PaulHowarth/Blog/2019-08-29

Thursday 29th August 2019

Fedora Project

  • Cleaned up and rebuilt perl-Convert-TNEF (0.18) in Rawhide

  • Built perl-Convert-TNEF (0.18) for EPEL-8

  • Updated perl-File-LibMagic (1.16) in Rawhide to BR: gcc if rebuilt for EPEL-8 because ExtUtils::CBuilder is missing a dependency on it (Bug #1547165)

  • Built perl-File-LibMagic (1.16) for EPEL-8

Local Packages

  • Updated dovecot (2.2):

    • Updated dovecot to 2.2.36.4:

      • CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes

    • Updated pigeonhole to 0.4.24.2:

      • CVE-2019-11500: ManageSieve protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes

  • Updated dovecot (2.3):

    • Updated dovecot to 2.3.7.2:

      • CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes

    • Updated pigeonhole to 0.5.7.2:

      • CVE-2019-11500: ManageSieve protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes

  • Cleaned up and rebuilt perl-Convert-TNEF (0.18)

  • Updated perl-Test2-Suite to 0.000126:

    • Mention huge caveat in Test2::Plugin::Times

    • Make Test2::Util::Times::render_duration support 1-argument form

Recent