The following Fedora EPEL 7 Security updates need testing:
Age URL
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-66548f784b
openssl11-1.1.1k-5.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fedpkg-1.44-1.el7
gssntlmssp-1.2.0-1.el7
rpkg-1.66-2.el7
singularity-ce-3.11.0-1.el7
Details about builds:
================================================================================
fedpkg-1.44-1.el7 (FEDORA-EPEL-2023-4b6252389d)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
A new release presents these changes: *
https://docs.pagure.org/fedpkg/releases/1.44.html *
https://docs.pagure.org/rpkg/releases/1.66.html
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 20 2023 Ond��ej Nosek <onosek(a)redhat.com> - 1.44-1
- Do not execute unittests for old bodhi-client (onosek)
- New command `disable-monitoring` (onosek)
- Set default_branch_merge to 'rawhide' (otto.liljalaakso)
- `fedpkg update`: can handle $EDITOR with arguments - #492 (onosek)
- Add Jenkinsfile for CI (onosek)
* Mon Jan 30 2023 Miro Hron��ok <mhroncok(a)redhat.com> - 1.43-3
- Rebuilt to change Python shebangs to /usr/bin/python3.6 on EPEL 8
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.43-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gssntlmssp-1.2.0-1.el7 (FEDORA-EPEL-2023-acd256a168)
GSSAPI NTLMSSP Mechanism
--------------------------------------------------------------------------------
Update Information:
Patches several CVEs reported by GitHub Security Lab CVE-2023-25563
CVE-2023-25564 CVE-2023-25565 CVE-2023-25566 CVE-2023-25567
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 21 2023 Simo Sorce <simo(a)samba.org> - 1.2.0-1
- Security release 1.2.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2172024 - CVE-2023-25563 gssntlmssp: multiple out-of-bounds read when
decoding NTLM fields [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2172024
[ 2 ] Bug #2172025 - CVE-2023-25564 gssntlmssp: memory corruption when decoding UTF16
strings [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2172025
[ 3 ] Bug #2172026 - CVE-2023-25565 gssntlmssp: incorrect free when decoding target
information [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2172026
[ 4 ] Bug #2172027 - CVE-2023-25566 gssntlmssp: memory leak when parsing usernames
[epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2172027
[ 5 ] Bug #2172028 - CVE-2023-25567 gssntlmssp: out-of-bounds read when decoding target
information [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2172028
--------------------------------------------------------------------------------
================================================================================
rpkg-1.66-2.el7 (FEDORA-EPEL-2023-4b6252389d)
Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:
A new release presents these changes: *
https://docs.pagure.org/fedpkg/releases/1.44.html *
https://docs.pagure.org/rpkg/releases/1.66.html
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 21 2023 Ond��ej Nosek <onosek(a)redhat.com> - 1.66-2
- rebuild for unification of all branches
* Mon Feb 20 2023 Ond��ej Nosek <onosek(a)redhat.com> - 1.66-1
- container-build: document --compose-ids overrides any new composes (kdreyer)
- Use srpm when scratch-building from dirty repo - #652 (otto.liljalaakso)
- Code cleanup in tests/test_cli.py (otto.liljalaakso)
- Reduce indentation in assert_build helper (otto.liljalaakso)
- Allow empty commits - 494 (msuchy)
- Allow forcing download of all sources - #650 (otto.liljalaakso)
- Add test case for not downloading unused sources (otto.liljalaakso)
- Support 'results_dir=subdir' when building from srpm - #648
(otto.liljalaakso)
- Use local branch name as release when there is no remote (otto.liljalaakso)
- Allow downstreams to define a default release (otto.liljalaakso)
- Switch load_branch_merge to use multiple return (otto.liljalaakso)
- Unittests for 'git push' hook script (onosek)
- Checking a repo configuration before 'git push' with a git hook script - 491
(onosek)
- Fix skipping NVR check with autorelease (nils)
- pyrpkg.spec.SpecFile: More lenient parser for Source/Patch lines (fweimer)
- Fix URL in CHANGELOG.rst (tmz)
- Add Jenkinsfile for CI (onosek)
- mockbuild: escape rpm command under mock - rhbz#2130349 (onosek)
- Fixes for exploded SRPM layouts - #633 (tdawson)
- `fedpkg local` does not show rpmbuild output - rhbz#2124809 (onosek)
--------------------------------------------------------------------------------
================================================================================
singularity-ce-3.11.0-1.el7 (FEDORA-EPEL-2023-d6affefa87)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to 3.11.0 upstream version. This is a compatible upgrade to a new
upstream minor version.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Feb 21 2023 David Trudgian <dtrudg(a)sylabs.io> - 3.11.0-1
- Upgrade to 3.11.0 upstream version.
- This is a compatible upgrade to a new upstream minor version.
--------------------------------------------------------------------------------