The following Fedora EPEL 7 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a970a526cb
composer-1.10.26-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
GitPython-1.0.2-1.el7
cptutils-1.74-1.el7
stb-0-0.8.20211022gitaf1a5bc.el7
zchunk-1.2.2-1.el7
Details about builds:
================================================================================
GitPython-1.0.2-1.el7 (FEDORA-EPEL-2022-29dba5dac3)
Python Git Library
--------------------------------------------------------------------------------
Update Information:
Update to version 1.0.2
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 19 2022 Carl George <carl(a)george.computer> - 1.0.2-1
- Update to version 1.0.2 rhbz#1399536
- Add patch to fix 1.0.2 regression
https://github.com/gitpython-developers/GitPython/issues/383
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1399536 - RFE: Update GitPython in epel7
https://bugzilla.redhat.com/show_bug.cgi?id=1399536
--------------------------------------------------------------------------------
================================================================================
cptutils-1.74-1.el7 (FEDORA-EPEL-2022-79d0ad71c6)
Utilities to manipulate and translate color gradients
--------------------------------------------------------------------------------
Update Information:
Updated version to 1.74
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 19 2022 Sandipan Roy <bytehackr(a)fedoraproject.org> - 1:1.74
- Updated version to 1.74
* Sun Jan 2 2022 Sumit Garg <sumitgarg44(a)gmail.com> - 1.74-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
stb-0-0.8.20211022gitaf1a5bc.el7 (FEDORA-EPEL-2022-1e126c870e)
Single-file public domain libraries for C/C++
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-28041
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 20 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> -
0-0.8.20211022gitaf1a5bc
- Security fix for CVE-2022-28041
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2077019 - CVE-2022-28041 stb: integer overflow in
stbi__jpeg_decode_block_prog_dc() can lead to DoS
https://bugzilla.redhat.com/show_bug.cgi?id=2077019
--------------------------------------------------------------------------------
================================================================================
zchunk-1.2.2-1.el7 (FEDORA-EPEL-2022-e7404b9cd7)
Compressed file format that allows easy deltas
--------------------------------------------------------------------------------
Update Information:
Fix various small issues highlighted by Coverity
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 18 2022 Jonathan Dieter <jdieter(a)gmail.com> - 1.2.2-1
- Fixed a number of small issues highlighted by Coverity
--------------------------------------------------------------------------------