epel-devel December 2023

epel-devel@lists.fedoraproject.org

11 participants
86 discussions

Broken version of wsdd released in EPEL7
by Nick Howitt 15 Dec '23

15 Dec '23

When it was announced that wsdd-0.7.1-1.el7 was available for testing, I responded to the announcement that it was a bad installation with breaking changes and raised a bug https://bugzilla.redhat.com/show_bug.cgi?id=2253415. Unfortunately, my bug report and mailing list response have been ignored and now there has bee a breaking release. How can we get it fixed and what could I have done differently to get it fixed prior to release? Regards, Nick

2 3

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 14 Dec '23

14 Dec '23

The following Fedora EPEL 8 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-76db503610 seamonkey-2.53.18-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ad7d095358 rdiff-backup-2.2.6-3.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing chromium-120.0.6099.109-1.el8 lagrange-1.17.5-1.el8 netdata-1.44.1-1.el8 python-colcon-override-check-0.0.1-1.el8 squashfs-tools-ng-1.2.0-3.el8 the_foundation-1.7.0-1.el8 Details about builds: ================================================================================ chromium-120.0.6099.109-1.el8 (FEDORA-EPEL-2023-a79d31df77) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: update to 120.0.6099.109 - High CVE-2023-6702: Type Confusion in V8 - High CVE-2023-6703: Use after free in Blink - High CVE-2023-6704: Use after free in libavif - High CVE-2023-6705: Use after free in WebRTC - High CVE-2023-6706: Use after free in FedCM - Medium CVE-2023-6707: Use after free in CSS ---- Update to 120.0.6099.71 ---- Update to 120.0.6099.62, upstream release fixes follow security issues: * High CVE-2023-6508: Use after free in Media Stream * High CVE-2023-6509: Use after free in Side Panel Search * Medium CVE-2023-6510: Use after free in Media Capture * Low CVE-2023-6511: Inappropriate implementation in Autofill * Low CVE-2023-6512: Inappropriate implementation in Web Browser UI ---- update to 119.0.6045.199, upstream security release * High CVE-2023-6348: Type Confusion in Spellcheck * High CVE-2023-6347: Use after free in Mojo * High CVE-2023-6346: Use after free in WebAudio * High CVE-2023-6350: Out of bounds memory access in libavif * High CVE-2023-6351: Use after free in libavif * High CVE-2023-6345: Integer overflow in Skia -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.109-1 - update to 120.0.6099.109 * High CVE-2023-6702: Type Confusion in V8 * High CVE-2023-6703: Use after free in Blink * High CVE-2023-6704: Use after free in libavif * High CVE-2023-6705: Use after free in WebRTC * High CVE-2023-6706: Use after free in FedCM * Medium CVE-2023-6707: Use after free in CSS * Fri Dec 8 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.71-1 - update to 120.0.6099.71 * Wed Dec 6 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.62-2 - drop unsupported ldflag which caused build failure * Tue Dec 5 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.62-1 - update to 120.0.6099.62 - fixed bz#2252874, built with control flow integrity (CFI) support * Sat Dec 2 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.56-1 - update to 120.0.6099.56 - enable qt6 UI backend * Sat Dec 2 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.199-2 - fixed bz#2242271, built with bundleminizip in fedora > 39 - fixed bz#2251884, built with fstack-protector-strong for improved security * Wed Nov 29 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.199-1 - update to 119.0.6045.199 * Sun Nov 19 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.159-2 - fix ffmpeg conflicts -------------------------------------------------------------------------------- References: [ 1 ] Bug #2252009 - CVE-2023-6346 CVE-2023-6347 CVE-2023-6350 CVE-2023-6351 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252009 [ 2 ] Bug #2252188 - CVE-2023-6345 chromium: chromium-browser: Integer overflow [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252188 [ 3 ] Bug #2252191 - CVE-2023-6348 chromium: chromium-browser: Type Confusion in Spellcheck [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252191 [ 4 ] Bug #2253151 - CVE-2023-6508 chromium: Use after free in Media Stream [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253151 [ 5 ] Bug #2253154 - CVE-2023-6509 chromium: Use after free in Side Panel Search [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253154 [ 6 ] Bug #2253157 - CVE-2023-6510 chromium: Use after free in Media Capture [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253157 [ 7 ] Bug #2253161 - CVE-2023-6511 chromium: Inappropriate implementation in Autofill [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253161 [ 8 ] Bug #2253164 - CVE-2023-6512 chromium: Inappropriate implementation in Web Browser UI [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253164 -------------------------------------------------------------------------------- ================================================================================ lagrange-1.17.5-1.el8 (FEDORA-EPEL-2023-2ae1e3d0dc) A Beautiful Gemini Client -------------------------------------------------------------------------------- Update Information: Latest 1.17 release, see https://git.skyjake.fi/gemini/lagrange/releases for changes since 1.16.7 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Michel Lind <salimma(a)fedoraproject.org> - 1.17.5-1 - Update to 1.17.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2242724 - the_foundation-1.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2242724 [ 2 ] Bug #2242736 - lagrange-1.17.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2242736 -------------------------------------------------------------------------------- ================================================================================ netdata-1.44.1-1.el8 (FEDORA-EPEL-2023-3701a5686c) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update from upstream ---- Update from upstream -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 14 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.44.1-1 - Update from upstream * Thu Dec 7 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.44.0-1 - Update from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254283 - netdata-1.44.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2254283 -------------------------------------------------------------------------------- ================================================================================ python-colcon-override-check-0.0.1-1.el8 (FEDORA-EPEL-2023-28c9266d57) Extension for colcon to check for problems overriding installed packages -------------------------------------------------------------------------------- Update Information: Initial build of the `colcon-override-check` package. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 10 2022 Scott K Logan <logans(a)cottsay.net> - 0.0.1-1 - Initial package (rhbz#2143071) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2143071 - Review Request: python-colcon-override-check - Extension for colcon to check for problems overriding installed packages https://bugzilla.redhat.com/show_bug.cgi?id=2143071 -------------------------------------------------------------------------------- ================================================================================ squashfs-tools-ng-1.2.0-3.el8 (FEDORA-EPEL-2023-4aabe0950f) A new set of tools and libraries for working with SquashFS images -------------------------------------------------------------------------------- Update Information: Add libselinux-devel build dep. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 14 2023 David Trudgian <david.trudgian(a)sylabs.io> - 1.2.0-3 - RPMAUTOSPEC: unresolvable merge -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254110 - squashfs-tools-ng needs libselinux-devel https://bugzilla.redhat.com/show_bug.cgi?id=2254110 -------------------------------------------------------------------------------- ================================================================================ the_foundation-1.7.0-1.el8 (FEDORA-EPEL-2023-2ae1e3d0dc) Opinionated C11 library for low-level functionality -------------------------------------------------------------------------------- Update Information: Latest 1.17 release, see https://git.skyjake.fi/gemini/lagrange/releases for changes since 1.16.7 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Michel Lind <salimma(a)fedoraproject.org> - 1.7.0-1 - Update to 1.7.0 * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2242724 - the_foundation-1.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2242724 [ 2 ] Bug #2242736 - lagrange-1.17.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2242736 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 14 Dec '23

14 Dec '23

The following Fedora EPEL 7 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-fd36857b5e seamonkey-2.53.18-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing chromium-120.0.6099.109-1.el7 netdata-1.44.1-1.el7 python-colcon-override-check-0.0.1-1.el7 squashfs-tools-ng-1.2.0-4.el7 Details about builds: ================================================================================ chromium-120.0.6099.109-1.el7 (FEDORA-EPEL-2023-5418332424) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: update to 120.0.6099.109 - High CVE-2023-6702: Type Confusion in V8 - High CVE-2023-6703: Use after free in Blink - High CVE-2023-6704: Use after free in libavif - High CVE-2023-6705: Use after free in WebRTC - High CVE-2023-6706: Use after free in FedCM - Medium CVE-2023-6707: Use after free in CSS ---- Update to 120.0.6099.71 ---- Update to 120.0.6099.62, upstream release fixes follow security issues: * High CVE-2023-6508: Use after free in Media Stream * High CVE-2023-6509: Use after free in Side Panel Search * Medium CVE-2023-6510: Use after free in Media Capture * Low CVE-2023-6511: Inappropriate implementation in Autofill * Low CVE-2023-6512: Inappropriate implementation in Web Browser UI ---- update to 119.0.6045.199, upstream security release * High CVE-2023-6348: Type Confusion in Spellcheck * High CVE-2023-6347: Use after free in Mojo * High CVE-2023-6346: Use after free in WebAudio * High CVE-2023-6350: Out of bounds memory access in libavif * High CVE-2023-6351: Use after free in libavif * High CVE-2023-6345: Integer overflow in Skia -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.109-1 - update to 120.0.6099.109 * High CVE-2023-6702: Type Confusion in V8 * High CVE-2023-6703: Use after free in Blink * High CVE-2023-6704: Use after free in libavif * High CVE-2023-6705: Use after free in WebRTC * High CVE-2023-6706: Use after free in FedCM * Medium CVE-2023-6707: Use after free in CSS * Fri Dec 8 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.71-1 - update to 120.0.6099.71 * Wed Dec 6 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.62-2 - drop unsupported ldflag which caused build failure * Tue Dec 5 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.62-1 - update to 120.0.6099.62 - fixed bz#2252874, built with control flow integrity (CFI) support * Sat Dec 2 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.56-1 - update to 120.0.6099.56 - enable qt6 UI backend * Sat Dec 2 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.199-2 - fixed bz#2242271, built with bundleminizip in fedora > 39 - fixed bz#2251884, built with fstack-protector-strong for improved security * Wed Nov 29 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.199-1 - update to 119.0.6045.199 * Sun Nov 19 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.159-2 - fix ffmpeg conflicts -------------------------------------------------------------------------------- References: [ 1 ] Bug #2252009 - CVE-2023-6346 CVE-2023-6347 CVE-2023-6350 CVE-2023-6351 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252009 [ 2 ] Bug #2252188 - CVE-2023-6345 chromium: chromium-browser: Integer overflow [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252188 [ 3 ] Bug #2252191 - CVE-2023-6348 chromium: chromium-browser: Type Confusion in Spellcheck [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252191 [ 4 ] Bug #2253151 - CVE-2023-6508 chromium: Use after free in Media Stream [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253151 [ 5 ] Bug #2253154 - CVE-2023-6509 chromium: Use after free in Side Panel Search [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253154 [ 6 ] Bug #2253157 - CVE-2023-6510 chromium: Use after free in Media Capture [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253157 [ 7 ] Bug #2253161 - CVE-2023-6511 chromium: Inappropriate implementation in Autofill [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253161 [ 8 ] Bug #2253164 - CVE-2023-6512 chromium: Inappropriate implementation in Web Browser UI [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253164 -------------------------------------------------------------------------------- ================================================================================ netdata-1.44.1-1.el7 (FEDORA-EPEL-2023-2bf0667cfa) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update from upstream ---- Update from upstream -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 14 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.44.1-1 - Update from upstream * Thu Dec 7 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.44.0-1 - Update from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254283 - netdata-1.44.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2254283 -------------------------------------------------------------------------------- ================================================================================ python-colcon-override-check-0.0.1-1.el7 (FEDORA-EPEL-2023-626205795f) Extension for colcon to check for problems overriding installed packages -------------------------------------------------------------------------------- Update Information: Initial build of the `colcon-override-check` package. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 10 2022 Scott K Logan <logans(a)cottsay.net> - 0.0.1-1 - Initial package (rhbz#2143071) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2143071 - Review Request: python-colcon-override-check - Extension for colcon to check for problems overriding installed packages https://bugzilla.redhat.com/show_bug.cgi?id=2143071 -------------------------------------------------------------------------------- ================================================================================ squashfs-tools-ng-1.2.0-4.el7 (FEDORA-EPEL-2023-6a90ecf2ca) A new set of tools and libraries for working with SquashFS images -------------------------------------------------------------------------------- Update Information: Add libselinux-devel build dep. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 14 2023 David Trudgian <david.trudgian(a)sylabs.io> - 1.2.0-4 - RPMAUTOSPEC: unresolvable merge -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254110 - squashfs-tools-ng needs libselinux-devel https://bugzilla.redhat.com/show_bug.cgi?id=2254110 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 14 Dec '23

14 Dec '23

The following Fedora EPEL 9 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7a05e8decc rdiff-backup-2.2.6-3.el9 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4b1b8b8b25 llhttp-9.1.3-1.el9 python-aiohttp-3.9.1-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing assimp-5.2.5-1.el9 chromium-120.0.6099.109-1.el9 composefs-1.0.2-1.el9 lagrange-1.17.5-1.el9 netcdf-cxx4-4.3.1-3.el9 netdata-1.44.1-1.el9 python-colcon-override-check-0.0.1-1.el9 python-sphinx-mdinclude-0.5.3-4.el9 squashfs-tools-ng-1.2.0-3.el9 the_foundation-1.7.0-1.el9 Details about builds: ================================================================================ assimp-5.2.5-1.el9 (FEDORA-EPEL-2023-d3f80c2d82) Library to import various 3D model formats into applications -------------------------------------------------------------------------------- Update Information: Initial build of assimp in EPEL 9 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 24 2023 Rich Mattes <richmattes(a)gmail.com> - 5.2.5-1 - Add check section and fix ctest configuration * Thu Oct 26 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 5.2.5-1 - Ensure stb_image contains the latest CVE patches * Fri Jul 28 2023 Scott K Logan <logans(a)cottsay.net> - 5.2.5-1 - Update to release 5.2.5 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.1-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 5.0.1-11 - Rebuilt for Python 3.12 * Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.1-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 5.0.1-8 - Rebuilt for Python 3.11 * Sat Apr 23 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 5.0.1-7 - Security fix for CVE-2022-28041 - Drop dependency on pkgconfig(zzip-zlib-config), no longer available in zziplib; use zlib directly instead * Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.0.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Dec 30 2021 Rich Mattes <richmattes(a)gmail.com> - 5.0.1-5 - Correct Unlicense shortname (rhbz#2036000) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2147378 - Please branch and build assimp for EPEL 9 https://bugzilla.redhat.com/show_bug.cgi?id=2147378 -------------------------------------------------------------------------------- ================================================================================ chromium-120.0.6099.109-1.el9 (FEDORA-EPEL-2023-0bdf9bf395) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: update to 120.0.6099.109 - High CVE-2023-6702: Type Confusion in V8 - High CVE-2023-6703: Use after free in Blink - High CVE-2023-6704: Use after free in libavif - High CVE-2023-6705: Use after free in WebRTC - High CVE-2023-6706: Use after free in FedCM - Medium CVE-2023-6707: Use after free in CSS ---- Update to 120.0.6099.71 ---- Update to 120.0.6099.62, upstream release fixes follow security issues: * High CVE-2023-6508: Use after free in Media Stream * High CVE-2023-6509: Use after free in Side Panel Search * Medium CVE-2023-6510: Use after free in Media Capture * Low CVE-2023-6511: Inappropriate implementation in Autofill * Low CVE-2023-6512: Inappropriate implementation in Web Browser UI ---- update to 119.0.6045.199, upstream security release * High CVE-2023-6348: Type Confusion in Spellcheck * High CVE-2023-6347: Use after free in Mojo * High CVE-2023-6346: Use after free in WebAudio * High CVE-2023-6350: Out of bounds memory access in libavif * High CVE-2023-6351: Use after free in libavif * High CVE-2023-6345: Integer overflow in Skia -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.109-1 - update to 120.0.6099.109 * High CVE-2023-6702: Type Confusion in V8 * High CVE-2023-6703: Use after free in Blink * High CVE-2023-6704: Use after free in libavif * High CVE-2023-6705: Use after free in WebRTC * High CVE-2023-6706: Use after free in FedCM * Medium CVE-2023-6707: Use after free in CSS * Fri Dec 8 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.71-1 - update to 120.0.6099.71 * Wed Dec 6 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.62-2 - drop unsupported ldflag which caused build failure * Tue Dec 5 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.62-1 - update to 120.0.6099.62 - fixed bz#2252874, built with control flow integrity (CFI) support * Sat Dec 2 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.56-1 - update to 120.0.6099.56 - enable qt6 UI backend * Sat Dec 2 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.199-2 - fixed bz#2242271, built with bundleminizip in fedora > 39 - fixed bz#2251884, built with fstack-protector-strong for improved security * Wed Nov 29 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.199-1 - update to 119.0.6045.199 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2252009 - CVE-2023-6346 CVE-2023-6347 CVE-2023-6350 CVE-2023-6351 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252009 [ 2 ] Bug #2252188 - CVE-2023-6345 chromium: chromium-browser: Integer overflow [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252188 [ 3 ] Bug #2252191 - CVE-2023-6348 chromium: chromium-browser: Type Confusion in Spellcheck [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252191 [ 4 ] Bug #2253151 - CVE-2023-6508 chromium: Use after free in Media Stream [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253151 [ 5 ] Bug #2253154 - CVE-2023-6509 chromium: Use after free in Side Panel Search [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253154 [ 6 ] Bug #2253157 - CVE-2023-6510 chromium: Use after free in Media Capture [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253157 [ 7 ] Bug #2253161 - CVE-2023-6511 chromium: Inappropriate implementation in Autofill [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253161 [ 8 ] Bug #2253164 - CVE-2023-6512 chromium: Inappropriate implementation in Web Browser UI [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2253164 -------------------------------------------------------------------------------- ================================================================================ composefs-1.0.2-1.el9 (FEDORA-EPEL-2023-06857c55bb) Tools to handle creating and mounting composefs images -------------------------------------------------------------------------------- Update Information: Merge branch 'f39' into epel9 -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 14 2023 Stephen Smoogen <ssmoogen(a)redhat.com> - 1.0.2-4 - RPMAUTOSPEC: unresolvable merge -------------------------------------------------------------------------------- ================================================================================ lagrange-1.17.5-1.el9 (FEDORA-EPEL-2023-922d85ed2e) A Beautiful Gemini Client -------------------------------------------------------------------------------- Update Information: Latest 1.17 release, see https://git.skyjake.fi/gemini/lagrange/releases for changes since 1.16.7 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Michel Lind <salimma(a)fedoraproject.org> - 1.17.5-1 - Update to 1.17.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2242724 - the_foundation-1.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2242724 [ 2 ] Bug #2242736 - lagrange-1.17.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2242736 -------------------------------------------------------------------------------- ================================================================================ netcdf-cxx4-4.3.1-3.el9 (FEDORA-EPEL-2023-2c9887c834) NetCDF-4 C++ library -------------------------------------------------------------------------------- Update Information: Build for EPEL9 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Sep 13 2019 Orion Poplawski <orion(a)nwra.com> - 4.3.1-1 - Update to 4.3.1 * Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.0-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Mar 18 2019 Orion Poplawski <orion(a)nwra.com> - 4.3.0-10 - Rebuild for netcdf 4.6.3 * Thu Feb 14 2019 Orion Poplawski <orion(a)nwra.com> - 4.3.0-9 - Rebuild for openmpi 3.1.3 * Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254155 - Requesting EPEL9 build of netcdf-cxx4 https://bugzilla.redhat.com/show_bug.cgi?id=2254155 -------------------------------------------------------------------------------- ================================================================================ netdata-1.44.1-1.el9 (FEDORA-EPEL-2023-08ecbbe861) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update from upstream ---- Update from upstream -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 14 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.44.1-1 - Update from upstream * Thu Dec 7 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.44.0-1 - Update from upstream -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254283 - netdata-1.44.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2254283 -------------------------------------------------------------------------------- ================================================================================ python-colcon-override-check-0.0.1-1.el9 (FEDORA-EPEL-2023-16b9ae7a4b) Extension for colcon to check for problems overriding installed packages -------------------------------------------------------------------------------- Update Information: Initial build of the `colcon-override-check` package. -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 10 2022 Scott K Logan <logans(a)cottsay.net> - 0.0.1-1 - Initial package (rhbz#2143071) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2143071 - Review Request: python-colcon-override-check - Extension for colcon to check for problems overriding installed packages https://bugzilla.redhat.com/show_bug.cgi?id=2143071 -------------------------------------------------------------------------------- ================================================================================ python-sphinx-mdinclude-0.5.3-4.el9 (FEDORA-EPEL-2023-0497248ae5) Markdown extension for Sphinx -------------------------------------------------------------------------------- Update Information: Initial EPEL 9 release -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 14 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.5.3-4 - Relax Pygments requirement for EL9 build * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jun 15 2023 Python Maint <python-maint(a)redhat.com> - 0.5.3-2 - Rebuilt for Python 3.12 * Sat Mar 18 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 0.5.3-1 - Initial Fedora package -------------------------------------------------------------------------------- References: [ 1 ] Bug #2223062 - Please branch and build python-sphinx-mdinclude for EPEL9 https://bugzilla.redhat.com/show_bug.cgi?id=2223062 -------------------------------------------------------------------------------- ================================================================================ squashfs-tools-ng-1.2.0-3.el9 (FEDORA-EPEL-2023-5282355c4c) A new set of tools and libraries for working with SquashFS images -------------------------------------------------------------------------------- Update Information: Add libselinux-devel build dep. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 14 2023 David Trudgian <david.trudgian(a)sylabs.io> - 1.2.0-3 - RPMAUTOSPEC: unresolvable merge -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254110 - squashfs-tools-ng needs libselinux-devel https://bugzilla.redhat.com/show_bug.cgi?id=2254110 -------------------------------------------------------------------------------- ================================================================================ the_foundation-1.7.0-1.el9 (FEDORA-EPEL-2023-922d85ed2e) Opinionated C11 library for low-level functionality -------------------------------------------------------------------------------- Update Information: Latest 1.17 release, see https://git.skyjake.fi/gemini/lagrange/releases for changes since 1.16.7 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Michel Lind <salimma(a)fedoraproject.org> - 1.7.0-1 - Update to 1.7.0 * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2242724 - the_foundation-1.7.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2242724 [ 2 ] Bug #2242736 - lagrange-1.17.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2242736 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 13 Dec '23

13 Dec '23

The following Fedora EPEL 7 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-fd36857b5e seamonkey-2.53.18-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-3782f9a3bf chromium-120.0.6099.71-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing gfal2-2.22.1-1.el7 gfal2-python-1.12.2-1.el7 gfal2-util-1.8.1-1.el7 xrootd-5.6.4-1.el7 Details about builds: ================================================================================ gfal2-2.22.1-1.el7 (FEDORA-EPEL-2023-9f018d9947) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: New upstream release v2.22.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 2.22.1-1 - Upgrade to upstream release 2.22.1 * Tue Oct 31 2023 Terje Rosten <terje.rosten(a)ntnu.no> - 2.21.5-2 - Rebuild for gtest 1.14.0 (bugzilla #2228663) -------------------------------------------------------------------------------- ================================================================================ gfal2-python-1.12.2-1.el7 (FEDORA-EPEL-2023-66be6dcee3) Python bindings for gfal 2 -------------------------------------------------------------------------------- Update Information: New upstream release v1.12.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 1.12.2-1 - Upgrade to upstream release 1.12.2 * Tue Nov 21 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 1.12.1-2 - Patch for the Python 3.13 rebuild (close RHBZ#2250873) -------------------------------------------------------------------------------- ================================================================================ gfal2-util-1.8.1-1.el7 (FEDORA-EPEL-2023-27dd9115d2) GFAL2 utility tools -------------------------------------------------------------------------------- Update Information: New upstream release v1.8.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mipatras(a)cern.ch> - 1.8.1-1 - Upgrade to upstream release 1.8.1 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ xrootd-5.6.4-1.el7 (FEDORA-EPEL-2023-cab8d09981) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: XRootD 5.6.4 -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 11 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.6.4-1 - Update to version 5.6.4 - Drop patches accepted upstream or previously backported --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 13 Dec '23

13 Dec '23

The following Fedora EPEL 8 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-76db503610 seamonkey-2.53.18-1.el8 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d1b0df83e0 chromium-120.0.6099.71-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ad7d095358 rdiff-backup-2.2.6-3.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing AMF-1.4.32-1.el8 gfal2-2.22.1-1.el8 gfal2-python-1.12.2-1.el8 gfal2-util-1.8.1-1.el8 knot-3.3.3-1.el8 kobo-0.35.0-1.el8 mock-5.3-1.el8 xrootd-5.6.4-1.el8 Details about builds: ================================================================================ AMF-1.4.32-1.el8 (FEDORA-EPEL-2023-5d79b9c6f2) Advanced Media Framework (AMF) SDK -------------------------------------------------------------------------------- Update Information: Update to 1.4.32. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Simone Caronni <negativo17(a)gmail.com> - 1.4.32-1 - Update to 1.4.32. -------------------------------------------------------------------------------- ================================================================================ gfal2-2.22.1-1.el8 (FEDORA-EPEL-2023-5f58cc8ac7) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: New upstream release v2.22.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 2.22.1-1 - Upgrade to upstream release 2.22.1 * Tue Oct 31 2023 Terje Rosten <terje.rosten(a)ntnu.no> - 2.21.5-2 - Rebuild for gtest 1.14.0 (bugzilla #2228663) -------------------------------------------------------------------------------- ================================================================================ gfal2-python-1.12.2-1.el8 (FEDORA-EPEL-2023-7a80a3ef9a) Python bindings for gfal 2 -------------------------------------------------------------------------------- Update Information: New upstream release v1.12.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 1.12.2-1 - Upgrade to upstream release 1.12.2 * Tue Nov 21 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 1.12.1-2 - Patch for the Python 3.13 rebuild (close RHBZ#2250873) -------------------------------------------------------------------------------- ================================================================================ gfal2-util-1.8.1-1.el8 (FEDORA-EPEL-2023-de29c26215) GFAL2 utility tools -------------------------------------------------------------------------------- Update Information: New upstream release v1.8.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mipatras(a)cern.ch> - 1.8.1-1 - Upgrade to upstream release 1.8.1 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ knot-3.3.3-1.el8 (FEDORA-EPEL-2023-821fd46ef9) High-performance authoritative DNS server -------------------------------------------------------------------------------- Update Information: Knot DNS 3.3.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.3.3-1 - Update to 3.3.3 -------------------------------------------------------------------------------- ================================================================================ kobo-0.35.0-1.el8 (FEDORA-EPEL-2023-91bcd67b29) Python modules for tools development -------------------------------------------------------------------------------- Update Information: rebase to latest upstream release (rhbz#2254256) -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Luk�� Zaoral <lzaoral(a)redhat.com> - 0.35.0-1 - rebase to latest upstream release (rhbz#2254256) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254256 - kobo-0.35.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2254256 -------------------------------------------------------------------------------- ================================================================================ mock-5.3-1.el8 (FEDORA-EPEL-2023-31a5c9462d) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: https://rpm-software-management.github.io/mock/Release-Notes-5.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Pavel Raiskup <praiskup(a)redhat.com> 5.3-1 - orphanskill: log command line arguments of the terminated process - docs: migrate the community from IRC to Matrix - dnf5: don't output to a PTY (mail(a)evangoo.de) - new rpmautospec plugin (sgallagh(a)redhat.com, nils(a)redhat.com) - fix bash completion with multiple file arguments (orion(a)nwra.com) - only %prep once when running %generate_buildrequires multiple times (miro(a)hroncok.cz) - Dynamic BuildRequires: Prevent generation of unsatisfied dependency (miro(a)hroncok.cz) - Identify buildroot package management earlier (praiskup(a)redhat.com) - Dump also dnf5 info into logs -------------------------------------------------------------------------------- ================================================================================ xrootd-5.6.4-1.el8 (FEDORA-EPEL-2023-63888b79bf) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: XRootD 5.6.4 -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 11 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.6.4-1 - Update to version 5.6.4 - Drop patches accepted upstream or previously backported --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 13 Dec '23

13 Dec '23

The following Fedora EPEL 9 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a0fcd69d86 chromium-120.0.6099.71-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7a05e8decc rdiff-backup-2.2.6-3.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing AMF-1.4.32-1.el9 bitcoin-core-26.0-1.el9 blender-3.3.12-1.el9 gfal2-2.22.1-1.el9 gfal2-python-1.12.2-1.el9 gfal2-util-1.8.1-1.el9 knot-3.3.3-1.el9 kobo-0.35.0-1.el9 llhttp-9.1.3-1.el9 mock-5.3-1.el9 python-aiohttp-3.9.1-1.el9 python-dirhash-0.2.1-1.el9 qbittorrent-4.6.2-1.el9 rust-itertools-0.12.0-1.el9 rust-itertools0.11-0.11.0-1.el9 rust-proptest-derive-0.4.0-1.el9 rust-proptest-derive0.3-0.3.0-1.el9 rust-toml-0.8.8-1.el9 rust-toml_edit-0.21.0-1.el9 rust-toml_edit0.20-0.20.7-1.el9 xrootd-5.6.4-1.el9 Details about builds: ================================================================================ AMF-1.4.32-1.el9 (FEDORA-EPEL-2023-830f958112) Advanced Media Framework (AMF) SDK -------------------------------------------------------------------------------- Update Information: Update to 1.4.32. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Simone Caronni <negativo17(a)gmail.com> - 1.4.32-1 - Update to 1.4.32. -------------------------------------------------------------------------------- ================================================================================ bitcoin-core-26.0-1.el9 (FEDORA-EPEL-2023-91bc6fe121) Peer to Peer Cryptographic Currency -------------------------------------------------------------------------------- Update Information: Update to 26.0. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Simone Caronni <negativo17(a)gmail.com> - 26.0-1 - Update to 26.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2253689 - bitcoin-core-26.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2253689 -------------------------------------------------------------------------------- ================================================================================ blender-3.3.12-1.el9 (FEDORA-EPEL-2023-2bcf96547f) 3D modeling, animation, rendering and post-production -------------------------------------------------------------------------------- Update Information: New updates with fixed macros for addons -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Luya Tshimbalanga <luya(a)fedoraproject.org> - 1:3.3.12-1 - Update to 3.3.12 -------------------------------------------------------------------------------- ================================================================================ gfal2-2.22.1-1.el9 (FEDORA-EPEL-2023-209f98626f) Grid file access library 2.0 -------------------------------------------------------------------------------- Update Information: New upstream release v2.22.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 2.22.1-1 - Upgrade to upstream release 2.22.1 * Tue Oct 31 2023 Terje Rosten <terje.rosten(a)ntnu.no> - 2.21.5-2 - Rebuild for gtest 1.14.0 (bugzilla #2228663) -------------------------------------------------------------------------------- ================================================================================ gfal2-python-1.12.2-1.el9 (FEDORA-EPEL-2023-6f9cfa7592) Python bindings for gfal 2 -------------------------------------------------------------------------------- Update Information: New upstream release v1.12.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 1.12.2-1 - Upgrade to upstream release 1.12.2 * Tue Nov 21 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 1.12.1-2 - Patch for the Python 3.13 rebuild (close RHBZ#2250873) -------------------------------------------------------------------------------- ================================================================================ gfal2-util-1.8.1-1.el9 (FEDORA-EPEL-2023-3c73856303) GFAL2 utility tools -------------------------------------------------------------------------------- Update Information: New upstream release v1.8.1 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Mihai Patrascoiu <mipatras(a)cern.ch> - 1.8.1-1 - Upgrade to upstream release 1.8.1 * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ knot-3.3.3-1.el9 (FEDORA-EPEL-2023-4808fb855f) High-performance authoritative DNS server -------------------------------------------------------------------------------- Update Information: Knot DNS 3.3.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.3.3-1 - Update to 3.3.3 -------------------------------------------------------------------------------- ================================================================================ kobo-0.35.0-1.el9 (FEDORA-EPEL-2023-fb01bd9a46) Python modules for tools development -------------------------------------------------------------------------------- Update Information: rebase to latest upstream release (rhbz#2254256) -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Luk�� Zaoral <lzaoral(a)redhat.com> - 0.35.0-1 - rebase to latest upstream release (rhbz#2254256) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254256 - kobo-0.35.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2254256 -------------------------------------------------------------------------------- ================================================================================ llhttp-9.1.3-1.el9 (FEDORA-EPEL-2023-4b1b8b8b25) Port of http_parser to llparse -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-47627, CVE-2023-49081, CVE-2023-49082. https://pagure.io/epel/issue/262 ## python-aiohttp 3.9.1 (2023-11-26) https://github.com/aio-libs/aiohttp/blob/v3.9.1/CHANGES.rst#391-2023-11-26 ## python-aiohttp 3.9.0 (2023-11-17) https://github.com/aio- libs/aiohttp/blob/v3.9.1/CHANGES.rst#390-2023-11-18 ## python-aiohttp 3.8.6 (2023-10-07) https://github.com/aio- libs/aiohttp/blob/v3.9.1/CHANGES.rst#386-2023-10-07 ----- ## llhttp 9.1.3 ### Fixes - Restart the parser on HTTP 100 - Fix chunk extensions quoted-string value parsing - Fix `lenient_flags` truncated on reset - Fix chunk extensions�� parameters parsing when more then one name-value pair provided ## llhttp 9.1.2 ### What's Changed - Fix HTTP 1xx handling ## llhttp 9.1.1 ### What's Changed - feat: Expose new lenient methods ## llhttp 9.1.0 ### What's Changed - New lenient flag to make CR completely optional - New lenient flag to have spaces after chunk header -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.3-1 - Update to 9.1.3 (close RHBZ#2242220) * Thu Nov 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.2-1 - Update to 9.1.2 * Thu Nov 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.1-1 - Update to 9.1.1 * Thu Nov 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.1.0-1 - Update to 9.1.0 * Thu Nov 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.0.1-1 - Update to 9.0.1 (close RHBZ#2228290) * Thu Nov 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 9.0.0-1 - Update to 9.0.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2250614 - CVE-2023-47627 python-aiohttp: numerous issues in HTTP parser with header parsing [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250614 [ 2 ] Bug #2252239 - TRIAGE CVE-2023-49081 python-aiohttp: aiohttp: HTTP request modification [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252239 [ 3 ] Bug #2252250 - TRIAGE CVE-2023-49082 python-aiohttp: aiohttp: CRLF injection if user controls the HTTP method using aiohttp client [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252250 -------------------------------------------------------------------------------- ================================================================================ mock-5.3-1.el9 (FEDORA-EPEL-2023-336a3b357a) Builds packages inside chroots -------------------------------------------------------------------------------- Update Information: https://rpm-software-management.github.io/mock/Release-Notes-5.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Pavel Raiskup <praiskup(a)redhat.com> 5.3-1 - orphanskill: log command line arguments of the terminated process - docs: migrate the community from IRC to Matrix - dnf5: don't output to a PTY (mail(a)evangoo.de) - new rpmautospec plugin (sgallagh(a)redhat.com, nils(a)redhat.com) - fix bash completion with multiple file arguments (orion(a)nwra.com) - only %prep once when running %generate_buildrequires multiple times (miro(a)hroncok.cz) - Dynamic BuildRequires: Prevent generation of unsatisfied dependency (miro(a)hroncok.cz) - Identify buildroot package management earlier (praiskup(a)redhat.com) - Dump also dnf5 info into logs -------------------------------------------------------------------------------- ================================================================================ python-aiohttp-3.9.1-1.el9 (FEDORA-EPEL-2023-4b1b8b8b25) Python HTTP client/server for asyncio -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-47627, CVE-2023-49081, CVE-2023-49082. https://pagure.io/epel/issue/262 ## python-aiohttp 3.9.1 (2023-11-26) https://github.com/aio-libs/aiohttp/blob/v3.9.1/CHANGES.rst#391-2023-11-26 ## python-aiohttp 3.9.0 (2023-11-17) https://github.com/aio- libs/aiohttp/blob/v3.9.1/CHANGES.rst#390-2023-11-18 ## python-aiohttp 3.8.6 (2023-10-07) https://github.com/aio- libs/aiohttp/blob/v3.9.1/CHANGES.rst#386-2023-10-07 ----- ## llhttp 9.1.3 ### Fixes - Restart the parser on HTTP 100 - Fix chunk extensions quoted-string value parsing - Fix `lenient_flags` truncated on reset - Fix chunk extensions�� parameters parsing when more then one name-value pair provided ## llhttp 9.1.2 ### What's Changed - Fix HTTP 1xx handling ## llhttp 9.1.1 ### What's Changed - feat: Expose new lenient methods ## llhttp 9.1.0 ### What's Changed - New lenient flag to make CR completely optional - New lenient flag to have spaces after chunk header -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 30 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.9.1-1 - Update to 3.9.1 (fix RHBZ#2252236, fix RHBZ#2252249) - Fixes CVE-2023-49081 and CVE-2023-49082 * Mon Oct 16 2023 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.8.6-1 - Update to 3.8.6 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2250614 - CVE-2023-47627 python-aiohttp: numerous issues in HTTP parser with header parsing [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250614 [ 2 ] Bug #2252239 - TRIAGE CVE-2023-49081 python-aiohttp: aiohttp: HTTP request modification [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252239 [ 3 ] Bug #2252250 - TRIAGE CVE-2023-49082 python-aiohttp: aiohttp: CRLF injection if user controls the HTTP method using aiohttp client [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252250 -------------------------------------------------------------------------------- ================================================================================ python-dirhash-0.2.1-1.el9 (FEDORA-EPEL-2023-1a170351a0) Python module and CLI for hashing of file system directories -------------------------------------------------------------------------------- Update Information: Initial build of python-dirhash. -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 16 2022 Scott K Logan <logans(a)cottsay.net> - 0.2.1-1 - Initial package (rhbz#2143807) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2143807 - Review Request: python-dirhash - Python module and CLI for hashing of file system directories https://bugzilla.redhat.com/show_bug.cgi?id=2143807 -------------------------------------------------------------------------------- ================================================================================ qbittorrent-4.6.2-1.el9 (FEDORA-EPEL-2023-339f0a3129) A Bittorrent Client -------------------------------------------------------------------------------- Update Information: update to 4.6.2 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 30 2023 Leigh Scott <leigh123linux(a)gmail.com> - 1:4.6.2-1 - Update to 4.6.2 -------------------------------------------------------------------------------- ================================================================================ rust-itertools-0.12.0-1.el9 (FEDORA-EPEL-2023-0a0b51a7e9) Extra iterator adaptors, iterator methods, free functions, and macros -------------------------------------------------------------------------------- Update Information: - Update the toml crate to version 0.8.8. - Update the toml_edit crate to version 0.21.0. - Add a compat package for version 0.20 of the toml_edit crate. - Update the itertools crate to version 0.12.0. - Add a compat package for version 0.11 of the itertools crate. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.12.0-1 - Update to version 0.12.0; Fixes RHBZ#2249677 * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-itertools0.11-0.11.0-1.el9 (FEDORA-EPEL-2023-0a0b51a7e9) Extra iterator adaptors, iterator methods, free functions, and macros -------------------------------------------------------------------------------- Update Information: - Update the toml crate to version 0.8.8. - Update the toml_edit crate to version 0.21.0. - Add a compat package for version 0.20 of the toml_edit crate. - Update the itertools crate to version 0.12.0. - Add a compat package for version 0.11 of the itertools crate. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.11.0-1 - Initial import (itertools 0.11 compat package) -------------------------------------------------------------------------------- ================================================================================ rust-proptest-derive-0.4.0-1.el9 (FEDORA-EPEL-2023-e6b337db99) Custom-derive for the Arbitrary trait of proptest -------------------------------------------------------------------------------- Update Information: - Update the proptest-derive crate to version 0.4.0. - Add a compat package for version 0.3 of the proptest-derive crate. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.4.0-1 - Update to version 0.4.0; Fixes RHBZ#2235211 * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-proptest-derive0.3-0.3.0-1.el9 (FEDORA-EPEL-2023-e6b337db99) Custom-derive for the Arbitrary trait of proptest -------------------------------------------------------------------------------- Update Information: - Update the proptest-derive crate to version 0.4.0. - Add a compat package for version 0.3 of the proptest-derive crate. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 13 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.0-1 - Initial import (proptest-derive 0.3 compat package) -------------------------------------------------------------------------------- ================================================================================ rust-toml-0.8.8-1.el9 (FEDORA-EPEL-2023-0a0b51a7e9) Native Rust encoder and decoder of TOML-formatted files and streams -------------------------------------------------------------------------------- Update Information: - Update the toml crate to version 0.8.8. - Update the toml_edit crate to version 0.21.0. - Add a compat package for version 0.20 of the toml_edit crate. - Update the itertools crate to version 0.12.0. - Add a compat package for version 0.11 of the itertools crate. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.8-1 - Update to version 0.8.8, Fixes RHBZ#2245686 -------------------------------------------------------------------------------- ================================================================================ rust-toml_edit-0.21.0-1.el9 (FEDORA-EPEL-2023-0a0b51a7e9) Yet another format-preserving TOML parser -------------------------------------------------------------------------------- Update Information: - Update the toml crate to version 0.8.8. - Update the toml_edit crate to version 0.21.0. - Add a compat package for version 0.20 of the toml_edit crate. - Update the itertools crate to version 0.12.0. - Add a compat package for version 0.11 of the itertools crate. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.21.0-1 - Update to version 0.21.0; Fixes RHBZ#2245688 -------------------------------------------------------------------------------- ================================================================================ rust-toml_edit0.20-0.20.7-1.el9 (FEDORA-EPEL-2023-0a0b51a7e9) Yet another format-preserving TOML parser -------------------------------------------------------------------------------- Update Information: - Update the toml crate to version 0.8.8. - Update the toml_edit crate to version 0.21.0. - Add a compat package for version 0.20 of the toml_edit crate. - Update the itertools crate to version 0.12.0. - Add a compat package for version 0.11 of the itertools crate. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.20.7-1 - Initial import (toml_edit 0.20 compat package) -------------------------------------------------------------------------------- ================================================================================ xrootd-5.6.4-1.el9 (FEDORA-EPEL-2023-0d169188ef) Extended ROOT file server -------------------------------------------------------------------------------- Update Information: XRootD 5.6.4 -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 11 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.6.4-1 - Update to version 5.6.4 - Drop patches accepted upstream or previously backported * Tue Dec 5 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.6.3-3 - Avoid /tmp when running some tests - Fail gracefully in case of unsupported extended file attributes - Avoid null bytes in error message strings - Fix include path in XRootDConfig.cmake - Avoid dereferencing unaligned pointers - Support big endian in XrdZip --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 12 Dec '23

12 Dec '23

The following Fedora EPEL 8 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-76db503610 seamonkey-2.53.18-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d1b0df83e0 chromium-120.0.6099.71-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-ad7d095358 rdiff-backup-2.2.6-3.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing cloud-utils-0.33-5.el8 fennel-1.4.0-2.el8 Details about builds: ================================================================================ cloud-utils-0.33-5.el8 (FEDORA-EPEL-2023-bb5a740a4c) Cloud image management utilities -------------------------------------------------------------------------------- Update Information: * Split the cloud-utils package into multiple subpackages (per each tool) * Drop the cloud-utils-growpart subpackage as it already is shipped in RHEL -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Ondrej Mosn��ek <omosnacek(a)gmail.com> - 0.33-5 - Fix EPEL8 subpackage conflict * Thu Sep 14 2023 Ondrej Mosn��ek <omosnacek(a)gmail.com> - 0.33-4 - Split each tool into its own subpackage -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254077 - cloud-utils-growpart package conflict https://bugzilla.redhat.com/show_bug.cgi?id=2254077 -------------------------------------------------------------------------------- ================================================================================ fennel-1.4.0-2.el8 (FEDORA-EPEL-2023-46d0186d1c) A Lisp that compiles to Lua -------------------------------------------------------------------------------- Update Information: ### Bug Fixes * Prevent metadata from being accessible in compiler sandbox. ### New Forms * Add `tail!` which asserts that the argument is called in tail position. * Add `assert-repl` to make an assertion which opens a repl when it fails. ### New Features * Add `--assert-as-repl` flag to replace `assert` calls with `assert-repl`. * Allow you to return a value from the repl with `,return FORM` command. * Save previous REPL values in `*1`, `*2`, and `*3` locals. * Make repl prompt change when repl sessions get nested. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Michel Lind <salimma(a)fedoraproject.org> - 1.4.0-2 - Number additional patches for EL8 compatibility * Mon Dec 11 2023 Michel Lind <salimma(a)fedoraproject.org> - 1.4.0-1 - Update to 1.4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2252483 - fennel-1.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2252483 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 12 Dec '23

12 Dec '23

The following Fedora EPEL 9 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a0fcd69d86 chromium-120.0.6099.71-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-7a05e8decc rdiff-backup-2.2.6-3.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing conman-0.3.1-1.el9 fennel-1.4.0-1.el9 foomuuri-0.22-1.el9 python-google-auth-2.25.2-1.el9 Details about builds: ================================================================================ conman-0.3.1-1.el9 (FEDORA-EPEL-2023-d326b51726) ConMan - The Console Manager -------------------------------------------------------------------------------- Update Information: add conman to EPEL-9 -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Dan Hor��k <dan[at]danny.cz> - 0.3.1-1 - updated to 0.3.1 - modernize spec file * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.3.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2128456 - [RFE: EPEL9] EPEL9 branch for conman https://bugzilla.redhat.com/show_bug.cgi?id=2128456 [ 2 ] Bug #2253807 - Request to add conman to EPEL 9 https://bugzilla.redhat.com/show_bug.cgi?id=2253807 -------------------------------------------------------------------------------- ================================================================================ fennel-1.4.0-1.el9 (FEDORA-EPEL-2023-aa28fae254) A Lisp that compiles to Lua -------------------------------------------------------------------------------- Update Information: ### Bug Fixes * Prevent metadata from being accessible in compiler sandbox. ### New Forms * Add `tail!` which asserts that the argument is called in tail position. * Add `assert-repl` to make an assertion which opens a repl when it fails. ### New Features * Add `--assert-as-repl` flag to replace `assert` calls with `assert-repl`. * Allow you to return a value from the repl with `,return FORM` command. * Save previous REPL values in `*1`, `*2`, and `*3` locals. * Make repl prompt change when repl sessions get nested. -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 11 2023 Michel Lind <salimma(a)fedoraproject.org> - 1.4.0-1 - Update to 1.4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2252483 - fennel-1.4.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2252483 -------------------------------------------------------------------------------- ================================================================================ foomuuri-0.22-1.el9 (FEDORA-EPEL-2023-9e873c9f61) Multizone bidirectional nftables firewall -------------------------------------------------------------------------------- Update Information: Upstream update to 0.22. * Add `protocol` matcher, for example `protocol gre` accepts GRE traffic. * Add support for `localhost-localhost` section and rules. If not defined, it defaults to `accept`. * Rule's log level can be set with `log_level "level crit"`. This overrides global `foomuuri { log_level ... }` setting. * Iplist refresh interval can be configured globally and per-iplist. * Pretty output for `foomuuri iplist list` instead of raw nft output. * Fix handling "[ipv6]", "[ipv6]/mask" and "[ipv6]:port" notations. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 12 2023 Kim B. Heino <b(a)bbbs.net> - 0.22-1 - Upgrade to 0.22 -------------------------------------------------------------------------------- ================================================================================ python-google-auth-2.25.2-1.el9 (FEDORA-EPEL-2023-fd98f4fb46) Google Auth Python Library -------------------------------------------------------------------------------- Update Information: Update python-google-auth to 2.25.2 ---- Update python-google-auth to 2.25 -------------------------------------------------------------------------------- ChangeLog: * Sat Dec 9 2023 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 1:2.25.2-1 - Update to 2.25.2 (#2253755) * Wed Dec 6 2023 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> - 1:2.25.1-1 - Update to 2.25.1 (#2252361) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2252361 - python-google-auth-2.25.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2252361 [ 2 ] Bug #2253755 - python-google-auth-2.25.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2253755 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 12 Dec '23

12 Dec '23

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2023-12-13 from 16:00:00 to 17:00:00 US/Eastern At fedora-meeting(a)chat.fedoraproject.org The meeting will be about: https://chat.fedoraproject.org/#/room/#meeting:fedoraproject.org This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #topic aloha #topic EPEL Issues https://pagure.io/epel/issues * https://pagure.io/epel/issues?tags=meeting&status=Open #topic Old Business (if needed) #topic General Issues / Open Floor Source: https://calendar.fedoraproject.org//meeting/9854/

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel December 2023