epel-devel August 2023

epel-devel@lists.fedoraproject.org

5 participants
96 discussions

Proposed incompatible security update for llhttp in EPEL9
by Ben Beasley 06 Dec '23

06 Dec '23

This email proposes upgrading the llhttp package in EPEL9 from 6.0.10 to 8.1.1, which would break the ABI and bump the SONAME version, under the EPEL Incompatible Upgrades Policy[1]. The llhttp package is a C library (transpiled from TypeScript) that provides the low-level HTTP support for NodeJS and for python-aiohttp. Currently, only python-aiohttp depends on the llhttp package in EPEL9. Versions of llhttp prior to 8.1.1 are affected by CVE-2023-30589[2], an HTTP request smuggling vulnerability rated 7.7 HIGH in CVSS v3 and rated Moderate by Red Hat. The GitHub advisory for llhttp is GHSA-cggh-pq45-6h9x[3]; the advisory for python-aiohttp is GHSA-45c4-8wx5-qw6w[4]. Upstream for python-aiohttp fixed this by updating llhttp (which they bundle, but we unbundle) in release 3.8.5. I am not comfortable attempting to backport the fix to an older release of llhttp. My preferred solution would be to update llhttp to 8.1.1[5] and (in the same side tag) update python-aiohttp to 3.8.5[6]. The ABI break in llhttp would only affect python-aiohttp; the python-aiohttp update itself is compatible (by upstream intent, and verified in COPR[7]); and a number of packages that depend on python-aiohttp would benefit from the fix. If this exception request is not approved, my fallback plan is to propose rebuilding python-aiohttp in EPEL9 with AIOHTTP_NO_EXTENSIONS=1, which would convert it to a pure-Python package. This is a documented mitigation, but comes with potentially serious performance regressions, again affecting a number of dependent packages. The llhttp package would become a leaf package and would remain unpatched. The same incompatible update was approved by FESCo for Fedora 37[8]. The purpose of this email is to document and explain the proposed update, to begin the minimum one-week discussion period mandated by the EPEL Incompatible Upgrades Policy, and to request that the update be added to the agenda for an upcoming EPEL meeting. [1] https://docs.fedoraproject.org/en-US/epel/epel-policy-incompatible-upgrades… [2] https://access.redhat.com/security/cve/CVE-2023-30589 [3] https://github.com/advisories/GHSA-cggh-pq45-6h9x [4] https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w [5] https://src.fedoraproject.org/rpms/llhttp/pull-request/14 [6] https://src.fedoraproject.org/rpms/python-aiohttp/pull-request/26 [7] https://copr.fedorainfracloud.org/coprs/music/aiohttp-epel9/packages/ [8] https://pagure.io/fesco/issue/3049

3 6

Incompatible security update for llhttp in EPEL9
by Ben Beasley 31 Aug '23

31 Aug '23

This email announces that the llhttp package in EPEL9 will be upgraded from 6.0.10 to 8.1.1[1], which breaks the ABI and bumps the SONAME version, as discussed[2] and approved[3] under the EPEL Incompatible Upgrades Policy[4]. At the same time, python-aiohttp will be upgraded from 3.8.4 to 3.8.5. Currently, only python-aiohttp depends on the llhttp package in EPEL9. This update fixes CVE-2023-30589[5]. Users of the python-aiohttp package, or of the various packages that depend on it, will benefit from this security fix but should not expect any incompatibilities or performance regressions. In the unlikely case that you are maintaining software that depends directly on the llhttp package, you will need to rebuild it due to the SONAME version bump. Breaking changes from 6.0.10 to 8.1.1 include a couple of HTTP parsing changes (“do not allow whitespaces after start line,” “require semicolon to start chunk parameters”) and one API change (“rename status code 509”). Most programs will not require source code changes. [1] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-e2fcc4af81 [2] https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraprojec… [3] https://pagure.io/epel/issue/241 [4] https://docs.fedoraproject.org/en-US/epel/epel-policy-incompatible-upgrades… [5] https://access.redhat.com/security/cve/CVE-2023-30589 [4] https://github.com/advisories/GHSA-cggh-pq45-6h9x [5] https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w

1 1

incompatible update of caddy in EPEL 9
by Carl George 31 Aug '23

31 Aug '23

I am performing an incompatible upgrade of the caddy package in EPEL 9. In accordance with the incompatible upgrade policy [0], I proposed this upgrade just over a week ago on the epel-devel mailing list [1]. For reasons detailed in the previous email, it is no longer possible to update the package at the current version, preventing me from resolving known CVEs. Today the EPEL Steering Committee voted to approve this upgrade [2]. This upgrade will take the package from version 2.4.6 to 2.6.4. This includes a few backwards-incompatible changes. I believe these changes are on the milder side, and most users shouldn't notice a difference. Here are the most notable removals/changes: - Reverse proxy: Incoming X-Forwarded-* headers will no longer be automatically trusted, to prevent spoofing. - Logging: Removed the deprecated common_log field from HTTP access logs, and the single_field encoder. - Logging: The remote_addr field has been replaced by remote_ip and remote_port fields in HTTP access logs, which split up the two parts of the remote address. - Caddyfile: The reverse_proxy directive's handle_response subdirective has had its status replacement functionality moved to a new replace_status subdirective. There are also a few additional changes to features labeled as experimental, and some deprecations (not yet removed). For a full list, see the upstream release notes [3][4]. If you are able, please test and provide karma for the update [5]. [0] https://docs.fedoraproject.org/en-US/epel/epel-policy-incompatible-upgrades/ [1] https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraprojec… [2] https://meetbot.fedoraproject.org/fedora-meeting/2023-08-23/epel.2023-08-23… [3] https://github.com/caddyserver/caddy/releases/tag/v2.5.0 [4] https://github.com/caddyserver/caddy/releases/tag/v2.6.0 [5] https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8849a14e7f -- Carl George

1 1

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 30 Aug '23

30 Aug '23

The following Fedora EPEL 7 Security updates need testing: Age URL 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f73923f479 python3-werkzeug-1.0.1-2.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-2b99803700 python3-flask-1.1.4-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing beep-1.4.12-9.el7 netdata-1.42.2-1.el7 Details about builds: ================================================================================ beep-1.4.12-9.el7 (FEDORA-EPEL-2023-90d5b30847) Beep the PC speaker any number of ways -------------------------------------------------------------------------------- Update Information: On EL7, use `#!/bin/sed` instead of `#!/usr/bin/sed` in the `contrib/morse2beep.sed` example script from the documentation. On later EL and Fedora, nothing changes except for the version number. This should ensure a smooth distro upgrade path. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Hans Ulrich Niedermann <hun(a)n-dimensional.de> - 1.4.12-9 - On EL7, use #!/bin/sed instead of #!/usr/bin/sed * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.12-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2234787 - beep installation failed https://bugzilla.redhat.com/show_bug.cgi?id=2234787 -------------------------------------------------------------------------------- ================================================================================ netdata-1.42.2-1.el7 (FEDORA-EPEL-2023-beef0060bc) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update to upstream release 1.42.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.42.2-1 - Update from upstream * Tue Aug 22 2023 Didier Fabert <didier.fabert(a)gmail.com> - 1.42.1-2 - migrated to SPDX license -------------------------------------------------------------------------------- References: [ 1 ] Bug #2235990 - netdata-1.42.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2235990 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 30 Aug '23

30 Aug '23

The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8849a14e7f caddy-2.6.4-1.el9 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b305ec138e indent-2.2.13-4.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing beep-1.4.12-9.el9 netdata-1.42.2-1.el9 python-aiofiles-23.1.0-1.el9 python-mujson-1.4-10.el9 rust-bstr-1.6.2-1.el9 rust-chrono-0.4.27-2.el9 rust-difftastic-0.51.1-1.el9 rust-gix-commitgraph-0.18.1-1.el9 rust-gix-fs-0.4.1-1.el9 rust-gix-hashtable-0.2.4-1.el9 rust-gix-packetline-0.16.4-1.el9 rust-gix-url-0.21.1-1.el9 rust-inventory-0.3.12-1.el9 rust-maybe-async-0.2.7-1.el9 rust-memchr-2.6.2-1.el9 rust-pure-rust-locales-0.6.0-1.el9 shell-color-prompt-0.1-6.el9 suil-0.10.18-1.el9 Details about builds: ================================================================================ beep-1.4.12-9.el9 (FEDORA-EPEL-2023-bf8126f112) Beep the PC speaker any number of ways -------------------------------------------------------------------------------- Update Information: On EL7, use `#!/bin/sed` instead of `#!/usr/bin/sed` in the `contrib/morse2beep.sed` example script from the documentation. On later EL and Fedora, nothing changes except for the version number. This should ensure a smooth distro upgrade path. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Hans Ulrich Niedermann <hun(a)n-dimensional.de> - 1.4.12-9 - On EL7, use #!/bin/sed instead of #!/usr/bin/sed * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.12-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2234787 - beep installation failed https://bugzilla.redhat.com/show_bug.cgi?id=2234787 -------------------------------------------------------------------------------- ================================================================================ netdata-1.42.2-1.el9 (FEDORA-EPEL-2023-40cdb602cb) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update to upstream release 1.42.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.42.2-1 - Update from upstream * Tue Aug 22 2023 Didier Fabert <didier.fabert(a)gmail.com> - 1.42.1-2 - migrated to SPDX license -------------------------------------------------------------------------------- References: [ 1 ] Bug #2235990 - netdata-1.42.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2235990 -------------------------------------------------------------------------------- ================================================================================ python-aiofiles-23.1.0-1.el9 (FEDORA-EPEL-2023-6c66bd2ce2) File support for asyncio -------------------------------------------------------------------------------- Update Information: Initial EPEL 9 package. -------------------------------------------------------------------------------- ChangeLog: * Fri Feb 17 2023 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> - 23.1.0-1 - feat: update to 23.1.0 (fixes rhbz#2168441) * Fri Feb 17 2023 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> - 22.1.0-3 - feat: use spdx license * Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 22.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Sun Oct 30 2022 Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur(a)gmail.com> - 22.1.0-1 - feat: update to 22.1.0 (fix rhbz#2027053) * Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jun 14 2022 Python Maint <python-maint(a)redhat.com> - 0.7.0-4 - Rebuilt for Python 3.11 * Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Mon Jun 7 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 0.7.0-1 - Update to 0.7.0 (fix RHBZ#1823140); this release adds Python 3.10 support (fixes RHBZ#1906349) - Switch to pyproject-rpm-macros, since upstream has replaced setup.py with pyproject.toml - Drop obsolete %python_provide macro * Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 0.6.0-2 - Rebuilt for Python 3.10 * Sun Apr 11 2021 Nicolas Chauvet <kwizart(a)gmail.com> - 0.6.0-1 - Update to 0.6.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2235915 - Please branch and build python-aiofiles in epel9 https://bugzilla.redhat.com/show_bug.cgi?id=2235915 -------------------------------------------------------------------------------- ================================================================================ python-mujson-1.4-10.el9 (FEDORA-EPEL-2023-44eb1631bc) Use the fastest JSON functions available at import time -------------------------------------------------------------------------------- Update Information: Initial package for EPEL 9. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Carl George <carlwgeorge(a)fedoraproject.org> - 1.4-10 - Convert to pyproject macros - Validated license as SPDX identifier * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 1.4-8 - Rebuilt for Python 3.12 * Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 1.4-5 - Rebuilt for Python 3.11 * Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2236224 - python-mujson: add to EPEL 9 https://bugzilla.redhat.com/show_bug.cgi?id=2236224 -------------------------------------------------------------------------------- ================================================================================ rust-bstr-1.6.2-1.el9 (FEDORA-EPEL-2023-b055c29d3a) String type that is not required to be valid UTF-8 -------------------------------------------------------------------------------- Update Information: - Update the bstr crate to version 1.6.2. - Update the memchr crate to version 2.6.2. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.6.2-1 - Update to version 1.6.2; Fixes RHBZ#2235790 -------------------------------------------------------------------------------- ================================================================================ rust-chrono-0.4.27-2.el9 (FEDORA-EPEL-2023-829c9e69bb) Date and time library for Rust -------------------------------------------------------------------------------- Update Information: - Update the chrono crate to version 0.4.27. - Update the pure-rust-locales crate to version 0.6.0. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.4.27-2 - Skip a test that hard-codes 64-bit arch-specific type sizes * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.4.27-1 - Update to version 0.4.27; Fixes RHBZ#2235737 * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4.26-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-difftastic-0.51.1-1.el9 (FEDORA-EPEL-2023-0fae76d8c2) Structural diff that understands syntax -------------------------------------------------------------------------------- Update Information: ### Parsing Updated Bash, Python and Rust parsers. ### Display Added a JSON display option. This is currently unstable, and requires you to set DFT_UNSTABLE. The JSON structure may change in future. Please give it a try and give feedback on GitHub issues. ### Build Added support for Linux with musl, Linux on aarch64, and macOS on aarch64. Note that Difftastic already worked on these platforms, but they are now tested in CI and will be included in prebuilt binaries in releases. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 0.51.1-1 - Update to 0.51.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2234879 - rust-difftastic-0.51.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2234879 -------------------------------------------------------------------------------- ================================================================================ rust-gix-commitgraph-0.18.1-1.el9 (FEDORA-EPEL-2023-dbc015a04c) Read-only access to the git commitgraph file format -------------------------------------------------------------------------------- Update Information: Initial packaging of the gix-commitgraph crate. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.18.1-1 - Initial import (#2228219) -------------------------------------------------------------------------------- ================================================================================ rust-gix-fs-0.4.1-1.el9 (FEDORA-EPEL-2023-6b031ebca0) File system utilities for gix -------------------------------------------------------------------------------- Update Information: Initial packaging of the gix-fs crate. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.4.1-1 - Initial import (#2228225) -------------------------------------------------------------------------------- ================================================================================ rust-gix-hashtable-0.2.4-1.el9 (FEDORA-EPEL-2023-8ab9047abd) Hashtable based data structures optimized to utilize ObjectId keys -------------------------------------------------------------------------------- Update Information: Initial packaging of the gix-hashtable crate. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.4-1 - Initial import (#2228213) -------------------------------------------------------------------------------- ================================================================================ rust-gix-packetline-0.16.4-1.el9 (FEDORA-EPEL-2023-c3f8607625) Implementation of the the pkt-line serialization format for gix -------------------------------------------------------------------------------- Update Information: Initial packaging of the gix-packetline crate. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.16.4-1 - Initial import (#2228212) -------------------------------------------------------------------------------- ================================================================================ rust-gix-url-0.21.1-1.el9 (FEDORA-EPEL-2023-7f765f11dd) Implementation of parsing and serialization of URLs for gix -------------------------------------------------------------------------------- Update Information: Initial packaging of the gix-url crate. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.21.1-1 - Initial import (#2228524) -------------------------------------------------------------------------------- ================================================================================ rust-inventory-0.3.12-1.el9 (FEDORA-EPEL-2023-00871beff8) Typed distributed plugin registration -------------------------------------------------------------------------------- Update Information: Update to version 0.3.12. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.12-1 - Update to version 0.3.12; Fixes RHBZ#2235925 -------------------------------------------------------------------------------- ================================================================================ rust-maybe-async-0.2.7-1.el9 (FEDORA-EPEL-2023-f421395d6d) Procedural macro to unify SYNC and ASYNC implementation -------------------------------------------------------------------------------- Update Information: Initial packaging of the maybe-async crate. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 5 2023 blinxen <h-k-81(a)hotmail.com> - 0.2.7-1 - Initial package -------------------------------------------------------------------------------- ================================================================================ rust-memchr-2.6.2-1.el9 (FEDORA-EPEL-2023-b055c29d3a) Safe interface to memchr -------------------------------------------------------------------------------- Update Information: - Update the bstr crate to version 1.6.2. - Update the memchr crate to version 2.6.2. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 2.6.2-1 - Update to version 2.6.2 * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 2.6.1-1 - Update to version 2.6.1; Fixes RHBZ#2235399 * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 2.5.0-4 - Regenerate with rust2rpm v24 -------------------------------------------------------------------------------- ================================================================================ rust-pure-rust-locales-0.6.0-1.el9 (FEDORA-EPEL-2023-829c9e69bb) Pure Rust locales imported directly from the GNU C Library -------------------------------------------------------------------------------- Update Information: - Update the chrono crate to version 0.4.27. - Update the pure-rust-locales crate to version 0.6.0. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.0-1 - Update to version 0.6.0; Fixes RHBZ#2219618 * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.6-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sun May 21 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.5.6-7 - Regenerate with rust2rpm v24 * Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ shell-color-prompt-0.1-6.el9 (FEDORA-EPEL-2023-af9b5aa530) Color prompt for bash shell -------------------------------------------------------------------------------- Update Information: rename source package to shell-color-prompt -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-6 - rename source package to shell-color-prompt * Tue Jun 27 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-5 - the colon separator is now uncolored * Tue Jun 27 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-4 - revert default to normal green (not bright/bold) - set prompt_color_force to override interactive terminal checks - drop bold from red error code * Tue Jun 27 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-3 - quote TERM expansion in conditional * Tue Jun 27 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-2 - change default to dim reverse video * Mon Jun 26 2023 Jens Petersen <petersen(a)redhat.com> - initial poc with bold green default -------------------------------------------------------------------------------- ================================================================================ suil-0.10.18-1.el9 (FEDORA-EPEL-2023-b442db43c5) A lightweight C library for loading and wrapping LV2 plugin UIs -------------------------------------------------------------------------------- Update Information: This is an upstream bugfix release. Please refer to the [release notes](https://drobilla.net/category/suil/) for details. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Nils Philippsen <nils(a)tiptoe.de> - 0.10.18-1 - Update to 0.10.18 - Fix license and URLs - Build with meson instead of waf - Fix typos and trailing white space - Use package name macro consistently * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.12-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.12-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2221981 - suil fails to build with Sphinx 7.x https://bugzilla.redhat.com/show_bug.cgi?id=2221981 --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 30 Aug '23

30 Aug '23

The following Fedora EPEL 8 Security updates need testing: Age URL 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-3067977cb5 indent-2.2.13-4.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing beep-1.4.12-9.el8 netdata-1.42.2-1.el8 python-mujson-1.4-2.el8 shell-color-prompt-0.1-6.el8 Details about builds: ================================================================================ beep-1.4.12-9.el8 (FEDORA-EPEL-2023-f309c84436) Beep the PC speaker any number of ways -------------------------------------------------------------------------------- Update Information: On EL7, use `#!/bin/sed` instead of `#!/usr/bin/sed` in the `contrib/morse2beep.sed` example script from the documentation. On later EL and Fedora, nothing changes except for the version number. This should ensure a smooth distro upgrade path. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Hans Ulrich Niedermann <hun(a)n-dimensional.de> - 1.4.12-9 - On EL7, use #!/bin/sed instead of #!/usr/bin/sed * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.12-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2234787 - beep installation failed https://bugzilla.redhat.com/show_bug.cgi?id=2234787 -------------------------------------------------------------------------------- ================================================================================ netdata-1.42.2-1.el8 (FEDORA-EPEL-2023-4f06063f39) Real-time performance monitoring -------------------------------------------------------------------------------- Update Information: Update to upstream release 1.42.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Didier Fabert <didier.fabert(a)gmail.com> 1.42.2-1 - Update from upstream * Tue Aug 22 2023 Didier Fabert <didier.fabert(a)gmail.com> - 1.42.1-2 - migrated to SPDX license -------------------------------------------------------------------------------- References: [ 1 ] Bug #2235990 - netdata-1.42.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2235990 -------------------------------------------------------------------------------- ================================================================================ python-mujson-1.4-2.el8 (FEDORA-EPEL-2023-4e13f22870) Use the fastest JSON functions available at import time -------------------------------------------------------------------------------- Update Information: Initial package for EPEL 8. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 30 2023 Carl George <carlwgeorge(a)fedoraproject.org> - 1.4-2 - Add import check to %check * Tue Apr 13 2021 Carl George <carl(a)george.computer> - 1.4-1 - Initial package rhbz#1948882 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2236318 - python-mujson: add to EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=2236318 -------------------------------------------------------------------------------- ================================================================================ shell-color-prompt-0.1-6.el8 (FEDORA-EPEL-2023-da7bc1b29d) Color prompt for bash shell -------------------------------------------------------------------------------- Update Information: rename source package to shell-color-prompt -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 15 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-6 - rename source package to shell-color-prompt * Tue Jun 27 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-5 - the colon separator is now uncolored * Tue Jun 27 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-4 - revert default to normal green (not bright/bold) - set prompt_color_force to override interactive terminal checks - drop bold from red error code * Tue Jun 27 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-3 - quote TERM expansion in conditional * Tue Jun 27 2023 Jens Petersen <petersen(a)redhat.com> - 0.1-2 - change default to dim reverse video * Mon Jun 26 2023 Jens Petersen <petersen(a)redhat.com> - initial poc with bold green default --------------------------------------------------------------------------------

1 0

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 29 Aug '23

29 Aug '23

The following builds have been pushed to Fedora EPEL 8 updates-testing ansible-collection-awx-awx-23.0.0-1.el8 indent-2.2.13-4.el8 knot-3.3.0-1.el8 knot-resolver-5.7.0-2.el8 python-whisper-1.1.10-1.el8 Details about builds: ================================================================================ ansible-collection-awx-awx-23.0.0-1.el8 (FEDORA-EPEL-2023-89936a874c) Ansible modules and plugins for working with AWX -------------------------------------------------------------------------------- Update Information: New package(s) for Ansible collection of Awx -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Andrew H <aheath1992(a)gmail.com> - 23.0.0-1 - Update to 23.0.0. * Wed Aug 23 2023 Andrew H <aheath1992(a)gmail.com> - 22.7.0-1 - Update to 22.7.0. * Fri Jul 28 2023 Andrew H <aheath1992(a)gmail.com> - 22.6.0-1 - Initial Package -------------------------------------------------------------------------------- ================================================================================ indent-2.2.13-4.el8 (FEDORA-EPEL-2023-3067977cb5) A GNU program for formatting C code -------------------------------------------------------------------------------- Update Information: This release fixes a heap buffer overwrite in search_brace() (CVE-2023-40305) and a heap overread in lexi(). -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Petr Pisar <ppisar(a)redhat.com> - 2.2.13-4 - Fix a heap overread in search_brace/lexi - Fix CVE-2023-40305 (a heap buffer overwrite in search_brace) (bug #2231919) * Mon Apr 17 2023 Petr Pisar <ppisar(a)redhat.com> - 2.2.13-3 - Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND Latex2e-translated-notice" -------------------------------------------------------------------------------- References: [ 1 ] Bug #2231854 - CVE-2023-40305 indent: heap-based buffer overflow in search_brace() in indent.c https://bugzilla.redhat.com/show_bug.cgi?id=2231854 -------------------------------------------------------------------------------- ================================================================================ knot-3.3.0-1.el8 (FEDORA-EPEL-2023-54a9377826) High-performance authoritative DNS server -------------------------------------------------------------------------------- Update Information: Update to Knot DNS 3.3 and Knot Resolver rebuild ---- Update to new upstream version 5.7.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 28 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.3.0-1 - Update to 3.3.0 -------------------------------------------------------------------------------- ================================================================================ knot-resolver-5.7.0-2.el8 (FEDORA-EPEL-2023-54a9377826) Caching full DNS Resolver -------------------------------------------------------------------------------- Update Information: Update to Knot DNS 3.3 and Knot Resolver rebuild ---- Update to new upstream version 5.7.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.7.0-2 - Rebuilt for Knot DNS 3.3 * Tue Aug 22 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.7.0-1 - New upstream version 5.7.0 -------------------------------------------------------------------------------- ================================================================================ python-whisper-1.1.10-1.el8 (FEDORA-EPEL-2023-520d4d0fd9) Whisper is a file-based time-series database format for Graphite -------------------------------------------------------------------------------- Update Information: Update to 1.1.10 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 7 2023 Jonathan Steffan <jsteffan(a)fedoraproject.org> - 1.1.10-1 - Update to 1.1.10 * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 1.1.6-13 - Rebuilt for Python 3.12 * Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 1.1.6-10 - Rebuilt for Python 3.11 * Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Jan 12 2022 Miro Hron��ok <mhroncok(a)redhat.com> - 1.1.6-8 - BuildRequire python3-six which is used but was only transitively pulled in by python3-mock * Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.1.6-6 - Rebuilt for Python 3.10 * Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 1.1.6-3 - Rebuilt for Python 3.9 * Thu Jan 30 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Sat Jan 18 2020 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.6-1 - Update to 1.1.6 * Thu Oct 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.1.5-5 - Rebuilt for Python 3.8.0rc1 (#1748018) * Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.1.5-4 - Rebuilt for Python 3.8 * Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Mon Jan 14 2019 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.5-1 - Update to 1.1.5 * Thu Sep 27 2018 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.4-2 - Remove Python 2 subpackage * Sat Sep 15 2018 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.4-1 - Update to 1.1.4 * Sat Jul 14 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.3-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Jun 19 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 1.1.3-3 - Rebuilt for Python 3.7 * Mon Apr 9 2018 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.3-2 - Switch tools to use Python 3 * Mon Apr 9 2018 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.3-1 - Update to 1.1.3 * Wed Feb 28 2018 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.2-1 - Update to 1.1.2 * Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Tue Dec 26 2017 Piotr Popieluch <piotr1212(a)gmail.com> - 1.1.1-1 - Update to 1.1.1 * Mon Nov 6 2017 Piotr Popieluch <piotr1212(a)gmail.com> - 1.0.2-1 - Update to 1.0.2 * Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-0.5.rc1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Jun 30 2017 Piotr Popieluch <piotr1212(a)gmail.com> - 0.10.0-0.4.rc1 - Update requires to include Python version number * Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.0-0.3.rc1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Mon Dec 19 2016 Miro Hron��ok <mhroncok(a)redhat.com> - 0.10.0-0.2.rc1 - Rebuild for Python 3.6 * Wed Aug 31 2016 Piotr Popieluch <piotr1212(a)gmail.com> - - 0.10.0-0.1.rc1 - Update to rc1 - Add Python3 support - Add %check section * Tue Jul 19 2016 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.15-3 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Pa… * Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.15-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Sat Nov 28 2015 Piotr Popieluch <piotr1212(a)gmail.com> - 0.9.15-1 - Update to new version * Sat Nov 7 2015 Piotr Popieluch <piotr1212(a)gmail.com> - 0.9.14-1 - Update to new version - Add whisper-diff * Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.13-0.2.pre1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Mon Jan 19 2015 Piotr Popieluch <piotr1212(a)gmail.com> - 0.9.13-0.1.pre1 - update to 0.9.13-pre1 * Fri Nov 14 2014 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.9.12-4 - conditionally define macros for EPEL 6 and below * Wed Oct 1 2014 Jamie Nguyen <jamielinux(a)fedoraproject.org> - 0.9.12-3 - update URL - improve description - specify commit hash in Source URL - include man pages from Debian - include missing LICENSE file - include python egg - use loop to rename files - be more explicit in %files * Sun Jun 8 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.12-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Mon Sep 2 2013 Jonathan Steffan <jsteffan(a)fedoraproject.org> - 0.9.12-1 - Update to 0.9.12 * Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.10-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.9.10-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sun Sep 16 2012 Jonathan Steffan <jsteffan(a)fedoraproject.org> - 0.9.10-2 - Add group to be able to build against EPEL5 * Thu May 31 2012 Jonathan Steffan <jsteffan(a)fedoraproject.org> - 0.9.10-1 - Initial Package -------------------------------------------------------------------------------- References: [ 1 ] Bug #2207545 - python whisper rpm is missing in EPEL 8 and EPEL 9 https://bugzilla.redhat.com/show_bug.cgi?id=2207545 --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 updates-testing report
by updates＠fedoraproject.org 29 Aug '23

29 Aug '23

The following builds have been pushed to Fedora EPEL 7 updates-testing pyicu-2.9-4.el7 python3-flask-1.1.4-1.el7 python3-werkzeug-1.0.1-2.el7 Details about builds: ================================================================================ pyicu-2.9-4.el7 (FEDORA-EPEL-2023-e2b1bcad07) Python extension wrapping the ICU C++ libraries -------------------------------------------------------------------------------- Update Information: Provides fix -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 2.9-4 - Add explicit python36-pyicu provides -------------------------------------------------------------------------------- References: [ 1 ] Bug #2234801 - Missing dependencies for gramps https://bugzilla.redhat.com/show_bug.cgi?id=2234801 -------------------------------------------------------------------------------- ================================================================================ python3-flask-1.1.4-1.el7 (FEDORA-EPEL-2023-2b99803700) Micro-framework for Python based on Werkzeug, Jinja 2 and good intentions -------------------------------------------------------------------------------- Update Information: - Update to version 1.1.4 - Rename python36-flask to python3-flask - Backport patch for CVE-2023-30861 - Run test suite in %check -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Carl George <carlwgeorge(a)fedoraproject.org> - 1.1.4-1 - Update to version 1.1.4 - Rename python36-flask to python3-flask - Backport patch for CVE-2023-30861, resolves rhbz#2196676 - Run test suite in %check -------------------------------------------------------------------------------- References: [ 1 ] Bug #2196676 - CVE-2023-30861 python3-flask: flask: Possible disclosure of permanent session cookie due to missing Vary: Cookie header [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2196676 -------------------------------------------------------------------------------- ================================================================================ python3-werkzeug-1.0.1-2.el7 (FEDORA-EPEL-2023-f73923f479) Comprehensive WSGI web application library -------------------------------------------------------------------------------- Update Information: - Rename python36-werkzeug to python3-werkzeug - Backport patch for CVE-2023-25577 - Backport patch for CVE-2023-23934 - Run test suite in %check -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 28 2023 Carl George <carlwgeorge(a)fedoraproject.org> - 1.0.1-2 - Rename python36-werkzeug to python3-werkzeug - Backport patch for CVE-2023-25577, resolves rhbz#2170246 - Backport patch for CVE-2023-23934, resolves rhbz#2170247 - Run test suite in %check -------------------------------------------------------------------------------- References: [ 1 ] Bug #2170246 - CVE-2023-25577 python3-werkzeug: python-werkzeug: high resource usage when parsing multipart form data with many fields [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2170246 [ 2 ] Bug #2170247 - CVE-2023-23934 python3-werkzeug: python-werkzeug: cookie prefixed with = can shadow unprefixed cookie [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2170247 --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 29 Aug '23

29 Aug '23

The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f4d52e6818 mosquitto-2.0.17-1.el9 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-8849a14e7f caddy-2.6.4-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing ansible-collection-awx-awx-23.0.0-1.el9 erofs-utils-1.6-3.el9 ghc9.4-9.4.7-23.el9 indent-2.2.13-4.el9 knot-3.3.0-1.el9 knot-resolver-5.7.0-2.el9 mingw-pcre2-10.42-3.el9 papirus-icon-theme-20230801-1.el9 pcsc-perl-1.4.14-24.el9 python-damo-1.9.5-1.el9 rust-errno-0.3.3-1.el9 rust-nix-0.26.4-1.el9 tinyexr-1.0.1-7.el9 weechat-4.0.4-3.el9 Details about builds: ================================================================================ ansible-collection-awx-awx-23.0.0-1.el9 (FEDORA-EPEL-2023-466ac334ce) Ansible modules and plugins for working with AWX -------------------------------------------------------------------------------- Update Information: New package(s) for Ansible collection of Awx -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Andrew H <aheath1992(a)gmail.com> - 23.0.0-1 - Update to 23.0.0. * Wed Aug 23 2023 Andrew H <aheath1992(a)gmail.com> - 22.7.0-1 - Update to 22.7.0. * Fri Jul 28 2023 Andrew H <aheath1992(a)gmail.com> - 22.6.0-1 - Initial Package -------------------------------------------------------------------------------- ================================================================================ erofs-utils-1.6-3.el9 (FEDORA-EPEL-2023-1dc1200873) Utilities for working with EROFS -------------------------------------------------------------------------------- Update Information: This makes EROFS utilities available to RHEL 9 and its ilk. Note that it differs from current Fedora packages by disabling LZMA support since RHEL 9's xz package is too old to support the MicroLZMA format. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 David Michael <fedora.dm0(a)gmail.com> - 1.6-3 - Backport patches for CVE-2023-33551 and CVE-2023-33552. - Change conditional build feature defaults for supporting EPEL 9. * Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sat Mar 11 2023 David Michael <fedora.dm0(a)gmail.com> - 1.6-1 - Update to the 1.6 release. * Wed Jan 25 2023 David Michael <fedora.dm0(a)gmail.com> - 1.5-4 - Enable MicroLZMA support. - Switch the License tag to SPDX, and ship matching noneffective license files. * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 13 2022 David Michael <fedora.dm0(a)gmail.com> - 1.5-1 - Update to the 1.5 release. * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Nov 25 2021 David Michael <fedora.dm0(a)gmail.com> - 1.4-2 - Backport the patch to install a man page for fsck. - Backport the patch to fix dump output. * Sun Nov 21 2021 David Michael <fedora.dm0(a)gmail.com> - 1.4-1 - Update to the 1.4 release. -------------------------------------------------------------------------------- ================================================================================ ghc9.4-9.4.7-23.el9 (FEDORA-EPEL-2023-629388e6aa) Glasgow Haskell Compiler -------------------------------------------------------------------------------- Update Information: https://downloads.haskell.org/~ghc/9.4.7/docs/users_guide/9.4.7-notes.html -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 27 2023 Jens Petersen <petersen(a)redhat.com> - 9.4.7-23 - https://downloads.haskell.org/~ghc/9.4.7/docs/users_guide/9.4.7-notes.html -------------------------------------------------------------------------------- ================================================================================ indent-2.2.13-4.el9 (FEDORA-EPEL-2023-b305ec138e) A GNU program for formatting C code -------------------------------------------------------------------------------- Update Information: This release fixes a heap buffer overwrite in search_brace() (CVE-2023-40305) and a heap overread in lexi(). -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 16 2023 Petr Pisar <ppisar(a)redhat.com> - 2.2.13-4 - Fix a heap overread in search_brace/lexi - Fix CVE-2023-40305 (a heap buffer overwrite in search_brace) (bug #2231919) * Mon Apr 17 2023 Petr Pisar <ppisar(a)redhat.com> - 2.2.13-3 - Correct a license to "GPL-3.0-or-later AND BSD-3-Clause AND BSD-4.3TAHOE AND Latex2e-translated-notice" -------------------------------------------------------------------------------- References: [ 1 ] Bug #2231854 - CVE-2023-40305 indent: heap-based buffer overflow in search_brace() in indent.c https://bugzilla.redhat.com/show_bug.cgi?id=2231854 -------------------------------------------------------------------------------- ================================================================================ knot-3.3.0-1.el9 (FEDORA-EPEL-2023-44946396d2) High-performance authoritative DNS server -------------------------------------------------------------------------------- Update Information: Update to Knot DNS 3.3 and Knot Resolver rebuild ---- Update to new upstream version 5.7.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 28 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.3.0-1 - Update to 3.3.0 -------------------------------------------------------------------------------- ================================================================================ knot-resolver-5.7.0-2.el9 (FEDORA-EPEL-2023-44946396d2) Caching full DNS Resolver -------------------------------------------------------------------------------- Update Information: Update to Knot DNS 3.3 and Knot Resolver rebuild ---- Update to new upstream version 5.7.0 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.7.0-2 - Rebuilt for Knot DNS 3.3 * Tue Aug 22 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.7.0-1 - New upstream version 5.7.0 -------------------------------------------------------------------------------- ================================================================================ mingw-pcre2-10.42-3.el9 (FEDORA-EPEL-2023-55696b9c4e) MinGW Windows pcre2 library -------------------------------------------------------------------------------- Update Information: Initial epel9 build. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.42-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.42-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jan 13 2023 Sandro Mani <manisandro(a)gmail.com> - 10.42-1 - Update to 10.42 * Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.40-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Sun May 1 2022 Sandro Mani <manisandro(a)gmail.com> - 10.40-1 - Update to 10.40 * Fri Mar 25 2022 Sandro Mani <manisandro(a)gmail.com> - 10.39-3 - Rebuild with mingw-gcc-12 * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.39-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Nov 5 2021 Sandro Mani <manisandro(a)gmail.com> - 10.39-1 - Update to 10.39 * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 10.37-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2235449 - Please branch and build mingw-pcre2 in epel9 https://bugzilla.redhat.com/show_bug.cgi?id=2235449 -------------------------------------------------------------------------------- ================================================================================ papirus-icon-theme-20230801-1.el9 (FEDORA-EPEL-2023-b38edf2d67) Free and open source SVG icon theme based on Paper Icon Set -------------------------------------------------------------------------------- Update Information: Update to 20230801 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Michel Lind <salimma(a)fedoraproject.org> - 20230801-1 - Update to 20230801 - use SPDX license identifiers; add LGPL-3.0-or-later for Breeze icons - fix rpmlint warning * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 20230601-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sun Jul 16 2023 Orion Poplawski <orion(a)nwra.com> - 20230601-1 - Update to 20230601 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2228321 - papirus-icon-theme-20230801 is available https://bugzilla.redhat.com/show_bug.cgi?id=2228321 -------------------------------------------------------------------------------- ================================================================================ pcsc-perl-1.4.14-24.el9 (FEDORA-EPEL-2023-4504225464) Perl interface to the PC/SC smart card library -------------------------------------------------------------------------------- Update Information: Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-24 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 11 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.4.14-23 - Perl 5.38 rebuild * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon May 30 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.4.14-20 - Perl 5.36 rebuild * Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.14-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ python-damo-1.9.5-1.el9 (FEDORA-EPEL-2023-dd0b620f9a) Data Access Monitoring Operator -------------------------------------------------------------------------------- Update Information: ## v1.9.5 - Code cleanup ## v1.9.4 - DAMON command line options: Support multiple DAMOS schemes - damo show: Support log/linear scale of region box ## v1.9.3 - Restore --ascii_color and --plot_ascii of 'damo report heat' - damo show: Support coloring of region box - damo show: Implement '<age heat bar>' - damo show: Make region box to use logscale for columns and rows - damo show: Support more region box customizations ## v1.9.2 - Support DAMOS filters, quotas, and watermarks via command line - Support target idx DAMOS filter - Implement '<size heat bar>' and '<size heat age bar>' region format keyword for 'damo show' (likely be changed in future) -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 23 2023 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 1.9.5-1 - Update to 1.9.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2227975 - python-damo-1.9.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2227975 -------------------------------------------------------------------------------- ================================================================================ rust-errno-0.3.3-1.el9 (FEDORA-EPEL-2023-828f6bf580) Cross-platform interface to the errno variable -------------------------------------------------------------------------------- Update Information: Update to version 0.3.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.3-1 - Update to version 0.3.3; Fixes RHBZ#2235559 -------------------------------------------------------------------------------- ================================================================================ rust-nix-0.26.4-1.el9 (FEDORA-EPEL-2023-1737f0638d) Rust friendly bindings to *nix APIs -------------------------------------------------------------------------------- Update Information: Update to version 0.26.4, fixing a regression from 0.26.3. ---- Update to version 0.26.3. -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.4-1 - Update to version 0.26.4 * Mon Aug 28 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.26.3-1 - Update to version 0.26.3 * Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.26.2-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ tinyexr-1.0.1-7.el9 (FEDORA-EPEL-2023-678c280bfb) Small library to load and save OpenEXR images -------------------------------------------------------------------------------- Update Information: Upstream patch to fix CVE-2022-34300 Fixes rhbz#2233636 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 29 2023 Diego Herrera <dherrera(a)redhat.com> - 1.0.1-7 - Patch to fix CVE-2022-34300 * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ weechat-4.0.4-3.el9 (FEDORA-EPEL-2023-bf6104a085) Portable, fast, light and extensible IRC client -------------------------------------------------------------------------------- Update Information: Latest upstream version -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 23 2023 LuK1337 <priv.luk(a)gmail.com> - 4.0.4-3 - Revert "Reenable PHP plugins support" * Tue Aug 22 2023 LuK1337 <priv.luk(a)gmail.com> - 4.0.4-2 - Reenable PHP plugins support * Tue Aug 22 2023 LuK1337 <priv.luk(a)gmail.com> - 4.0.4-1 - Update to 4.0.4 * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 11 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 3.6-7 - Perl 5.38 rebuild * Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 3.6-6 - Rebuilt for Python 3.12 * Fri Feb 24 2023 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 3.6-5 - Backport upstream patch to fix test suite crash on gui_chat_printf_y_date_tags with glibc 2.37 (bug 2170010) * Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Jan 4 2023 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 3.6-3 - Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.2 * Thu Oct 6 2022 Michel Alexandre Salim <salimma(a)fedoraproject.org> - 3.6-2 - Restore compatibility with EPEL 7 - use %cmake3 rather than %cmake macros - conditionally disable tests on EPEL < 8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2215825 - Update Request: weechat to latest version (3.8) https://bugzilla.redhat.com/show_bug.cgi?id=2215825 --------------------------------------------------------------------------------

1 0

[Fedocal] Reminder meeting : EPEL Steering Committee
by tdawson＠redhat.com 29 Aug '23

29 Aug '23

Dear all, You are kindly invited to the meeting: EPEL Steering Committee on 2023-08-30 from 16:00:00 to 17:00:00 US/Eastern At fedora-meeting(a)irc.libera.chat The meeting will be about: This is the weekly EPEL Steering Committee Meeting. A general agenda is the following: #topic aloha #topic EPEL Issues https://pagure.io/epel/issues * https://pagure.io/epel/issues?tags=meeting&status=Open #topic Old Business (if needed) #topic General Issues / Open Floor Source: https://calendar.fedoraproject.org//meeting/9854/

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel August 2023