The following Fedora EPEL 7 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-66c028a837
slurm-20.11.9-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-d7255ac6f5
ecdsautils-0.4.1-2.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-cf82fb137a
clamav-0.103.6-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-da4611426e
python3-lxml-4.2.5-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
golang-1.17.7-1.el7
python-catkin_pkg-0.5.0-1.el7
python-colcon-core-0.8.3-1.el7
Details about builds:
================================================================================
golang-1.17.7-1.el7 (FEDORA-EPEL-2022-f64d777807)
The Go Programming Language
--------------------------------------------------------------------------------
Update Information:
Update to 1.17.7, including fixes for CVE-2021-29923, CVE-2021-43565,
CVE-2022-23806, CVE-2022-23772, and CVE-2022-23773
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 10 2022 Dave Dykstra <[email protected]> - 1.17.7-1
- Update to 1.17.7, based on centos8-stream packaging except keeping
go-srpm-macros and the "--with ignore_tests" rpmbuild option
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1992006 - CVE-2021-29923 golang: net: incorrect parsing of
extraneous zero characters at the beginning of an IP address octet
https://bugzilla.redhat.com/show_bug.cgi?id=1992006
[ 2 ] Bug #2030787 - CVE-2021-43565 golang.org/x/crypto: empty plaintext
packet causes panic
https://bugzilla.redhat.com/show_bug.cgi?id=2030787
[ 3 ] Bug #2053429 - CVE-2022-23806 golang: crypto/elliptic IsOnCurve returns
true for invalid field elements
https://bugzilla.redhat.com/show_bug.cgi?id=2053429
[ 4 ] Bug #2053532 - CVE-2022-23772 golang: math/big: uncontrolled memory
consumption due to an unhandled overflow via Rat.SetString
https://bugzilla.redhat.com/show_bug.cgi?id=2053532
[ 5 ] Bug #2053541 - CVE-2022-23773 golang: cmd/go: misinterpretation of
branch names can lead to incorrect access control
https://bugzilla.redhat.com/show_bug.cgi?id=2053541
--------------------------------------------------------------------------------
================================================================================
python-catkin_pkg-0.5.0-1.el7 (FEDORA-EPEL-2022-c7a05df398)
Library for retrieving information about catkin packages
--------------------------------------------------------------------------------
Update Information:
Update to `catkin_pkg` 0.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 10 2022 Scott K Logan <[email protected]> - 0.5.0-1
- Update to 0.5.0 (rhbz#2083893)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2083893 - python-catkin_pkg-0.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2083893
--------------------------------------------------------------------------------
================================================================================
python-colcon-core-0.8.3-1.el7 (FEDORA-EPEL-2022-24781dbb10)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to `colcon-core` 0.8.3
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 7 2022 Scott K Logan <[email protected]> - 0.8.3-1
- Update to 0.8.3 (rhbz#2074923)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2074923 - python-colcon-core-0.8.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2074923
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
