The following Fedora EPEL 7 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-88b6d1940a
apptainer-1.3.0-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-a08edbaebf
amavis-2.12.3-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-27eced8f48
tcpreplay-4.4.4-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
lutok-0.4-26.el7
lynis-3.1.1-1.el7
openelp-0.9.3-1.el7
w3m-0.5.3-63.git20230121.el7
Details about builds:
================================================================================
lutok-0.4-26.el7 (FEDORA-EPEL-2024-141e8b6351)
Lightweight C++ API library for Lua
--------------------------------------------------------------------------------
Update Information:
Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-26
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-25
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Mon May 15 2023 S��rgio Basto <sergio(a)serjux.com> - 0.4-23
- Rebuild for ATF soname bump
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Nov 2 2021 Frantisek Sumsal <frantisek(a)sumsal.cz> - 0.4-19
- Drop the default RPATH
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.4-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat May 2 2015 Kalev Lember <kalevlember(a)gmail.com> - 0.4-5
- Rebuilt for GCC 5 C++11 ABI change
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.4-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Tue Feb 11 2014 Julio Merino <julio(a)meroh.net> 0.4-2
- Depend on atf-0.20 for libatf-c++ ABI changes.
* Sat Dec 7 2013 Julio Merino <julio(a)meroh.net> 0.4-1
- Package updated to Lutok 0.4.
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Fri Jun 14 2013 Julio Merino <jmmv(a)google.com> 0.3-1
- Package updated to Lutok 0.3.
- Lutok now supports both Lua 5.1 and 5.2. The specific version used in this
release depends on the Fedora branch this package is built for.
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
0.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon Jun 18 2012 Julio Merino <jmmv(a)google.com> 0.2-2
- Added the lutok-tests package providing the run-time tests of Lutok, readily
runnable by the end users.
* Wed May 30 2012 Julio Merino <jmmv(a)google.com> 0.2-1
- Package updated to Lutok 0.2.
* Sun May 6 2012 Julio Merino <jmmv(a)google.com> 0.1-2
- Made lutok-devel depend on lua-devel (needed for c_gate.hpp).
- Forced lutok and lutok-devel to depend on Lua 5.1; 5.2 is not supported
by Lutok 0.1.
* Fri Feb 3 2012 Julio Merino <jmmv(a)google.com> 0.1-1
- Initial release for Fedora.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2268570 - lutok: please create epel{7,8,9} branches
https://bugzilla.redhat.com/show_bug.cgi?id=2268570
--------------------------------------------------------------------------------
================================================================================
lynis-3.1.1-1.el7 (FEDORA-EPEL-2024-d86d74c909)
Security and system auditing tool
--------------------------------------------------------------------------------
Update Information:
3.1.1, fix bash-completion issue.
3.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 3.1.1-1
- 3.1.1
* Tue Mar 12 2024 Gwyn Ciesla <gwync(a)protonmail.com> - 3.1.0-1
- 3.1.0
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.9-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.9-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Tue Dec 19 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.0.9-5
- Additional egrep patch
* Wed Dec 6 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.0.9-4
- pgrep patch
* Tue Sep 19 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.0.9-3
- Additional egrep patch
* Mon Aug 7 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 3.0.9-2
- Upstream patch to remove egrep usage
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2268997 - lynis-3.1.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2268997
[ 2 ] Bug #2270013 - File conflict with filesystem
https://bugzilla.redhat.com/show_bug.cgi?id=2270013
[ 3 ] Bug #2270108 - lynis-3.1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2270108
--------------------------------------------------------------------------------
================================================================================
openelp-0.9.3-1.el7 (FEDORA-EPEL-2024-7c6ca77db2)
Open Source EchoLink Proxy
--------------------------------------------------------------------------------
Update Information:
Update to OpenELP 0.9.3
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 17 2024 Scott K Logan <logans(a)cottsay.net> - 0.9.3-1
- Update to 0.9.3
--------------------------------------------------------------------------------
================================================================================
w3m-0.5.3-63.git20230121.el7 (FEDORA-EPEL-2024-5253d48b14)
Pager with Web browsing abilities
--------------------------------------------------------------------------------
Update Information:
Added upstream patch to fix out-of-bounds access due to multiple backspaces to
address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 18 2024 Robert Scheck <robert(a)fedoraproject.org> - 0.5.3-63.git20230121
- Added upstream patch to fix out-of-bounds access due to multiple backspaces
to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.5.3-62.git20230121
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> -
0.5.3-61.git20230121
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2222775 - CVE-2023-38252 w3m: Out of bounds read in Strnew_size() at
w3m/Str.c
https://bugzilla.redhat.com/show_bug.cgi?id=2222775
[ 2 ] Bug #2222779 - CVE-2023-38253 w3m: Out of bounds read in growbuf_to_Str() at
w3m/indep.c
https://bugzilla.redhat.com/show_bug.cgi?id=2222779
[ 3 ] Bug #2255207 - CVE-2023-4255 w3m: out-of-bounds write in function checkType() in
etc.c (incomplete fix for CVE-2022-38223)
https://bugzilla.redhat.com/show_bug.cgi?id=2255207
--------------------------------------------------------------------------------