The following Fedora EPEL 9 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-0963d0e76e
unrealircd-6.0.2-1.el9
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-00bbb857bb
phoronix-test-suite-10.8.2-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
kdeplasma-addons-5.23.5-2.el9
kf5-knewstuff-5.90.0-2.el9
libre-2.2.0-1.el9
librem-2.0.0-2.el9
lm_sensors-epel-3.6.0-10.el9.0.1
netatalk-3.1.13-1.el9
plasma-discover-5.23.5-2.el9
plasma-workspace-5.23.5-2.el9
python-myrepos-utils-0.0.1.1-1.el9
rubygem-rails-7.0.2.3-1.el9
rubygem-sqlite3-1.4.2-8.el9
Details about builds:
================================================================================
kdeplasma-addons-5.23.5-2.el9 (FEDORA-EPEL-2022-d68126e673)
Additional Plasmoids for Plasma 5
--------------------------------------------------------------------------------
Update Information:
plasma-discover and knewstuff are causing a distributed denial of service attack
on
KDE.org These packages have been patched to use caches more, check less
often, and check servers that are setup better for high loads.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 25 2022 Troy Dawson <tdawson(a)redhat.com> - 5.23.5-2
- Correct download enpoints (#2068568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068568 - [EPEL9] plasma-discover / knewstuff fix needed
https://bugzilla.redhat.com/show_bug.cgi?id=2068568
--------------------------------------------------------------------------------
================================================================================
kf5-knewstuff-5.90.0-2.el9 (FEDORA-EPEL-2022-d68126e673)
KDE Frameworks 5 Tier 3 module for downloading application assets
--------------------------------------------------------------------------------
Update Information:
plasma-discover and knewstuff are causing a distributed denial of service attack
on
KDE.org These packages have been patched to use caches more, check less
often, and check servers that are setup better for high loads.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 25 2022 Troy Dawson <tdawson(a)redhat.com> - 5.90.0-2
- Add patch for providerFileUrl and caching (#2068568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068568 - [EPEL9] plasma-discover / knewstuff fix needed
https://bugzilla.redhat.com/show_bug.cgi?id=2068568
--------------------------------------------------------------------------------
================================================================================
libre-2.2.0-1.el9 (FEDORA-EPEL-2022-1d94fcd35e)
Library for real-time communications and SIP stack
--------------------------------------------------------------------------------
Update Information:
# libre v2.2.0 (2022-03-28) - tls: fix coverity defect - http/client:
`read_file` check `ftell` return value - udp: fix coverity defect - cmake:
add detection of `HAVE_ARC4RANDOM` - Fix coverity issues - Support adding
CRLs - json/decode: fix possible out of bound access, if code changes -
tls/tls_add_crlpem: use `const` - udp: fix coverity defect - dns: fix
Coverity Defect - tls: use `const` pointer for `tls_add_capem()` -
srtp/srtcp: add sanity check for `rtcp->tag_len` - shim: new module from rew
- Trice module - retest trice - Add `try_into` conversion helper and drop
gcc 4.8 support - rtp: fix signed/unsigned warning on WIN32 - fix build
error on openbsd arm64 (raspberry pi) - cmake: disable C extensions (like
`make`) - fmt: add bool decode from `struct pl` - sdp: a utility function
for decoding SDP direction - sa/sa_ntop: check `inet_ntop()` return value -
sa_pton: use `sa_addrinfo` for interface suffix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 2.2.0-1
- Upgrade to 2.2.0 (#2069304)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069304 - libre-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069304
--------------------------------------------------------------------------------
================================================================================
librem-2.0.0-2.el9 (FEDORA-EPEL-2022-1d94fcd35e)
Library for real-time audio and video processing
--------------------------------------------------------------------------------
Update Information:
# libre v2.2.0 (2022-03-28) - tls: fix coverity defect - http/client:
`read_file` check `ftell` return value - udp: fix coverity defect - cmake:
add detection of `HAVE_ARC4RANDOM` - Fix coverity issues - Support adding
CRLs - json/decode: fix possible out of bound access, if code changes -
tls/tls_add_crlpem: use `const` - udp: fix coverity defect - dns: fix
Coverity Defect - tls: use `const` pointer for `tls_add_capem()` -
srtp/srtcp: add sanity check for `rtcp->tag_len` - shim: new module from rew
- Trice module - retest trice - Add `try_into` conversion helper and drop
gcc 4.8 support - rtp: fix signed/unsigned warning on WIN32 - fix build
error on openbsd arm64 (raspberry pi) - cmake: disable C extensions (like
`make`) - fmt: add bool decode from `struct pl` - sdp: a utility function
for decoding SDP direction - sa/sa_ntop: check `inet_ntop()` return value -
sa_pton: use `sa_addrinfo` for interface suffix
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Robert Scheck <robert(a)fedoraproject.org> 2.0.0-2
- Rebuilt for libre 2.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2069304 - libre-2.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2069304
--------------------------------------------------------------------------------
================================================================================
lm_sensors-epel-3.6.0-10.el9.0.1 (FEDORA-EPEL-2022-08bf0eaa6a)
Hardware monitoring tools
--------------------------------------------------------------------------------
Update Information:
Rebuild due to unretirement mistake
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 28 2022 Troy Dawson <tdawson(a)redhat.com> - 3.6.0-10.0.1
- Rebuild due to unretirement mistake
* Tue Jan 4 2022 Troy Dawson <tdawson(a)redhat.com> - 3.6.0-10
- Convert RHEL9 lm_sensors to lm_sensors-epel with just lm_sensors-devel
subpackage on s390x and ppc64le only
- Related: rhbz#2035370
* Mon Aug 9 2021 Mohan Boddu <mboddu(a)redhat.com> - 3.6.0-10
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
* Fri Apr 16 2021 Mohan Boddu <mboddu(a)redhat.com> - 3.6.0-9
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
* Tue Mar 9 2021 Artem Egorenkov <aegorenk(a)redhat.com> - 3.6.0-8
- Add support for AMD CPU Family 19h
* Wed Mar 3 2021 Artem Egorenkov <aegorenk(a)redhat.com> - 3.6.0-7
- New flag for no sensors added. This flag is used in VM environment
to make sensors binaries not fail if no sensors was detected.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.0-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Aug 18 2020 Ond��ej Lyson��k <olysonek(a)redhat.com> - 3.6.0-5
- Fix systemd warning about use of /var/run
- Resolves: rhbz#1869421
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
netatalk-3.1.13-1.el9 (FEDORA-EPEL-2022-108869f05a)
Open Source Apple Filing Protocol(AFP) File Server
--------------------------------------------------------------------------------
Update Information:
3.1.13 release
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 22 2022 Andrew Bauer <zonexpertconsulting(a)outlook.com> - 5:3.1.13-1
- 3.1.13 release
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
5:3.1.12-28
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
plasma-discover-5.23.5-2.el9 (FEDORA-EPEL-2022-d68126e673)
KDE and Plasma resources management GUI
--------------------------------------------------------------------------------
Update Information:
plasma-discover and knewstuff are causing a distributed denial of service attack
on
KDE.org These packages have been patched to use caches more, check less
often, and check servers that are setup better for high loads.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 25 2022 Troy Dawson <tdawson(a)redhat.com> - 5.23.5-2
- trigger offline updates less often (#2068568)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068568 - [EPEL9] plasma-discover / knewstuff fix needed
https://bugzilla.redhat.com/show_bug.cgi?id=2068568
--------------------------------------------------------------------------------
================================================================================
plasma-workspace-5.23.5-2.el9 (FEDORA-EPEL-2022-d68126e673)
Plasma workspace, applications and applets
--------------------------------------------------------------------------------
Update Information:
plasma-discover and knewstuff are causing a distributed denial of service attack
on
KDE.org These packages have been patched to use caches more, check less
often, and check servers that are setup better for high loads.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 25 2022 Troy Dawson <tdawson(a)redhat.com> - 5.23.5-2
- Correct download enpoints (#2068568)
- Enable selinuxuser_execmod (#2058657)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068568 - [EPEL9] plasma-discover / knewstuff fix needed
https://bugzilla.redhat.com/show_bug.cgi?id=2068568
--------------------------------------------------------------------------------
================================================================================
python-myrepos-utils-0.0.1.1-1.el9 (FEDORA-EPEL-2022-a1d3748663)
Additional utilities for myrepos
--------------------------------------------------------------------------------
Update Information:
Initial Fedora release of myrepos-utils
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 28 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> 0.0.1.1-1
- Initial Fedora package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2068623 - Review Request: python-myrepos-utils - Additional utilities for
myrepos
https://bugzilla.redhat.com/show_bug.cgi?id=2068623
--------------------------------------------------------------------------------
================================================================================
rubygem-rails-7.0.2.3-1.el9 (FEDORA-EPEL-2022-291111dea9)
Full-stack web application framework
--------------------------------------------------------------------------------
Update Information:
Initial build on epel9
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 14 2022 Pavel Valena <pvalena(a)redhat.com> - 1:7.0.2.3-1
- Update to rails 7.0.2.3.
Resolves: rhbz#2032639
* Wed Feb 9 2022 Pavel Valena <pvalena(a)redhat.com> - 1:7.0.2-1
- Update to rails 7.0.2.
Resolves: rhbz#2032639
* Thu Feb 3 2022 Pavel Valena <pvalena(a)redhat.com> - 1:7.0.1-1
- Update to rails 7.0.1.
Resolves: rhbz#2032639
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:6.1.4.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Sep 17 2021 Pavel Valena <pvalena(a)redhat.com> - 1:6.1.4.1-1
- Update to rails 6.1.4.1.
Resolves: rhbz#1995713
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:6.1.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Wed Jun 30 2021 Pavel Valena <pvalena(a)redhat.com> - 1:6.1.4-1
- Update to rails 6.1.4.
Resolves: rhbz#1975977
* Tue May 18 2021 Pavel Valena <pvalena(a)redhat.com> - 1:6.1.3.2-1
- Update to rails 6.1.3.2.
Resolves: rhbz#1957334
* Fri Apr 9 2021 Pavel Valena <pvalena(a)redhat.com> - 1:6.1.3.1-1
- Update to rails 6.1.3.1.
Resolves: rhbz#1943654
* Thu Feb 18 2021 Pavel Valena <pvalena(a)redhat.com> - 1:6.1.3-1
- Update to rails 6.1.3.
Resolves: rhbz#1929857
* Mon Feb 15 2021 Pavel Valena <pvalena(a)redhat.com> - 1:6.1.2.1-1
- Update to rails 6.1.2.1.
Resolves: rhbz#1927031
* Wed Jan 27 2021 Pavel Valena <pvalena(a)redhat.com> - 1:6.1.1-1
- Update to rails 6.1.1.
Resolves: rhbz#1906183
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:6.0.3.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Thu Oct 8 2020 Pavel Valena <pvalena(a)redhat.com> - 1:6.0.3.4-1
- Update to rails 6.0.3.4.
Resolves: rhbz#1886130
* Fri Sep 18 2020 Pavel Valena <pvalena(a)redhat.com> - 1:6.0.3.3-1
- Update to rails 6.0.3.3.
Resolves: rhbz#1877515
* Mon Aug 17 2020 Pavel Valena <pvalena(a)redhat.com> - 1:6.0.3.2-1
- Update to rails 6.0.3.2.
Resolves: rhbz#1742800
* Mon Aug 3 2020 Pavel Valena <pvalena(a)redhat.com> - 6.0.3.1-1
- Update to Rails 6.0.3.1.
Resolves: rhbz#1742800
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:5.2.3-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rubygem-sqlite3-1.4.2-8.el9 (FEDORA-EPEL-2022-e943ba037b)
Allows Ruby scripts to interface with a SQLite3 database
--------------------------------------------------------------------------------
Update Information:
Initial build on epel9
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 26 2022 V��t Ondruch <vondruch(a)redhat.com> - 1.4.2-8
- Rebuilt for
https://fedoraproject.org/wiki/Changes/Ruby_3.1
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Jan 6 2021 V��t Ondruch <vondruch(a)redhat.com> - 1.4.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Changes/Ruby_3.0
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------