The following Fedora EPEL 7 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-473e5052db
ckeditor-4.20.0-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-576e858e93
php-Smarty-3.1.47-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-22e6871166
drupal7-7.92-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-42745d5b54
wordpress-5.1.15-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
jhead-3.06.0.1-5.el7
Details about builds:
================================================================================
jhead-3.06.0.1-5.el7 (FEDORA-EPEL-2022-204b242845)
Tool for displaying EXIF data embedded in JPEG images
--------------------------------------------------------------------------------
Update Information:
added patches to fix CVE-2022-41751
--------------------------------------------------------------------------------
ChangeLog:
* Tue Oct 18 2022 Adrian Reber <adrian(a)lisas.de> - 3.06.0.1-5
- added patches to fix CVE-2022-41751
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.06.0.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.06.0.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.06.0.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Wed Apr 14 2021 Adrian Reber <adrian(a)lisas.de> - 3.06.0.1-1
- updated to 3.06.0.1
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.04-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.04-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.04-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2135593 - CVE-2022-41751 jhead: arbitrary OS commands by placing them in a
JPEG filename [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2135593
--------------------------------------------------------------------------------