The following Fedora EPEL 9 Security updates need testing:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d7c164b6bb
borgbackup-1.2.6-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
chromium-116.0.5845.187-1.el9
classification-banner-1.7.2-1.el9
plantuml-1.2023.7-1.el9
prosody-0.12.4-1.el9
python-osc-lib-2.7.0-4.el9
python-scitokens-1.8.1-1.el9
python-unidiff-0.7.5-1.el9
reStream-1.2.0-1.el9
rust-arg_enum_proc_macro-0.3.4-1.el9
rust-document-features-0.2.7-1.el9
rust-libc-0.2.148-1.el9
rust-litrs-0.4.0-1.el9
rust-unicode-ident-1.0.12-1.el9
xournalpp-1.2.1-1.el9
Details about builds:
================================================================================
chromium-116.0.5845.187-1.el9 (FEDORA-EPEL-2023-788f9bbb3f)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 116.0.5845.187. Fixes following security issue: CVE-2023-4863 ----
update to 116.0.5845.179. Fixes following security issues: CVE-2023-4427
CVE-2023-4428 CVE-2023-4429 CVE-2023-4430 CVE-2023-4431 CVE-2023-4572
CVE-2023-4761 CVE-2023-4762 CVE-2023-4763 CVE-2023-4764
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 12 2023 Than Ngo <than(a)redhat.com> - 116.0.5845.187-1
- update to 116.0.5845.187
* Fri Sep 8 2023 Than Ngo <than(a)redhat.com> - 116.0.5845.179-1
- update to 116.0.5845.179
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2234749 - CVE-2023-4427 CVE-2023-4428 CVE-2023-4429 CVE-2023-4430
CVE-2023-4431 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2234749
[ 2 ] Bug #2234750 - CVE-2023-4427 CVE-2023-4428 CVE-2023-4429 CVE-2023-4430
CVE-2023-4431 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2234750
[ 3 ] Bug #2235800 - CVE-2023-4572 chromium: chromium-browser: Use after free in
MediaStream [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235800
[ 4 ] Bug #2235801 - CVE-2023-4572 chromium: chromium-browser: Use after free in
MediaStream [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235801
[ 5 ] Bug #2236152 - CVE-2021-29390 chromium: libjpeg-turbo: heap-buffer-overflow
vulnerability in decompress_smooth_data in jdcoefct.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2236152
[ 6 ] Bug #2237509 - CVE-2023-4761 CVE-2023-4762 CVE-2023-4763 CVE-2023-4764 chromium:
various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2237509
[ 7 ] Bug #2237510 - CVE-2023-4761 CVE-2023-4762 CVE-2023-4763 CVE-2023-4764 chromium:
various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2237510
[ 8 ] Bug #2238432 - CVE-2023-4863 chromium: chromium-browser: Heap buffer overflow in
WebP [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2238432
[ 9 ] Bug #2238433 - CVE-2023-4863 chromium: chromium-browser: Heap buffer overflow in
WebP [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2238433
--------------------------------------------------------------------------------
================================================================================
classification-banner-1.7.2-1.el9 (FEDORA-EPEL-2023-5b344a77b6)
Displays Classification Banner for a Graphical Session
--------------------------------------------------------------------------------
Update Information:
Remove our patches and release 1.7.2 (fedora#2238487) ---- Initial release for
EPEL9
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 12 2023 Daniel Milnes <daniel(a)daniel-milnes.uk> - 1.7.2-1
- Remove our patches and release 1.7.2 (fedora#2238487)
* Sat Sep 9 2023 Daniel Milnes <daniel(a)daniel-milnes.uk> - 1.7.1-4
- Make sure patches are actually in git
* Sat Sep 9 2023 Daniel Milnes <daniel(a)daniel-milnes.uk> - 1.7.1-3
- Migrate to SPDX format
* Sat Sep 9 2023 Daniel Milnes <daniel(a)daniel-milnes.uk> - 1.7.1-2
- Migrate to pyproject_srpm_macros
* Sat Sep 9 2023 Daniel Milnes <daniel(a)daniel-milnes.uk> - 1.7.1-1
- Update to 1.7.1-ish (fedora#2219961)
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.0-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jun 15 2023 Python Maint <python-maint(a)redhat.com> - 1.7.0-21
- Rebuilt for Python 3.12
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.0-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.0-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 1.7.0-18
- Rebuilt for Python 3.11
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.7.0-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
plantuml-1.2023.7-1.el9 (FEDORA-EPEL-2023-052a620844)
Program to generate UML diagram from a text description
--------------------------------------------------------------------------------
Update Information:
Updated version to 1.2023.7
--------------------------------------------------------------------------------
ChangeLog:
* Thu May 18 2023 Sandipan Roy <bytehackr(a)fedoraproject.org> - 1:1.2023.7-1
- Updated version to 1.2023.7
- rhbz#2237984
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2237984 - plantuml package for EPEL is over a year old
https://bugzilla.redhat.com/show_bug.cgi?id=2237984
--------------------------------------------------------------------------------
================================================================================
prosody-0.12.4-1.el9 (FEDORA-EPEL-2023-0cc2dac4d8)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
# Prosody 0.12.4 Upstream is pleased to announce a new minor release from
their stable branch. Upstream is relieved to announce this overdue maintenance
release containing a number of bug fixes and also some improvements from the
last few months. Especially the `prosodyctl check` tool which gained some new
diagnostic checks as well as handling of configuration option types the same way
Prosody itself does. ## Minor changes * core.certmanager: Update Mozilla TLS
config to version 5.7 * util.error: Fix error on conversion of invalid error
stanza * util.array: Fix `new()` library function * util.array: Expose
`new()` on module table * prosodyctl: Fix output of error messages containing
`%` * util.prosodyctl.check: Correct suggested replacement for `disallow_s2s`
* util.prosodyctl.check: Allow same config syntax variants as in Prosody for
some options * util.prosodyctl.check: Fix error where hostname can���t be turned
into A label * util.prosodyctl.check: Hint about the `external_addresses`
config option * util.prosodyctl.check: Suggest `http_cors_override` instead of
older CORS settings * util.prosodyctl.check: Validate format of module list
options * mod_websocket: Add a `pre-session-close` event * mod_smacks: Fix
stray watchdog closing sessions * mod_csi_simple: Disable revert-to-inactive
timer when going to active mode * mod_csi_simple: Clear delayed active mode
timer on disable * mod_admin_shell: Fix display of remote cert status when
expired etc * mod_smacks: Replace existing watchdog when starting hibernation
* mod_http: Fix error if `access_control_allow_origins` is set * mod_pubsub:
Send correct `jid` attribute in disco#items * mod_http: Unhook CORS handlers
only if active to fix an error * mod_s2s: Add event where resolver for s2sout
can be tweaked
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 13 2023 Robert Scheck <robert(a)fedoraproject.org> 0.12.4-1
- Upgrade to 0.12.4 (#2172143)
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jul 11 2023 Franti��ek Zatloukal <fzatlouk(a)redhat.com> - 0.12.3-2
- Rebuilt for ICU 73.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2172143 - prosody-0.12.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2172143
--------------------------------------------------------------------------------
================================================================================
python-osc-lib-2.7.0-4.el9 (FEDORA-EPEL-2023-525b01f7db)
OpenStack library for writing OSC plugins
--------------------------------------------------------------------------------
Update Information:
Latest build for EPEL 9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 9 2023 Joel Capitao <jcapitao(a)redhat.com> - 2.7.0-4
- Remove mock Requirement and BR
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Mon Jul 10 2023 Python Maint <python-maint(a)redhat.com> - 2.7.0-2
- Rebuilt for Python 3.12
* Fri Apr 14 2023 Karolina Kula <kkula(a)redhat.com> 2.7.0-1
- Update to upstream version 2.7.0
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.6.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Nov 17 2022 Alfredo Moralejo <amoralej(a)redhat.com> 2.6.2-1
- Update to upstream version 2.6.2
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue Jun 21 2022 Python Maint <python-maint(a)redhat.com> - 2.5.0-2
- Rebuilt for Python 3.11
* Mon May 23 2022 Joel Capitao <jcapitao(a)redhat.com> 2.5.0-1
- Update to upstream version 2.5.0
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2211589 - Please branch and build python-osc-lib in epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2211589
--------------------------------------------------------------------------------
================================================================================
python-scitokens-1.8.1-1.el9 (FEDORA-EPEL-2023-0bcf47303f)
SciToken reference implementation library
--------------------------------------------------------------------------------
Update Information:
Initial upload
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 9 2023 Derek Weitzel <dweitzel(a)unl.edu> - 1.8.1-1
- Turn off tests that require networking
* Tue Aug 8 2023 Derek Weitzel <dweitzel(a)unl.edu> - 1.8.0-1
- Add demo token issuer convenience functions
- Improve testing of deserialization
- Add RPM improvements for EPEL
* Tue Nov 22 2022 Derek Weitzel <dweitzel(a)unl.edu> - 1.7.4-1
- Fix the version within the package
* Tue Nov 22 2022 Derek Weitzel <dweitzel(a)unl.edu> - 1.7.3-1
- Remove aud enforcement from deserailize function
- Add configuration for readthedocs
- Remove six dependency
* Tue Oct 4 2022 Derek Weitzel <dweitzel(a)unl.edu> - 1.7.2-1
- Documentation updates
* Wed Sep 28 2022 Derek Weitzel <dweitzel(a)unl.edu> - 1.7.1-1
- Documentation updates
- Fix setup tools and add pyproject.toml
* Fri Feb 18 2022 Derek Weitzel <dweitzel(a)unl.edu> - 1.7.0-1
- Fix serialize mismatch between Python 3 and Python 2
- Fix bug decoding a token with no audience
- Update algorithm used to test UnsupportedKeyException
- Update pyjwt version in requirements.txt
- Default cached public keys set to 4 days
* Wed Nov 3 2021 Brian Lin <blin(a)cs.wisc.edu> - 1.6.2-1
- Fix Python library version (SOFTWARE-4879)
* Wed Nov 3 2021 Brian Lin <blin(a)cs.wisc.edu> - 1.6.1-1
- Reduce PyJWT version requirement made possible by #121 (SOFTWARE-4879)
* Mon Oct 11 2021 Derek Weitzel <dweitzel(a)cse.unl.edu> - 1.6.0-1
- Ensure compatibility with older versions of PyJWT
- Adding multiple aud in token support
* Mon Oct 11 2021 Derek Weitzel <dweitzel(a)cse.unl.edu> - 1.5.0-1
- Include tests in distribution
- Bump pyjwt version
- Add test run with minimum dependencies
- Run continuous integration on macOS and windows
- Check verified claims for issuer in SciToken.serialize
- Add base SciTokensException class
- Remove verify=False keyword from calls to decode()
- Print package list in CI jobs
- Use python3_pkgversion macro in RPM package names
- Move package version declaration into 'scitokens' module
- Fix deprecation warning from cryptography.utils.int_from_bytes
--------------------------------------------------------------------------------
================================================================================
python-unidiff-0.7.5-1.el9 (FEDORA-EPEL-2023-396c08daf1)
Python library to parse and interact with unified diffs (patches)
--------------------------------------------------------------------------------
Update Information:
Automatic update for python-unidiff-0.7.5-1.el9.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 13 2023 Packit <hello(a)packit.dev> - 0.7.5-1
- New upstream release 0.7.5 (rhbz#1993708)
--------------------------------------------------------------------------------
================================================================================
reStream-1.2.0-1.el9 (FEDORA-EPEL-2023-e7aca3ba5a)
Stream your reMarkable screen over SSH
--------------------------------------------------------------------------------
Update Information:
Initial import (fedora#2238451)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 13 2023 Daniel Milnes <daniel(a)daniel-milnes.uk> - 1.2.0-1
- Initial import (fedora#2238451)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2238451 - Review Request: reStream - Screensharing For reMarkable eInk
Tablet
https://bugzilla.redhat.com/show_bug.cgi?id=2238451
--------------------------------------------------------------------------------
================================================================================
rust-arg_enum_proc_macro-0.3.4-1.el9 (FEDORA-EPEL-2023-db3be9dad7)
Procedural macro compatible with clap arg_enum
--------------------------------------------------------------------------------
Update Information:
Update to version 0.3.4.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 13 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.4-1
- Update to version 0.3.4; Fixes RHBZ#2238499
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jun 7 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.2-5
- Regenerate with rust2rpm v24
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-document-features-0.2.7-1.el9 (FEDORA-EPEL-2023-c60acd8138)
Extract documentation for the feature flags from comments in Cargo.toml
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the document-features and litrs crates.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 13 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.7-1
- Initial import (#2238171)
--------------------------------------------------------------------------------
================================================================================
rust-libc-0.2.148-1.el9 (FEDORA-EPEL-2023-9b2b29ff2a)
Raw FFI bindings to platform libraries like libc
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.148.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 13 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.148-1
- Update to version 0.2.148; Fixes RHBZ#2238726
--------------------------------------------------------------------------------
================================================================================
rust-litrs-0.4.0-1.el9 (FEDORA-EPEL-2023-c60acd8138)
Parse and inspect Rust literals
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the document-features and litrs crates.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 11 2023 Kalev Lember <klember(a)redhat.com> - 0.4.0-1
- Initial Fedora packaging (rhbz#2230724)
--------------------------------------------------------------------------------
================================================================================
rust-unicode-ident-1.0.12-1.el9 (FEDORA-EPEL-2023-dc6cbdfd81)
Determine whether characters have the XID_Start or XID_Continue properties
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.12.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 13 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.0.12-1
- Update to version 1.0.12; Fixes RHBZ#2238683
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.11-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
xournalpp-1.2.1-1.el9 (FEDORA-EPEL-2023-6ef733ca8a)
Handwriting note-taking software with PDF annotation support
--------------------------------------------------------------------------------
Update Information:
Update to 1.2.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 13 2023 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1.2.1-1
- Update to 1.2.1
--------------------------------------------------------------------------------