The following Fedora EPEL 9 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-7c7a65fa6c
wordpress-6.5.2-1.el9
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-6ebc36e81d
perl-Clipboard-0.29-1.el9
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-76d6941f10
python-django3-3.2.25-1.el9
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-ce142428af
llhttp-9.2.1-1.el9 python-aiohttp-3.9.3-2.el9
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-5fc8709aa5
python-pycryptodomex-3.20.0-1.el9
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-2445965799
chromium-123.0.6312.122-1.el9
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3a714d30a3
python-pydantic-1.10.14-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
gensio-2.8.4-1.el9
libarrow-9.0.0-11.el9
liborc-1.8.7-1.el9
netconsd-0.4.1-1.el9
perl-Finance-Quote-1.6000-1.el9
putty-0.81-1.el9
python-trololio-1.0-20.el9
valkey-7.2.5-1.el9
Details about builds:
================================================================================
gensio-2.8.4-1.el9 (FEDORA-EPEL-2024-4d199cc5d0)
General Stream I/O
--------------------------------------------------------------------------------
Update Information:
300644fc (Move to version 2.8.4, 2024-04-15)
6a8c70ee (Fix a parallel build issue in the main library, 2024-04-15)
25dd4d74 (github: Don't run oomtest9 and oomtest11 on windows, 2024-04-15)
075eeb4d (Fix a parallel build issue in the main library, 2024-04-15)
fa6744f6 (sound: Fix a possible multiply overflow, 2024-03-27)
a85c4e4a (gtlsshd: Don't use alloc_sprintf() to duplicate a string, 2024-03-27)
9753f6f3 (Update github actions, 2024-02-02)
9a1830f3 (Update github action, 2024-02-02)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Felix Kaechele <felix(a)kaechele.ca> - 2.8.4-1
- update to 2.8.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2275410 - gensio-2.8.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2275410
--------------------------------------------------------------------------------
================================================================================
libarrow-9.0.0-11.el9 (FEDORA-EPEL-2024-69ab0c0f3a)
A toolbox for accelerated data interchange and in-memory processing
--------------------------------------------------------------------------------
Update Information:
rebuild with Apache ORC (liborc) 1.8.7
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Kaleb S. KEITHLEY <kkeithle [at] redhat.com> - 9.0.0-11
- Arrow 9.0.0, rebuild with liborc 1.8.7
--------------------------------------------------------------------------------
================================================================================
liborc-1.8.7-1.el9 (FEDORA-EPEL-2024-3cffb602df)
Library for producing small, fast columnar storage for Hadoop workloads
--------------------------------------------------------------------------------
Update Information:
Ap[ache ORC 1.8.7 GA
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Kaleb S. KEITHLEY <kkeithle [at] redhat.com> - 1.8.7-1
- 1.8.7 GA
--------------------------------------------------------------------------------
================================================================================
netconsd-0.4.1-1.el9 (FEDORA-EPEL-2024-91e8738b1e)
The Netconsole Daemon
--------------------------------------------------------------------------------
Update Information:
Update to latest 0.4.1 release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Michel Lind <salimma(a)fedoraproject.org> - 0.4.1-1
- Update to 0.4.1 (rhbz#2274122)
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2274122 - netconsd-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2274122
--------------------------------------------------------------------------------
================================================================================
perl-Finance-Quote-1.6000-1.el9 (FEDORA-EPEL-2024-ac201fc0e1)
A Perl module that retrieves stock and mutual fund quotes
--------------------------------------------------------------------------------
Update Information:
This is the current upstream release, with a number of bug-fixes for faulty
modules and removal of modules that have been not functioning correctly for some
time.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Paul Howarth <paul(a)city-fan.org> - 1.6000-1
- Update to 1.60
- Removed not working modules Fidelity.pm, Cdbfundlibrary.pm, Fundata.pm and
Fool.pm (GH#346, GH#366, GH#368)
- YahooJSON.pm - Added code to retrieve cookies and a "crumb" required to
continue to utilize the v11 API (GH#369)
- The YahooJSON.pm currency module was changed to use the v8 chart API
- Added initial version of CONTRIBUTING.pod that
metacpan.org utilizes; it
will completely replace the Hacker's Guide in the future
- Bloomberg.pm - Changed module to extract data from JSON structure embedded
within the HTML (GH#360)
- NSEIndia.pm - Eliminated need to use temp folders by storing file data from
URL into a variable
- Exclude Finance::CONTRIBUTING manpage, CONTRIBUTING.pod added as %doc
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5900-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5900-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
putty-0.81-1.el9 (FEDORA-EPEL-2024-79f96e9d05)
SSH, Telnet and Rlogin client
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2024-31497.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Jaroslav ��karvada <jskarvad(a)redhat.com> - 0.81-1
- New version
Resolves: rhbz#2275179
- Fixed vulnerability allowing recovery of NIST P-521 private keys
Resolves: CVE-2024-31497
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.80-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.80-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2275183 - CVE-2024-31497 putty: secret key recovery of NIST P-521 private
keys through biased ECDSA nonces in putty client
https://bugzilla.redhat.com/show_bug.cgi?id=2275183
--------------------------------------------------------------------------------
================================================================================
python-trololio-1.0-20.el9 (FEDORA-EPEL-2024-5e39667e04)
Trollius and asyncio compatibility library
--------------------------------------------------------------------------------
Update Information:
Added to epel9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 1.0-17
- Rebuilt for Python 3.12
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 1.0-14
- Rebuilt for Python 3.11
--------------------------------------------------------------------------------
================================================================================
valkey-7.2.5-1.el9 (FEDORA-EPEL-2024-2148700387)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
update to 7.2.5
update to 7.2.5-rc1
initial build, rc1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5-1
- update to 7.2.5 rhbz#2275379
* Fri Apr 12 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5~rc1-2
- add compat subpackage with migration scripts from redis
* Fri Apr 12 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5~rc1-1
- update to 7.2.5-rc1
* Tue Apr 9 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.4~rc1-1
- Initial package build, release candidate
--------------------------------------------------------------------------------