The following Fedora EPEL 7 Security updates need testing: Age URL 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-88b6d1940a apptainer-1.3.0-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-a08edbaebf amavis-2.12.3-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-27eced8f48 tcpreplay-4.4.4-5.el7 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-5253d48b14 w3m-0.5.3-63.git20230121.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing chromium-122.0.6261.128-1.el7 perl-Data-UUID-1.227-1.el7 Details about builds: ================================================================================ chromium-122.0.6261.128-1.el7 (FEDORA-EPEL-2024-6e2c9aa156) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: upstream security release 122.0.6261.128 High CVE-2024-2400: Use after free in Performance Manager -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 13 2024 Than Ngo <than@xxxxxxxxxx> - 122.0.6261.128-1 - upstream security release 122.0.6261.128 * High CVE-2024-2400: Use after free in Performance Manager * Mon Mar 11 2024 Than Ngo <than@xxxxxxxxxx> - 122.0.6261.111-2 - enable ppc64le build -------------------------------------------------------------------------------- References: [ 1 ] Bug #2269307 - CVE-2024-2400 chromium: chromium-browser: Use after free in Performance Manager [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2269307 -------------------------------------------------------------------------------- ================================================================================ perl-Data-UUID-1.227-1.el7 (FEDORA-EPEL-2024-1c85d457ef) Globally/Universally Unique Identifiers (GUIDs/UUIDs) -------------------------------------------------------------------------------- Update Information: This update fixes CVE-2013-4184 (possible symlink attack due to use of predictable temporary file names). The module no longer saves state in temporary files at all. -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 19 2024 Paul Howarth <paul@xxxxxxxxxxxx> - 1.227-1 - Update to 1.227 - New maintainer, GTERMARS - Add basic GitHub Actions setup for testing - Typo corrections in POD - Eliminated use of state/node files in temp directory (CVE-2013-4184) * Thu Jan 25 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Tue Aug 29 2023 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.226-14 - Update license to SPDX format * Thu Jul 20 2023 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 11 2023 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.226-12 - Perl 5.38 rebuild * Fri Jan 20 2023 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue May 31 2022 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.226-9 - Perl 5.36 rebuild * Fri Jan 21 2022 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Dec 16 2021 Paul Howarth <paul@xxxxxxxxxxxx> - 1.226-7 - BR: perl(blib) for smp-test/collision.t * Thu Jul 22 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri May 21 2021 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.226-5 - Perl 5.34 rebuild * Wed Jan 27 2021 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.226-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jun 23 2020 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.226-2 - Perl 5.32 rebuild * Sun Apr 12 2020 Paul Howarth <paul@xxxxxxxxxxxx> - 1.226-1 - Update to 1.226 - Set umask before fopen in destructor (GH#35) * Wed Jan 29 2020 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.224-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jul 26 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.224-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri May 31 2019 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.224-2 - Perl 5.30 rebuild * Sun Mar 3 2019 Paul Howarth <paul@xxxxxxxxxxxx> - 1.224-1 - Update to 1.224 - Properly quote C strings passed in DEFINE - Fix memory leak by decreasing reference count - Use File::Spec to get tmpdir instead of hardcoding * Fri Feb 1 2019 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.221-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.221-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Jun 28 2018 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.221-11 - Perl 5.28 rebuild * Thu Feb 8 2018 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.221-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Aug 3 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.221-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Thu Jul 27 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.221-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Sun Jun 4 2017 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.221-7 - Perl 5.26 rebuild * Fri Apr 21 2017 Petr Hracek <phracek@xxxxxxxxxx> - 1.221-6 - Don't include perl(Test::Pod) during modular build * Sat Feb 11 2017 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.221-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Sun May 15 2016 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.221-4 - Perl 5.24 rebuild * Thu Apr 21 2016 Paul Howarth <paul@xxxxxxxxxxxx> - 1.221-3 - Fix FTBFS due to missing buildreq perl-devel - Simplify find commands using -empty and -delete * Thu Feb 4 2016 Fedora Release Engineering <releng@xxxxxxxxxxxxxxxxx> - 1.221-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Tue Aug 11 2015 Paul Howarth <paul@xxxxxxxxxxxx> - 1.221-1 - Update to 1.221 - Documentation improvements * Thu Jun 18 2015 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.220-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri Jun 5 2015 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.220-2 - Perl 5.22 rebuild * Thu Dec 18 2014 Paul Howarth <paul@xxxxxxxxxxxx> - 1.220-1 - Update to 1.220 - Improve chances it'll work on Android - Classify buildreqs by usage - Use %license * Wed Aug 27 2014 Jitka Plesnikova <jplesnik@xxxxxxxxxx> - 1.219-6 - Perl 5.20 rebuild * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.219-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxxxxxxxx> - 1.219-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -------------------------------------------------------------------------------- -- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue