Thursday 29th August 2019
Fedora Project
Cleaned up and rebuilt perl-Convert-TNEF (0.18) in Rawhide
Built perl-Convert-TNEF (0.18) for EPEL-8
Updated perl-File-LibMagic (1.16) in Rawhide to BR: gcc if rebuilt for EPEL-8 because ExtUtils::CBuilder is missing a dependency on it (Bug #1547165)
Built perl-File-LibMagic (1.16) for EPEL-8
Local Packages
Updated dovecot (2.2):
Updated dovecot to 2.2.36.4:
CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes
Updated pigeonhole to 0.4.24.2:
CVE-2019-11500: ManageSieve protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes
Updated dovecot (2.3):
Updated dovecot to 2.3.7.2:
CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes
Updated pigeonhole to 0.5.7.2:
CVE-2019-11500: ManageSieve protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes
Cleaned up and rebuilt perl-Convert-TNEF (0.18)
Updated perl-Test2-Suite to 0.000126:
Mention huge caveat in Test2::Plugin::Times
Make Test2::Util::Times::render_duration support 1-argument form