The following Fedora EPEL 7 Security updates need testing: Age URL 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-64b282dfaf sympa-6.2.72-2.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing apptainer-1.1.9-1.el7 guacamole-server-1.5.2-2.el7 perl-HTML-StripScripts-1.06-22.el7 Details about builds: ================================================================================ apptainer-1.1.9-1.el7 (FEDORA-EPEL-2023-7056de8f84) Application and environment virtualization formerly known as Singularity -------------------------------------------------------------------------------- Update Information: Update to upstream-1.1.9 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 7 2023 Dave Dykstra <dwd@xxxxxxxx> - 1.1.9-1 - Update to upstream 1.1.9. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2213313 - apptainer-1.1.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2213313 -------------------------------------------------------------------------------- ================================================================================ guacamole-server-1.5.2-2.el7 (FEDORA-EPEL-2023-571f68eed0) Server-side native components that form the Guacamole proxy -------------------------------------------------------------------------------- Update Information: - Added upstream patch to fix RDP related segfault ([GUACAMOLE- 1802](https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-1802)) -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 7 2023 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> - 1:1.5.2-2 - Added upstream patch to fix RDP related segfault (GUACAMOLE-1802) -------------------------------------------------------------------------------- ================================================================================ perl-HTML-StripScripts-1.06-22.el7 (FEDORA-EPEL-2023-becb7041de) Strip scripting constructs out of HTML -------------------------------------------------------------------------------- Update Information: Fixes CVE-2023-24038 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 7 2023 Xavier Bachelot <xavier@xxxxxxxxxxxx> 1.06-22 - Add patch for CVE-2023-24038 - Convert License: to SPDX * Fri Jan 20 2023 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue May 31 2022 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.06-19 - Perl 5.36 rebuild * Fri Jan 21 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri May 21 2021 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.06-16 - Perl 5.34 rebuild * Wed Jan 27 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jun 23 2020 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.06-13 - Perl 5.32 rebuild * Thu Jan 30 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jul 26 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri May 31 2019 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.06-10 - Perl 5.30 rebuild * Fri Feb 1 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Jun 28 2018 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.06-7 - Perl 5.28 rebuild * Thu Feb 8 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sun Jun 4 2017 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.06-4 - Perl 5.26 rebuild * Sat Feb 11 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.06-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Sun May 15 2016 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.06-2 - Perl 5.24 rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2164149 - CVE-2023-24038 perl-HTML-StripScripts: Handler for style attribute is vulnerable to ReDoS [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2164149 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue