The following Fedora EPEL 9 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-735fe09bcb perl-Spreadsheet-ParseExcel-0.6600-1.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-b45b6eada5 python-paramiko-2.12.0-2.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f0d88b447f putty-0.80-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-54a5c04d0c exim-4.97.1-1.el9 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-650d6143b5 chromium-120.0.6099.199-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing anope-2.1.1-1.el9 baresip-3.8.1-1.el9 eccodes-2.33.0-1.el9 keepass-2.55-6.el9 rust-bitstream-io-2.2.0-1.el9 rust-bitstream-io1-1.10.0-1.el9 Details about builds: ================================================================================ anope-2.1.1-1.el9 (FEDORA-EPEL-2024-2734c732f9) IRC services designed for flexibility and ease of use -------------------------------------------------------------------------------- Update Information: # Anope 2.1.1 - Added the `UNBANME` privilege to allow users to unban themselves. - Added the `m_regex_stdlib` module. - Fixed creating sockets in the `m_dns`, `m_httpd`, `m_proxyscan`, and `m_redis` modules. - Fixed reading the values of command line arguments. - Moved core privilege descriptions to the example configs. - Removed the m_regex_pcre module (use `m_regex_pcre2` instead). - Updated the Italian translation. - Updated the Polish translation. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 6 2024 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 2.1.1-1 - Upgrade to 2.1.1 (#2256929) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2256929 - anope-2.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256929 -------------------------------------------------------------------------------- ================================================================================ baresip-3.8.1-1.el9 (FEDORA-EPEL-2024-f59d5c4b46) Modular SIP user-agent with audio and video support -------------------------------------------------------------------------------- Update Information: # Baresip v3.8.1 (2024-01-02) - aur: set audio format correctly - cmake: add only non-system link paths to rpath -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 6 2024 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 3.8.1-1 - Upgrade to 3.8.1 (#2256553) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2256553 - baresip-3.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2256553 -------------------------------------------------------------------------------- ================================================================================ eccodes-2.33.0-1.el9 (FEDORA-EPEL-2024-6e2ec6b51b) WMO data format decoding and encoding -------------------------------------------------------------------------------- Update Information: Update to 2.33.0 -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 17 2023 Orion Poplawski <orion@xxxxxxxx> - 2.33.0-1 - Update to 2.33.0 * Sun Nov 26 2023 Jos de Kloe <josdekloe@xxxxxxxxx> - 2.32.1-2 - rebuild after so name jump of libjasper * Thu Nov 2 2023 Jos de Kloe <josdekloe@xxxxxxxxx> - 2.32.1-1 - Upgrade to upstream version 2.32.1 and add updated test_data package -------------------------------------------------------------------------------- References: [ 1 ] Bug #1629377 - some eccodes tests fail on aarch64 causing a build failure https://bugzilla.redhat.com/show_bug.cgi?id=1629377 [ 2 ] Bug #2254174 - eccodes-2.33.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2254174 -------------------------------------------------------------------------------- ================================================================================ keepass-2.55-6.el9 (FEDORA-EPEL-2024-303a4f3262) Password manager -------------------------------------------------------------------------------- Update Information: Rebuild for EPEL9 after re-orphaning keepass -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 5 2024 Dr. Tilmann Bubeck <tilmann@xxxxxxxxxx> - 2.55-6 - Rebuild for EPEL9 after re-orphaning keepass * Tue Jan 2 2024 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.55-5 - Fix missing sources * Fri Dec 1 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.55-4 - Fix build error * Fri Dec 1 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.55-3 - Use upstream source archive directly and verify it during %%prep * Tue Nov 21 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.55-2 - Cleanup for upcoming re-review - Do not own %%docdir - Flag license file as %%license - Migrate to SPDX license * Tue Nov 21 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.55-1 - Update to version 2.55. * Tue Nov 21 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.54-1 - Update to version 2.54. * Tue Nov 21 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.53.1-2 - Disable xdotool clipboard workaround to prevent passwords from leaking to systemd journal (CVE-2022-0725) * Tue Nov 21 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.53.1-1 - Update to version 2.53.1. * Tue Nov 21 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.52-1 - Update to version 2.52. * Tue Nov 21 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.51.1-1 - Update to version 2.51.1. * Tue Nov 21 2023 Julian Sikorski <belegdol@xxxxxxxxxxxxxxxxx> - 2.50-2 - Revert "Don't know how to fix CVE-2022-0725." * Sat Jan 22 2022 Peter Oliver <git@xxxxxxxxxxxx> - 2.50-1 - Update to version 2.50. * Thu Jan 20 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.49-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2053688 - CVE-2022-0725 keepass: logs plain text passwords in system log when clearing the clipboard [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2053688 -------------------------------------------------------------------------------- ================================================================================ rust-bitstream-io-2.2.0-1.el9 (FEDORA-EPEL-2024-a2af1d1ca1) Library for reading/writing un-aligned values from/to streams -------------------------------------------------------------------------------- Update Information: - Update the bitstream-io crate to version 2.2.0. - Add a compat package for version 1 of the bitstream-io crate. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 6 2024 Fabio Valentini <decathorpe@xxxxxxxxx> - 2.2.0-1 - Update to version 2.2.0; Fixes RHBZ#2253690 -------------------------------------------------------------------------------- ================================================================================ rust-bitstream-io1-1.10.0-1.el9 (FEDORA-EPEL-2024-a2af1d1ca1) Library for reading/writing un-aligned values from/to streams -------------------------------------------------------------------------------- Update Information: - Update the bitstream-io crate to version 2.2.0. - Add a compat package for version 1 of the bitstream-io crate. -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 6 2024 Fabio Valentini <decathorpe@xxxxxxxxx> - 1.10.0-1 - Initial import (bitstream-io 1 compat package) -------------------------------------------------------------------------------- -- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue