The following Fedora EPEL 7 Security updates need testing:
Age URL
35
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4a9fc09599
openjpeg2-2.3.1-10.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-5843fdc72c
adplug-2.3.3-1.el7 audacious-plugins-4.0.5-3.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6bfa86551f
coturn-4.5.2-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d851c69e59
chromium-87.0.4280.141-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
copr-cli-1.92-1.el7
fedpkg-1.40-2.el7
gnome-shell-extension-caffeine-32-1.20200226gitea96d16.el7
opensmtpd-6.8.0p2-1.el7
python-copr-1.108-1.el7
Details about builds:
================================================================================
copr-cli-1.92-1.el7 (FEDORA-EPEL-2021-7d55e95d4e)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
- allow excluding chroots when submitting builds - mock --isolation
configuration per-chroot
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 20 2021 Pavel Raiskup <praiskup(a)redhat.com> 1.92-1
- allow excluding chroots when submitting builds
- raise a proper exception if the module yaml file does not exist
- allow etting isolation option per chroot
- fix serializable() helper for the new python3-munch
--------------------------------------------------------------------------------
================================================================================
fedpkg-1.40-2.el7 (FEDORA-EPEL-2021-e711d739a7)
Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:
The update contains two patches: * New default dist-git branch: rawhide
In some places, we also reference main which will be a symlink to the rawhide
branch and we currently still reference master to be backward compatible (even
though once the rawhide branch appears the master branch will be removed and
blocked). * Fedpkg update didn't read bug numbers from a changelog
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 21 2021 Ond��ej Nosek <onosek(a)redhat.com> - 1.40-2
- Patches:
- Fedpkg update didn't read bug numbers from changelog
- New default dist-git branch: rawhide
- New default dist-git branch: rawhide - unittests
--------------------------------------------------------------------------------
================================================================================
gnome-shell-extension-caffeine-32-1.20200226gitea96d16.el7 (FEDORA-EPEL-2021-003f47d72c)
Disable the screen saver and auto suspend in gnome shell
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
opensmtpd-6.8.0p2-1.el7 (FEDORA-EPEL-2021-f1768ebc94)
Free implementation of the server-side SMTP protocol as defined by RFC 5321
--------------------------------------------------------------------------------
Update Information:
**opensmtpd 6.8.0p2** New Features: - ECDSA privsep engine support for
OpenSSL, sponsored by anonymous community member Bug fixes: - Fixed a
resolver memory leak as well as a regex table memory leak - Fixed a bug in the
filters state machine leading to a possible crash of the daemon - Fixed the
logging format which output truncated process names on some systems - Fixed
build on macOS - Various man page improvements
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 20 2021 Denis Fateyev <denis(a)fateyev.com> - 6.8.0p2-1
- Update to 6.8.0p2 release
* Thu Sep 17 2020 Denis Fateyev <denis(a)fateyev.com> - 6.7.1p1-3
- Rebuild for libevent soname change
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.7.1p1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1910343 - opensmtpd-6.8.0p2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1910343
[ 2 ] Bug #1911291 - CVE-2020-35679 opensmtpd: memory leak via messages to an instance
that performs many regex lookups due to a missing regfree call [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1911291
[ 3 ] Bug #1911295 - CVE-2020-35680 opensmtpd: NULL pointer dereference via a crafted
pattern of client activity [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1911295
--------------------------------------------------------------------------------
================================================================================
python-copr-1.108-1.el7 (FEDORA-EPEL-2021-7d55e95d4e)
Python interface for Copr
--------------------------------------------------------------------------------
Update Information:
- allow excluding chroots when submitting builds - mock --isolation
configuration per-chroot
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 20 2021 Pavel Raiskup <praiskup(a)redhat.com> 1.108-1
- allow setting isolation option per chroot
--------------------------------------------------------------------------------