The following Fedora EPEL 7 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-15cde9f00b
chromium-123.0.6312.58-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-07e8f5f1f0
libopenmpt-0.7.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
clojure-1.8.0-3.el7
davix-0.8.6-1.el7
knot-resolver-5.7.2-1.el7
trafficserver-9.2.4-1.el7
Details about builds:
================================================================================
clojure-1.8.0-3.el7 (FEDORA-EPEL-2024-d9102d9191)
A dynamic programming language that targets the Java Virtual Machine
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2024-22871
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2024 Markku Korkeala <Markku Korkeala iki fi> - 1:1.8.0-3
- Backport patch for clj-2839 to mitigate CVE-2024-22871.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2266785 - CVE-2024-22871 clojure: denial of service (DoS) via the
clojure.core$partial$fn__5920 function.
https://bugzilla.redhat.com/show_bug.cgi?id=2266785
--------------------------------------------------------------------------------
================================================================================
davix-0.8.6-1.el7 (FEDORA-EPEL-2024-899dd51114)
Toolkit for http based file management
--------------------------------------------------------------------------------
Update Information:
New upstream release 0.8.6
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2024 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 0.8.6-1
- New upstream release 0.8.6
* Wed Jan 24 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.8.5-5
- Rebuild for gsoap 2.8.132 (Fedora 40)
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.8.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Nov 15 2023 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 0.8.5-3
- Rebuild for gtest 1.14.0 (bugzilla #2228663)
* Tue Oct 31 2023 Terje Rosten <terje.rosten(a)ntnu.no> - 0.8.5-2
- Rebuild for gtest 1.14.0 (bugzilla #2228663)
--------------------------------------------------------------------------------
================================================================================
knot-resolver-5.7.2-1.el7 (FEDORA-EPEL-2024-e6deeafdff)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
Knot Resolver 5.7.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2024 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.7.2-1
- New upstream version 5.7.2
--------------------------------------------------------------------------------
================================================================================
trafficserver-9.2.4-1.el7 (FEDORA-EPEL-2024-1f6e851537)
Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server
--------------------------------------------------------------------------------
Update Information:
Update to upstream 9.2.4, resolves CVE-2024-31309 (CONTINUATION frames DoS)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 3 2024 Jered Floyd <jered(a)redhat.com> 9.2.4-1
- Update to upstream 9.2.4
- Resolves CVE-2024-31309
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.2.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2269627 - CVE-2024-31309 trafficserver: CONTINUATION frames DoS
https://bugzilla.redhat.com/show_bug.cgi?id=2269627
--------------------------------------------------------------------------------