The following Fedora EPEL 9 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-369c889880
chromium-115.0.5790.170-1.el9
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-917679773c
GitPython-3.1.32-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
epel-release-9-7.el9
intel-ipp-crypto-mb-1.0.8-3.el9
intel-ipsec-mb-1.4-3.el9
llhttp-8.1.1-1.el9
netdata-1.42.1-1.el9
python-aiohttp-3.8.5-1.el9
python-sphinx-pytest-0.1.1-1.el9
rust-packaging-24-6.el9
yubihsm-shell-2.4.1-1.el9
Details about builds:
================================================================================
epel-release-9-7.el9 (FEDORA-EPEL-2023-1e3199f53c)
Extra Packages for Enterprise Linux repository configuration
--------------------------------------------------------------------------------
Update Information:
Add EPEL OpenH264 repository (#2053295)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 17 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 9-7
- Fix typo to actually enable EPEL OpenH264 repo
* Tue Aug 15 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 9-6
- Add EPEL OpenH264 repository (#2053295)
--------------------------------------------------------------------------------
================================================================================
intel-ipp-crypto-mb-1.0.8-3.el9 (FEDORA-EPEL-2023-a1caaa79c0)
Intel IPP Cryptography multi-buffer library
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.8
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 14 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.8-3
- Update to IPP Crypto 2021.8
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jun 28 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.8-1
- Update to 1.0.8
* Wed Feb 15 2023 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 1.0.6-1
- Update to 1.0.6
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Dec 23 2021 Andrey Matyukov <andrey.matyukov(a)intel.com> - 1.0.4-2
- Fixed a symbolic link in intel-ipp-crypto-mb-devel package.
* Wed Dec 22 2021 Andrey Matyukov <andrey.matyukov(a)intel.com> - 1.0.4-1
- Added ECDSA/ECDHE for the NIST P-521 curve;
- Added ECC over SM2 curve: Public Key Generation, ECDSA Signature / Verification, ECDHE;
- Added SM3 algorithm;
- Added SM4 algorithm (ECB, CBC, CTR, OFB and CFB modes of operation);
- Added ed25519 Signature / Verification schemes;
- Added x25519 key agreement functionality: public key generation, shared key
computation;
- Added modular exponentiation for fixed sizes: 1k, 2k, 3k, 4k.
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1.0.1-3
- Rebuilt with OpenSSL 3.0.0
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
intel-ipsec-mb-1.4-3.el9 (FEDORA-EPEL-2023-250dabfe3a)
IPsec cryptography library optimized for Intel Architecture
--------------------------------------------------------------------------------
Update Information:
new package for EPEL
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 16 2023 Ali Erdinc Koroglu <aekoroglu(a)linux.intel.com> 1.4-3
- Packaging optimization to prevent AVX512 based gcc compilation errors
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jun 28 2023 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.4.0-1
- Update for release package v1.4
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jan 11 2023 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.3.0-2
- Add patch to fix multi-threaded performance scaling issue
* Wed Sep 28 2022 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.3.0-1
- Update for release package v1.3
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Mar 2 2022 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.2.0-2
- Correct spelling of IPsec in package description
* Fri Feb 25 2022 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.2.0-1
- Update for release package v1.2
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Oct 29 2021 Marcel Cornu <marcel.d.cornu(a)intel.com> 1.1.0-1
- Update for release package v1.1
--------------------------------------------------------------------------------
================================================================================
llhttp-8.1.1-1.el9 (FEDORA-EPEL-2023-e2fcc4af81)
Port of http_parser to llparse
--------------------------------------------------------------------------------
Update Information:
Update `llhttp` to 8.1.1 (including a SONAME version bump and ABI break,
https://pagure.io/epel/issue/241) and `python-aiohttp` to 3.8.5. Fixes
CVE-2023-30589.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.1.1-1
- Update to 8.1.1 (close RHBZ#2216591)
* Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.1.0-3
- Fix test compiling/execution
* Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.1.0-2
- Indicate dirs. in files list with trailing slashes
* Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.1.0-1
- Update to 8.1.0 (close RHBZ#2131175)
* Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 8.0.0-1
- Update to 8.0.0 (close RHBZ#2131175)
* Sat Jul 29 2023 Stephen Gallagher <sgallagh(a)redhat.com> - 6.0.10-1
- Update to v6.0.10
* Sat Jul 29 2023 Miro Hron��ok <miro(a)hroncok.cz> - 6.0.9-2
- Use tomllib/python-tomli instead of dead upstream python-toml
* Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.9-1
- Update to 6.0.9 (close RHBZ#2116231)
- Bumped .so version from downstream 0.1 to upstream 6.0
- Better upstream support for building and installing a shared library
- The -devel package now contains a .pc file
- Tests are now built with gcc and fully respect distro flags
* Sat Jul 29 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-6
- Drop ���forge��� macros, which aren���t really doing much here
* Fri Dec 24 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-5
- Add a note about LLHTTP_STRICT_MODE to the package description
* Fri Dec 24 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-4
- Revert "Build with LLHTTP_STRICT_MODE enabled"
* Wed Dec 22 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-3
- Build with LLHTTP_STRICT_MODE enabled
* Tue Dec 14 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 6.0.6-2
- Dep. on cmake-filesystem is now auto-generated
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2216591 - llhttp-8.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2216591
[ 2 ] Bug #2227458 - python-aiohttp-3.8.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2227458
--------------------------------------------------------------------------------
================================================================================
netdata-1.42.1-1.el9 (FEDORA-EPEL-2023-0d230f1117)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update to upstream release 1.42.1. update go config version to 0.54.1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 16 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.42.1-1
- Update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2228415 - Cannot process /proc/<PID>/limits files
https://bugzilla.redhat.com/show_bug.cgi?id=2228415
[ 2 ] Bug #2231185 - netdata-1.42.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2231185
--------------------------------------------------------------------------------
================================================================================
python-aiohttp-3.8.5-1.el9 (FEDORA-EPEL-2023-e2fcc4af81)
Python HTTP client/server for asyncio
--------------------------------------------------------------------------------
Update Information:
Update `llhttp` to 8.1.1 (including a SONAME version bump and ABI break,
https://pagure.io/epel/issue/241) and `python-aiohttp` to 3.8.5. Fixes
CVE-2023-30589.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.8.5-1
- Update to 3.8.5 (close RHBZ#2227458)
* Mon May 15 2023 Tom���� Hrn��iar <thrnciar(a)redhat.com> - 3.8.4-2
- Backport upstream patch to fix a test failing with python-yarl 1.9.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2216591 - llhttp-8.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2216591
[ 2 ] Bug #2227458 - python-aiohttp-3.8.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2227458
--------------------------------------------------------------------------------
================================================================================
python-sphinx-pytest-0.1.1-1.el9 (FEDORA-EPEL-2023-5e9efeee30)
Helpful pytest fixtures for sphinx extensions
--------------------------------------------------------------------------------
Update Information:
Build for EPEL9
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 19 2023 Karolina Surma <ksurma(a)redhat.com> - 0.1.1-1
- Update to 0.1.1
* Wed Jun 14 2023 Python Maint <python-maint(a)redhat.com> - 0.0.3-4
- Rebuilt for Python 3.12
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Jun 22 2022 Karolina Surma <ksurma(a)redhat.com> - 0.0.3-1
- Initial package
Resolves: rhbz#2100032
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2223228 - Please branch and build python-sphinx-pytest for EPEL9
https://bugzilla.redhat.com/show_bug.cgi?id=2223228
--------------------------------------------------------------------------------
================================================================================
rust-packaging-24-6.el9 (FEDORA-EPEL-2023-aa02a88efc)
RPM macros and generators for building Rust packages
--------------------------------------------------------------------------------
Update Information:
Apply a patch to fix the value of the `%cargo_registry` macro not to rely on
`%{_datadir}`, which breaks for flatpak builds or other environments where
`%{_prefix} != /usr`. ---- Apply a patch to fix values of the `%__cargo` and
`%__cargo_to_rpm` macros not to rely on `%{_bindir}`, which breaks for flatpak
builds or other environments where `%{_prefix} != /usr`.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 17 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 24-6
- Correct cargo_registry path
* Thu Aug 17 2023 Yaakov Selkowitz <yselkowi(a)redhat.com> - 24-5
- Correct cargo and cargo2rpm paths
--------------------------------------------------------------------------------
================================================================================
yubihsm-shell-2.4.1-1.el9 (FEDORA-EPEL-2023-61384360ca)
Tools to interact with YubiHSM 2
--------------------------------------------------------------------------------
Update Information:
New upstream release (#2232340)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 17 2023 Jakub Jelen <jjelen(a)redhat.com> - 2.4.1-1
- New upstream release (#2232340)
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.4.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2232340 - yubihsm-shell-2.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2232340
--------------------------------------------------------------------------------