The following Fedora EPEL 7 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f08dc6b4c1
gnuchess-6.2.7-5.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-13ed778e19
singularity-3.7.3-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3f9b6786f4
clamav-0.103.2-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9daa9fc0b1
seamonkey-2.53.7-3.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-fe3075d537
wordpress-5.1.9-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-044df87bd4
rust-1.51.0-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
libretls-3.3.2-1.el7
mock-centos-sig-configs-0.1-3.el7
openvpn-2.4.11-1.el7
sourcextractor++-0.14-1.el7
Details about builds:
================================================================================
libretls-3.3.2-1.el7 (FEDORA-EPEL-2021-5dc3f4d5fa)
Port of libtls from LibreSSL to OpenSSL
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.3.2 (#1952200)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 21 2021 Robert Scheck <robert(a)fedoraproject.org> 3.3.2-1
- Upgrade to 3.3.2 (#1952200)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1952200 - libretls-3.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1952200
--------------------------------------------------------------------------------
================================================================================
mock-centos-sig-configs-0.1-3.el7 (FEDORA-EPEL-2021-c2e62ff231)
Mock configs for CentOS SIGs
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1950559 - Review Request: mock-centos-sig-configs - Mock configs for CentOS
SIGs
https://bugzilla.redhat.com/show_bug.cgi?id=1950559
--------------------------------------------------------------------------------
================================================================================
openvpn-2.4.11-1.el7 (FEDORA-EPEL-2021-ec6398823b)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Security update - OpenVPN 2.5.1 and earlier versions allows a remote attackers
to bypass authentication and access control channel data on servers configured
with deferred authentication, which can be used to potentially trigger further
information leaks. (CVE-2020-15078)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 21 2021 David Sommerseth <davids(a)openvpn.net> - 2.4.11-1
- Update to upstream OpenVPN 2.4.11
- Fixes CVE-2020-15078
--------------------------------------------------------------------------------
================================================================================
sourcextractor++-0.14-1.el7 (FEDORA-EPEL-2021-01fe5a1d77)
A program that extracts a catalog of sources from astronomical images, and the successor
of SExtractor
--------------------------------------------------------------------------------
Update Information:
New sourcextractor release 0.14
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 21 2021 Alejandro Alvarez Ayllon <aalvarez(a)fedoraproject.org> - 0.14-1
- Release 0.14
--------------------------------------------------------------------------------