The following Fedora EPEL 9 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-eacf1a60fb
python-flask-restx-1.1.0-1.el9
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-5b5f974a90
sympa-6.2.72-2.el9
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-867723f541
cpp-httplib-0.12.5-2.el9
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f04011e9d4
yarnpkg-1.22.19-5.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
OpenImageIO-2.4.12.0-1.el9
borgmatic-1.7.14-1.el9
knot-3.2.7-1.el9
pgbouncer-1.19.1-1.el9
prunerepo-1.25-1.el9
python-pykeepass-4.0.5-1.el9
rust-base16ct-0.2.0-1.el9
rust-ct-codecs-1.1.1-1.el9
rust-ff-0.13.0-1.el9
rust-http-auth-0.1.8-1.el9
sec-2.9.2-1.el9
vim-fugitive-gitlab-0~20220701gitb73a8e-3.el9
Details about builds:
================================================================================
OpenImageIO-2.4.12.0-1.el9 (FEDORA-EPEL-2023-7d0447a932)
Library for reading and writing images
--------------------------------------------------------------------------------
Update Information:
elease 2.4.12.0 (1 June 2023) -- compared to 2.4.11.1
------------------------------------------------------ - *oiiotool*: Don't
propagate unsupported channels
[#3838](https://github.com/OpenImageIO/oiio/pull/3838) - *fix*: Prevent possible
deadlock when reading files with wrong extensions
[#3845](https://github.com/OpenImageIO/oiio/pull/3845) - *gif*: Prevent possible
heap buffer overflow [#3841](https://github.com/OpenImageIO/oiio/pull/3841) (by
xiaoxiaoafeifei) - *psd*: Improve memory efficiency of PSD read
[#3807](https://github.com/OpenImageIO/oiio/pull/3807) - *raw*: Fix LibRaw flip
to Exif orientation conversion
[#3847](https://github.com/OpenImageIO/oiio/pull/3847) (by Lo��c Vital) - *raw*:
Raw input fix user_flip usage
[#3858](https://github.com/OpenImageIO/oiio/pull/3858) (by Lo��c Vital) -
*strutil*: Use forward properly for sync::print().
[#3825](https://github.com/OpenImageIO/oiio/pull/3825) - *build*: Fixes for
latest xcode on MacOS 13.3 Ventura
[#3854](https://github.com/OpenImageIO/oiio/pull/3854) - *build*: Fix build
error with MSVC [#3832](https://github.com/OpenImageIO/oiio/pull/3832) (by Ray
Molenkamp) - *ci*: Fix warnings
[#3833](https://github.com/OpenImageIO/oiio/pull/3833) - *ci*: Fix package name
for icc [#3860](https://github.com/OpenImageIO/oiio/pull/3860)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Richard Shaw <hobbes1069(a)gmail.com> - 2.4.12.0-1
- Update to 2.4.12.0.
* Mon May 8 2023 Richard Shaw <hobbes1069(a)gmail.com> - 2.4.11.0-1
- Update to 2.4.11.0.
* Mon Feb 20 2023 Jonathan Wakely <jwakely(a)redhat.com> - 2.4.8.1-2
- Rebuilt for Boost 1.81
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2204542 - OpenImageIO-2.4.12.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2204542
--------------------------------------------------------------------------------
================================================================================
borgmatic-1.7.14-1.el9 (FEDORA-EPEL-2023-ea11c77cab)
Simple Python wrapper script for borgbackup
--------------------------------------------------------------------------------
Update Information:
- [#484](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/484): Add a new verbosity level (-2) to disable
output entirely (for console, syslog, log file, or monitoring), so not
even errors are shown. - [#688](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/688): Tweak archive check probing logic to use the
newest timestamp found when multiple exist. -
[#659](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/659):
Add Borg 2 date-based matching flags to various actions for archive selection. -
[#703](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/703):
Fix an error when loading the configuration schema on Fedora Linux. -
[#704](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/704):
Fix "check" action error when repository and archive checks are configured but
the archive check gets skipped due to the configured frequency. -
[#706](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/706):
Fix "--archive latest" on "list" and "info" actions that
only worked on the
first of multiple configured repositories. ---- -
[#375](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/375):
Restore particular PostgreSQL schemas from a database dump via "borgmatic
restore --schema" flag. See the documentation for more information:
[
https://torsion.org/borgmatic/docs/how-to/backup-your-databases/#restore-
particular-schemas](https://torsion.org/borgmatic/docs/how-to/backup-your-
databases/#restore-particular-schemas) -
[#678](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/678):
Fix error from PostgreSQL when dumping a database with a "format" of
"plain". -
[#678](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/678):
Fix PostgreSQL hook to support "psql_command" and "pg_restore_command"
options
containing commands with arguments. -
[#678](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/678):
Fix calls to psql in PostgreSQL hook to ignore "~/.psqlrc", whose settings can
break database dumping. - [#680](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/680): Add support for logging each log line as a
JSON object via global "--log-json" flag. -
[#682](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/682):
Fix "source_directories_must_exist" option to expand globs and tildes in source
directories. - [#684](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/684): Rename "master" development branch to
"main"
to use more inclusive language. You'll need to update your development
checkouts accordingly. - [#686](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/686): Add fish shell completion script so you can
tab-complete on the borgmatic command-line. See the documentation for more
information: [
https://torsion.org/borgmatic/docs/how-to/set-up-
backups/#shell-completion](https://torsion.org/borgmatic/docs/how-to/set-up-
backups/#shell-completion) - [#687](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/687): Fix borgmatic error when not finding the
configuration schema for certain "pip install --editable" development
installs. - [#688](https://projects.torsion.org/borgmatic-
collective/borgmatic/issues/688): Fix archive checks being skipped even when
particular archives haven't been checked recently. This occurred when
using multiple borgmatic configuration files with different
"archive_name_format"s, for instance. -
[#691](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/691):
Fix error in "borgmatic restore" action when the configured repository path is
relative instead of absolute. -
[#694](https://projects.torsion.org/borgmatic-collective/borgmatic/issues/694):
Run "borgmatic borg" action without capturing output so interactive prompts and
flags like "--progress" still work.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Felix Kaechele <felix(a)kaechele.ca> - 1.7.14-1
- update to 1.7.14
* Wed May 17 2023 Felix Kaechele <felix(a)kaechele.ca> - 1.7.13-1
- update to 1.7.13
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2207746 - borgmatic-1.7.13 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2207746
[ 2 ] Bug #2212133 - borgmatic-1.7.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2212133
--------------------------------------------------------------------------------
================================================================================
knot-3.2.7-1.el9 (FEDORA-EPEL-2023-a0fc070e91)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
Update to 3.2.7
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.2.7-1
- Update to 3.2.7
- Remove unneeded tests patch
- Use _datadir for config
--------------------------------------------------------------------------------
================================================================================
pgbouncer-1.19.1-1.el9 (FEDORA-EPEL-2023-db663c4bb8)
Lightweight connection pooler for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Update to 1.19.1.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Simone Caronni <negativo17(a)gmail.com> - 1.19.1-1
- Update to 1.19.1.
--------------------------------------------------------------------------------
================================================================================
prunerepo-1.25-1.el9 (FEDORA-EPEL-2023-cd4b1ed65e)
Remove old packages from rpm-md repository
--------------------------------------------------------------------------------
Update Information:
PruneRepoAnalyzer to use the temporary cachedir, Read BUILDTIME from the repo
metadata, rather than every single RPM file ---- fixes for the latest DNF
packaging, dnf repoquery dropped --qf %location, always use
--setopt=cachedir=<local-relative-dir>
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.25-1
- PruneRepoAnalyzer to use the temporary cachedir, too
- Read BUILDTIME from the repo metadata, rather than every single RPM file
* Mon Jun 5 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.24-1
- tests: use --setopt=cachedir=<local-relative-dir>
* Mon Jun 5 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.23-2
- using a temporary DNF cache directory, Koji FTBFS and
https://github.com/fedora-copr/copr/issues/2756
* Mon Jun 5 2023 Pavel Raiskup <praiskup(a)redhat.com> 1.22-1
- ajust to the current/future DNF packaging
- fix for new DNF that doesn't accept %location in --queryformat
--------------------------------------------------------------------------------
================================================================================
python-pykeepass-4.0.5-1.el9 (FEDORA-EPEL-2023-7fcb6121e9)
Python library to interact with keepass databases
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.5
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Artem Polishchuk <ego.cordatus(a)gmail.com> - 1:4.0.5-1
- chore: Update to 4.0.5 (close RHBZ#2212566)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2212566 - python-pykeepass-4.0.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2212566
--------------------------------------------------------------------------------
================================================================================
rust-base16ct-0.2.0-1.el9 (FEDORA-EPEL-2023-39829497a5)
Pure Rust, constant-time implementation of Base16 (RFC 4648)
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the base16ct crate.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.2.0-1
- Initial import (#2211087)
--------------------------------------------------------------------------------
================================================================================
rust-ct-codecs-1.1.1-1.el9 (FEDORA-EPEL-2023-b60b7eae52)
Constant-time hex and base64 codecs from libsodium reimplemented in Rust
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the ct-codecs crate.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.1.1-1
- Initial import (#2210895)
--------------------------------------------------------------------------------
================================================================================
rust-ff-0.13.0-1.el9 (FEDORA-EPEL-2023-0f51823fd1)
Library for building and interfacing with finite fields
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the ff crate.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.13.0-1
- Initial import (#2211920)
--------------------------------------------------------------------------------
================================================================================
rust-http-auth-0.1.8-1.el9 (FEDORA-EPEL-2023-37ec991647)
HTTP authentication
--------------------------------------------------------------------------------
Update Information:
Initial packaging of the http-auth crate.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 6 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.8-1
- Initial import (#2210898)
--------------------------------------------------------------------------------
================================================================================
sec-2.9.2-1.el9 (FEDORA-EPEL-2023-ff4381aa43)
Simple Event Correlator script to filter log file entries
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 5 2023 Stefan Schulze Frielinghaus <stefansf(a)fedoraproject.org> -
2.9.2-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
vim-fugitive-gitlab-0~20220701gitb73a8e-3.el9 (FEDORA-EPEL-2023-72f5582bc5)
GitLab support for vim-fugitive plugin
--------------------------------------------------------------------------------
Update Information:
provide AppData fore GNOME Software (rhbz#2124914), build for EPEL9
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 5 2023 Zdenek Dohnal <zdohnal(a)redhat.com> - 0~20220701gitb73a8e-3
- add metainfo data for GNOME Software (rhbz#2124914)
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0~20220701gitb73a8e-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jul 6 2022 Pavel Raiskup <praiskup(a)redhat.com> - 0~20220701gitb73a8e-1
- initial packaging, inspiration from vim-rhubarb.spec (rhbz#2103073)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2124914 - Please add AppData metadata, so the plugin is displayed in
gnome-software
https://bugzilla.redhat.com/show_bug.cgi?id=2124914
--------------------------------------------------------------------------------