The following Fedora EPEL 7 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-01179f6b9f
suricata-4.1.9-1.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-e6c7b4cbec
tcpreplay-4.3.3-3.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-284f18e5de
lout-3.40-18.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fd6ec50fa5
fastd-21-2.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-3b167ec2fa
pngcheck-2.3.0-3.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-3157c3d291
chromium-86.0.4240.111-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
containerd-1.2.14-1.el7
gsi-openssh-7.4p1-6.el7
haproxy18-1.8.23-2.el7
perl-Carp-Assert-More-1.24-1.el7.1
python-regex-2020.10.28-1.el7
Details about builds:
================================================================================
containerd-1.2.14-1.el7 (FEDORA-EPEL-2020-e816cf1fbc)
An industry-standard container runtime
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-15157
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 29 2020 Olivier Lemasle <o.lemasle(a)gmail.com> - 1.2.14-1
- Latest upstream - Fix CVE-2020-15157 (#1890620)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1888248 - CVE-2020-15157 containerd: credentials leak during image pull
https://bugzilla.redhat.com/show_bug.cgi?id=1888248
--------------------------------------------------------------------------------
================================================================================
gsi-openssh-7.4p1-6.el7 (FEDORA-EPEL-2020-7e2b65b63e)
An implementation of the SSH protocol with GSI authentication and HPN features
--------------------------------------------------------------------------------
Update Information:
Add HPN patch
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 23 2020 Frank Scheiner <scheiner(a)hlrs.de> - 7.4p1-6
- Add HPN patch
--------------------------------------------------------------------------------
================================================================================
haproxy18-1.8.23-2.el7 (FEDORA-EPEL-2020-0d6230d04e)
HAProxy reverse proxy for high availability environments
--------------------------------------------------------------------------------
Update Information:
HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high
availability environments. Indeed, it can: - route HTTP requests depending on
statically assigned cookies - spread load among several servers while assuring
server persistence through the use of HTTP cookies - switch to backup
servers in the event a main one fails - accept connections to special ports
dedicated to service monitoring - stop accepting connections without breaking
existing ones - add, modify, and delete HTTP headers in both directions -
block requests matching particular patterns - report detailed status to
authenticated users from a URI intercepted from the application The haproxy18
package is a backport of the regular haproxy RPM package from RHEL/CentOS 8
modified to be installable along with the regular haproxy RPM package from
RHEL/CentOS 7, but linked against the libraries in the openssl11-libs RPM
package from EPEL 7 for TLSv1.3 support.
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1885415 - Review Request: haproxy18 - HAProxy reverse proxy for high
availability environments
https://bugzilla.redhat.com/show_bug.cgi?id=1885415
--------------------------------------------------------------------------------
================================================================================
perl-Carp-Assert-More-1.24-1.el7.1 (FEDORA-EPEL-2020-e31afd4d97)
Convenience wrappers around Carp::Assert
--------------------------------------------------------------------------------
Update Information:
First EPEL 7 build
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1829996 - perl-Carp-Assert-More for EL7
https://bugzilla.redhat.com/show_bug.cgi?id=1829996
--------------------------------------------------------------------------------
================================================================================
python-regex-2020.10.28-1.el7 (FEDORA-EPEL-2020-2c973c7348)
Alternative regular expression module, to replace re
--------------------------------------------------------------------------------
Update Information:
Update python-regex to the latest release.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 29 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2020.10.28-1
- Update to 2020.10.28.
* Wed Oct 28 2020 Thomas Moschny <thomas.moschny(a)gmx.de> - 2020.10.23-1
- Update to 2020.10.23.
--------------------------------------------------------------------------------