Bug 2152649

Summary:	Update python-sqlalchemy to current version
Product:	Red Hat Enterprise Linux 9	Reporter:	Nils Philippsen <nphilipp>
Component:	python-sqlalchemy	Assignee:	Sergio Correia <scorreia>
Status:	CLOSED ERRATA	QA Contact:	Karel Srot <ksrot>
Severity:	unspecified	Docs Contact:	Mirek Jahoda <mjahoda>
Priority:	unspecified
Version:	9.1	CC:	ansasaki, carl, dueno, ngompa13, riehecky, sujagtap
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	python-sqlalchemy-1.4.45-3.el9	Doc Type:	Bug Fix
Doc Text:	.`python-sqlalchemy` rebased to 1.4.45 The `python-sqlalchemy` package has been rebased to version 1.4.45, which provides many bug fixes over version 1.4.37. Most notably, this version contains a fix for a critical memory bug in the cache key generation.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-05-09 07:46:38 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Nils Philippsen 2022-12-12 15:35:29 UTC

Description of problem:

The python-sqlalchemy package was removed from EPEL 9 after it was made available in RHEL 9.1, however the version there is out of date, many bugs were fixed in the meantime.

Version-Release number of selected component (if applicable):
python-sqlalchemy-1.4.37-3.el9

Additional info:
The current version of python-sqlalchemy is 1.4.45, but this may well go further up in time.

Comment 1 Carl George 🤠 2022-12-13 03:19:53 UTC

Also worth noting, RHEL users that previously had 1.4.44-2.el9 installed from EPEL will not see 1.4.37-3.el9 from RHEL as an upgrade, and could potentially miss out on CVE fixes that are backported to the RHEL package.  Ideally the RHEL package will be updated to 1.4.44 or greater to resolve the upgrade path.

Comment 3 Sergio Correia 2022-12-13 22:38:52 UTC

MR: https://gitlab.com/redhat/centos-stream/rpms/python-sqlalchemy/-/merge_requests/3

I built 1.4.45-3.el9 to deal with the upgrade path issue mentioned by Carl -- I saw there was 1.4.45-2.el9 built in koji, although it's not clear why it was built yesterday.

Comment 10 errata-xmlrpc 2023-05-09 07:46:38 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (python-sqlalchemy bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2330