The following Fedora EPEL 7 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-2ff4055b33 php-Smarty-3.1.48-2.el7
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-46203ab7be chromium-120.0.6099.129-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
partclone-0.3.27-2.el7
Details about builds:
================================================================================
partclone-0.3.27-2.el7 (FEDORA-EPEL-2023-82cc70300e)
Utility to clone and restore a partition
--------------------------------------------------------------------------------
Update Information:
- Build `fail-mbr.bin` on all architectures (using cross-compile)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 25 2023 Robert Scheck <robert(a)fedoraproject.org> 0.3.27-2
- Build fail-mbr.bin on all architectures (using cross-compile)
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1bdb2efa01 tor-0.4.8.10-1.el8
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4138b387a7 php-adodb-5.22.7-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f6a8bbe365 xerces-c-3.2.5-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f6ff23a804 chromium-120.0.6099.129-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
paho-c-1.3.13-2.el8
Details about builds:
================================================================================
paho-c-1.3.13-2.el8 (FEDORA-EPEL-2023-83c9a0ceb8)
MQTT C Client
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 24 2023 topazus <topazus(a)outlook.com> - 1.3.13-2
- fix file format style
* Tue Dec 5 2023 topazus <topazus(a)outlook.com> - 1.3.13-1
- update to 1.3.13
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.9-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.9-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.9-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.9-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 1.3.9-3
- Rebuilt with OpenSSL 3.0.0
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.9-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Sat May 29 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.3.9-1
- Update to 1.3.9
- Move the man pages to the correct directory
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.4-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Aug 4 2020 Peter Robinson <pbrobinson(a)fedoraproject.org> - 1.3.4-1
- Update to 1.3.4
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.2-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Apr 30 2020 Peter Robinson <pbrobinson(a)fedoraproject.org> - 1.3.2-1
- Update to 1.3.2
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.3.0-1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sat Oct 13 2018 Otavio R. Piske <opiske(a)redhat.com> - 1.3.0-0
- Upgrades paho to version 1.3.0 which supports MQTT 5
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue May 1 2018 Otavio R. Piske <opiske(a)redhat.com> - 1.2.1-3
- Adjust the location of the abignore file in a location that can be useful for the users
* Mon Apr 30 2018 Otavio R. Piske <opiske(a)redhat.com> - 1.2.1-2
- Adds ABI check suppression in the package
* Mon Apr 30 2018 Otavio R. Piske <opiske(a)redhat.com> - 1.2.1-1
- Ignores ABI changes due to unused symbols being removed
* Sat Apr 28 2018 Otavio R. Piske <opiske(a)redhat.com> - 1.2.1-0
- Updates paho-c package to the latest upstream version 1.2.1
- Adjust the location of the documentation within the documentation dir
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.2.0-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Oct 19 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-10
- Renames the devel-doc package as suggested by reviewer
* Thu Oct 19 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-9
- Reduce description size to less than 80 characters
- Install the Paho client/servers tools in the binary package
- Install the binary examples in the development package only
* Sat Aug 12 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-8
- Added missing ldconfig on the postun section
* Sat Aug 12 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-7
- Replaced build and install commands with respective macros
- Added license to the devel docs packages
- Removed explicit require on OpenSSL
- Move the shared library symlinks to the devel package
* Mon Jul 31 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-6
- Fixed short description of the project license
* Sun Jul 30 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-5
- Renamed the documentation package to -doc
* Sun Jul 30 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-4
- Removed Group tag as required by packaging guidelines
- Prevent the devel package from being used with incompatible versions
- Replaced the doc tag with the license tag
* Thu Jul 27 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-4
- Enabled generation of debuginfo package
* Thu Jul 27 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-3
- Fixed changelog issues pointed by rpmlint
* Thu Jul 27 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-2
- Updated changelog to comply with Fedora packaging guidelines
* Wed Jul 26 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0-1
- Fixed rpmlint warnings: replaced cmake call with builtin macro
- Fixed rpmlint warnings: removed buildroot reference from build section
* Fri Jun 30 2017 Otavio R. Piske <opiske(a)redhat.com> - 1.2.0
- Updated package to version 1.2.0
* Sat Dec 31 2016 Otavio R. Piske <opiske(a)redhat.com> - 1.1.0
- Initial packaging
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2108036 - Please release it for EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=2108036
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4cbae7b5bd unrealircd-6.1.4-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1bdb2efa01 tor-0.4.8.10-1.el8
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4138b387a7 php-adodb-5.22.7-1.el8
0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-f6a8bbe365 xerces-c-3.2.5-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
chromium-120.0.6099.129-1.el8
Details about builds:
================================================================================
chromium-120.0.6099.129-1.el8 (FEDORA-EPEL-2023-f6ff23a804)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 120.0.6099.129 - High CVE-2023-7024: Heap buffer overflow in WebRTC
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.129-1
- update to 120.0.6099.129
* High CVE-2023-7024: Heap buffer overflow in WebRTC
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-33f7b7a10c unrealircd-6.1.4-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-2ff4055b33 php-Smarty-3.1.48-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
chromium-120.0.6099.129-1.el7
Details about builds:
================================================================================
chromium-120.0.6099.129-1.el7 (FEDORA-EPEL-2023-46203ab7be)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 120.0.6099.129 - High CVE-2023-7024: Heap buffer overflow in WebRTC
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 21 2023 Than Ngo <than(a)redhat.com> - 120.0.6099.129-1
- update to 120.0.6099.129
* High CVE-2023-7024: Heap buffer overflow in WebRTC
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-33f7b7a10c unrealircd-6.1.4-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-2ff4055b33 php-Smarty-3.1.48-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
fedora-license-data-1.37-1.el7
lasso-epel-2.5.1-8.el7
lemonldap-ng-2.18.1-1.el7
rpki-client-8.7-1.el7
Details about builds:
================================================================================
fedora-license-data-1.37-1.el7 (FEDORA-EPEL-2023-e3d488eb05)
Fedora Linux license data
--------------------------------------------------------------------------------
Update Information:
Automatic update for fedora-license-data-1.37-1.el7. ##### **Changelog for
fedora-license-data** ``` * Fri Dec 22 2023 Miroslav Such�� <msuchy(a)redhat.com>
1.37-1 - add license HPND-Kevlin-Henney - add license FSFAP-no-warranty-
disclaimer - add not allowed license LicenseRef-Nikto - add LicenseRef-Fedora-
Firmware * Thu Dec 07 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.36-1 - new
license: TCP-wrappers - new license: LicenseRef-Not-Copyrightable - new license:
SAX-PD-2.0 - new license: radvd ```
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.37-1
- add license HPND-Kevlin-Henney
- add license FSFAP-no-warranty-disclaimer
- add not allowed license LicenseRef-Nikto
- add LicenseRef-Fedora-Firmware
* Thu Dec 7 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.36-1
- new license: TCP-wrappers
- new license: LicenseRef-Not-Copyrightable
- new license: SAX-PD-2.0
- new license: radvd
--------------------------------------------------------------------------------
================================================================================
lasso-epel-2.5.1-8.el7 (FEDORA-EPEL-2023-2b32c6f920)
Liberty Alliance Single Sign On
--------------------------------------------------------------------------------
Update Information:
Initial lasso-epel package to ship missing perl-lasso subpackage.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Xavier Bachelot <xavier(a)bachelot.org> - 2.5.1-8
- Convert to lasso-epel package to ship missing perl-lasso subpackage rhbz#2251952
* Wed Jun 2 2021 Jakub Hrozek <jhrozek(a)redhat.com> - 2.5.1-8
- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
* Wed Jun 2 2021 Jakub Hrozek <jhrozek(a)redhat.com> - 2.5.1-7
- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
* Wed Jun 2 2021 Jakub Hrozek <jhrozek(a)redhat.com> - 2.5.1-6
- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
* Tue Aug 6 2019 Jakub Hrozek <jhrozek(a)redhat.com> - 2.5.1-5
- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errors
* Tue Jul 23 2019 Jakub Hrozek <jhrozek(a)redhat.com> - 2.5.1-4
- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
AuthnRequest populated with SP
AssertionConsumerServiceURL when ECP workflow
is used which leads to IdP-side errors
* Sun Feb 10 2019 Jakub Hrozek <jhrozek(a)redhat.com> - 2.5.1-3
- Resolves: #1634267 - ECP signature check fails with
LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
instead of response
* Fri Jun 17 2016 John Dennis <jdennis(a)redhat.com> - 2.5.1-2
- Rebase to upstream 2.5.1
Resolves: #1310860
- add validate_idp_list_test patch
* Thu Jun 9 2016 John Dennis <jdennis(a)redhat.com> - 2.5.1-1
- Rebase to upstream 2.5.1
Resolves: #1310860
* Thu Sep 3 2015 John Dennis <jdennis(a)redhat.com> - 2.5.0-1
- Rebase to upstream, now includes our ECP patches, no need to patch any more
Resolves: #1205342
* Tue Sep 1 2015 John Dennis <jdennis(a)redhat.com> - 2.4.1-8
- Add explicit minimum dependency on glib2 2.42,
for some reason RPM is not automatically detecting the dependency
Resolves: #1254989
* Wed Aug 19 2015 John Dennis <jdennis(a)redhat.com> - 2.4.1-7
- Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
Resolves: #1205342
* Mon Jun 22 2015 John Dennis <jdennis(a)redhat.com> - 2.4.1-6
- Add ECP support, brings Lasso up to current upstream tip + ECP patches
Resolves: #1205342
* Fri Dec 5 2014 Simo Sorce <simo(a)redhat.com> - 2.4.1-5
- Add support for ADFS interoperability
- Resolves: #1160803
* Thu Sep 11 2014 Simo Sorce <simo(a)redhat.com> - 2.4.1-4
- Add missing covscan related patches previously sent upstream
- Related: #1120360
* Thu Sep 11 2014 Simo Sorce <simo(a)redhat.com> - 2.4.1-3
- ppc4le fails to build without autoreconf being run first
- Resolves: #1140419
* Fri Sep 5 2014 Simo Sorce <simo(a)redhat.com> - 2.4.1-2
- Import packge in RHEL7
- Resolves: #1120360
* Thu Aug 28 2014 Simo Sorce <simo(a)redhat.com> - 2.4.1-1
- New upstream relase 2.4.1
- Drop patches as they have all been integrated upstream
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.4.0-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Fri Jun 20 2014 Remi Collet <rcollet(a)redhat.com> - 2.4.0-4
- rebuild for https://fedoraproject.org/wiki/Changes/Php56
- add numerical prefix to extension configuration file
- drop unneeded dependency on pecl
- add provides php-lasso
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.4.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Apr 25 2014 Simo Sorce <simo(a)redhat.com> - 2.4.0-2
- Fixes for arches where pointers and integers do not have the same size
(ppc64, s390, etc..)
* Mon Apr 14 2014 Stanislav Ochotnicky <sochotnicky(a)redhat.com> - 2.4.0-1
- Use OpenJDK instead of GCJ for java bindings
* Sat Jan 11 2014 Simo Sorce <simo(a)redhat.com> 2.4.0-0
- Update to final 2.4.0 version
- Drop all patches, they are now included in 2.4.0
- Change Source URI
* Mon Dec 9 2013 Simo Sorce <simo(a)redhat.com> 2.3.6-0.20131125.5
- Add patches to fix rpmlint license issues
- Add upstream patches to fix some build issues
* Thu Dec 5 2013 Simo Sorce <simo(a)redhat.com> 2.3.6-0.20131125.4
- Add patch to support automake-1.14 for rawhide
* Mon Nov 25 2013 Simo Sorce <simo(a)redhat.com> 2.3.6-0.20131125.3
- Initial packaging
- Based on the spec file by Jean-Marc Liger <jmliger(a)siris.sorbonne.fr>
- Code is updated to latest master via a jumbo patch while waiting for
official upstream release.
- Jumbo patch includes also additional patches sent to upstream list)
to build on Fedora 20
- Perl bindings are disabled as they fail to build
- Disable doc building as it doesn't ork correctly for now
--------------------------------------------------------------------------------
================================================================================
lemonldap-ng-2.18.1-1.el7 (FEDORA-EPEL-2023-76190ad247)
Web Single Sign On (SSO) and Access Management
--------------------------------------------------------------------------------
Update Information:
Upstream changelog: - https://gitlab.ow2.org/lemonldap-ng/lemonldap-
ng/-/releases/v2.18.1 - https://gitlab.ow2.org/lemonldap-ng/lemonldap-
ng/-/releases/v2.18.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Clement Oudot <clem.oudot(a)gmail.com> - 2.18.1-1
- Update to 2.18.1
* Wed Dec 20 2023 Clement Oudot <clem.oudot(a)gmail.com> - 2.18.0-1
- Update to 2.18.0
--------------------------------------------------------------------------------
================================================================================
rpki-client-8.7-1.el7 (FEDORA-EPEL-2023-cb169f2f99)
OpenBSD RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
# rpki-client 8.7 - Add ability to constrain an RPKI Trust Anchor's effective
signing authority to a limited set of Internet numbers. This allows Relying
Parties to enjoy the potential benefits of assuming trust, but within a bounded
scope. This distribution includes curated constraints files. More information:
https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-trus…
anchors - Following a 'failed fetch' (described in RFC 9286), emit a warning
and continue with a previously cached Manifest file, if present and still valid.
- Emit a warning when the same `manifestNumber` is re-used across multiple
issuances. - Emit a warning when the remote repository presents a Manifest
with an unexpected `manifestNumber`. Purported new manifests are expected to
have a higher `manifestNumber` than previously validated manifests. Otherwise
fall back to the previously cached manifest, if it is still valid. This warning
can be indicative of manifest replays or of out-of-order publishing. - Require
RPKI object files to be of a minimum of 100 bytes in both the RRDP and RSYNC
transports. - No longer synchronize directory modtimes in the local cache to
align with remote RSYNC repository sources. - Improved CRL extension checking.
- Experimental support for the P-256 signature algorithm. - Various
refactoring work.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 22 2023 Robert Scheck <robert(a)fedoraproject.org> 8.7-1
- Upgrade to 8.7 (#2255458)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2255458 - rpki-client-8.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2255458
--------------------------------------------------------------------------------