--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-c57a51c195
2022-12-25 01:00:50.387151
--------------------------------------------------------------------------------
Name : rxvt-unicode
Product : Fedora EPEL 7
Version : 9.30
Release : 2.el7
URL :
http://software.schmorp.de/
Summary : Terminfo files for Unicode version of rxvt
Description :
rxvt-unicode is a clone of the well known terminal emulator rxvt, modified to
store text in Unicode (either UCS-2 or UCS-4) and to use locale-correct input
and output. It also supports mixing multiple fonts at the same time, including
Xft fonts.
--------------------------------------------------------------------------------
Update Information:
- Update to 9.30 - Strip package back to just be the -terminfo file. - This is
due to CVE-2022-4170: unaffected versions of rxvt-unicode (that is, libptytty)
don't build on epel7.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 16 2022 Robbie Harwood <rharwood(a)redhat.com> - 9.30-2
- Bump spec due to bodhi failures
* Fri Dec 16 2022 Robbie Harwood <rharwood(a)redhat.com> - 9.30-1
- Drop package to be just terminfo file
- Newer versions of libptytty don't build on epel7, and on epel I only care
about the terminfo file anyway. If you wish for this to be packaged fully
again, we either need 9.30 + libptytty patched to build, or a fix for
CVE-2022-4170.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2151598 - CVE-2022-4170 rxvt-unicode: remote code execution via background
OSC [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2151598
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rxvt-unicode' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------