The following Fedora EPEL 9 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-3bd4c9e300
java-latest-openjdk-18.0.2.0.9-1.rolling.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
anope-2.0.11-1.el9
hidapi-0.12.0-2.el9
nsd-4.3.9-3.el9
python-google-auth-2.11.1-1.el9
resalloc-openstack-9.3-1.el9
snakeyaml-1.32-1.el9
solaar-1.1.5-1.el9
uglify-js-3.17.1-1.el9
Details about builds:
================================================================================
anope-2.0.11-1.el9 (FEDORA-EPEL-2022-8ad195f25d)
IRC services designed for flexibility and ease of use
--------------------------------------------------------------------------------
Update Information:
# Anope 2.0.11 * Fixed `m_ldap` on OpenLDAP 2.5+ * Fixed not using UTF-8
encoding for outgoing email * Fixed `ns_resetpass` not returning a response
for XMLRPC * Fixed some message params being sent as `<middle>` instead of
`<trailing>` * Fixed unsetting vhosts on unreal4 * Fixed username validity
checking on ircd-hybrid * Send the oper mode for services pseudoclients on
InspIRCd * Updated the pl_PL translation * Updated unreal4 for various
protocol changes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 20 2022 Robert Scheck <robert(a)fedoraproject.org> 2.0.11-1
- Upgrade to 2.0.11
--------------------------------------------------------------------------------
================================================================================
hidapi-0.12.0-2.el9 (FEDORA-EPEL-2022-ee80213b7a)
Library for communicating with USB and Bluetooth HID devices
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jun 16 2022 Scott Talbert <swt(a)techie.net> - 0.12.0-1
- Update to new upstream release 0.12.0 (#2081598)
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Mon Jan 3 2022 Scott Talbert <swt(a)techie.net> - 0.11.2-1
- Update to new upstream release 0.11.2 (#2036738)
* Mon Oct 4 2021 Scott Talbert <swt(a)techie.net> - 0.11.0-1
- Update to new upstream release 0.11.0 (#2008570)
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.10.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Fri Jan 1 2021 Scott Talbert <swt(a)techie.net> - 0.10.1-2
- Fix FTBFS with autoconf 2.70
* Wed Nov 25 2020 Scott Talbert <swt(a)techie.net> - 0.10.1-1
- Update to new upstream release 0.10.1 (#1901388)
- Remove BR on gcc-c++ (no longer needed)
* Mon Oct 26 2020 Scott Talbert <swt(a)techie.net> - 0.10.0-1
- Update to new upstream release 0.10.0 (#1891375)
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2127781 - Please branch and build hidapi in epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2127781
--------------------------------------------------------------------------------
================================================================================
nsd-4.3.9-3.el9 (FEDORA-EPEL-2022-993ddc78a1)
Fast and lean authoritative DNS Name Server
--------------------------------------------------------------------------------
Update Information:
Initial package for epel9
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.9-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.9-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Dec 14 2021 Paul Wouters <paul.wouters(a)aiven.io> - 4.3.9-1
- Resolves rhbz#2028586 Update to nsd 4.3.9
* Fri Oct 15 2021 Paul Wouters <paul.wouters(a)aiven.io> - 4.3.8-1
- Resolves: rhbz#2010311 nsd-4.3.8 is available
- Do not require nsd.keygen service anymore
* Thu Oct 7 2021 Paul Wouters <paul.wouters(a)aiven.io> - 4.3.7-4
- Resolves: rhbz#2011757 nsd spec file scriptlets still used obsoleted conditional on
systemd, causing sysvinit style exection
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 4.3.7-3
- Rebuilt with OpenSSL 3.0.0
* Wed Aug 11 2021 Paul Wouters <paul.wouters(a)aiven.io> - 4.3.7-2
- Resolves: rhbz#1992399 nsd: recently added TLS support should support system wide crypto
policies
* Tue Aug 10 2021 Paul Wouters <paul.wouters(a)aiven.io> - 4.3.7-1
- Resolves: rhbz#1982585 nsd-4.3.7 is available
- Clean out legacy sysvinit / trigger support
- Update nsd.conf with new TLS (XFR over TLS) options
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.6-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Thu Jun 3 2021 Paul Wouters <paul.wouters(a)aiven.io> - 4.3.6-1
- Resolves: rhbz#1944233 nsd-4.3.6 is available
- Resolves: rhbz#1943122 nsd: FTBFS with upcoming autoconf-2.71
* Thu Mar 25 2021 Paul Wouters <pwouters(a)redhat.com> - 4.3.5-1
- Resolves: rhbz#1884189 nsd-4.3.5 is available
- Change default to not use TLS/keygen, but the unix domain socket
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 4.3.2-4
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Sep 29 2020 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 4.3.2-2
- Rebuilt for libevent 2.1.12
* Wed Jul 29 2020 Paul Wouters <pwouters(a)redhat.com> - 4.3.2-1
- Resolves: rhbz#1854415 nsd-4.3.2 is available
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.3.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-google-auth-2.11.1-1.el9 (FEDORA-EPEL-2022-95281e0491)
Google Auth Python Library
--------------------------------------------------------------------------------
Update Information:
Update python-google-auth to 2.11.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 20 2022 Jason Montleon <jmontleo(a)redhat.com> - 1:2.11.1-1
- Update to 2.11.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2119977 - python-google-auth-2.11.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2119977
--------------------------------------------------------------------------------
================================================================================
resalloc-openstack-9.3-1.el9 (FEDORA-EPEL-2022-40c8708796)
Resource allocator scripts for OpenStack
--------------------------------------------------------------------------------
Update Information:
- new upstream release - adjust cleaning-up with the new `cmd_list` Resalloc
feature - more pedantic cleanup of volumes ---- - new upstream release -
adjust cleaning-up with the new `cmd_list` Resalloc feature - more pedantic
cleanup of volumes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 20 2022 Pavel Raiskup <praiskup(a)redhat.com> - 9.3-1
- new upstream release
- adjust cleaning-up with the new `cmd_list` Resalloc feature
- more pedantic cleanup of volumes
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 8-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 8-3
- Rebuilt for Python 3.11
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
snakeyaml-1.32-1.el9 (FEDORA-EPEL-2022-c48c7429c0)
YAML parser and emitter for Java
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-25857
--------------------------------------------------------------------------------
ChangeLog:
* Fri Sep 16 2022 Severin Gehwolf <sgehwolf(a)redhat.com> - 1.32-1
- Update to latest upstream 1.32 release
- Resolves: CVE-2022-25857
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.27-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Jul 8 2022 Jiri Vanek <jvanek(a)redhat.com> - 1.27-7
- Rebuilt for Drop i686 JDKs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2126792 - CVE-2022-25857 snakeyaml: Denial of Service due missing to nested
depth limitation for collections. [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2126792
--------------------------------------------------------------------------------
================================================================================
solaar-1.1.5-1.el9 (FEDORA-EPEL-2022-ad2d654736)
Device manager for a wide range of Logitech devices
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.5 (#2126961)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 20 2022 Mark E. Fuller <fuller(a)fedoraproject.org> - 1.1.5-1
- Update to 1.1.5 (#2126961)
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jul 7 2022 Dominik Mierzejewski <dominik(a)greysector.net> - 1.1.4-1
- update to 1.1.4 (#2103752)
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 1.1.3-2
- Rebuilt for Python 3.11
* Thu May 5 2022 Dominik Mierzejewski <dominik(a)greysector.net> - 1.1.3-1
- update to 1.1.3 (#2078519)
- fix rule processing under Wayland (#2070753, #2071252)
* Sun Mar 27 2022 Dominik Mierzejewski <rpm(a)greysector.net> - 1.1.2-1
- update to 1.1.2 (#2068769)
- patch to lower evdev version requirement
- add explicit build dependency on setuptools
- sort build dependencies
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
uglify-js-3.17.1-1.el9 (FEDORA-EPEL-2022-95691e2f3e)
JavaScript parser, mangler/compressor and beautifier toolkit
--------------------------------------------------------------------------------
Update Information:
Uglify-JS 3.17.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 20 2022 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 3.17.1-1
- Update to 3.17.1
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.16.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2103532 - uglify-js-3.17.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2103532
--------------------------------------------------------------------------------