The following Fedora EPEL 7 Security updates need testing: Age URL 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-76532a12e5 libopenmpt-0.6.11-1.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

R-Rcpp-1.0.11-3.el7 apptainer-1.2.1-1.el7 caddy-1.0.5-1.el7 s3fs-fuse-1.93-1.el7

Details about builds:

================================================================================ R-Rcpp-1.0.11-3.el7 (FEDORA-EPEL-2023-28847a6480) Seamless R and C++ Integration -------------------------------------------------------------------------------- Update Information:

Fix build requires ---- Update to 1.0.11, switch to SPDX -------------------------------------------------------------------------------- ChangeLog:

* Sun Jul 23 2023 Mattias Ellert mattias.ellert@physics.uu.se - 1.0.11-3 - Fix build requires * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.0.11-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 18 2023 I��aki ��car iucar@fedoraproject.org - 1.0.11-1 - Update to 1.0.11, switch to SPDX * Fri Apr 21 2023 I��aki ��car iucar@fedoraproject.org - 1.0.10-2 - R-maint-sig mass rebuild --------------------------------------------------------------------------------

================================================================================ apptainer-1.2.1-1.el7 (FEDORA-EPEL-2023-7fdb39245c) Application and environment virtualization formerly known as Singularity -------------------------------------------------------------------------------- Update Information:

Update to upstream 1.2.1. Fix for CVE-2023-38496. ---- Update to upstream 1.2.0 ---- Update to upstream 1.2.0-rc.2 ---- Update to upstream 1.2.0-rc.1 -------------------------------------------------------------------------------- ChangeLog:

* Mon Jul 24 2023 Dave Dykstra dwd@fnal.gov - 1.2.1 - Update to upstream 1.2.1 * Wed Jul 19 2023 Dave Dykstra dwd@fnal.gov - 1.2.0 - Update to upstream 1.2.0 * Thu Jul 6 2023 Dave Dykstra dwd@fnal.gov - 1.2.0~rc.1-2 - Update to upstream 1.2.0-rc.2 * Thu Jun 8 2023 Dave Dykstra dwd@fnal.gov - 1.2.0~rc.1-1 - Update to upstream 1.2.0-rc.1 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2224098 - apptainer-1.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2224098 --------------------------------------------------------------------------------

================================================================================ caddy-1.0.5-1.el7 (FEDORA-EPEL-2023-284c34a6cc) Web server with automatic HTTPS -------------------------------------------------------------------------------- Update Information:

This updates takes the package from version 1.0.3 to 1.0.5, the most recent version in the v1 branch. It provides fixes for two CVEs: - CVE-2022-3064, resolved by updating the bundled gopkg.in/yaml.v2 to 2.2.4 - CVE-2022-41717, resolved by building with golang 1.19.10 -------------------------------------------------------------------------------- ChangeLog:

* Tue Jul 25 2023 Carl George carl@george.computer - 1.0.5-1 - Update to version 1.0.5 - Update bundled gopkg.in/yaml.v2 to 2.2.4 to fix CVE-2022-3064, resolves rhbz#2163539 - Rebuild with golang 1.19.10 to fix CVE-2022-41717, resolves rhbz#2163603 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #2163539 - CVE-2022-3064 caddy: go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2163539 [ 2 ] Bug #2163603 - CVE-2022-41717 caddy: golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2163603 --------------------------------------------------------------------------------

================================================================================ s3fs-fuse-1.93-1.el7 (FEDORA-EPEL-2023-cd6d182415) FUSE-based file system backed by Amazon S3 -------------------------------------------------------------------------------- Update Information:

- Update to 1.93 from https://github.com/s3fs-fuse/s3fs-fuse (#2209081) -------------------------------------------------------------------------------- ChangeLog:

* Tue Jul 25 2023 Julio Gonz��lez Gil packages@juliogonzalez.es - 1.93-1 - Update to 1.93 from https://github.com/s3fs-fuse/s3fs-fuse (#2209081) * Sat Jul 22 2023 Fedora Release Engineering releng@fedoraproject.org - 1.92-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild --------------------------------------------------------------------------------