Fedora EPEL 9 updates-testing report
by updates@fedoraproject.org
The following Fedora EPEL 9 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-42a2a0f9b6 libuev-2.4.1-1.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0e36aae9a6 apptainer-1.3.0-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-2fb51140b6 amavis-2.13.1-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-d438d87b45 tcpreplay-4.4.4-5.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-c23f6cf8c2 podman-tui-0.18.0-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
copr-rpmbuild-0.72-1.el9
cr-marcstevens-snippets-0^20240120gitb795c03-1.el9
koji-1.34.0-2.el9
lynis-3.1.1-1.el9
openelp-0.9.3-1.el9
packit-0.94.0-1.el9
python-copr-common-0.23-1.el9
python-specfile-0.28.0-1.el9
radicale-3.1.9-1.el9
resalloc-5.4-1.el9
rust-async-trait-0.1.78-1.el9
rust-clang-ast-0.1.23-1.el9
rust-darling-0.20.8-1.el9
rust-darling_core-0.20.8-1.el9
rust-darling_macro-0.20.8-1.el9
rust-futures-lite-2.3.0-1.el9
rust-h2-0.3.25-1.el9
rust-new_debug_unreachable-1.0.6-1.el9
rust-os_info-3.8.1-1.el9
rust-semver-1.0.22-1.el9
rust-siphasher-1.0.1-1.el9
rust-szip-1.0.0-6.el9
rust-trybuild-1.0.90-1.el9
rust-unsafe-libyaml-0.2.11-1.el9
w3m-0.5.3-63.git20230121.el9
Details about builds:
================================================================================
copr-rpmbuild-0.72-1.el9 (FEDORA-EPEL-2024-31247f9b2f)
Run COPR build tasks
--------------------------------------------------------------------------------
Update Information:
don't clean after builds with user ssh access
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 16 2024 Pavel Raiskup <praiskup(a)redhat.com> 0.72-1
- don't clean after builds with user ssh access
* Fri Mar 1 2024 Pavel Raiskup <praiskup(a)redhat.com> 0.71-1
- don't set bootstrap_image_ready for rawhide
- no Jinja-vars in config_opts keys (mock-core-configs 40.2 compat)
- allow user SSH to builders
- fix copr-rpmbuild --dump-configs
- install copr-distgit-client with copr-rpmbuild
--------------------------------------------------------------------------------
================================================================================
cr-marcstevens-snippets-0^20240120gitb795c03-1.el9 (FEDORA-EPEL-2024-aca46ef556)
Collection of useful one-file C/C++ headers
--------------------------------------------------------------------------------
Update Information:
Upstream has merged a PR we were carrying as a patch
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0^20240120gitb795c03-1
- Update to b795c03git20240120
- Upstream has merged a PR that we previously carried as a patch
--------------------------------------------------------------------------------
================================================================================
koji-1.34.0-2.el9 (FEDORA-EPEL-2024-4a7908e90f)
Build system tools
--------------------------------------------------------------------------------
Update Information:
Update to 1.34.0 + some small patches
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Kevin Fenzi <kevin(a)scrye.com> - 1.34.0-2
- Carry scm policy plugin for hub, it's already upstream
- Use dnf5 compatible 'group install' command
- Allow specifying with a tag value what arches noarch builds happen on.
- Fix image-build to not pass units to oz (to avoid GB/GiB issues)
- Fix a typo in scheduler (already upstreamed)
- Add back index for rpminfo table that was mistakenly dropped.
* Thu Jan 25 2024 Kevin Fenzi <kevin(a)scrye.com> - 1.34.0-1
- Update to 1.34.0. Fixes rhbz#2260055
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.33.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.33.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.33.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Fri Jul 14 2023 Kevin Fenzi <kevin(a)scrye.com> - 1.33.1-1
- Update to 1.31.1. Fixes rhbz#2222032
* Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 1.33.0-2
- Rebuilt for Python 3.12
--------------------------------------------------------------------------------
================================================================================
lynis-3.1.1-1.el9 (FEDORA-EPEL-2024-e04de62318)
Security and system auditing tool
--------------------------------------------------------------------------------
Update Information:
3.1.1, fix bash-completion issue.
3.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 3.1.1-1
- 3.1.1
* Tue Mar 12 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 3.1.0-1
- 3.1.0
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.9-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.9-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Tue Dec 19 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.0.9-5
- Additional egrep patch
* Wed Dec 6 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.0.9-4
- pgrep patch
* Tue Sep 19 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.0.9-3
- Additional egrep patch
* Mon Aug 7 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.0.9-2
- Upstream patch to remove egrep usage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2268997 - lynis-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2268997
[ 2 ] Bug #2270013 - File conflict with filesystem
https://bugzilla.redhat.com/show_bug.cgi?id=2270013
[ 3 ] Bug #2270108 - lynis-3.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2270108
--------------------------------------------------------------------------------
================================================================================
openelp-0.9.3-1.el9 (FEDORA-EPEL-2024-e9bf4601b1)
Open Source EchoLink Proxy
--------------------------------------------------------------------------------
Update Information:
Update to OpenELP 0.9.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 17 2024 Scott K Logan <logans(a)cottsay.net> - 0.9.3-1
- Update to 0.9.3
--------------------------------------------------------------------------------
================================================================================
packit-0.94.0-1.el9 (FEDORA-EPEL-2024-977013e0f7)
A tool for integrating upstream projects with Fedora operating system
--------------------------------------------------------------------------------
Update Information:
Automatic update for packit-0.94.0-1.el9.
Changelog for packit
* Sun Mar 17 2024 Packit <hello(a)packit.dev> - 0.94.0-1
- Added new configuration options `status_name_template` and `allowed_builders`.
- Resolves rhbz#2266037
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 17 2024 Packit <hello(a)packit.dev> - 0.94.0-1
- Added new configuration options `status_name_template` and `allowed_builders`.
- Resolves rhbz#2266037
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2266037 - packit-0.94.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2266037
--------------------------------------------------------------------------------
================================================================================
python-copr-common-0.23-1.el9 (FEDORA-EPEL-2024-f81c4df908)
Python code used by Copr
--------------------------------------------------------------------------------
Update Information:
New resalloc upstream release
https://github.com/praiskup/resalloc/releases/tag/v5.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 15 2024 Pavel Raiskup <praiskup(a)redhat.com> 0.23-1
- make get_redis_connection to accept dict-like 'opts' argument
--------------------------------------------------------------------------------
================================================================================
python-specfile-0.28.0-1.el9 (FEDORA-EPEL-2024-b6bda30e5e)
A library for parsing and manipulating RPM spec files
--------------------------------------------------------------------------------
Update Information:
Update for python-specfile-0.28.0.
Changelog
* Sun Mar 17 2024 Packit <hello(a)packit.dev> - 0.28.0-1
- A trailing newline is no longer added to spec files without one upon saving.
(#353)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 17 2024 Packit <hello(a)packit.dev> - 0.28.0-1
- A trailing newline is no longer added to spec files without one upon saving. (#353)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2173057 - python-specfile-0.28.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2173057
--------------------------------------------------------------------------------
================================================================================
radicale-3.1.9-1.el9 (FEDORA-EPEL-2024-fb8a4b4a28)
A simple CalDAV (calendar) and CardDAV (contact) server
--------------------------------------------------------------------------------
Update Information:
Update to 3.1.9
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Peter Bieringer <pb(a)bieringer.de> - 3.1.9-1
- Update to 3.1.9
- Remove obsolete patches
- Add support for intermediate build using gitcommit
--------------------------------------------------------------------------------
================================================================================
resalloc-5.4-1.el9 (FEDORA-EPEL-2024-f81c4df908)
Resource allocator for expensive resources - client tooling
--------------------------------------------------------------------------------
Update Information:
New resalloc upstream release
https://github.com/praiskup/resalloc/releases/tag/v5.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 15 2024 Pavel Raiskup <praiskup(a)redhat.com> - 5.4-1
- New upstream release https://github.com/praiskup/resalloc/releases/tag/v5.4
--------------------------------------------------------------------------------
================================================================================
rust-async-trait-0.1.78-1.el9 (FEDORA-EPEL-2024-32577d9cc2)
Type erasure for async trait methods
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.78.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.78-1
- Update to version 0.1.78; Fixes RHBZ#2269898
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.77-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-clang-ast-0.1.23-1.el9 (FEDORA-EPEL-2024-b0fc460093)
Data structures for processing Clang's -ast-dump=json format
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.23.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Jan Stan��k <jstanek(a)redhat.com> - 0.1.23-1
- Update to version 0.1.23 (rhbz#2269880)
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.22-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2269880 - rust-clang-ast-0.1.23 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2269880
--------------------------------------------------------------------------------
================================================================================
rust-darling-0.20.8-1.el9 (FEDORA-EPEL-2024-4300d1755f)
Parse attributes into structs for custom derive implementations
--------------------------------------------------------------------------------
Update Information:
Update the darling, darling_macro, and darling_core crates to version 0.20.8.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.20.8-1
- Update to version 0.20.8; Fixes RHBZ#2262037
--------------------------------------------------------------------------------
================================================================================
rust-darling_core-0.20.8-1.el9 (FEDORA-EPEL-2024-4300d1755f)
Parse attributes into structs for custom derive implementations (helper crate)
--------------------------------------------------------------------------------
Update Information:
Update the darling, darling_macro, and darling_core crates to version 0.20.8.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.20.8-1
- Update to version 0.20.8; Fixes RHBZ#2262038
--------------------------------------------------------------------------------
================================================================================
rust-darling_macro-0.20.8-1.el9 (FEDORA-EPEL-2024-4300d1755f)
Parse attributes into structs for custom derive implementations (internal support)
--------------------------------------------------------------------------------
Update Information:
Update the darling, darling_macro, and darling_core crates to version 0.20.8.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.20.8-1
- Update to version 0.20.8; Fixes RHBZ#2262039
--------------------------------------------------------------------------------
================================================================================
rust-futures-lite-2.3.0-1.el9 (FEDORA-EPEL-2024-c97ab2b28b)
Futures, streams, and async I/O combinators
--------------------------------------------------------------------------------
Update Information:
Update to version 2.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 2.3.0-1
- Update to version 2.3.0; Fixes RHBZ#2269980
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.2.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-h2-0.3.25-1.el9 (FEDORA-EPEL-2024-ba0b0c2a36)
HTTP/2 client and server
--------------------------------------------------------------------------------
Update Information:
Update to version 0.3.25.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.25-1
- Update to version 0.3.25
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.24-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-new_debug_unreachable-1.0.6-1.el9 (FEDORA-EPEL-2024-352d6775e1)
Panic in debug, intrinsics::unreachable() in release
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.6.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.6-1
- Update to version 1.0.6; Fixes RHBZ#2269727
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed May 10 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.4-12
- Regenerate with rust2rpm v24
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-os_info-3.8.1-1.el9 (FEDORA-EPEL-2024-526dac1663)
Detect the operating system type and version
--------------------------------------------------------------------------------
Update Information:
Update to version 3.8.1.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 3.8.1-1
- Update to version 3.8.1; Fixes RHBZ#2269241
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-semver-1.0.22-1.el9 (FEDORA-EPEL-2024-b180a71272)
Parser and evaluator for Cargo's flavor of Semantic Versioning
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.22.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.22-1
- Update to version 1.0.22; Fixes RHBZ#2264821
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.21-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-siphasher-1.0.1-1.el9 (FEDORA-EPEL-2024-686871d20b)
SipHash-2-4, SipHash-1-3 and 128-bit variants in pure Rust
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.1.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.1-1
- Update to version 1.0.1; Fixes RHBZ#2269988
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-szip-1.0.0-6.el9 (FEDORA-EPEL-2024-ba63f33912)
Fast command line tool for snappy compression and decompression
--------------------------------------------------------------------------------
Update Information:
Use rust2rpm 26 features to reduce manual packaging effort
--------------------------------------------------------------------------------
ChangeLog:
* Sat Mar 16 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.0.0-5
- Use rust2rpm 26 features to reduce manual packaging effort
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-trybuild-1.0.90-1.el9 (FEDORA-EPEL-2024-232df92d93)
Test harness for ui tests of compiler diagnostics
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.90.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.90-1
- Update to version 1.0.90; Fixes RHBZ#2269895
--------------------------------------------------------------------------------
================================================================================
rust-unsafe-libyaml-0.2.11-1.el9 (FEDORA-EPEL-2024-97ea675d1d)
Libyaml transpiled to rust by c2rust
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.11.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.11-1
- Update to version 0.2.11; Fixes RHBZ#2269915
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.2.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
w3m-0.5.3-63.git20230121.el9 (FEDORA-EPEL-2024-0398ebbbfa)
Pager with Web browsing abilities
--------------------------------------------------------------------------------
Update Information:
Added upstream patch to fix out-of-bounds access due to multiple backspaces to
address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Robert Scheck <robert(a)fedoraproject.org> - 0.5.3-63.git20230121
- Added upstream patch to fix out-of-bounds access due to multiple backspaces
to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.3-62.git20230121
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.3-61.git20230121
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2222775 - CVE-2023-38252 w3m: Out of bounds read in Strnew_size() at w3m/Str.c
https://bugzilla.redhat.com/show_bug.cgi?id=2222775
[ 2 ] Bug #2222779 - CVE-2023-38253 w3m: Out of bounds read in growbuf_to_Str() at w3m/indep.c
https://bugzilla.redhat.com/show_bug.cgi?id=2222779
[ 3 ] Bug #2255207 - CVE-2023-4255 w3m: out-of-bounds write in function checkType() in etc.c (incomplete fix for CVE-2022-38223)
https://bugzilla.redhat.com/show_bug.cgi?id=2255207
--------------------------------------------------------------------------------