The following Fedora EPEL 9 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0d11a63127
chromium-120.0.6099.224-1.el9
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-601a7ad770
vorbis-tools-1.4.2-10.el9
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-11c0b9b06a
prometheus-podman-exporter-1.7.0-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
atril-1.26.2-1.el9
bluechi-0.7.0-2.el9
csdiff-3.2.0-1.el9
csmock-3.5.1-1.el9
indent-2.2.13-5.el9
initoverlayfs-0.991-1.el9
knot-3.3.4-1.el9
kokkos-4.2.00-2.el9
kwalletcli-3.03-1.el9
php-pecl-dio-0.2.2-1.el9
phytool-2-3.el9
rust-hickory-proto-0.24.0-2.el9
rust-openssl-0.10.63-1.el9
rust-openssl-sys-0.9.99-1.el9
Details about builds:
================================================================================
atril-1.26.2-1.el9 (FEDORA-EPEL-2024-5e8a045fdd)
Document viewer
--------------------------------------------------------------------------------
Update Information:
- update to 1.26.2 - fix security security advisory
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.2-1
- update to 1.26.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2258392 - CVE-2023-51698 atril: vulnerable to Command Injection Vulnerability
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2258392
[ 2 ] Bug #2258393 - CVE-2023-51698 atril: vulnerable to Command Injection Vulnerability
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2258393
--------------------------------------------------------------------------------
================================================================================
bluechi-0.7.0-2.el9 (FEDORA-EPEL-2024-9c2050e652)
A systemd service controller for multi-nodes environments
--------------------------------------------------------------------------------
Update Information:
Update bluechi to 0.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Michael Engel <mengel(a)redhat.com> - 0.7.0-1
- Update to 0.7.0
- Updated URL to new eclipse-bluechi GitHub organization
- Fixed typos in description
- Aligned selinux policy according to GitHub repo
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
csdiff-3.2.0-1.el9 (FEDORA-EPEL-2024-53ae0d1a4a)
Non-interactive tools for processing code scan results in plain-text
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Kamil Dudka <kdudka(a)redhat.com> 3.2.0-1
- update to latest upstream release
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jan 18 2024 Jonathan Wakely <jwakely(a)redhat.com> - 3.1.0-2
- Rebuilt for Boost 1.83
--------------------------------------------------------------------------------
================================================================================
csmock-3.5.1-1.el9 (FEDORA-EPEL-2024-53ae0d1a4a)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Kamil Dudka <kdudka(a)redhat.com> 3.5.1-1
- update to latest upstream
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.5.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
indent-2.2.13-5.el9 (FEDORA-EPEL-2024-8e93f1b716)
A GNU program for formatting C code
--------------------------------------------------------------------------------
Update Information:
This release fixes a heap buffer underread in indent tool when processing a code
in which an opening parenthesis follows a comment with a text.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Petr Pisar <ppisar(a)redhat.com> - 2.2.13-5
- Fix a heap buffer underread in set_buf_break() (bug #2259883)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2259883 - Heap-buffer-overflow at src/output.c:319
https://bugzilla.redhat.com/show_bug.cgi?id=2259883
--------------------------------------------------------------------------------
================================================================================
initoverlayfs-0.991-1.el9 (FEDORA-EPEL-2024-70786003d7)
An initial scalable filesystem for Linux operating systems
--------------------------------------------------------------------------------
Update Information:
Updated to 0.991 release.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 22 2024 Stephen Smoogen <smooge(a)fedoraproject.org> - 0.991-1
- Updated to 0.991 release.
--------------------------------------------------------------------------------
================================================================================
knot-3.3.4-1.el9 (FEDORA-EPEL-2024-ccedba8460)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
Knot DNS 3.3.4 (and 3.2.12 for EPEL7)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.3.4-1
- Update to 3.3.4
--------------------------------------------------------------------------------
================================================================================
kokkos-4.2.00-2.el9 (FEDORA-EPEL-2024-04020f9ce9)
Kokkos C++ Performance Portability Programming
--------------------------------------------------------------------------------
Update Information:
Initial import into epel9
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.2.00-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Tue Nov 21 2023 Cezary Skrzy��ski <cezary.skrzynski(a)ng-analytics.com> - 4.2.00-1
- Version bump to v4.2.00 (bug #2250814)
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.00-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Fri Jun 30 2023 Cezary Skrzy��ski <cezary.skrzynski(a)ng-analytics.com> - 4.1.00-1
- Version bump to v4.1.00 (bug #2175429)
* Wed May 10 2023 Cezary Skrzy��ski <cezary.skrzynski(a)ng-analytics.com> - 4.0.01-1
- Version bump to v4.0.01 (bug #2175429)
* Mon Mar 6 2023 Cezary Skrzy��ski <cezary.skrzynski(a)ng-analytics.com> - 4.0.00-1
- Version bump to v4.0.00 (bug #2175429)
* Tue Feb 28 2023 Cezary Skrzy��ski <cezary.skrzynski(a)ng-analytics.com> - 3.7.01-3
- Fix missing include
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.01-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Dec 8 2022 Cezary Skrzy��ski <cezary.skrzynski(a)ng-analytics.com> - 3.7.01-1
- Version bump to v3.7.01 (bug #2151701)
* Thu Sep 22 2022 Cezary Skrzy��ski <cezary.skrzynski(a)ng-analytics.com> - 3.7.00-1
- Version bump to v3.7.00 (bug #2128805)
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6.01-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Jul 6 2022 Cezary Skrzy��ski <cezary.skrzynski(a)ng-analytics.com> - 3.6.01-1
- Version bump to v3.6.01 (bug #2103824)
* Wed Apr 27 2022 Christoph Junghans <junghans(a)votca.org> - 3.6.00-1
- Version bump to v3.6.00 (bug #2026409)
--------------------------------------------------------------------------------
================================================================================
kwalletcli-3.03-1.el9 (FEDORA-EPEL-2024-57a2708ccf)
CLI for the KDE Wallet
--------------------------------------------------------------------------------
Update Information:
Build for EPEL9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 11 2021 Orion Poplawski <orion(a)cora.nwra.com> - 3.03-1
- Update to 3.03
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.00-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.00-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.00-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.00-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
php-pecl-dio-0.2.2-1.el9 (FEDORA-EPEL-2024-8c7039d7b6)
Direct I/O functions
--------------------------------------------------------------------------------
Update Information:
**Version 0.2.2** - fix GH-12 Memory leak in dio_read
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Remi Collet <remi(a)fedoraproject.org> - 0.2.2-1
- update to 0.2.2
- use SPDX license ID
--------------------------------------------------------------------------------
================================================================================
phytool-2-3.el9 (FEDORA-EPEL-2024-c609e59380)
CLI for Linux MDIO register access
--------------------------------------------------------------------------------
Update Information:
Update comments to point to upstream PR
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 22 2024 Stephen Smoogen <smooge(a)fedoraproject.org> - 2-3
- Update comments to point to upstream PR
- Update man page.
- Fixed man page entry to match spec review
* Wed Jan 17 2024 Stephen Smoogen <smooge(a)fedoraproject.org> - 2-2
- Make changes to match spec review
https://bugzilla.redhat.com/show_bug.cgi?id=2258110
- Make debugsource not run on el9
- Fix phytool code for asprintf warning
- Fix makefile for missing bindir and md5sum
* Thu Jan 11 2024 Stephen Smoogen <ssmoogen(a)redhat.com> 2-1
- Initial spec file creation.
- Confirm license in SPDX format
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2258110 - Review Request: phytool - tool to read kernel MDIO registers
https://bugzilla.redhat.com/show_bug.cgi?id=2258110
--------------------------------------------------------------------------------
================================================================================
rust-hickory-proto-0.24.0-2.el9 (FEDORA-EPEL-2024-08b7e7f00c)
Hickory DNS is a safe and secure DNS library
--------------------------------------------------------------------------------
Update Information:
Bump dependencies on the h3 crate to v0.0.3 and on the h3-quinn crate to v0.0.4
to fix FTI issues of some subpackages.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.24.0-2
- Bump h3 dependency to 0.0.3 and h3-quinn dependency to 0.0.4
--------------------------------------------------------------------------------
================================================================================
rust-openssl-0.10.63-1.el9 (FEDORA-EPEL-2024-258c28ff19)
OpenSSL bindings
--------------------------------------------------------------------------------
Update Information:
- Update the openssl crate to version 0.10.63. - Update the openssl-sys crate to
version 0.9.99. This update also includes a patch so that applications which
use the default constructor for an OpenSSL cipher context will get
`PROFILE=SYSTEM` instead of a custom hard-coded list of ciphers.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.10.63-1
- Update to version 0.10.63; Fixes RHBZ#2259299
--------------------------------------------------------------------------------
================================================================================
rust-openssl-sys-0.9.99-1.el9 (FEDORA-EPEL-2024-258c28ff19)
FFI bindings to OpenSSL
--------------------------------------------------------------------------------
Update Information:
- Update the openssl crate to version 0.10.63. - Update the openssl-sys crate to
version 0.9.99. This update also includes a patch so that applications which
use the default constructor for an OpenSSL cipher context will get
`PROFILE=SYSTEM` instead of a custom hard-coded list of ciphers.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.9.99-1
- Update to version 0.9.99; Fixes RHBZ#2259300
--------------------------------------------------------------------------------