The following Fedora EPEL 9 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f4d52e6818
mosquitto-2.0.17-1.el9
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8849a14e7f
caddy-2.6.4-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
ansible-collection-awx-awx-23.0.0-1.el9
erofs-utils-1.6-3.el9
ghc9.4-9.4.7-23.el9
indent-2.2.13-4.el9
knot-3.3.0-1.el9
knot-resolver-5.7.0-2.el9
mingw-pcre2-10.42-3.el9
papirus-icon-theme-20230801-1.el9
pcsc-perl-1.4.14-24.el9
python-damo-1.9.5-1.el9
rust-errno-0.3.3-1.el9
rust-nix-0.26.4-1.el9
tinyexr-1.0.1-7.el9
weechat-4.0.4-3.el9
Details about builds:
================================================================================
ansible-collection-awx-awx-23.0.0-1.el9 (FEDORA-EPEL-2023-466ac334ce)
Ansible modules and plugins for working with AWX
--------------------------------------------------------------------------------
Update Information:
New package(s) for Ansible collection of Awx
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 29 2023 Andrew H <aheath1992(a)gmail.com> - 23.0.0-1
- Update to 23.0.0.
* Wed Aug 23 2023 Andrew H <aheath1992(a)gmail.com> - 22.7.0-1
- Update to 22.7.0.
* Fri Jul 28 2023 Andrew H <aheath1992(a)gmail.com> - 22.6.0-1
- Initial Package
--------------------------------------------------------------------------------
================================================================================
erofs-utils-1.6-3.el9 (FEDORA-EPEL-2023-1dc1200873)
Utilities for working with EROFS
--------------------------------------------------------------------------------
Update Information:
This makes EROFS utilities available to RHEL 9 and its ilk. Note that it
differs from current Fedora packages by disabling LZMA support since RHEL 9's xz
package is too old to support the MicroLZMA format.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 29 2023 David Michael <fedora.dm0(a)gmail.com> - 1.6-3
- Backport patches for CVE-2023-33551 and CVE-2023-33552.
- Change conditional build feature defaults for supporting EPEL 9.
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Mar 11 2023 David Michael <fedora.dm0(a)gmail.com> - 1.6-1
- Update to the 1.6 release.
* Wed Jan 25 2023 David Michael <fedora.dm0(a)gmail.com> - 1.5-4
- Enable MicroLZMA support.
- Switch the License tag to SPDX, and ship matching noneffective license files.
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 David Michael <fedora.dm0(a)gmail.com> - 1.5-1
- Update to the 1.5 release.
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Nov 25 2021 David Michael <fedora.dm0(a)gmail.com> - 1.4-2
- Backport the patch to install a man page for fsck.
- Backport the patch to fix dump output.
* Sun Nov 21 2021 David Michael <fedora.dm0(a)gmail.com> - 1.4-1
- Update to the 1.4 release.
--------------------------------------------------------------------------------
================================================================================
ghc9.4-9.4.7-23.el9 (FEDORA-EPEL-2023-629388e6aa)
Glasgow Haskell Compiler
--------------------------------------------------------------------------------
Update Information:
https://downloads.haskell.org/~ghc/9.4.7/docs/users_guide/9.4.7-notes.html
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 27 2023 Jens Petersen <petersen(a)redhat.com> - 9.4.7-23
-
https://downloads.haskell.org/~ghc/9.4.7/docs/users_guide/9.4.7-notes.html
--------------------------------------------------------------------------------
================================================================================
indent-2.2.13-4.el9 (FEDORA-EPEL-2023-b305ec138e)
A GNU program for formatting C code
--------------------------------------------------------------------------------
Update Information:
This release fixes a heap buffer overwrite in search_brace() (CVE-2023-40305)
and a heap overread in lexi().
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 16 2023 Petr Pisar <ppisar(a)redhat.com> - 2.2.13-4
- Fix a heap overread in search_brace/lexi
- Fix CVE-2023-40305 (a heap buffer overwrite in search_brace) (bug #2231919)
* Mon Apr 17 2023 Petr Pisar <ppisar(a)redhat.com> - 2.2.13-3
- Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND
Latex2e-translated-notice"
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2231854 - CVE-2023-40305 indent: heap-based buffer overflow in search_brace()
in indent.c
https://bugzilla.redhat.com/show_bug.cgi?id=2231854
--------------------------------------------------------------------------------
================================================================================
knot-3.3.0-1.el9 (FEDORA-EPEL-2023-44946396d2)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
Update to Knot DNS 3.3 and Knot Resolver rebuild ---- Update to new upstream
version 5.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 28 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.3.0-1
- Update to 3.3.0
--------------------------------------------------------------------------------
================================================================================
knot-resolver-5.7.0-2.el9 (FEDORA-EPEL-2023-44946396d2)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
Update to Knot DNS 3.3 and Knot Resolver rebuild ---- Update to new upstream
version 5.7.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 29 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.7.0-2
- Rebuilt for Knot DNS 3.3
* Tue Aug 22 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.7.0-1
- New upstream version 5.7.0
--------------------------------------------------------------------------------
================================================================================
mingw-pcre2-10.42-3.el9 (FEDORA-EPEL-2023-55696b9c4e)
MinGW Windows pcre2 library
--------------------------------------------------------------------------------
Update Information:
Initial epel9 build.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.42-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.42-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jan 13 2023 Sandro Mani <manisandro(a)gmail.com> - 10.42-1
- Update to 10.42
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.40-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sun May 1 2022 Sandro Mani <manisandro(a)gmail.com> - 10.40-1
- Update to 10.40
* Fri Mar 25 2022 Sandro Mani <manisandro(a)gmail.com> - 10.39-3
- Rebuild with mingw-gcc-12
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.39-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Nov 5 2021 Sandro Mani <manisandro(a)gmail.com> - 10.39-1
- Update to 10.39
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.37-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2235449 - Please branch and build mingw-pcre2 in epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2235449
--------------------------------------------------------------------------------
================================================================================
papirus-icon-theme-20230801-1.el9 (FEDORA-EPEL-2023-b38edf2d67)
Free and open source SVG icon theme based on Paper Icon Set
--------------------------------------------------------------------------------
Update Information:
Update to 20230801
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 20230801-1
- Update to 20230801
- use SPDX license identifiers; add LGPL-3.0-or-later for Breeze icons
- fix rpmlint warning
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
20230601-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sun Jul 16 2023 Orion Poplawski <orion(a)nwra.com> - 20230601-1
- Update to 20230601
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2228321 - papirus-icon-theme-20230801 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2228321
--------------------------------------------------------------------------------
================================================================================
pcsc-perl-1.4.14-24.el9 (FEDORA-EPEL-2023-4504225464)
Perl interface to the PC/SC smart card library
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jul 11 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.4.14-23
- Perl 5.38 rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon May 30 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.4.14-20
- Perl 5.36 rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-damo-1.9.5-1.el9 (FEDORA-EPEL-2023-dd0b620f9a)
Data Access Monitoring Operator
--------------------------------------------------------------------------------
Update Information:
## v1.9.5 - Code cleanup ## v1.9.4 - DAMON command line options: Support
multiple DAMOS schemes - damo show: Support log/linear scale of region box ##
v1.9.3 - Restore --ascii_color and --plot_ascii of 'damo report heat' - damo
show: Support coloring of region box - damo show: Implement '<age heat bar>'
-
damo show: Make region box to use logscale for columns and rows - damo show:
Support more region box customizations ## v1.9.2 - Support DAMOS filters,
quotas, and watermarks via command line - Support target idx DAMOS filter -
Implement '<size heat bar>' and '<size heat age bar>' region
format keyword
for 'damo show' (likely be changed in future)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 23 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 1.9.5-1
- Update to 1.9.5
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2227975 - python-damo-1.9.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2227975
--------------------------------------------------------------------------------
================================================================================
rust-errno-0.3.3-1.el9 (FEDORA-EPEL-2023-828f6bf580)
Cross-platform interface to the errno variable
--------------------------------------------------------------------------------
Update Information:
Update to version 0.3.3.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 29 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.3-1
- Update to version 0.3.3; Fixes RHBZ#2235559
--------------------------------------------------------------------------------
================================================================================
rust-nix-0.26.4-1.el9 (FEDORA-EPEL-2023-1737f0638d)
Rust friendly bindings to *nix APIs
--------------------------------------------------------------------------------
Update Information:
Update to version 0.26.4, fixing a regression from 0.26.3. ---- Update to
version 0.26.3.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 29 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.4-1
- Update to version 0.26.4
* Mon Aug 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.3-1
- Update to version 0.26.3
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.26.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
tinyexr-1.0.1-7.el9 (FEDORA-EPEL-2023-678c280bfb)
Small library to load and save OpenEXR images
--------------------------------------------------------------------------------
Update Information:
Upstream patch to fix CVE-2022-34300 Fixes rhbz#2233636
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 29 2023 Diego Herrera <dherrera(a)redhat.com> - 1.0.1-7
- Patch to fix CVE-2022-34300
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
weechat-4.0.4-3.el9 (FEDORA-EPEL-2023-bf6104a085)
Portable, fast, light and extensible IRC client
--------------------------------------------------------------------------------
Update Information:
Latest upstream version
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 23 2023 LuK1337 <priv.luk(a)gmail.com> - 4.0.4-3
- Revert "Reenable PHP plugins support"
* Tue Aug 22 2023 LuK1337 <priv.luk(a)gmail.com> - 4.0.4-2
- Reenable PHP plugins support
* Tue Aug 22 2023 LuK1337 <priv.luk(a)gmail.com> - 4.0.4-1
- Update to 4.0.4
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jul 11 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.6-7
- Perl 5.38 rebuild
* Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 3.6-6
- Rebuilt for Python 3.12
* Fri Feb 24 2023 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 3.6-5
- Backport upstream patch to fix test suite crash on
gui_chat_printf_y_date_tags with glibc 2.37 (bug 2170010)
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jan 4 2023 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 3.6-3
- Rebuild for
https://fedoraproject.org/wiki/Changes/Ruby_3.2
* Thu Oct 6 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 3.6-2
- Restore compatibility with EPEL 7
- use %cmake3 rather than %cmake macros
- conditionally disable tests on EPEL < 8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2215825 - Update Request: weechat to latest version (3.8)
https://bugzilla.redhat.com/show_bug.cgi?id=2215825
--------------------------------------------------------------------------------