The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b305ec138e indent-2.2.13-4.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c2aea8a27e xrdp-0.9.23-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1e3b2a7b2f libtommath-1.2.0-10.el9

The following builds have been pushed to Fedora EPEL 9 updates-testing

barman-3.8.0-1.el9 gfal2-python-1.12.1-1.el9 jigdo-0.8.2-1.el9 libmongocrypt-1.8.2-1.el9 noggin-1.7.1-4.el9 oidc-agent-5.0.1-1.el9 perl-Crypt-CBC-3.04-13.el9 python-h5io-0.1.9-1.el9 python-pyrate-limiter-3.1.0-1.el9 rust-cargo_metadata-0.17.0-1.el9 rust-cargo_metadata0.15-0.15.4-1.el9 salt-3005.2-1.el9 sexpp-0.8.7-1.el9

Details about builds:

================================================================================ barman-3.8.0-1.el9 (FEDORA-EPEL-2023-408a01ad4f) Backup and Recovery Manager for PostgreSQL -------------------------------------------------------------------------------- Update Information:

Update to 3.8.0 -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Simone Caronni negativo17@gmail.com - 3.8.0-1 - Update to 3.8.0. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2236562 - barman-3.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2236562 --------------------------------------------------------------------------------

================================================================================ gfal2-python-1.12.1-1.el9 (FEDORA-EPEL-2023-2be6bcec80) Python bindings for gfal 2 -------------------------------------------------------------------------------- Update Information:

New upstream release v1.12.1 -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 5 2023 Mihai Patrascoiu mihai.patrascoiu@cern.ch - 1.12.1-1 - Upgrade to upstream release 1.12.1 - Closes bugzilla#2154855, bugzilla#2220000, bugzilla#2225821 * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.12.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jun 13 2023 Python Maint python-maint@redhat.com - 1.12.0-4 - Rebuilt for Python 3.12 * Mon Feb 20 2023 Jonathan Wakely jwakely@redhat.com - 1.12.0-3 - Rebuilt for Boost 1.81 * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.12.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2154855 - gfal2-python fails to build with Python 3.12: ModuleNotFoundError: No module named 'distutils' https://bugzilla.redhat.com/show_bug.cgi?id=2154855 [ 2 ] Bug #2220000 - F39FailsToInstall: python3-gfal2 https://bugzilla.redhat.com/show_bug.cgi?id=2220000 [ 3 ] Bug #2225821 - gfal2-python: FTBFS in Fedora rawhide/f39 https://bugzilla.redhat.com/show_bug.cgi?id=2225821 --------------------------------------------------------------------------------

================================================================================ jigdo-0.8.2-1.el9 (FEDORA-EPEL-2023-9574209622) Ease distribution of large files over the Internet -------------------------------------------------------------------------------- Update Information:

- Tweak various sources to fix compilation errrors and warnings with g++ 13 - Use SPDX license identifier -------------------------------------------------------------------------------- ChangeLog:

* Wed Aug 30 2023 Michel Lind salimma@fedoraproject.org - 0.8.2-1 - Update to 0.8.2 - Use SPDX license identifier * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.8.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 26 2023 Michel Alexandre Salim salimma@fedoraproject.org - 0.8.1-4 - Fix header inclusions for compiling with GCC 13 * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 0.8.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 0.8.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2229053 - jigdo-0.8.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2229053 --------------------------------------------------------------------------------

================================================================================ libmongocrypt-1.8.2-1.el9 (FEDORA-EPEL-2023-cecf66df89) The companion C library for client side encryption in drivers -------------------------------------------------------------------------------- Update Information:

**Version 1.8.2** Fixed - Fix possible leaks in Queryable Encryption in errors on malformed data. -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 5 2023 Remi Collet remi@remirepo.net - 1.8.2-1 - update to 1.8.2 --------------------------------------------------------------------------------

================================================================================ noggin-1.7.1-4.el9 (FEDORA-EPEL-2023-7318dbebd0) Self-service user portal for FreeIPA for communities -------------------------------------------------------------------------------- Update Information:

Fixes for FTI issues -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 5 2023 Neal Gompa ngompa@fedoraproject.org - 1.7.1-4 - Add patch to support flask-babel v3 - Reorganize patches to apply unconditionally * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 1.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ oidc-agent-5.0.1-1.el9 (FEDORA-EPEL-2023-f8ce92ae2d) Managing OpenID Connect tokens on the command line -------------------------------------------------------------------------------- Update Information:

oidc-agent 5.0.1 -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Mattias Ellert mattias.ellert@physics.uu.se - 5.0.1-1 - Update to version 5.0.1 - Drop patch oidc-agent-webkit.patch (previously backported - Drop patch oidc-agent.patch (accepted upstram) * Sun Aug 20 2023 Mattias Ellert mattias.ellert@physics.uu.se - 4.5.2-2 - Use webkit2gtk-4.1 (Fedora) --------------------------------------------------------------------------------

================================================================================ perl-Crypt-CBC-3.04-13.el9 (FEDORA-EPEL-2023-2af18ec68f) Encrypt Data with Cipher Block Chaining Mode -------------------------------------------------------------------------------- Update Information:

This update fixes decryption when using the (deprecated) `'header' => 'randomiv'` mode. -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 5 2023 Paul Howarth paul@city-fan.org - 3.04-13 - Fix decryption of ciphertext created with 'header' => 'randomiv' https://bugzilla.redhat.com/show_bug.cgi?id=2235322 https://github.com/lstein/Lib-Crypt-CBC/issues/6 https://github.com/lstein/Lib-Crypt-CBC/pull/7 * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 3.04-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue May 30 2023 Michal Josef ��pa��ek mspacek@redhat.com - 3.04-11 - Fix %patch macro - Update license to SPDX format * Fri Jan 20 2023 Fedora Release Engineering releng@fedoraproject.org - 3.04-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 3.04-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Fri Jun 3 2022 Jitka Plesnikova jplesnik@redhat.com - 3.04-8 - Perl 5.36 re-rebuild of bootstrapped packages * Wed Jun 1 2022 Jitka Plesnikova jplesnik@redhat.com - 3.04-7 - Perl 5.36 rebuild * Wed Mar 2 2022 Paul Howarth paul@city-fan.org - 3.04-6 - Fix an issue around the -literal_key option (GH#4) * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 3.04-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2235322 - perl-Crypt-CBC-3.04 of RHEL9 can not decrypt ciphertext created with 'header' => 'randomiv' https://bugzilla.redhat.com/show_bug.cgi?id=2235322 --------------------------------------------------------------------------------

================================================================================ python-h5io-0.1.9-1.el9 (FEDORA-EPEL-2023-9df1b2cdda) Read and write simple Python objects using HDF5 -------------------------------------------------------------------------------- Update Information:

Initial package for EPEL9 -------------------------------------------------------------------------------- ChangeLog:

* Wed Aug 23 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.1.9-1 - Update to 0.1.9 (close RHBZ#2233612) * Thu Aug 3 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.1.8-1 - Update to 0.1.8 (close RHBZ#2221287) * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 0.1.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jul 12 2023 Python Maint python-maint@redhat.com - 0.1.7-2 - Rebuilt for Python 3.12 * Fri Mar 17 2023 Benjamin A. Beasley code@musicinmybrain.net - 0.1.7-1 - Update to 0.1.7 (close RHBZ#2179363) and use SPDX - Port to pyproject-rpm-macros - General spec-file modernization - Convert License field to SPDX * Fri Mar 17 2023 Mamoru TASAKA mtasaka@fedoraproject.org - 0.1.2-12 - Backport upstream change for build with numpy 1.24 * Fri Jan 20 2023 Fedora Release Engineering releng@fedoraproject.org - 0.1.2-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 0.1.2-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jun 14 2022 Python Maint python-maint@redhat.com - 0.1.2-9 - Rebuilt for Python 3.11 * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 0.1.2-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2236736 - EPEL9 branch for python-h5io? https://bugzilla.redhat.com/show_bug.cgi?id=2236736 --------------------------------------------------------------------------------

================================================================================ python-pyrate-limiter-3.1.0-1.el9 (FEDORA-EPEL-2023-4be01399c7) The request rate limiter using Leaky-bucket algorithm -------------------------------------------------------------------------------- Update Information:

Pyrate_limiter Update to 3.1.0 -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 5 2023 Steve Cossette farchord@gmail.com - 3.1.0-1 - Update to 3.1.0 --------------------------------------------------------------------------------

================================================================================ rust-cargo_metadata-0.17.0-1.el9 (FEDORA-EPEL-2023-f87ccb2cde) Structured access to the output of cargo metadata -------------------------------------------------------------------------------- Update Information:

- Update the cargo_metadata crate to version 0.17.0. - Add a compat package for version 0.15 of the cargo_metadata crate. -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 5 2023 Fabio Valentini decathorpe@gmail.com - 0.17.0-1 - Update to version 0.17.0; Fixes RHBZ#2225095 * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 0.15.4-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild --------------------------------------------------------------------------------

================================================================================ rust-cargo_metadata0.15-0.15.4-1.el9 (FEDORA-EPEL-2023-f87ccb2cde) Structured access to the output of cargo metadata -------------------------------------------------------------------------------- Update Information:

- Update the cargo_metadata crate to version 0.17.0. - Add a compat package for version 0.15 of the cargo_metadata crate. -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 5 2023 Fabio Valentini decathorpe@gmail.com - 0.15.4-1 - Initial import (cargo_metadata 0.15 compat package) --------------------------------------------------------------------------------

================================================================================ salt-3005.2-1.el9 (FEDORA-EPEL-2023-d9153eda95) A parallel remote execution system -------------------------------------------------------------------------------- Update Information:

Fixes for CVE-2023-20897 and CVE-2023-20898 -------------------------------------------------------------------------------- ChangeLog:

* Tue Sep 5 2023 Gwyn Ciesla gwync@protonmail.com - 3005.2-1 - 3005.2 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2237512 - CVE-2023-20898 salt: Git Providers can read from the wrong environment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2237512 [ 2 ] Bug #2237514 - CVE-2023-20897 salt: DOS in minion return [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2237514 --------------------------------------------------------------------------------

================================================================================ sexpp-0.8.7-1.el9 (FEDORA-EPEL-2023-8166e85e2c) S-expressions parser and generator tools -------------------------------------------------------------------------------- Update Information:

S-expressions parser and generator tools. -------------------------------------------------------------------------------- ChangeLog:

* Mon Jun 26 2023 Remi Collet remi@remirepo.net - 0.8.7-1 - update to 0.8.7 - rename to sexpp * Fri Jun 23 2023 Remi Collet remi@remirepo.net - 0.8.6-1 - update to 0.8.6 - drop patch merged upstream * Wed Jun 21 2023 Remi Collet remi@remirepo.net - 0.8.5-1 - update to 0.8.5 - open https://github.com/rnpgp/sexp/pull/37 define SOVERSION * Thu May 4 2023 Remi Collet remi@remirepo.net - 0.8.4-1 - initial package - open https://github.com/rnpgp/sexp/issues/32 build as shared - open https://github.com/rnpgp/sexp/issues/33 clarify license -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2216484 - Review Request: sexpp - S-expressions parser and generator tools https://bugzilla.redhat.com/show_bug.cgi?id=2216484 --------------------------------------------------------------------------------