The following Fedora EPEL 7 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-f0317a13d8 dropbear-2017.75-2.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-de23d337b0 libopenmpt-0.6.6-1.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-66467c33ea seamonkey-2.53.14-3.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing git-lfs-2.10.0-2.el7 s3cmd-2.3.0-1.el7 Details about builds: ================================================================================ git-lfs-2.10.0-2.el7 (FEDORA-EPEL-2022-d8f75949c3) Git extension for versioning large files -------------------------------------------------------------------------------- Update Information: - Rebuild with current EPEL 7 golang - Fixes CVE-2022-24675, resolves rhbz#2084673 - Fixes CVE-2022-28327, resolves rhbz#2084854 - Fixes CVE-2021-38297, resolves rhbz#2118476 - Sync build steps with RHEL8/RHEL9 - Add pre-generated manpages, resolves rhbz#1934043 - Add provides for bundled golang libraries - Redirect scriptlet output to /dev/null -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 5 2022 Carl George <carl@george.computer> - 2.10.0-2 - Rebuild with current EPEL 7 golang - Fixes CVE-2022-24675, resolves rhbz#2084673 - Fixes CVE-2022-28327, resolves rhbz#2084854 - Fixes CVE-2021-38297, resolves rhbz#2118476 - Sync build steps with RHEL8/RHEL9 - Add pre-generated manpages, resolves rhbz#1934043 - Add provides for bundled golang libraries - Redirect scriptlet output to /dev/null -------------------------------------------------------------------------------- References: [ 1 ] Bug #1934043 - missing help and wrong man pages https://bugzilla.redhat.com/show_bug.cgi?id=1934043 [ 2 ] Bug #2084673 - CVE-2022-24675 git-lfs: golang: encoding/pem: fix stack overflow in Decode [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2084673 [ 3 ] Bug #2084854 - CVE-2022-28327 git-lfs: golang: crypto/elliptic: panic caused by oversized scalar [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2084854 [ 4 ] Bug #2118476 - CVE-2021-38297 git-lfs: golang: Command-line arguments may overwrite global data [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2118476 -------------------------------------------------------------------------------- ================================================================================ s3cmd-2.3.0-1.el7 (FEDORA-EPEL-2022-23290f4187) Tool for accessing Amazon Simple Storage Service -------------------------------------------------------------------------------- Update Information: New upstream release. -------------------------------------------------------------------------------- ChangeLog: * Tue Oct 4 2022 Frank Crawford <frank@xxxxxxxxxxxxxxxxxx> - 2.3.0-1 - New upstream release. * Sat Jul 23 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.2.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 13 2022 Python Maint <python-maint@xxxxxxxxxx> - 2.2.0-4 - Rebuilt for Python 3.11 * Sat Jan 22 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 2.2.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Wed Jan 19 2022 Frank Crawford <frank@xxxxxxxxxxxxxxxxxx> - 2.2.0-2 - Fix auto dependency regression for EPEL9 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2131799 - s3cmd-2.3.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2131799 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
