The following Fedora EPEL 9 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b305ec138e
indent-2.2.13-4.el9
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c2aea8a27e
xrdp-0.9.23-1.el9
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1e3b2a7b2f
libtommath-1.2.0-10.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
barman-3.8.0-1.el9
gfal2-python-1.12.1-1.el9
jigdo-0.8.2-1.el9
libmongocrypt-1.8.2-1.el9
noggin-1.7.1-4.el9
oidc-agent-5.0.1-1.el9
perl-Crypt-CBC-3.04-13.el9
python-h5io-0.1.9-1.el9
python-pyrate-limiter-3.1.0-1.el9
rust-cargo_metadata-0.17.0-1.el9
rust-cargo_metadata0.15-0.15.4-1.el9
salt-3005.2-1.el9
sexpp-0.8.7-1.el9
Details about builds:
================================================================================
barman-3.8.0-1.el9 (FEDORA-EPEL-2023-408a01ad4f)
Backup and Recovery Manager for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Update to 3.8.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Simone Caronni <negativo17(a)gmail.com> - 3.8.0-1
- Update to 3.8.0.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2236562 - barman-3.8.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2236562
--------------------------------------------------------------------------------
================================================================================
gfal2-python-1.12.1-1.el9 (FEDORA-EPEL-2023-2be6bcec80)
Python bindings for gfal 2
--------------------------------------------------------------------------------
Update Information:
New upstream release v1.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 5 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 1.12.1-1
- Upgrade to upstream release 1.12.1
- Closes bugzilla#2154855, bugzilla#2220000, bugzilla#2225821
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 1.12.0-4
- Rebuilt for Python 3.12
* Mon Feb 20 2023 Jonathan Wakely <jwakely(a)redhat.com> - 1.12.0-3
- Rebuilt for Boost 1.81
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.12.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2154855 - gfal2-python fails to build with Python 3.12: ModuleNotFoundError:
No module named 'distutils'
https://bugzilla.redhat.com/show_bug.cgi?id=2154855
[ 2 ] Bug #2220000 - F39FailsToInstall: python3-gfal2
https://bugzilla.redhat.com/show_bug.cgi?id=2220000
[ 3 ] Bug #2225821 - gfal2-python: FTBFS in Fedora rawhide/f39
https://bugzilla.redhat.com/show_bug.cgi?id=2225821
--------------------------------------------------------------------------------
================================================================================
jigdo-0.8.2-1.el9 (FEDORA-EPEL-2023-9574209622)
Ease distribution of large files over the Internet
--------------------------------------------------------------------------------
Update Information:
- Tweak various sources to fix compilation errrors and warnings with g++ 13 -
Use SPDX license identifier
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 30 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.8.2-1
- Update to 0.8.2
- Use SPDX license identifier
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 26 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.8.1-4
- Fix header inclusions for compiling with GCC 13
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2229053 - jigdo-0.8.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2229053
--------------------------------------------------------------------------------
================================================================================
libmongocrypt-1.8.2-1.el9 (FEDORA-EPEL-2023-cecf66df89)
The companion C library for client side encryption in drivers
--------------------------------------------------------------------------------
Update Information:
**Version 1.8.2** Fixed - Fix possible leaks in Queryable Encryption in errors
on malformed data.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 5 2023 Remi Collet <remi(a)remirepo.net> - 1.8.2-1
- update to 1.8.2
--------------------------------------------------------------------------------
================================================================================
noggin-1.7.1-4.el9 (FEDORA-EPEL-2023-7318dbebd0)
Self-service user portal for FreeIPA for communities
--------------------------------------------------------------------------------
Update Information:
Fixes for FTI issues
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 5 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 1.7.1-4
- Add patch to support flask-babel v3
- Reorganize patches to apply unconditionally
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
oidc-agent-5.0.1-1.el9 (FEDORA-EPEL-2023-f8ce92ae2d)
Managing OpenID Connect tokens on the command line
--------------------------------------------------------------------------------
Update Information:
oidc-agent 5.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 5.0.1-1
- Update to version 5.0.1
- Drop patch oidc-agent-webkit.patch (previously backported
- Drop patch oidc-agent.patch (accepted upstram)
* Sun Aug 20 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 4.5.2-2
- Use webkit2gtk-4.1 (Fedora)
--------------------------------------------------------------------------------
================================================================================
perl-Crypt-CBC-3.04-13.el9 (FEDORA-EPEL-2023-2af18ec68f)
Encrypt Data with Cipher Block Chaining Mode
--------------------------------------------------------------------------------
Update Information:
This update fixes decryption when using the (deprecated) `'header' =>
'randomiv'` mode.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 5 2023 Paul Howarth <paul(a)city-fan.org> - 3.04-13
- Fix decryption of ciphertext created with 'header' => 'randomiv'
https://bugzilla.redhat.com/show_bug.cgi?id=2235322
https://github.com/lstein/Lib-Crypt-CBC/issues/6
https://github.com/lstein/Lib-Crypt-CBC/pull/7
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.04-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue May 30 2023 Michal Josef ��pa��ek <mspacek(a)redhat.com> - 3.04-11
- Fix %patch macro
- Update license to SPDX format
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.04-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.04-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jun 3 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.04-8
- Perl 5.36 re-rebuild of bootstrapped packages
* Wed Jun 1 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.04-7
- Perl 5.36 rebuild
* Wed Mar 2 2022 Paul Howarth <paul(a)city-fan.org> - 3.04-6
- Fix an issue around the -literal_key option (GH#4)
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.04-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2235322 - perl-Crypt-CBC-3.04 of RHEL9 can not decrypt ciphertext created
with 'header' => 'randomiv'
https://bugzilla.redhat.com/show_bug.cgi?id=2235322
--------------------------------------------------------------------------------
================================================================================
python-h5io-0.1.9-1.el9 (FEDORA-EPEL-2023-9df1b2cdda)
Read and write simple Python objects using HDF5
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 23 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.1.9-1
- Update to 0.1.9 (close RHBZ#2233612)
* Thu Aug 3 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.1.8-1
- Update to 0.1.8 (close RHBZ#2221287)
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jul 12 2023 Python Maint <python-maint(a)redhat.com> - 0.1.7-2
- Rebuilt for Python 3.12
* Fri Mar 17 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.1.7-1
- Update to 0.1.7 (close RHBZ#2179363) and use SPDX
- Port to pyproject-rpm-macros
- General spec-file modernization
- Convert License field to SPDX
* Fri Mar 17 2023 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 0.1.2-12
- Backport upstream change for build with numpy 1.24
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.2-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.2-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jun 14 2022 Python Maint <python-maint(a)redhat.com> - 0.1.2-9
- Rebuilt for Python 3.11
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.2-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2236736 - EPEL9 branch for python-h5io?
https://bugzilla.redhat.com/show_bug.cgi?id=2236736
--------------------------------------------------------------------------------
================================================================================
python-pyrate-limiter-3.1.0-1.el9 (FEDORA-EPEL-2023-4be01399c7)
The request rate limiter using Leaky-bucket algorithm
--------------------------------------------------------------------------------
Update Information:
Pyrate_limiter Update to 3.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 5 2023 Steve Cossette <farchord(a)gmail.com> - 3.1.0-1
- Update to 3.1.0
--------------------------------------------------------------------------------
================================================================================
rust-cargo_metadata-0.17.0-1.el9 (FEDORA-EPEL-2023-f87ccb2cde)
Structured access to the output of cargo metadata
--------------------------------------------------------------------------------
Update Information:
- Update the cargo_metadata crate to version 0.17.0. - Add a compat package for
version 0.15 of the cargo_metadata crate.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 5 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.17.0-1
- Update to version 0.17.0; Fixes RHBZ#2225095
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.15.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-cargo_metadata0.15-0.15.4-1.el9 (FEDORA-EPEL-2023-f87ccb2cde)
Structured access to the output of cargo metadata
--------------------------------------------------------------------------------
Update Information:
- Update the cargo_metadata crate to version 0.17.0. - Add a compat package for
version 0.15 of the cargo_metadata crate.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 5 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.15.4-1
- Initial import (cargo_metadata 0.15 compat package)
--------------------------------------------------------------------------------
================================================================================
salt-3005.2-1.el9 (FEDORA-EPEL-2023-d9153eda95)
A parallel remote execution system
--------------------------------------------------------------------------------
Update Information:
Fixes for CVE-2023-20897 and CVE-2023-20898
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 5 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3005.2-1
- 3005.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2237512 - CVE-2023-20898 salt: Git Providers can read from the wrong
environment [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2237512
[ 2 ] Bug #2237514 - CVE-2023-20897 salt: DOS in minion return [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2237514
--------------------------------------------------------------------------------
================================================================================
sexpp-0.8.7-1.el9 (FEDORA-EPEL-2023-8166e85e2c)
S-expressions parser and generator tools
--------------------------------------------------------------------------------
Update Information:
S-expressions parser and generator tools.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 26 2023 Remi Collet <remi(a)remirepo.net> - 0.8.7-1
- update to 0.8.7
- rename to sexpp
* Fri Jun 23 2023 Remi Collet <remi(a)remirepo.net> - 0.8.6-1
- update to 0.8.6
- drop patch merged upstream
* Wed Jun 21 2023 Remi Collet <remi(a)remirepo.net> - 0.8.5-1
- update to 0.8.5
- open
https://github.com/rnpgp/sexp/pull/37 define SOVERSION
* Thu May 4 2023 Remi Collet <remi(a)remirepo.net> - 0.8.4-1
- initial package
- open
https://github.com/rnpgp/sexp/issues/32 build as shared
- open
https://github.com/rnpgp/sexp/issues/33 clarify license
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2216484 - Review Request: sexpp - S-expressions parser and generator tools
https://bugzilla.redhat.com/show_bug.cgi?id=2216484
--------------------------------------------------------------------------------