Description of problem: As usual when a new RHEL minor release comes along, we will rebase this package to match Rawhide, in order to pick up any new development, bug fixes and CVEs.
Propose that we do this in ITM 22 (last week of July 2023).
Rich - I believe this rebase should cover/resolve some CVE bugs too, but I'm never 100% sure exactly which versions are "upstream" and which are in Fedora rawhide. If they do we should just add them as blocked by this bug, move them to post, and work thru the get the acks shell game w/ QE. From jmaloy's list: bug 2188579, bug 2186577, bug 2184938, and (your) bug 2174192.
Yup, it will fix "some" CVE bugs, but I don't know exactly which ones :-) I'm generally ignoring all CVE bugs against mingw* packages, unless one turns up with high priority (which I don't think has ever happened).
Tested with: mingw64-binutils-2.40-3.el9.x86_64 Tried to install mingw64-binutils packages and they can be installed successfully, so set Verified:Tested/Sanity only.
Tested with: mingw64-binutils-2.40-3.el9.x86_64 The package can be installed successfully and it's included in latest nightly compose, so move the bug to VERIFIED.