The following Fedora EPEL 9 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-b305ec138e indent-2.2.13-4.el9 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c2aea8a27e xrdp-0.9.23-1.el9 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1e3b2a7b2f libtommath-1.2.0-10.el9

The following builds have been pushed to Fedora EPEL 9 updates-testing

OpenImageIO-2.4.15.0-1.el9 composer-2.6.2-1.el9 dh-make-2.202302-1.el9 distribution-gpg-keys-1.92-1.el9 kobo-0.30.1-1.el9 onednn-2.7.5-1.el9 perl-IPC-Signal-1.00-39.el9 perl-Proc-WaitStat-1.00-39.el9 python-os-client-config-2.1.0-9.el9 sleuthkit-4.12.1-1.el9 testcloud-0.9.10-1.el9

Details about builds:

================================================================================ OpenImageIO-2.4.15.0-1.el9 (FEDORA-EPEL-2023-8e3a7009b0) Library for reading and writing images -------------------------------------------------------------------------------- Update Information:

## Release 2.4.15.0 (1 Sep 2023) -- compared to 2.4.14.0 * bmp: Fix signed integer overflow when computing total number of pixels #3948 (by xiaoxiaoafeifei) * dds: Fix div by 0 during DXT4 DDS load #3959 (by Jesse Yurkovich) * rla: Invalid read from an empty vector during RLA load #3960 (by Jesse Yurkovich) * fix: Various protections against corrupted files #3954 * fix: Improve Utf-8 text rendering #3935 (by Nicolas) * fix: Fix typo in debug output #3956 (by Jesse Yurkovich) * ustring.h: String literal operator for ustring and ustringhash #3939 * build Suppress Xcode warnings #3940 (by Anton Dukhovnikov) * build: Silence gcc new/delete warnings for texturesys #3944 (by Shootfast) * build Added check for Boost_NO_BOOST_CMAKE, ignore if already set #3961 (by Mikael Sundell) * build Fix broken libheif < 1.13 #3970 * ci: Make more robust timer_test #3953 * admin: Relicense code under Apache 2.0 #3938 #3966 -------------------------------------------------------------------------------- ChangeLog:

* Sun Sep 3 2023 Richard Shaw hobbes1069@gmail.com - 2.4.15.0-1 - Update to 2.4.15.0. - Update License tag to SPDX identifiers. * Mon Aug 7 2023 S��rgio Basto sergio@serjux.com - 2.4.14.0-2 - Rebuild for opencv 4.8.0 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2237025 - OpenImageIO-2.4.15.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2237025 --------------------------------------------------------------------------------

================================================================================ composer-2.6.2-1.el9 (FEDORA-EPEL-2023-9d0554a459) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information:

**Version 2.6.2** - 2023-09-03 * Reverted "Fixed binary proxies causing scripts inspecting `$_SERVER['SCRIPT_NAME']` to detect them, they are now more transparent (#11562)" which caused a regression (#11617) * Fixed non-zero exit code on failed audits to only apply to `install --audit` runs and not implicit audits with `require`, `create-project` or `update` commands (#11616) * Fixed `create-project` infinite post-install loop in some circumstances (#11613) ---- **Version 2.6.1** - 2023-09-01 * Reverted "Fixed executability of non- php binaries which are not marked executable (#11557)" which caused a regression (#11612) ---- **Version 2.6.0** - 2023-09-01 * Added audit.ignore config setting to ignore security advisories by id or CVE id (#11556, #11605) * Added `rm` alias to the `remove` command (#11367) * Added runtime platform check to verify the php-64bit requirement is met (#11334) * Added platform package detection for lib-pq-libpq and lib-rdkafka-librdkafka (#11418) * Added `--dry- run` to `dump-autoload` command to allow running --strict-psr checks without modifying the filesystem (#11608) * Added support for `bump`ing patch level in `~1.2.3` constraints (#11590) * Added prompt in `require` if the package name is not found but similar ones exist (#11284) * Added support for env vars and `~` in repository paths for vcs and artifact repositories (#11453) * Added support for local directory paths for repositories of type `composer` (#11526) * Added links to package homepages in `why`/`why-not` command output (#11308) * Added a `security` key to the `support` key of composer.json to set the URL to the vulnerability disclosure policy (#11271) * Added support for gathering security advisories from multiple repositories for a single package (#11436) * Fixed `install` and `update` exit code to be non-zero if the post-install security audit failed (#11362) * Fixed binary proxies causing scripts inspecting `$_SERVER['SCRIPT_NAME']` to detect them, they are now more transparent (#11562) * Fixed executability of non-php binaries which are not marked executable (#11557) * Fixed `mtime` modification of the vendor dir to only happen when packages are modified, and not require lock file modification to happen (#11593) * Fixed `create-project` using the wrong composer.json file if one was set via the `COMPOSER` env var (#11493) * Fixed json editing to preserve indentation when updating json files (#11390) * Fixed handling of broken junctions on windows (#11550) * Fixed parsing of lib-curl-openssl version with OSX SecureTransport (#11534) * Fixed svn repo parsing in some edge cases (#11350) * Fixed handling of archive URLs without file extension (#11520) * Performance improvement in pool optimization step (#11449, #11450) -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Remi Collet remi@remirepo.net - 2.6.2-1 - update to 2.6.2 * Fri Sep 1 2023 Remi Collet remi@remirepo.net - 2.6.1-1 - update to 2.6.1 * Fri Sep 1 2023 Remi Collet remi@remirepo.net - 2.6.0-1 - update to 2.6.0 --------------------------------------------------------------------------------

================================================================================ dh-make-2.202302-1.el9 (FEDORA-EPEL-2023-e5354f28e9) Tool that converts source archives into Debian package source -------------------------------------------------------------------------------- Update Information:

Update dh-make to 2.202302 (#2229051) -------------------------------------------------------------------------------- ChangeLog:

* Sun Sep 3 2023 S��rgio Basto sergio@serjux.com - 2.202302-1 - Update dh-make to 2.202302 (#2229051) * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 2.202301-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2229051 - dh-make-2.202302 is available https://bugzilla.redhat.com/show_bug.cgi?id=2229051 --------------------------------------------------------------------------------

================================================================================ distribution-gpg-keys-1.92-1.el9 (FEDORA-EPEL-2023-83bb8860e7) GPG keys of various Linux distributions -------------------------------------------------------------------------------- Update Information:

- add symlinkg to rpmfusion 40 and 41 - update copr keys - add remi fedora 39 link to 2023 key -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Miroslav Such�� msuchy@redhat.com 1.92-1 - add symlinkg to rpmfusion 40 and 41 - update copr keys - add remi fedora 39 link to 2023 key -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2237224 - mock build for RPM Fusion rawhide/F40 are failing due to missing keys https://bugzilla.redhat.com/show_bug.cgi?id=2237224 --------------------------------------------------------------------------------

================================================================================ kobo-0.30.1-1.el9 (FEDORA-EPEL-2023-9a7369dae0) Python modules for tools development -------------------------------------------------------------------------------- Update Information:

Update kobo to latest upstream release. -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Pavel Simovec psimovec@redhat.com - 0.30.1-1 - New upstream release 0.30.1 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2237220 - kobo-0.30.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2237220 --------------------------------------------------------------------------------

================================================================================ onednn-2.7.5-1.el9 (FEDORA-EPEL-2023-9460084673) Deep Neural Network Library -------------------------------------------------------------------------------- Update Information:

Update to 2.7.5 -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Nicolas Chauvet kwizart@gmail.com - 2.7.5-1 - Update to 2.7.5 --------------------------------------------------------------------------------

================================================================================ perl-IPC-Signal-1.00-39.el9 (FEDORA-EPEL-2023-ac6879063b) Utility functions dealing with signals for Perl -------------------------------------------------------------------------------- Update Information:

This package contains the Perl module IPC::Signal, which contains utility functions for dealing with signals and Proc::WaitStat which contains functions for interpreting and acting on wait status values. -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Emmanuel Seyman emmanuel@seyman.fr - 1.00-39 - Rework dependencies - migrated to SPDX license - Replace calls to %{__perl} with /usr/bin/perl - Use %{make_build} and %{make_install} where appropriate * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 1.00-38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Jan 20 2023 Fedora Release Engineering releng@fedoraproject.org - 1.00-37 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 1.00-36 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon May 30 2022 Jitka Plesnikova jplesnik@redhat.com - 1.00-35 - Perl 5.36 rebuild * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.00-34 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1860590 - perl-IPC-Signal missing in EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1860590 [ 2 ] Bug #1860592 - perl-Proc-WaitStat missing in EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1860592 --------------------------------------------------------------------------------

================================================================================ perl-Proc-WaitStat-1.00-39.el9 (FEDORA-EPEL-2023-ac6879063b) Interpret and act on wait() status values -------------------------------------------------------------------------------- Update Information:

This package contains the Perl module IPC::Signal, which contains utility functions for dealing with signals and Proc::WaitStat which contains functions for interpreting and acting on wait status values. -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Emmanuel Seyman emmanuel@seyman.fr - 1.00-39 - Rework dependencies - migrated to SPDX license - Replace calls to %{__perl} with /usr/bin/perl - Use %{make_build} and %{make_install} where appropriate * Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 1.00-38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Jan 20 2023 Fedora Release Engineering releng@fedoraproject.org - 1.00-37 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 1.00-36 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue May 31 2022 Jitka Plesnikova jplesnik@redhat.com - 1.00-35 - Perl 5.36 rebuild * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.00-34 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1860590 - perl-IPC-Signal missing in EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1860590 [ 2 ] Bug #1860592 - perl-Proc-WaitStat missing in EPEL 8 https://bugzilla.redhat.com/show_bug.cgi?id=1860592 --------------------------------------------------------------------------------

================================================================================ python-os-client-config-2.1.0-9.el9 (FEDORA-EPEL-2023-8db4db689b) OpenStack Client Configuration Library -------------------------------------------------------------------------------- Update Information:

Latest build for EPEL 9 -------------------------------------------------------------------------------- ChangeLog:

* Fri Jul 21 2023 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Fri Jan 20 2023 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Fri Jan 21 2022 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jul 23 2021 Fedora Release Engineering releng@fedoraproject.org - 2.1.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2211597 - Please branch and build python-os-client-config in epel9 https://bugzilla.redhat.com/show_bug.cgi?id=2211597 --------------------------------------------------------------------------------

================================================================================ sleuthkit-4.12.1-1.el9 (FEDORA-EPEL-2023-21f47399c9) The Sleuth Kit (TSK) -------------------------------------------------------------------------------- Update Information:

Update to 4.12.1 -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Nicolas Chauvet kwizart@gmail.com - 4.12.1-1 - Update to 4.12.1 * Sat Jul 22 2023 Fedora Release Engineering releng@fedoraproject.org - 4.12.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Sat Jan 21 2023 Fedora Release Engineering releng@fedoraproject.org - 4.12.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Wed Dec 28 2022 Nicolas Chauvet kwizart@gmail.com - 4.12.0-1 - Update to 4.12.0 * Sat Jul 23 2022 Fedora Release Engineering releng@fedoraproject.org - 4.11.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Sat Jan 22 2022 Fedora Release Engineering releng@fedoraproject.org - 4.11.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Nov 4 2021 Nicolas Chauvet kwizart@gmail.com - 4.11.1-1 - Update to 4.11.1 --------------------------------------------------------------------------------

================================================================================ testcloud-0.9.10-1.el9 (FEDORA-EPEL-2023-5df47fbecf) Tool for running cloud images locally -------------------------------------------------------------------------------- Update Information:

- configuration abstraction (domain/apiv2 by lbrabec) - Add workaround for Ubuntu - Remove compatibility code for tmt < 1.22 - Drop long deprecated find_vm_ip from cli - Always try to run dhclient in cloud-init - Clarify that testcloud runs VMs and no containers (Anatoli Babenia) - Support Fedora OpenStack images handling - [Domain API] Cleanups, fixes, refactors, Part 1/n - [Domain API] Cleanups, fixes, refactors, Part 2/n - Downloader: support unknown file sizes, add retry mechanism - domain/apiv2: Fix CoreOS - Instance: inherit coreos param too for DomainConfiguration - Storage: provide domain/apiv2 facilities for storage sizing, refactor -------------------------------------------------------------------------------- ChangeLog:

* Mon Sep 4 2023 Fedora Release Engineering releng@fedoraproject.org - 0.9.10-1 - configuration abstraction (domain/apiv2 by lbrabec) - Add workaround for Ubuntu - Remove compatibility code for tmt < 1.22 - Drop long deprecated find_vm_ip from cli - Always try to run dhclient in cloud-init - Clarify that testcloud runs VMs and no containers (Anatoli Babenia) - Support Fedora OpenStack images handling - [Domain API] Cleanups, fixes, refactors, Part 1/n - [Domain API] Cleanups, fixes, refactors, Part 2/n - Downloader: support unknown file sizes, add retry mechanism - domain/apiv2: Fix CoreOS - Instance: inherit coreos param too for DomainConfiguration - Storage: provide domain/apiv2 facilities for storage sizing, refactor * Sat Jul 22 2023 Fedora Release Engineering releng@fedoraproject.org - 0.9.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Wed Jun 14 2023 Python Maint python-maint@redhat.com - 0.9.2-2 - Rebuilt for Python 3.12 --------------------------------------------------------------------------------