The following Fedora EPEL 9 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b305ec138e
indent-2.2.13-4.el9
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c2aea8a27e
xrdp-0.9.23-1.el9
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1e3b2a7b2f
libtommath-1.2.0-10.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
OpenImageIO-2.4.15.0-1.el9
composer-2.6.2-1.el9
dh-make-2.202302-1.el9
distribution-gpg-keys-1.92-1.el9
kobo-0.30.1-1.el9
onednn-2.7.5-1.el9
perl-IPC-Signal-1.00-39.el9
perl-Proc-WaitStat-1.00-39.el9
python-os-client-config-2.1.0-9.el9
sleuthkit-4.12.1-1.el9
testcloud-0.9.10-1.el9
Details about builds:
================================================================================
OpenImageIO-2.4.15.0-1.el9 (FEDORA-EPEL-2023-8e3a7009b0)
Library for reading and writing images
--------------------------------------------------------------------------------
Update Information:
## Release 2.4.15.0 (1 Sep 2023) -- compared to 2.4.14.0 * bmp: Fix signed
integer overflow when computing total number of pixels #3948 (by
xiaoxiaoafeifei) * dds: Fix div by 0 during DXT4 DDS load #3959 (by Jesse
Yurkovich) * rla: Invalid read from an empty vector during RLA load #3960 (by
Jesse Yurkovich) * fix: Various protections against corrupted files #3954 * fix:
Improve Utf-8 text rendering #3935 (by Nicolas) * fix: Fix typo in debug output
#3956 (by Jesse Yurkovich) * ustring.h: String literal operator for ustring and
ustringhash #3939 * build Suppress Xcode warnings #3940 (by Anton Dukhovnikov) *
build: Silence gcc new/delete warnings for texturesys #3944 (by Shootfast) *
build Added check for Boost_NO_BOOST_CMAKE, ignore if already set #3961 (by
Mikael Sundell) * build Fix broken libheif < 1.13 #3970 * ci: Make more robust
timer_test #3953 * admin: Relicense code under Apache 2.0 #3938 #3966
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 3 2023 Richard Shaw <hobbes1069(a)gmail.com> - 2.4.15.0-1
- Update to 2.4.15.0.
- Update License tag to SPDX identifiers.
* Mon Aug 7 2023 S��rgio Basto <sergio(a)serjux.com> - 2.4.14.0-2
- Rebuild for opencv 4.8.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2237025 - OpenImageIO-2.4.15.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2237025
--------------------------------------------------------------------------------
================================================================================
composer-2.6.2-1.el9 (FEDORA-EPEL-2023-9d0554a459)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 2.6.2** - 2023-09-03 * Reverted "Fixed binary proxies causing
scripts inspecting `$_SERVER['SCRIPT_NAME']` to detect them, they are now more
transparent (#11562)" which caused a regression (#11617) * Fixed non-zero exit
code on failed audits to only apply to `install --audit` runs and not implicit
audits with `require`, `create-project` or `update` commands (#11616) * Fixed
`create-project` infinite post-install loop in some circumstances (#11613)
---- **Version 2.6.1** - 2023-09-01 * Reverted "Fixed executability of non-
php binaries which are not marked executable (#11557)" which caused a regression
(#11612) ---- **Version 2.6.0** - 2023-09-01 * Added audit.ignore config
setting to ignore security advisories by id or CVE id (#11556, #11605) * Added
`rm` alias to the `remove` command (#11367) * Added runtime platform check to
verify the php-64bit requirement is met (#11334) * Added platform package
detection for lib-pq-libpq and lib-rdkafka-librdkafka (#11418) * Added `--dry-
run` to `dump-autoload` command to allow running --strict-psr checks without
modifying the filesystem (#11608) * Added support for `bump`ing patch level in
`~1.2.3` constraints (#11590) * Added prompt in `require` if the package name
is not found but similar ones exist (#11284) * Added support for env vars and
`~` in repository paths for vcs and artifact repositories (#11453) * Added
support for local directory paths for repositories of type `composer` (#11526)
* Added links to package homepages in `why`/`why-not` command output (#11308)
* Added a `security` key to the `support` key of composer.json to set the URL to
the vulnerability disclosure policy (#11271) * Added support for gathering
security advisories from multiple repositories for a single package (#11436) *
Fixed `install` and `update` exit code to be non-zero if the post-install
security audit failed (#11362) * Fixed binary proxies causing scripts
inspecting `$_SERVER['SCRIPT_NAME']` to detect them, they are now more
transparent (#11562) * Fixed executability of non-php binaries which are not
marked executable (#11557) * Fixed `mtime` modification of the vendor dir to
only happen when packages are modified, and not require lock file modification
to happen (#11593) * Fixed `create-project` using the wrong composer.json file
if one was set via the `COMPOSER` env var (#11493) * Fixed json editing to
preserve indentation when updating json files (#11390) * Fixed handling of
broken junctions on windows (#11550) * Fixed parsing of lib-curl-openssl
version with OSX SecureTransport (#11534) * Fixed svn repo parsing in some
edge cases (#11350) * Fixed handling of archive URLs without file extension
(#11520) * Performance improvement in pool optimization step (#11449, #11450)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Remi Collet <remi(a)remirepo.net> - 2.6.2-1
- update to 2.6.2
* Fri Sep 1 2023 Remi Collet <remi(a)remirepo.net> - 2.6.1-1
- update to 2.6.1
* Fri Sep 1 2023 Remi Collet <remi(a)remirepo.net> - 2.6.0-1
- update to 2.6.0
--------------------------------------------------------------------------------
================================================================================
dh-make-2.202302-1.el9 (FEDORA-EPEL-2023-e5354f28e9)
Tool that converts source archives into Debian package source
--------------------------------------------------------------------------------
Update Information:
Update dh-make to 2.202302 (#2229051)
--------------------------------------------------------------------------------
ChangeLog:
* Sun Sep 3 2023 S��rgio Basto <sergio(a)serjux.com> - 2.202302-1
- Update dh-make to 2.202302 (#2229051)
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.202301-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2229051 - dh-make-2.202302 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2229051
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.92-1.el9 (FEDORA-EPEL-2023-83bb8860e7)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
- add symlinkg to rpmfusion 40 and 41 - update copr keys - add remi fedora 39
link to 2023 key
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.92-1
- add symlinkg to rpmfusion 40 and 41
- update copr keys
- add remi fedora 39 link to 2023 key
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2237224 - mock build for RPM Fusion rawhide/F40 are failing due to missing
keys
https://bugzilla.redhat.com/show_bug.cgi?id=2237224
--------------------------------------------------------------------------------
================================================================================
kobo-0.30.1-1.el9 (FEDORA-EPEL-2023-9a7369dae0)
Python modules for tools development
--------------------------------------------------------------------------------
Update Information:
Update kobo to latest upstream release.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Pavel Simovec <psimovec(a)redhat.com> - 0.30.1-1
- New upstream release 0.30.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2237220 - kobo-0.30.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2237220
--------------------------------------------------------------------------------
================================================================================
onednn-2.7.5-1.el9 (FEDORA-EPEL-2023-9460084673)
Deep Neural Network Library
--------------------------------------------------------------------------------
Update Information:
Update to 2.7.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Nicolas Chauvet <kwizart(a)gmail.com> - 2.7.5-1
- Update to 2.7.5
--------------------------------------------------------------------------------
================================================================================
perl-IPC-Signal-1.00-39.el9 (FEDORA-EPEL-2023-ac6879063b)
Utility functions dealing with signals for Perl
--------------------------------------------------------------------------------
Update Information:
This package contains the Perl module IPC::Signal, which contains utility
functions for dealing with signals and Proc::WaitStat which contains functions
for interpreting and acting on wait status values.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Emmanuel Seyman <emmanuel(a)seyman.fr> - 1.00-39
- Rework dependencies
- migrated to SPDX license
- Replace calls to %{__perl} with /usr/bin/perl
- Use %{make_build} and %{make_install} where appropriate
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00-38
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00-37
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00-36
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon May 30 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.00-35
- Perl 5.36 rebuild
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00-34
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860590 - perl-IPC-Signal missing in EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1860590
[ 2 ] Bug #1860592 - perl-Proc-WaitStat missing in EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1860592
--------------------------------------------------------------------------------
================================================================================
perl-Proc-WaitStat-1.00-39.el9 (FEDORA-EPEL-2023-ac6879063b)
Interpret and act on wait() status values
--------------------------------------------------------------------------------
Update Information:
This package contains the Perl module IPC::Signal, which contains utility
functions for dealing with signals and Proc::WaitStat which contains functions
for interpreting and acting on wait status values.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Emmanuel Seyman <emmanuel(a)seyman.fr> - 1.00-39
- Rework dependencies
- migrated to SPDX license
- Replace calls to %{__perl} with /usr/bin/perl
- Use %{make_build} and %{make_install} where appropriate
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00-38
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00-37
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00-36
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue May 31 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.00-35
- Perl 5.36 rebuild
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.00-34
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860590 - perl-IPC-Signal missing in EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1860590
[ 2 ] Bug #1860592 - perl-Proc-WaitStat missing in EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1860592
--------------------------------------------------------------------------------
================================================================================
python-os-client-config-2.1.0-9.el9 (FEDORA-EPEL-2023-8db4db689b)
OpenStack Client Configuration Library
--------------------------------------------------------------------------------
Update Information:
Latest build for EPEL 9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2211597 - Please branch and build python-os-client-config in epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2211597
--------------------------------------------------------------------------------
================================================================================
sleuthkit-4.12.1-1.el9 (FEDORA-EPEL-2023-21f47399c9)
The Sleuth Kit (TSK)
--------------------------------------------------------------------------------
Update Information:
Update to 4.12.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Nicolas Chauvet <kwizart(a)gmail.com> - 4.12.1-1
- Update to 4.12.1
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.12.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.12.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Dec 28 2022 Nicolas Chauvet <kwizart(a)gmail.com> - 4.12.0-1
- Update to 4.12.0
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.11.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.11.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Nov 4 2021 Nicolas Chauvet <kwizart(a)gmail.com> - 4.11.1-1
- Update to 4.11.1
--------------------------------------------------------------------------------
================================================================================
testcloud-0.9.10-1.el9 (FEDORA-EPEL-2023-5df47fbecf)
Tool for running cloud images locally
--------------------------------------------------------------------------------
Update Information:
- configuration abstraction (domain/apiv2 by lbrabec) - Add workaround for
Ubuntu - Remove compatibility code for tmt < 1.22 - Drop long deprecated
find_vm_ip from cli - Always try to run dhclient in cloud-init - Clarify that
testcloud runs VMs and no containers (Anatoli Babenia) - Support Fedora
OpenStack images handling - [Domain API] Cleanups, fixes, refactors, Part 1/n -
[Domain API] Cleanups, fixes, refactors, Part 2/n - Downloader: support unknown
file sizes, add retry mechanism - domain/apiv2: Fix CoreOS - Instance: inherit
coreos param too for DomainConfiguration - Storage: provide domain/apiv2
facilities for storage sizing, refactor
--------------------------------------------------------------------------------
ChangeLog:
* Mon Sep 4 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.10-1
- configuration abstraction (domain/apiv2 by lbrabec)
- Add workaround for Ubuntu
- Remove compatibility code for tmt < 1.22
- Drop long deprecated find_vm_ip from cli
- Always try to run dhclient in cloud-init
- Clarify that testcloud runs VMs and no containers (Anatoli Babenia)
- Support Fedora OpenStack images handling
- [Domain API] Cleanups, fixes, refactors, Part 1/n
- [Domain API] Cleanups, fixes, refactors, Part 2/n
- Downloader: support unknown file sizes, add retry mechanism
- domain/apiv2: Fix CoreOS
- Instance: inherit coreos param too for DomainConfiguration
- Storage: provide domain/apiv2 facilities for storage sizing, refactor
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jun 14 2023 Python Maint <python-maint(a)redhat.com> - 0.9.2-2
- Rebuilt for Python 3.12
--------------------------------------------------------------------------------