epel-devel October 2024

epel-devel@lists.fedoraproject.org

15 participants
65 discussions

EPEL 10 status update
by Carl George 07 Nov '24

07 Nov '24

I originally posted this on Fedora Discussion [0], but I'm sharing it here as well for awareness. # Executive summary EPEL 10 is expected to be launched in Q4 of 2024. You may start noticing parts of the infrastructure coming online sooner than that. **Please do not start creating EPEL 10 builds until we announce that we are ready for packagers to start building.** # Detailed description The EPEL Steering Committee has big plans for EPEL 10. These plans are covered in detail in the original EPEL 10 proposal [1]. I also presented an EPEL 10 overview at the Fedora 40 release party [2]. At a high level, we are bringing minor versions to EPEL. I encourage you to read the proposal or watch that video for a deeper explanation. I'm writing this post to share our planned timeline for EPEL 10, and to set expectations for the coming months. Early CentOS Stream 10 composes are already available [3], but it hasn't been officially launched yet because the content set is still in flux. We expect to see the official launch announcement for CentOS Stream 10 later this year. We intend to align the EPEL 10 launch with that, which will give us the following approximate timeline. - August 2024: EPEL 10 hackfest at Flock [4] (see below for more details) - Q4 2024: expected launch of CentOS Stream 10 and EPEL 10 - Q2 2025: expected launch of RHEL 10 (three years after RHEL 9) In the months ahead, you may notice parts of EPEL 10 infrastructure coming online, such as build targets in Koji and releases in Bodhi. We will need these infrastructure pieces in place to work out all of the details of integrating minor versions. We'll send out an announcement when EPEL 10 is ready for package maintainers to start creating their builds. **Please do not start creating EPEL 10 builds until we announce that we are ready for packagers to start building.** Any builds created before this announcement may need to be discarded and rebuilt. I will be running an EPEL 10 Hackfest at Flock [4] in August (next month). The plan is to work on various infrastructure pieces related to EPEL 10. If we happen to have most of these pieces working prior to the hackfest, we can pivot our time to adding initial packages to EPEL 10. I hope to see you there! [0] https://discussion.fedoraproject.org/t/epel-10-status-update/124549 [1] https://discussion.fedoraproject.org/t/epel-10-proposal/44304 [2] https://youtu.be/PxWxK5PgUuE [3] https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/QCO7… [4] https://flocktofedora.org/ -- Carl George

15 36

Incompatible update request for EPEL 9: dav1d 1.2.1 → 1.5.0
by Fabio Valentini 05 Nov '24

05 Nov '24

Hi all, There have been a number of releases of dav1d newer than the one shipped in EPEL 9 right now, one of which include fixes for this CVE: https://bugzilla.redhat.com/show_bug.cgi?id=2264940 Looking at upstream commit history, there seem to be other "security fixes" that have just not been assigned a CVE number. I have looked into backporting the fixes to the version currently in EPEL 9, but it's 1) unclear which commits all need to be backported, and 2) some changes aren't cleanly backportable, and 3) that would not cover security fixes not associated with a CVE number. For this reason, I would like to build the version of dav1d that's currently in Fedora 40+ and in EPEL 10 also for EPEL 9. This includes one soname bump (since dav1d 1.3.0) due to an ABI change, which makes this an incompatible update, but there were no actual API changes. Packages in the EPEL 9 repos that depend on dav1d that would need to be rebuilt: chromium: chromium chromium: chromium-headless ffmpeg: libavcodec-free libavif0.10: libavif0.10 libavif: libavif libheif: libheif vlc: vlc-plugins-base xine-lib: xine-lib Fabio

3 8

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 31 Oct '24

31 Oct '24

The following Fedora EPEL 8 Security updates need testing: Age URL 48 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-31d4c55df0 arm-none-eabi-binutils-cs-2.43-1.el8 arm-none-eabi-gcc-cs-12.4.0-1.el8 arm-none-eabi-newlib-4.4.0.20231231-1.el8 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-01e6624836 syncthing-1.28.0-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing clusterssh-4.18-1.el8 ocsinventory-agent-2.10.4-2.el8 scitokens-cpp-1.1.2-2.el8 Details about builds: ================================================================================ clusterssh-4.18-1.el8 (FEDORA-EPEL-2024-a98a135628) Secure concurrent multiple server terminal control -------------------------------------------------------------------------------- Update Information: updated clusterssh to 4.18 + removed upstream patches + spec cleanup -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Filipe Rosset <rosset.filipe(a)gmail.com> - 4.18-1 - updated clusterssh to 4.18 + removed upstream patches + spec cleanup * Wed Jul 17 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Jul 19 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 4.16-9 - Don't try to open a directory as the config file (BZ#2223529) - Update license to SPDX format * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Wed Jun 1 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 4.16-6 - Perl 5.36 rebuild * Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Sun May 23 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 4.16-3 - Perl 5.34 rebuild * Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ ocsinventory-agent-2.10.4-2.el8 (FEDORA-EPEL-2024-906d5cd94b) Open Computer and Software Inventory Next Generation client -------------------------------------------------------------------------------- Update Information: Update to 2.10.4 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Pat Riehecky <riehecky(a)fnal.gov> - 2.10.4-2 - Make monitor-edid recommended rather than required * Tue Oct 29 2024 Pat Riehecky <riehecky(a)fnal.gov> - 2.10.4-1 - Update to 2.10.4 * Fri Jul 26 2024 Miroslav Suchý <msuchy(a)redhat.com> - 2.10.2-3 - convert license to SPDX * Thu Jul 18 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ scitokens-cpp-1.1.2-2.el8 (FEDORA-EPEL-2024-f5df22ffc6) C++ Implementation of the SciTokens Library -------------------------------------------------------------------------------- Update Information: Turn off CMAKE unity builds Add a mutex around requesting public keys to stop overloading issuers -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Derek Weitzel <dweitzel(a)unl.edu> - 1.1.2-2 - Fix source upload, no source changes * Wed Oct 30 2024 Derek Weitzel <dweitzel(a)unl.edu> - 1.1.2-1 - Turn off CMAKE unity builds - Add a mutex around requesting public keys to stop overloading issuers * Wed Jul 24 2024 Miroslav Suchý <msuchy(a)redhat.com> - 1.1.1-3 - convert license to SPDX * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 31 Oct '24

31 Oct '24

The following Fedora EPEL 9 Security updates need testing: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-6caeb5a95f syncthing-1.28.0-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing clusterssh-4.18-1.el9 composer-2.8.2-3.el9 converseen-0.12.2.4-1.el9 ocsinventory-agent-2.10.4-2.el9 pcapy-0.11.5-25.el9 rust-bat-0.24.0-9.el9 rust-built-0.7.4-1.el9 rust-eza-0.19.3-1.el9 rust-git-absorb-0.6.15-1.el9 rust-git-delta-0.18.2-3.el9 rust-git2-0.19.0-1.el9 rust-git2-curl-0.20.0-1.el9 rust-libgit2-sys-0.17.0-1.el9 rust-pore-0.1.17-3.el9 rust-shadow-rs-0.8.1-10.el9 rust-tokei-12.1.2-12.el9 rust-vergen-8.3.2-1.el9 scitokens-cpp-1.1.2-2.el9 weechat-4.4.3-1.el9 yasm-1.3.0^20230922git9defefa-2.el9 Details about builds: ================================================================================ clusterssh-4.18-1.el9 (FEDORA-EPEL-2024-ef87ac6c48) Secure concurrent multiple server terminal control -------------------------------------------------------------------------------- Update Information: updated clusterssh to 4.18 + removed upstream patches + spec cleanup -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Filipe Rosset <rosset.filipe(a)gmail.com> - 4.18-1 - updated clusterssh to 4.18 + removed upstream patches + spec cleanup * Wed Jul 17 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Jul 19 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 4.16-9 - Don't try to open a directory as the config file (BZ#2223529) - Update license to SPDX format * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.16-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ composer-2.8.2-3.el9 (FEDORA-EPEL-2024-e6cd15dd38) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information: Packaging changes keep upstream layout under /usr/share/composer keep only /usr/share/php/Composer/autoload.php for compatibility Version 2.8.2 - 2024-10-29 Fixed crash while suggesting providers if they have no description (#12152) Fixed issues creating lock files violating the schema in some circumstances (#12149) Fixed create-project regression in 2.8.1 when using path repos with relative paths (#12150) Fixed ctrl-C aborts not working inside text prompts (#12106) Fixed git failing silently when git cannot read a repo due to ownership violations (#12178) Fixed handling of signals in non-PHP binaries run via proxies (#12176) -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Remi Collet <remi(a)remirepo.net> - 2.8.2-3 - keep upstream layout for simplicity * Wed Oct 30 2024 Remi Collet <remi(a)remirepo.net> - 2.8.2-2 - update to 2.8.2 - fix diagnose command -------------------------------------------------------------------------------- ================================================================================ converseen-0.12.2.4-1.el9 (FEDORA-EPEL-2024-194ad38128) A batch image conversion tool written in C++ with Qt5 and Magick++ -------------------------------------------------------------------------------- Update Information: update converseen to 0.12.2.4 fixes rhbz#2322512 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.12.2.4-1 - update converseen to 0.12.2.4 fixes rhbz#2322512 * Mon Jul 29 2024 Miroslav Suchý <msuchy(a)redhat.com> - 0.12.2.3-3 - convert GPLv3 license to SPDX * Wed Jul 17 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.12.2.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Mon Jul 15 2024 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.12.2.3-1 - update to 0.12.2.3 fixes rbhz#2268815 * Sun Feb 18 2024 Filipe Rosset <rosset.filipe(a)gmail.com> - 0.12.1.0-1 - update converseen to 0.12.1.0 fixes rhbz#2238643 * Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.0.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2322512 - converseen-0.12.2.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2322512 -------------------------------------------------------------------------------- ================================================================================ ocsinventory-agent-2.10.4-2.el9 (FEDORA-EPEL-2024-7c65926e27) Open Computer and Software Inventory Next Generation client -------------------------------------------------------------------------------- Update Information: Update to 2.10.4 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Pat Riehecky <riehecky(a)fnal.gov> - 2.10.4-2 - Make monitor-edid recommended rather than required * Tue Oct 29 2024 Pat Riehecky <riehecky(a)fnal.gov> - 2.10.4-1 - Update to 2.10.4 * Fri Jul 26 2024 Miroslav Suchý <msuchy(a)redhat.com> - 2.10.2-3 - convert license to SPDX * Thu Jul 18 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.10.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ pcapy-0.11.5-25.el9 (FEDORA-EPEL-2024-10b84854ac) A Python interface to libpcap -------------------------------------------------------------------------------- Update Information: Initial EL-9 build -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 18 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.5-25 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Fri Jun 7 2024 Python Maint <python-maint(a)redhat.com> - 0.11.5-24 - Rebuilt for Python 3.13 * Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.5-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.5-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Tue Oct 24 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 0.11.5-21 - Patch for Python 3.13. * Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.5-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 0.11.5-19 - Rebuilt for Python 3.12 * Sun Mar 5 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 0.11.5-18 - migrated to SPDX license * Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.5-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Jul 27 2022 Gwyn Ciesla <gwync(a)protonmail.com> - 0.11.5-16 - Patch for Python 3.11 * Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.5-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2322682 - python3-pcapy: please provide epel9 package https://bugzilla.redhat.com/show_bug.cgi?id=2322682 -------------------------------------------------------------------------------- ================================================================================ rust-bat-0.24.0-9.el9 (FEDORA-EPEL-2024-6a6675cc99) Cat(1) clone with wings -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.24.0-9 - Bump git2 dependency from 0.18 to 0.19 -------------------------------------------------------------------------------- ================================================================================ rust-built-0.7.4-1.el9 (FEDORA-EPEL-2024-6a6675cc99) Crate with information from the time it was built -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.7.4-1 - Update to version 0.7.4 * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-eza-0.19.3-1.el9 (FEDORA-EPEL-2024-6a6675cc99) Modern replacement for ls -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.19.3-1 - Update to version 0.19.3 * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.18.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-git-absorb-0.6.15-1.el9 (FEDORA-EPEL-2024-6a6675cc99) Git commit --fixup, but automatic -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.6.15-1 - Update to version 0.6.15; Fixes RHBZ#2302519 * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.6.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-git-delta-0.18.2-3.el9 (FEDORA-EPEL-2024-6a6675cc99) Syntax-highlighting pager for git -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.18.2-3 - Bump git2 dependency from 0.18 to 0.19 -------------------------------------------------------------------------------- ================================================================================ rust-git2-0.19.0-1.el9 (FEDORA-EPEL-2024-6a6675cc99) Bindings to libgit2 for interoperating with git repositories -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.19.0-1 - Update to version 0.19.0; Fixes RHBZ#2292295 -------------------------------------------------------------------------------- ================================================================================ rust-git2-curl-0.20.0-1.el9 (FEDORA-EPEL-2024-6a6675cc99) Backend for an HTTP transport in libgit2 powered by libcurl -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.20.0-1 - Update to version 0.20.0; Fixes RHBZ#2292294 * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.19.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.19.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-libgit2-sys-0.17.0-1.el9 (FEDORA-EPEL-2024-6a6675cc99) Native bindings to the libgit2 library -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.17.0-1 - Update to version 0.17.0+1.8.1; Fixes RHBZ#2292306 * Fri Jul 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.16.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-pore-0.1.17-3.el9 (FEDORA-EPEL-2024-6a6675cc99) Performance oriented reimplementation of repo -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.17-3 - Bump git2 dependency from 0.18 to 0.19 * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.1.17-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-shadow-rs-0.8.1-10.el9 (FEDORA-EPEL-2024-6a6675cc99) Build-time information stored in your rust project -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.8.1-10 - Bump git2 dependency from 0.18 to 0.19 * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ rust-tokei-12.1.2-12.el9 (FEDORA-EPEL-2024-6a6675cc99) Count your code, quickly -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 12.1.2-12 - Bump git2 dependency from 0.18 to 0.19 -------------------------------------------------------------------------------- ================================================================================ rust-vergen-8.3.2-1.el9 (FEDORA-EPEL-2024-6a6675cc99) Generate cargo:rustc-env instructions for use with env! -------------------------------------------------------------------------------- Update Information: This update contains builds of the latest releases of the Rust bindings for libgit2: Update the git2 crate to version 0.19.0. Update the libgit2-sys crate to version 0.17.0+1.8.1. Associated new releases for other crates: Update the built crate to version 0.7.4. Update eza to version 0.19.3. Update git-absorb to version 0.6.15. Update the git2-curl crate to version 0.20.0. Update the vergen crate to version 8.3.2. And builds other packages that needed adaptations for the bump from git2 v0.18 to v0.19: rust-bat rust-git-delta rust-pore rust-shadow-rs rust-tokei -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 8.3.2-1 - Update to version 8.3.2 -------------------------------------------------------------------------------- ================================================================================ scitokens-cpp-1.1.2-2.el9 (FEDORA-EPEL-2024-c621c71a26) C++ Implementation of the SciTokens Library -------------------------------------------------------------------------------- Update Information: Turn off CMAKE unity builds Add a mutex around requesting public keys to stop overloading issuers -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 Derek Weitzel <dweitzel(a)unl.edu> - 1.1.2-2 - Fix source upload, no source changes * Wed Oct 30 2024 Derek Weitzel <dweitzel(a)unl.edu> - 1.1.2-1 - Turn off CMAKE unity builds - Add a mutex around requesting public keys to stop overloading issuers * Wed Jul 24 2024 Miroslav Suchý <msuchy(a)redhat.com> - 1.1.1-3 - convert license to SPDX * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- ================================================================================ weechat-4.4.3-1.el9 (FEDORA-EPEL-2024-518043b49b) Portable, fast, light and extensible IRC client -------------------------------------------------------------------------------- Update Information: Update to 4.4.3 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 30 2024 LuK1337 <priv.luk(a)gmail.com> - 4.4.3-1 - Update to 4.4.3 -------------------------------------------------------------------------------- ================================================================================ yasm-1.3.0^20230922git9defefa-2.el9 (FEDORA-EPEL-2024-c20a11cabc) Modular Assembler -------------------------------------------------------------------------------- Update Information: Update to latest upstream commit, fixes CVE-2021-31975 and CVE-2021-33454. Internal testsuite was also enabled as part of the build. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0^20230922git9defefa-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Thu Mar 21 2024 Dominik Mierzejewski <dominik(a)greysector.net> - 1.3.0^20230922git9defefa-1 - update to latest git snapshot - drop obsolete patch - use modern macros - run the test suite in %check - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454 * Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Nov 22 2023 Nick Clifton <nickc(a)redhat.com> - 1.3.0-19 - Spec File: Migrated to SPDX license. (#2222115) * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2122639 - CVE-2021-33454 yasm: NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c https://bugzilla.redhat.com/show_bug.cgi?id=2122639 [ 2 ] Bug #2208611 - CVE-2023-31975 yasm: memory leak in yasm_intnum_copy() in libyasm/intnum.c https://bugzilla.redhat.com/show_bug.cgi?id=2208611 --------------------------------------------------------------------------------

1 0

libtool issue with EPEL10
by Orion Poplawski 30 Oct '24

30 Oct '24

I'm trying to build netcdf in EPEL10 but the test suite is failing to run with: /builddir/build/BUILD/netcdf-c-4.9.2/build/ncgen3/.libs/lt-ncgen3: error while loading shared libraries: libnetcdf.so.19: cannot open shared object file: No such file or directory Comparing EPEL10 to rawhide builds I notice that while the EPEL10 build produces an "lt-ncgen3" binary, rawhide does not. The rawhide ncgen3 wrapper script appears to set LD_LIBRARY_PATH, the EPEL10 one does not and instead seems to try to produce a "relinked" file. I don't think I have every run into this issue before and have no idea why it's happening. Any libtool experts out there with an idea? Thanks, Orion -- Orion Poplawski he/him/his - surely the least important thing about me IT Systems Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 https://www.nwra.com/

2 3

Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org 30 Oct '24

30 Oct '24

The following Fedora EPEL 8 Security updates need testing: Age URL 47 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-31d4c55df0 arm-none-eabi-binutils-cs-2.43-1.el8 arm-none-eabi-gcc-cs-12.4.0-1.el8 arm-none-eabi-newlib-4.4.0.20231231-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-01e6624836 syncthing-1.28.0-1.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing python-specfile-0.32.5-1.el8 Details about builds: ================================================================================ python-specfile-0.32.5-1.el8 (FEDORA-EPEL-2024-61be7ffd30) A library for parsing and manipulating RPM spec files -------------------------------------------------------------------------------- Update Information: Automatic update for python-specfile-0.32.5-1.el8. Changelog for python-specfile * Sat Oct 26 2024 Packit <hello(a)packit.dev> - 0.32.5-1 - We have fixed our parser to take in account the deprecations introduced in Python 3.8 (#420) -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 26 2024 Packit <hello(a)packit.dev> - 0.32.5-1 - We have fixed our parser to take in account the deprecations introduced in Python 3.8 (#420) --------------------------------------------------------------------------------

1 0

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 30 Oct '24

30 Oct '24

The following Fedora EPEL 9 Security updates need testing: Age URL 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-6caeb5a95f syncthing-1.28.0-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing byobu-6.12-4.el9 packit-0.102.2-1.el9 python-ogr-0.50.2-1.el9 rust-rustls-0.23.16-1.el9 rust-zlib-rs-0.3.1-1.el9 Details about builds: ================================================================================ byobu-6.12-4.el9 (FEDORA-EPEL-2024-b1e41ba474) Light-weight, configurable window manager built upon GNU screen -------------------------------------------------------------------------------- Update Information: byobu 6.12 for epel9 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Filipe Rosset <rosset.filipe(a)gmail.com> - 6.12-4 - fix build for epel9 (Requires gettext instead of gettext-runtime) rhbz#2322333 * Mon Jul 29 2024 Miroslav Suchý <msuchy(a)redhat.com> - 6.12-3 - convert license to SPDX * Wed Jul 17 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.12-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Feb 18 2024 Filipe Rosset <rosset.filipe(a)gmail.com> - 6.12-1 - Update byobu to 6.12 * Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.133-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.133-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2322333 - Update byobu in epel9 to 6.12 https://bugzilla.redhat.com/show_bug.cgi?id=2322333 -------------------------------------------------------------------------------- ================================================================================ packit-0.102.2-1.el9 (FEDORA-EPEL-2024-f6e1cb87b2) A tool for integrating upstream projects with Fedora operating system -------------------------------------------------------------------------------- Update Information: Automatic update for packit-0.102.2-1.el9, python-ogr-0.50.2-1.el9. Changelog for packit * Tue Oct 22 2024 Packit <hello(a)packit.dev> - 0.102.2-1 - Fixed passing list of resolved bugs when running `packit propose-downstream` or `packit pull-from-upstream`. (#2447) - Resolves: rhbz#2321004 Changelog for python-ogr * Sat Oct 26 2024 Packit <hello(a)packit.dev> - 0.50.2-1 - There is a new method for getting a single commit comment, supporting also retrieval and adding reactions in GitHub. (#865) - Resolves: rhbz#2321974 * Fri Oct 11 2024 Packit <hello(a)packit.dev> - 0.50.1-1 - We have fixed an issue that caused inconsistencies with the expected behavior stated by the documentation when adding duplicate reactions to GitLab comments. (#861) - Resolves: rhbz#2318010 -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 22 2024 Packit <hello(a)packit.dev> - 0.102.2-1 - Fixed passing list of resolved bugs when running `packit propose-downstream` or `packit pull-from-upstream`. (#2447) - Resolves: rhbz#2321004 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2318010 - python-ogr-0.50.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2318010 [ 2 ] Bug #2321004 - packit-0.102.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2321004 [ 3 ] Bug #2321974 - python-ogr-0.50.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2321974 -------------------------------------------------------------------------------- ================================================================================ python-ogr-0.50.2-1.el9 (FEDORA-EPEL-2024-f6e1cb87b2) One API for multiple git forges -------------------------------------------------------------------------------- Update Information: Automatic update for packit-0.102.2-1.el9, python-ogr-0.50.2-1.el9. Changelog for packit * Tue Oct 22 2024 Packit <hello(a)packit.dev> - 0.102.2-1 - Fixed passing list of resolved bugs when running `packit propose-downstream` or `packit pull-from-upstream`. (#2447) - Resolves: rhbz#2321004 Changelog for python-ogr * Sat Oct 26 2024 Packit <hello(a)packit.dev> - 0.50.2-1 - There is a new method for getting a single commit comment, supporting also retrieval and adding reactions in GitHub. (#865) - Resolves: rhbz#2321974 * Fri Oct 11 2024 Packit <hello(a)packit.dev> - 0.50.1-1 - We have fixed an issue that caused inconsistencies with the expected behavior stated by the documentation when adding duplicate reactions to GitLab comments. (#861) - Resolves: rhbz#2318010 -------------------------------------------------------------------------------- ChangeLog: * Sat Oct 26 2024 Packit <hello(a)packit.dev> - 0.50.2-1 - There is a new method for getting a single commit comment, supporting also retrieval and adding reactions in GitHub. (#865) - Resolves: rhbz#2321974 * Fri Oct 11 2024 Packit <hello(a)packit.dev> - 0.50.1-1 - We have fixed an issue that caused inconsistencies with the expected behavior stated by the documentation when adding duplicate reactions to GitLab comments. (#861) - Resolves: rhbz#2318010 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2318010 - python-ogr-0.50.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2318010 [ 2 ] Bug #2321004 - packit-0.102.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2321004 [ 3 ] Bug #2321974 - python-ogr-0.50.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2321974 -------------------------------------------------------------------------------- ================================================================================ rust-rustls-0.23.16-1.el9 (FEDORA-EPEL-2024-d6396c75af) Modern TLS library written in Rust -------------------------------------------------------------------------------- Update Information: Update the rustls crate to version 0.23.16 (and re-enable zlib and brotli features). Initial packaging of the zlib-rs crate. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.23.16-1 - Update to version 0.23.16; Fixes RHBZ#2316484 -------------------------------------------------------------------------------- ================================================================================ rust-zlib-rs-0.3.1-1.el9 (FEDORA-EPEL-2024-d6396c75af) Memory-safe zlib implementation written in rust -------------------------------------------------------------------------------- Update Information: Update the rustls crate to version 0.23.16 (and re-enable zlib and brotli features). Initial packaging of the zlib-rs crate. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 29 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.3.1-1 - Initial packaging (#2319894) --------------------------------------------------------------------------------

1 0

Any EPEL 10 packagers willing to take python-diff-cover and python-pytest-datadir?
by Miro Hrončok 29 Oct '24

29 Oct '24

Hello EPEL packagers, I'd like to build tox with tests enabled on EPEL 10. I can probably skip some if this request does not work. Before I do that I wanted to ask if there are any packagers who would like to branch, build and maintain python-diff-cover and python-pytest-datadir on EPEL 10. python-diff-cover ================= https://bugzilla.redhat.com/2318676 opened on 2024-10-14 reminder on 2024-10-22 Was never branched for EPELs. Maintained by aekoroglu, dshea, @infra-sig. Depends on python-pytest-datadir. python-pytest-datadir ===================== https://bugzilla.redhat.com/2318658 opened on 2024-10-14 reassigned by jjames to jonathanspw on 2024-10-15 reminder on 2024-10-22 Package exists on EPEL 9, branched by jonathanspw. Maintained by jjames, jonathanspw (EPEL bugzilla contact), @epel-packagers-sig. Package builds and installs from rawhide branch on EPEL 10. Thanks, -- Miro Hrončok -- Phone: +420777974800 Fedora Matrix: mhroncok

2 3

New spec incompatibility between rawhide and epel wrt patches
by Susi Lehtola 29 Oct '24

29 Oct '24

Hi, it appears rpm has now deprecated the old %patch syntax in rawhide, which means that any old-style expressions %patch0 -p1 -b .overflow must now be written as %patch 0 -p1 -b .overflow Unfortunately, all the epel branches, in turn, do not support the new %patch syntax. This means that one either - cannot use the same spec file to build in epel or - must introduce conditionals and duplicate code in the spec files %if 0%{?epel} < 10 %patch0 -p1 -b .overflow %else %patch 0 -p1 -b .overflow %endif Is there any hope of fixing this issue, or altenatively, a known workaround that is compatible in both branches? Susi -- Susi Lehtola Fedora Project Contributor jussilehtola(a)fedoraproject.org

4 3

Fedora EPEL 9 updates-testing report
by updates＠fedoraproject.org 29 Oct '24

29 Oct '24

The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1f36d78e1b suricata-7.0.7-1.el9 The following builds have been pushed to Fedora EPEL 9 updates-testing smokeping-2.8.2-10.el9 syncthing-1.28.0-1.el9 Details about builds: ================================================================================ smokeping-2.8.2-10.el9 (FEDORA-EPEL-2024-39760ed78d) Latency Logging and Graphing System -------------------------------------------------------------------------------- Update Information: Fix some incorrect documentation and modernize packaging somewhat -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 28 2024 Terje Rosten <terjeros(a)gmail.com> - 2.8.2-10 - Fix docs (rhbz#2274326) - Use modern filter setup * Sat Jul 20 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.2-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sun Jul 7 2024 Terje Rosten <terje.rosten(a)ntnu.no> - 2.8.2-8 - systemd service fix * Sun Apr 21 2024 Charles R. Anderson <cra(a)alum.wpi.edu> - 2.8.2-7 - Convert License tag to SPDX format and add missing licenses * Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.2-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.8.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2274326 - README.fedora and SELinux https://bugzilla.redhat.com/show_bug.cgi?id=2274326 -------------------------------------------------------------------------------- ================================================================================ syncthing-1.28.0-1.el9 (FEDORA-EPEL-2024-6caeb5a95f) Continuous File Synchronization -------------------------------------------------------------------------------- Update Information: Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 28 2024 Fabio Valentini <decathorpe(a)gmail.com> - 1.28.0-1 - Update to version 1.28.0; Fixes RHBZ#2319211 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2292676 - CVE-2024-24789 syncthing: golang: archive/zip: Incorrect handling of certain ZIP files [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292676 [ 2 ] Bug #2292720 - CVE-2024-24789 syncthing: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292720 --------------------------------------------------------------------------------

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

epel-devel October 2024