixes and also as to resolve potential security issues:
https://lib.openmpt.org/libopenmpt/news/
--------------------------------------------------------------------------------
ChangeLog:

* Fri Mar 29 2024 Michael Schwendt [mschwendt@fedoraproject.org] - 0.7.6-1
- update to 0.7.6
* Thu Jan 25 2024 Fedora Release Engineering [releng@fedoraproject.org] - 0.7.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering [releng@fedoraproject.org] - 0.7.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2267561 - libopenmpt-0.7.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2267561
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-90b3798199' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--