Fedora Linux 8900 Published by

A kitty security update has been released for Fedora 40:

Fedora 40 Update: kitty-0.40.0-2.fc40




[SECURITY] Fedora 40 Update: kitty-0.40.0-2.fc40


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-2fe21e3da5
2025-03-22 02:25:37.605934+00:00
--------------------------------------------------------------------------------

Name : kitty
Product : Fedora 40
Version : 0.40.0
Release : 2.fc40
URL : https://sw.kovidgoyal.net/kitty
Summary : Cross-platform, fast, feature full, GPU based terminal emulator
Description :
- Offloads rendering to the GPU for lower system load and buttery smooth
scrolling. Uses threaded rendering to minimize input latency.

- Supports all modern terminal features: graphics (images), unicode, true-color,
OpenType ligatures, mouse protocol, focus tracking, bracketed paste and
several new terminal protocol extensions.

- Supports tiling multiple terminal windows side by side in different layouts
without needing to use an extra program like tmux.

- Can be controlled from scripts or the shell prompt, even over SSH.

- Has a framework for Kittens, small terminal programs that can be used to
extend kitty's functionality. For example, they are used for Unicode input,
Hints and Side-by-side diff.

- Supports startup sessions which allow you to specify the window/tab layout,
working directories and programs to run on startup.

- Cross-platform: kitty works on Linux and macOS, but because it uses only
OpenGL for rendering, it should be trivial to port to other Unix-like
platforms.

- Allows you to open the scrollback buffer in a separate window using arbitrary
programs of your choice. This is useful for browsing the history comfortably
in a pager or editor.

- Has multiple copy/paste buffers, like vim.

--------------------------------------------------------------------------------
Update Information:

Update to 0.40.0
https://sw.kovidgoyal.net/kitty/changelog/#detailed-list-of-changes
--------------------------------------------------------------------------------
ChangeLog:

* Sat Mar 8 2025 Pavel Solovev [daron439@gmail.com] - 0.40.0-1
- Update to 0.40.0
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2352088 - CVE-2025-22870 kitty: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net [fedora-40]
https://bugzilla.redhat.com/show_bug.cgi?id=2352088
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-2fe21e3da5' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--