The following Fedora EPEL 9 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-03f6b44faf
chromium-119.0.6045.159-2.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
anope-2.1.0-2.el9
bitcoin-core-selinux-0-11.20231127git4505616.el9
fapolicy-analyzer-1.2.1-1.el9
gi-docgen-2023.3-1.el9
kronosnet-epel-1.25-2.el9
opendkim-2.11.0-0.36.el9
python-glymur-0.12.9-2.el9
qm-0.6.0-1.el9
Details about builds:
================================================================================
anope-2.1.0-2.el9 (FEDORA-EPEL-2023-be9892be96)
IRC services designed for flexibility and ease of use
--------------------------------------------------------------------------------
Update Information:
# Anope 2.1.0 - Added `nickserv:minpasslen` for configuring the minimum
password length - Added support for access list entry descriptions. - Added
support for linking over a UNIX socket. - Added support for server-initiated
logins and logouts on UnrealIRCd - Added support for server-initiated logouts
on InspIRCd - Added support for the `ANONYMOUS SASL` mechanism - Allowed
users to opt-out of being added to channel access lists - Cleaned up the
codebase to use Modern C++17 - Modernized the build system to use a modern
version of CMake - Removed `nickserv:strictpasswords` as it is obsolete now
`nickserv:minpasslen` exists - Removed support for using insecure encryption
methods as the primary method - Removed the Windows-only `anopesmtp` tool -
Removed the `inspircd12` and `inspircd20` modules (use `inspircd` instead) -
Removed the `ns_getpass` module (no supported encryption modules) - Removed
the `os_oline` module (no supported IRCds) - Removed the two day X-line cap
- Removed the `unreal` module (use `unrealircd` instead) - Renamed
`nickserv:passlen` to `nickserv:maxpasslen` - Renamed the `charybdis` module
to `solanum` - Renamed the `inspircd3` module to `inspircd` - Renamed the
`unreal4` module to `unrealircd` - Replaced `uplink:ipv6` with
`uplink:protocol` - Updated all references to IRCServices to refer to Anope
instead
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Robert Scheck <robert(a)fedoraproject.org> 2.1.0-2
- Reflect upstream configuration file changes and renamings
* Sun Nov 26 2023 Robert Scheck <robert(a)fedoraproject.org> 2.1.0-1
- Upgrade to 2.1.0 (#2251530)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2251530 - anope-2.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2251530
--------------------------------------------------------------------------------
================================================================================
bitcoin-core-selinux-0-11.20231127git4505616.el9 (FEDORA-EPEL-2023-9285d6ee02)
Bitcoin Core SELinux policy
--------------------------------------------------------------------------------
Update Information:
Fix policies for daemon case.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Simone Caronni <negativo17(a)gmail.com> - 0-11.20231127git4505616
- Update policies (#2246255).
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-10.20210312giteaa9a04
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-9.20210312giteaa9a04
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
0-8.20210312giteaa9a04
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2246255 - SELinux denial of bitcoind reading /etc/bitcoin/bitcoin.conf
https://bugzilla.redhat.com/show_bug.cgi?id=2246255
--------------------------------------------------------------------------------
================================================================================
fapolicy-analyzer-1.2.1-1.el9 (FEDORA-EPEL-2023-1d3a960bd8)
File Access Policy Analyzer
--------------------------------------------------------------------------------
Update Information:
Release v1.2.1 for additional details please see the [User
Guide](https://github.com/ctc-oss/fapolicy-analyzer/wiki/User-Guide)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 17 2023 John Wass <jwass3(a)gmail.com> 1.2.1-1
- Release v1.2.1
--------------------------------------------------------------------------------
================================================================================
gi-docgen-2023.3-1.el9 (FEDORA-EPEL-2023-6a56ab97bc)
Documentation tool for GObject-based libraries
--------------------------------------------------------------------------------
Update Information:
## 2023.3 - 2023-11-25 ### Fixed - Add missing dependency - Add missing test
data to the source archive ## 2023.2 - 2023-11-24 ### Added - Use packaging
module to properly compare versions - Add "implements" in class definition
pseudocode - Ignore the first class instance struct field - Parse default-value
attribute - Test the gtk-doc sigil parsing - Support admonitions in docblocks -
Add link to the extra content files location in the source repository - Search
for GIR XML in `$GI_GIR_PATH` and `/usr/share/gir-1.0` - Add fallback for
missing "since" ### Changed - Redesign the search results - Redesign the
index
for enumeration types ### Fixed - Match dependencies list in the index and
sidebar - Use KeyboardEvent.key to focus search input - Build fixes for
subproject use - Remove display:flex from headings - Split transfer notes based
on direction - Clarify signal flags - Hide build section if empty - Always
explicitely use utf-8 when reading/writing files - use `color-scheme: dark` when
in dark mode
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 26 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2023.3-1
- Update to 2023.3 (close RHBZ#2251397)
* Sun Nov 26 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2023.1-6
- Package LICENSES/ as a directory
* Sun Nov 26 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2023.1-2
- Don���t assume %_smp_mflags is -j%_smp_build_ncpus
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2251397 - gi-docgen-2023.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2251397
--------------------------------------------------------------------------------
================================================================================
kronosnet-epel-1.25-2.el9 (FEDORA-EPEL-2023-b37cb1cb2b)
Multipoint-to-Multipoint VPN daemon
--------------------------------------------------------------------------------
Update Information:
Sync kronosnet package version with el9 and merge upstream changes
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Davide Cavalca <dcavalca(a)fedoraproject.org> - 1.25-2
- Sync kronosnet package version with el9 and merge upstream changes
--------------------------------------------------------------------------------
================================================================================
opendkim-2.11.0-0.36.el9 (FEDORA-EPEL-2023-9a05f8b1eb)
A DomainKeys Identified Mail (DKIM) milter to sign and/or verify mail
--------------------------------------------------------------------------------
Update Information:
Add upstream PR that filters Authentication-Results headers correctly to fix
CVE-2022-48521.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 15 2023 Diego Herrera <dherrera(a)redhat.com> - 2.11.0-0.36
- Add upstream PR that filters Authentication-Results headers correctly.
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
2.11.0-0.35
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2223270 - CVE-2022-48521 opendkim: Authentication-Results fields are not
removed correctly [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2223270
--------------------------------------------------------------------------------
================================================================================
python-glymur-0.12.9-2.el9 (FEDORA-EPEL-2023-fb9fc02f29)
Interface to the OpenJPEG library for working with JPEG 2000 files
--------------------------------------------------------------------------------
Update Information:
## Nov 26, 2023 - v0.12.9 - Fix handling of null-bytes with XML data - Add API
references to docs - Qualify on python 3.12
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.12.9-2
- Fix oversights in the 0.12.9 release process (close RHBZ#2251615)
* Mon Nov 27 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.12.9-1
- Update to 0.12.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2251615 - python-glymur-0.12.9.post1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2251615
--------------------------------------------------------------------------------
================================================================================
qm-0.6.0-1.el9 (FEDORA-EPEL-2023-db0e5aaa76)
Containerized environment for running Quality Management software
--------------------------------------------------------------------------------
Update Information:
v0.6.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 27 2023 Douglas Schilling Landgraf <dougsland(a)redhat.com> - 0.6.0-1
- v0.6.0
--------------------------------------------------------------------------------