The following Fedora EPEL 7 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-88b6d1940a
apptainer-1.3.0-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-a08edbaebf
amavis-2.12.3-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-27eced8f48
tcpreplay-4.4.4-5.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-5253d48b14
w3m-0.5.3-63.git20230121.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
chromium-122.0.6261.128-1.el7
perl-Data-UUID-1.227-1.el7
Details about builds:
================================================================================
chromium-122.0.6261.128-1.el7 (FEDORA-EPEL-2024-6e2c9aa156)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
upstream security release 122.0.6261.128
High CVE-2024-2400: Use after free in Performance Manager
--------------------------------------------------------------------------------
ChangeLog:
* Wed Mar 13 2024 Than Ngo <than(a)redhat.com> - 122.0.6261.128-1
- upstream security release 122.0.6261.128
* High CVE-2024-2400: Use after free in Performance Manager
* Mon Mar 11 2024 Than Ngo <than(a)redhat.com> - 122.0.6261.111-2
- enable ppc64le build
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2269307 - CVE-2024-2400 chromium: chromium-browser: Use after free in
Performance Manager [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2269307
--------------------------------------------------------------------------------
================================================================================
perl-Data-UUID-1.227-1.el7 (FEDORA-EPEL-2024-1c85d457ef)
Globally/Universally Unique Identifiers (GUIDs/UUIDs)
--------------------------------------------------------------------------------
Update Information:
This update fixes CVE-2013-4184 (possible symlink attack due to use of
predictable temporary file names). The module no longer saves state in temporary
files at all.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 19 2024 Paul Howarth <paul(a)city-fan.org> - 1.227-1
- Update to 1.227
- New maintainer, GTERMARS
- Add basic GitHub Actions setup for testing
- Typo corrections in POD
- Eliminated use of state/node files in temp directory (CVE-2013-4184)
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Tue Aug 29 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.226-14
- Update license to SPDX format
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jul 11 2023 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.226-12
- Perl 5.38 rebuild
* Fri Jan 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Tue May 31 2022 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.226-9
- Perl 5.36 rebuild
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Dec 16 2021 Paul Howarth <paul(a)city-fan.org> - 1.226-7
- BR: perl(blib) for smp-test/collision.t
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri May 21 2021 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.226-5
- Perl 5.34 rebuild
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.226-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jun 23 2020 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.226-2
- Perl 5.32 rebuild
* Sun Apr 12 2020 Paul Howarth <paul(a)city-fan.org> - 1.226-1
- Update to 1.226
- Set umask before fopen in destructor (GH#35)
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.224-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Fri Jul 26 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.224-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 31 2019 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.224-2
- Perl 5.30 rebuild
* Sun Mar 3 2019 Paul Howarth <paul(a)city-fan.org> - 1.224-1
- Update to 1.224
- Properly quote C strings passed in DEFINE
- Fix memory leak by decreasing reference count
- Use File::Spec to get tmpdir instead of hardcoding
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.221-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.221-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.221-11
- Perl 5.28 rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.221-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.221-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.221-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sun Jun 4 2017 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.221-7
- Perl 5.26 rebuild
* Fri Apr 21 2017 Petr Hracek <phracek(a)redhat.com> - 1.221-6
- Don't include perl(Test::Pod) during modular build
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.221-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Sun May 15 2016 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.221-4
- Perl 5.24 rebuild
* Thu Apr 21 2016 Paul Howarth <paul(a)city-fan.org> - 1.221-3
- Fix FTBFS due to missing buildreq perl-devel
- Simplify find commands using -empty and -delete
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.221-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Tue Aug 11 2015 Paul Howarth <paul(a)city-fan.org> - 1.221-1
- Update to 1.221
- Documentation improvements
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.220-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Fri Jun 5 2015 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.220-2
- Perl 5.22 rebuild
* Thu Dec 18 2014 Paul Howarth <paul(a)city-fan.org> - 1.220-1
- Update to 1.220
- Improve chances it'll work on Android
- Classify buildreqs by usage
- Use %license
* Wed Aug 27 2014 Jitka Plesnikova <jplesnik(a)redhat.com> - 1.219-6
- Perl 5.20 rebuild
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.219-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.219-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
--------------------------------------------------------------------------------