I have just submitted for testing
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4b1b8b8b25,
which updates llhttp from 8.1.1 to 9.1.3 in EPEL9. This is an
ABI-incompatible update, and the SONAME version changes. There are also
some minor API changes.
The only package in EPEL9 that uses llhttp is python-aiohttp, and the
update also compatibly updates it from 3.8.5 to its latest release, 3.9.1.
Together, these updates fix a number of security issues, including
CVE-2023-47627, CVE-2023-49081, and CVE-2023-49082.
A COPR impact check in
https://copr.fedorainfracloud.org/coprs/music/aiohttp-epel9/ indicates
there should be no impact on any dependent packages in EPEL9.
If you have software not packaged in EPEL9 that depends directly on
llhttp, you will need to rebuild it due to the ABI changes. It is
possible that source code changes may be required if (like
python-aiohttp) you use almost the entire API of llhttp, or if you have
very thorough tests that reveal small changes in llhttp’s behavior.
Straightforward uses of llhttp are likely to recompile without modification.
If you have software not packaged in EPEL9 that depends directly on
python-aiohttp, you should not need to do anything, but you might choose
to review the changelogs for releases 3.8.6, 3.9.0, and 3.9.1 here for
full details on the changes included in this update:
https://github.com/aio-libs/aiohttp/blob/v3.9.1/CHANGES.rst#391-2023-11-26
I have no plans to attempt a build of llhttp or any update of
python-aiohttp in EPEL8.
This is an incompatible update under the EPEL Incompatible Upgrades
Policy,
https://docs.fedoraproject.org/en-US/epel/epel-policy-incompatible-upgrades/.
It was approved by the EPEL Steering Committee:
https://pagure.io/epel/issue/262.
The following Fedora EPEL 9 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-bab8814ee2 python-aiohttp-3.9.5-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0c24da3136 chromium-124.0.6367.78-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-25c9732d41 clamav-1.0.6-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f5884f808a gdcm-3.0.12-7.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
borgmatic-1.8.11-1.el9
html2ps-1.0-0.52.b7.el9
rust-stability-0.2.0-1.el9
rust-stability0.1-0.1.1-1.el9
rust-termion-3.0.0-1.el9
rust-termion2-2.0.3-1.el9
valkey-7.2.5-5.el9
Details about builds:
================================================================================
borgmatic-1.8.11-1.el9 (FEDORA-EPEL-2024-58f8b54d59)
Simple Python wrapper script for borgbackup
--------------------------------------------------------------------------------
Update Information:
#815: Add optional Healthchecks auto-provisioning via "create_slug" option.
#851: Fix lack of file extraction when using "extract --strip-components all" on
a path with a
leading slash.
#854: Fix a traceback when the "data" consistency check is used.
#857: Fix a traceback with "check --only spot" when the "spot" check is
unconfigured.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 29 2024 Felix Kaechele <felix(a)kaechele.ca> - 1.8.11-1
- update to 1.8.11
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2277853 - borgmatic-1.8.11 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2277853
--------------------------------------------------------------------------------
================================================================================
html2ps-1.0-0.52.b7.el9 (FEDORA-EPEL-2024-5edb43a8ec)
HTML to PostScript converter
--------------------------------------------------------------------------------
Update Information:
This update brings a new html2ps package, an HTML to PostScript converter.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-0.52.b7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jan 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-0.51.b7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jul 31 2023 Petr Pisar <ppisar(a)redhat.com> - 1.0-0.50.b7
- Disable rendering MathML with TeX (bug #1695946)
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-0.49.b7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jul 4 2023 Petr Pisar <ppisar(a)redhat.com> - 1.0-0.48.b7
- Correct invoking paper tool (bug #2219360)
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-0.47.b7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Mon Jan 9 2023 Petr Pisar <ppisar(a)redhat.com> - 1.0-0.46.b7
- Convert a License tag to an SPDX format
* Sun Jan 8 2023 Tom Callaway <spot(a)fedoraproject.org> - 1.0-0.45.b7
- update to use "paper" instead of "paperconf"
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-0.44.b7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon May 30 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.0-0.43.b7
- Perl 5.36 rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2277201 - Please provide html2ps for epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2277201
--------------------------------------------------------------------------------
================================================================================
rust-stability-0.2.0-1.el9 (FEDORA-EPEL-2024-28b1dbec22)
Rust API stability attributes for the rest of us
--------------------------------------------------------------------------------
Update Information:
Update the stability crate to version 0.2.0.
Add a compat package for version 0.1 of the stability crate.
Update the termion crate to version 3.0.0.
Add a compat package for version 2 of the termion crate.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.0-1
- Update to version 0.2.0; Fixes RHBZ#2272848
--------------------------------------------------------------------------------
================================================================================
rust-stability0.1-0.1.1-1.el9 (FEDORA-EPEL-2024-28b1dbec22)
Rust API stability attributes for the rest of us
--------------------------------------------------------------------------------
Update Information:
Update the stability crate to version 0.2.0.
Add a compat package for version 0.1 of the stability crate.
Update the termion crate to version 3.0.0.
Add a compat package for version 2 of the termion crate.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.1-1
- Initial import (stability 0.1 compat package)
--------------------------------------------------------------------------------
================================================================================
rust-termion-3.0.0-1.el9 (FEDORA-EPEL-2024-28b1dbec22)
Bindless library for manipulating terminals
--------------------------------------------------------------------------------
Update Information:
Update the stability crate to version 0.2.0.
Add a compat package for version 0.1 of the stability crate.
Update the termion crate to version 3.0.0.
Add a compat package for version 2 of the termion crate.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2024 Fabio Valentini <decathorpe(a)gmail.com> - 3.0.0-1
- Update to version 3.0.0; Fixes RHBZ#2257005
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-termion2-2.0.3-1.el9 (FEDORA-EPEL-2024-28b1dbec22)
Bindless library for manipulating terminals
--------------------------------------------------------------------------------
Update Information:
Update the stability crate to version 0.2.0.
Add a compat package for version 0.1 of the stability crate.
Update the termion crate to version 3.0.0.
Add a compat package for version 2 of the termion crate.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 2.0.3-1
- Initial import (termion 2 compat package)
--------------------------------------------------------------------------------
================================================================================
valkey-7.2.5-5.el9 (FEDORA-EPEL-2024-2993390f0d)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
fixes working dir
move redis compat symlinks to compat sub-package
first build for epel7
update to 7.2.5
update to 7.2.5-rc1
initial build, rc1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 29 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5-5
- improve migration scripts
- rename compat package
- fix working dir
* Mon Apr 22 2024 Nathan Scott <nathans(a)redhat.com> - 7.2.5-3
- remove version_no_tilde code
* Mon Apr 22 2024 Nathan Scott <nathans(a)redhat.com> - 7.2.5-2
- move redis compat symlinks to compat subpackage
* Wed Apr 17 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5-1
- update to 7.2.5 rhbz#2275379
* Fri Apr 12 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5~rc1-2
- add compat subpackage with migration scripts from redis
* Fri Apr 12 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5~rc1-1
- update to 7.2.5-rc1
* Tue Apr 9 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.4~rc1-1
- Initial package build, release candidate
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2276080 - Please branch and build valkey for EPEL 7
https://bugzilla.redhat.com/show_bug.cgi?id=2276080
--------------------------------------------------------------------------------
The following Fedora EPEL 9 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-bab8814ee2 python-aiohttp-3.9.5-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0c24da3136 chromium-124.0.6367.78-1.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-25c9732d41 clamav-1.0.6-1.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f5884f808a gdcm-3.0.12-7.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
hatch-1.9.7-1.el9
Details about builds:
================================================================================
hatch-1.9.7-1.el9 (FEDORA-EPEL-2024-884c8d6c70)
A modern project, package, and virtual env manager
--------------------------------------------------------------------------------
Update Information:
1.9.7 - 2024-04-24
Fixed:
- Limit the maximum version of virtualenv due to a backward incompatible change
- Upgrade PyApp to 0.12.0 for binary builds
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 27 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 1.9.7-1
- Update to 1.9.7 (close RHBZ#2276819)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2276819 - hatch-1.9.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2276819
--------------------------------------------------------------------------------
The following builds have been pushed to Fedora EPEL 7 updates-testing
fedora-license-data-1.46-1.el7
ncdu-1.20-1.el7
Details about builds:
================================================================================
fedora-license-data-1.46-1.el7 (FEDORA-EPEL-2024-9ebae83bce)
Fedora Linux license data
--------------------------------------------------------------------------------
Update Information:
Automatic update for fedora-license-data-1.46-1.el7.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 26 2024 Miroslav Such�� <msuchy(a)redhat.com> 1.46-1
- rename LicenseRef-Catharon to Catharon
- add NCL license
- add HPND-UC-export-US license
- Add GPL-2.0-only_WITH_cryptsetup-OpenSSL-exception
- add Sun-PPP-2000 license
- add BSD-2-clause-first-lines license
- add pkgconf license
* Fri Apr 12 2024 Miroslav Such�� <msuchy(a)redhat.com> 1.45-1
- Update public-domain-text.txt for OpenCTM
- lark-parser was renamed to lark, allow both
- public domain dedication for libtcd
- public domain dedication for mopac7
- Public domain for sshguard
- public domain dedication for tcd-utils
- public domain dedication for minicom
- add LicenseRef-Catharon license
--------------------------------------------------------------------------------
================================================================================
ncdu-1.20-1.el7 (FEDORA-EPEL-2024-5f61bf98dc)
Text-based disk usage viewer
--------------------------------------------------------------------------------
Update Information:
Update to 1.20. Changes in this version:
Revert default color scheme back to ���off���
Rewrite man page in mdoc, drop pod2man dependency
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 21 2024 Richard Fearn <richardfearn(a)gmail.com> - 1.20-1
- Update to 1.20
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2276264 - ncdu 1.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2276264
--------------------------------------------------------------------------------