The following Fedora EPEL 9 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-b17c8fc3fc
engrampa-1.26.2-1.el9
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-9a7708876e
mbedtls-2.28.7-1.el9
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-a7417a00b4
python-asyncssh-2.13.2-4.el9
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-e2bbd00d36
libgit2-1.7.2-2.el9 libgit2_1.6-1.6.5-1.el9 python-pygit2-1.14.0-2.el9
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-471565274b
clamav-1.0.5-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
charliecloud-0.36-1.el9
chromium-121.0.6167.160-1.el9
latexmk-4.83-1.el9
mmv-2.6-1.el9
python-rpmautospec-0.6.1-3.el9
python-rpmautospec-koji-0.4.0-4.el9
qownnotes-24.2.0-1.el9
rust-rav1e-0.7.1-1.el9
singularity-ce-4.1.1-1.el9
snapraid-12.3-1.el9
Details about builds:
================================================================================
charliecloud-0.36-1.el9 (FEDORA-EPEL-2024-8ab54dce19)
Lightweight user-defined software stacks for high-performance computing
--------------------------------------------------------------------------------
Update Information:
Onward to 0.36.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Jordan Ogas <jogas(a)lanl.gov> - 0.36-1
- new version 0.36
* Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
chromium-121.0.6167.160-1.el9 (FEDORA-EPEL-2024-554deba0ce)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 121.0.6167.160
High CVE-2024-1284: Use after free in Mojo
High CVE-2024-1283: Heap buffer overflow in Skia
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 7 2024 Than Ngo <than(a)redhat.com> - 121.0.6167.160-1
- update to 121.0.6167.160
* High CVE-2024-1284: Use after free in Mojo
* High CVE-2024-1283: Heap buffer overflow in Skia
* Thu Feb 1 2024 Than Ngo <than(a)redhat.com> - 121.0.6167.139-2
- Support for 64K pages on Linux/AArch64
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2263136 - CVE-2024-1283 CVE-2024-1284 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2263136
--------------------------------------------------------------------------------
================================================================================
latexmk-4.83-1.el9 (FEDORA-EPEL-2024-547d2a0aeb)
A make-like utility for LaTeX files
--------------------------------------------------------------------------------
Update Information:
Changes in version 4.83:
Fix bug that sometimes biber is incorrectly run after a *latex run results in an
error, with biber then giving an error.
Fix problem that if -gg is used with multiple files specified on command line,
then generated files are deleted for all by the last file compiled. (So that -gg
wasn't working as intended in this case.)
Restrict warning diagnostics about ^^ constructs in aux file to those involving
non-trivial Unicode characters, as against things like ^^M.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 31 2024 Jerry James <loganjerry(a)gmail.com> - 4.83-1
- Version 4.83
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2262172 - latexmk-483 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2262172
--------------------------------------------------------------------------------
================================================================================
mmv-2.6-1.el9 (FEDORA-EPEL-2024-824f9179de)
Move/copy/link multiple files
--------------------------------------------------------------------------------
Update Information:
release 2.6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Jens Kuehnel <JensKuehnel(a)users.noreply.github.com> - 2.6-1
- release 2.6
- readded the mad command
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Tue Nov 21 2023 Jens Kuehnel <bugzilla-redhat(a)jens.kuehnel.org> - 2.5.1-1
- upgrade to release 2.5.1 based on fork from Reuben Thomas
- Debian has moved as well and was used a upstream by the previous version of this
package
- upstream removed multi append (mad) from project
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-40
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-39
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-38
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-rpmautospec-0.6.1-3.el9 (FEDORA-EPEL-2024-92f0e765b0)
Package and CLI tool to generate release fields and changelogs
--------------------------------------------------------------------------------
Update Information:
This update makes rpmautospec more robust when run under non-UTF8 locales or for
packages using externally defined macros.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Nils Philippsen <nils(a)redhat.com> - 0.6.1-1
- Update to 0.6.1
--------------------------------------------------------------------------------
================================================================================
python-rpmautospec-koji-0.4.0-4.el9 (FEDORA-EPEL-2024-92f0e765b0)
Koji plugin for packages using rpmautospec
--------------------------------------------------------------------------------
Update Information:
This update makes rpmautospec more robust when run under non-UTF8 locales or for
packages using externally defined macros.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Nils Philippsen <nils(a)redhat.com> - 0.4.0-4
- Pull in common RPM macro packages
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org>
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org>
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
qownnotes-24.2.0-1.el9 (FEDORA-EPEL-2024-01b2c1f33e)
Plain-text file markdown note taking with Nextcloud integration
--------------------------------------------------------------------------------
Update Information:
See commit history
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Packit <hello(a)packit.dev> - 24.2.0-1
- [packit] 24.2.0 upstream release
- Resolves rhbz#2263544
* Wed Jan 31 2024 Packit <hello(a)packit.dev> - 24.1.5-1
- [packit] 24.1.5 upstream release
- Resolves rhbz#2262088
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 24.1.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jan 20 2024 Packit <hello(a)packit.dev> - 24.1.4-1
- [packit] 24.1.4 upstream release
- Resolves rhbz#2258010
* Fri Jan 12 2024 Packit <hello(a)packit.dev> - 24.1.3-1
- [packit] 24.1.3 upstream release
- Resolves rhbz#2258010
* Tue Jan 9 2024 Packit <hello(a)packit.dev> - 24.1.2-1
- [packit] 24.1.2 upstream release
- Resolves rhbz#2257369
* Tue Jan 2 2024 Packit <hello(a)packit.dev> - 24.1.1-1
- [packit] 24.1.1 upstream release
- Resolves rhbz#2256460
* Sun Dec 31 2023 Packit <hello(a)packit.dev> - 24.1.0-1
- [packit] 24.1.0 upstream release
- Resolves rhbz#2255710
* Mon Dec 11 2023 Packit <hello(a)packit.dev> - 23.12.3-1
- [packit] 23.12.3 upstream release
- Resolves rhbz#2254046
* Sun Dec 10 2023 Packit <hello(a)packit.dev> - 23.12.1-1
- [packit] 23.12.1 upstream release
- Resolves rhbz#2253816
* Fri Dec 8 2023 Packit <hello(a)packit.dev> - 23.12.0-1
- [packit] 23.12.0 upstream release
- Resolves rhbz#2253606
* Sat Nov 25 2023 Packit <hello(a)packit.dev> - 23.11.3-1
- [packit] 23.11.3 upstream release
- Resolves rhbz#2251446
* Sun Nov 19 2023 Packit <hello(a)packit.dev> - 23.11.2-1
- [packit] 23.11.2 upstream release
- Resolves rhbz#2250546
* Sun Nov 12 2023 Packit <hello(a)packit.dev> - 23.11.1-1
- [packit] 23.11.1 upstream release
- Resolves rhbz#2249330
* Thu Nov 2 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.11.0-3
- build: Upload source
* Thu Nov 2 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.11.0-2
- packit: Update config
* Thu Nov 2 2023 Packit <hello(a)packit.dev> - 23.11.0-1
- [packit] 23.11.0 upstream release
- Resolves rhbz#2247528
* Sat Oct 14 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.10.1-1
- [packit] 23.10.1 upstream release
* Mon Oct 9 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.10.0-1
- [packit] 23.10.0 upstream release
* Sun Oct 8 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.9.7-5
- packit: Add upstream_tag_template: v{version}
* Fri Oct 6 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.9.7-4
- build: Add Packit config
* Fri Oct 6 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.9.7-3
- build: Use forge macros
* Sat Sep 30 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.9.7-2
- license: Convert to SPDX
* Sat Sep 30 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.9.7-1
- chore: Update to 23.9.7 (rh#2238097)
* Sat Sep 2 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.9.0-1
- chore: Update to 23.9.0 (rh#2233783)
* Sun Aug 6 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.8.0-1
- chore: Update to 23.8.0 (rh#2215687)
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.6.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Jun 10 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.6.4-1
- chore: Update to 23.6.4 (rh#2193340)
* Mon May 1 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.5.0-1
- chore: Update to 23.5.0
* Sat Mar 4 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.3.0-1
- chore: Update to 23.3.0
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 23.1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jan 18 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 23.1.1-1
- chore: Update to 23.1.1
* Sun Dec 11 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.12.2-1
- chore: Update to 22.12.2
* Sun Dec 4 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.12.0-1
- chore: Update to 22.12.0
* Wed Nov 30 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.11.9-1
- chore: Update to 22.11.9
* Thu Nov 24 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.11.8-2
- build: ExcludeArch:��%{ix86}
* Thu Nov 24 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.11.8-1
- chore: Update to 22.11.8 (#2143091)
* Mon Nov 14 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.11.5-1
- chore: Update to 22.11.5 (#2139885)
* Fri Nov 4 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.11.3-1
- chore: Update to 22.11.3 (#2139885)
* Tue Nov 1 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.11.1-1
- chore: Update to 22.11.1 (#2134175)
* Fri Oct 28 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.10.3-1
- chore(update): 22.10.3 (#2134175)
* Fri Oct 21 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.10.2-1
- chore(update): 22.10.2
* Mon Oct 17 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.10.1-1
- chore(update): 22.10.1
* Fri Oct 7 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.10.0-1
- chore(update): 22.10.0
* Tue Sep 27 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.9.2-1
- chore(update): 22.9.2
* Thu Sep 15 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.9.1-1
- chore(update): 22.9.1
* Sun Sep 11 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.9.0-1
- chore(update): 22.9.0
* Sat Aug 27 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.8.4-1
- chore(update): 22.8.4
* Sun Aug 21 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.8.3-1
- chore(update): 22.8.3
* Sat Aug 20 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.8.2-1
- chore(update): 22.8.2
* Fri Aug 12 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.8.1-1
- chore(update): 22.8.1
* Thu Jul 21 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.7.6-1
- chore(update): 22.7.6
* Fri Jul 1 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.6.2-1
- chore(update): 22.6.2
* Tue Jun 7 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.6.0-1
- chore(update): 22.6.0
* Tue May 24 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.5.3-1
- chore(update): 22.5.3
* Tue May 17 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.5.2-1
- chore(update): 22.5.2
* Mon May 16 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.5.1-1
- chore(update): 22.5.1
* Mon May 9 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.5.0-2
- build: Add condition for <=f34 build
* Mon May 9 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.5.0-1
- chore(update): 22.5.0
* Wed Apr 27 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.4.2-1
- chore(update): 22.4.2
* Fri Apr 15 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.4.0-1
- chore(update): 22.4.0
* Wed Feb 16 2022 Artem Polishchuk <ego.cordatus(a)gmail.com> - 22.1.12-2
- build(rebuild): 'botan2' soname bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2263544 - qownnotes-24.2.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2263544
--------------------------------------------------------------------------------
================================================================================
rust-rav1e-0.7.1-1.el9 (FEDORA-EPEL-2024-b511008eff)
Fastest and safest AV1 encoder
--------------------------------------------------------------------------------
Update Information:
Update to version 0.7.1. This is an ABI-compatible update that primarily
delivers performance and quality improvements compared to v0.6.6.
Release notes for v0.7.0:
https://github.com/xiph/rav1e/releases/tag/v0.7.0
Release notes for v0.7.1:
https://github.com/xiph/rav1e/releases/tag/v0.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.1-1
- update to version 0.7.1; Fixes RHBZ#2256283
--------------------------------------------------------------------------------
================================================================================
singularity-ce-4.1.1-1.el9 (FEDORA-EPEL-2024-cbd86d2020)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.1.1 upstream version.
This is an incompatible upgrade, following EPEL policy.
Some functionality previously provided by the singularity remote command is
split into new singularity registry and singularity
keyserver commands.
The singularity remote add command now sets a newly added remote as the default
(unless suppressed).
The ���vm flag to start singularity inside a Virtual Machine has been removed.
Bind mounts are now performed in the order in which they are specified.
Current working directory on the host is now created in the container, restoring
a behaviour from Singularity <3.6.0.
If the current directory paths on the container and host contains symlinks to
different locations, the current working directory is
not mounted.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 David Trudgian <dtrudg(a)sylabs.io> - 4.1.1-1
- Upgrade to 4.1.1 upstream version.
- This is an incompatible upgrade, following EPEL policy.
- Some functionality previously provided by the singularity remote
command is split into new singularity registry and singularity
keyserver commands.
- The singularity remote add command now sets a newly added remote as
the default (unless suppressed).
- The ���vm flag to start singularity inside a Virtual Machine has been
removed.
- Bind mounts are now performed in the order in which they are
specified.
- Current working directory on the host is now created in the
container, restoring a behaviour from Singularity <3.6.0.
- If the current directory paths on the container and host contains
symlinks to different locations, the current working directory is
not mounted.
--------------------------------------------------------------------------------
================================================================================
snapraid-12.3-1.el9 (FEDORA-EPEL-2024-722f687c96)
Disk array backup for many large rarely-changed files
--------------------------------------------------------------------------------
Update Information:
Update to 12.3
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 29 2024 Jens Kuehnel <bugzilla-redhat(a)jens.kuehnel.org> - 12.3-1
- Update to 12.3
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 12.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------