The following Fedora EPEL 7 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-66c028a837 slurm-20.11.9-1.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-d7255ac6f5 ecdsautils-0.4.1-2.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-cf82fb137a clamav-0.103.6-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-da4611426e python3-lxml-4.2.5-5.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing golang-1.17.7-1.el7 python-catkin_pkg-0.5.0-1.el7 python-colcon-core-0.8.3-1.el7 Details about builds: ================================================================================ golang-1.17.7-1.el7 (FEDORA-EPEL-2022-f64d777807) The Go Programming Language -------------------------------------------------------------------------------- Update Information: Update to 1.17.7, including fixes for CVE-2021-29923, CVE-2021-43565, CVE-2022-23806, CVE-2022-23772, and CVE-2022-23773 -------------------------------------------------------------------------------- ChangeLog: * Tue May 10 2022 Dave Dykstra <dwd@xxxxxxxxxxxxxxxxx> - 1.17.7-1 - Update to 1.17.7, based on centos8-stream packaging except keeping go-srpm-macros and the "--with ignore_tests" rpmbuild option -------------------------------------------------------------------------------- References: [ 1 ] Bug #1992006 - CVE-2021-29923 golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet https://bugzilla.redhat.com/show_bug.cgi?id=1992006 [ 2 ] Bug #2030787 - CVE-2021-43565 golang.org/x/crypto: empty plaintext packet causes panic https://bugzilla.redhat.com/show_bug.cgi?id=2030787 [ 3 ] Bug #2053429 - CVE-2022-23806 golang: crypto/elliptic IsOnCurve returns true for invalid field elements https://bugzilla.redhat.com/show_bug.cgi?id=2053429 [ 4 ] Bug #2053532 - CVE-2022-23772 golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString https://bugzilla.redhat.com/show_bug.cgi?id=2053532 [ 5 ] Bug #2053541 - CVE-2022-23773 golang: cmd/go: misinterpretation of branch names can lead to incorrect access control https://bugzilla.redhat.com/show_bug.cgi?id=2053541 -------------------------------------------------------------------------------- ================================================================================ python-catkin_pkg-0.5.0-1.el7 (FEDORA-EPEL-2022-c7a05df398) Library for retrieving information about catkin packages -------------------------------------------------------------------------------- Update Information: Update to `catkin_pkg` 0.5.0 -------------------------------------------------------------------------------- ChangeLog: * Tue May 10 2022 Scott K Logan <logans@xxxxxxxxxxx> - 0.5.0-1 - Update to 0.5.0 (rhbz#2083893) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2083893 - python-catkin_pkg-0.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2083893 -------------------------------------------------------------------------------- ================================================================================ python-colcon-core-0.8.3-1.el7 (FEDORA-EPEL-2022-24781dbb10) Command line tool to build sets of software packages -------------------------------------------------------------------------------- Update Information: Update to `colcon-core` 0.8.3 -------------------------------------------------------------------------------- ChangeLog: * Sat May 7 2022 Scott K Logan <logans@xxxxxxxxxxx> - 0.8.3-1 - Update to 0.8.3 (rhbz#2074923) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2074923 - python-colcon-core-0.8.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2074923 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
