The following Fedora EPEL 7 Security updates need testing:
Age URL
29
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879
debmirror-2.35-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1c90472b95
libopenmpt-0.5.12-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-a3fe2b021b
python3-pillow-6.2.2-3.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
libretls-3.4.1-1.el7
mod_authnz_external-3.3.3-3.el7
netcat-1.218-2.el7
rpki-client-7.3-2.el7
Details about builds:
================================================================================
libretls-3.4.1-1.el7 (FEDORA-EPEL-2021-5eccb3dae8)
Port of libtls from LibreSSL to OpenSSL
--------------------------------------------------------------------------------
Update Information:
- Upgrade to 3.4.1 (#2014653)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 15 2021 Robert Scheck <robert(a)fedoraproject.org> 3.4.1-1
- Upgrade to 3.4.1 (#2014653)
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 3.3.4-2
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2014653 - libretls-3.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2014653
--------------------------------------------------------------------------------
================================================================================
mod_authnz_external-3.3.3-3.el7 (FEDORA-EPEL-2021-79f3e313d6)
An Apache module used for authentication
--------------------------------------------------------------------------------
Update Information:
mod_authnz_external 3.3.3 ========================= * Added `METHOD`
environment variable to retrieve the HTTP request method (e.g. `GET`, `HEAD`,
`POST`, `OPTIONS`, etc.). * Fixed a bug with incorrect parenthesis grouping
when checking the result of the external process in `exec_external()`. * Added
the `GroupExternalAuthNCheck Off` directive to disable the check for a
previously authenticated user when using *only* the group authorization module.
If you use *any* user authentication module in the same context, this may be
undesirable. mod_authnz_external 3.3.2 ========================= * Replaced
reference to `remote_ip` field of the connection record with `useragent_ip`, due
to the elimination of `remote_ip` in Apache 2.4.1. * Fixed a bug with setting
of `GROUP` environment variable. * Added `test/test.pipe.php`, a PHP version of
`test/test.pipe`. * Spelling fixes (as seen on
lintian.debian.org).
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Nov 18 2020 Philip Prindeville <philipp(a)fedoraproject.com> - 3.3.3-1
- address bz #1899291 (CVE-2011-2688)
- reflect rehoming and new owner of project
* Fri Aug 28 2020 Joe Orton <jorton(a)redhat.com> - 3.3.2-14
- use _httpd_apxs, _httpd_mmn macros
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed May 13 2020 Philip Prindeville <philipp(a)fedoraproject.org> - 3.3.2-12
- Don't duplicate the .d in the configuration directory names.
* Tue May 5 2020 Philip Prindeville <philipp(a)fedoraproject.org> - 3.3.2-11
- Fix for RHBZ #1426862 and LoadModule early on.
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.3.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Thu Oct 8 2015 Philip Prindeville <philipp(a)fedoraproject.org> - 3.3.2-1
- Update to latest.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1270589 - Please update to latest version of upstream which is currently
3.3.2
https://bugzilla.redhat.com/show_bug.cgi?id=1270589
[ 2 ] Bug #1426862 - Please use /etc/httpd/conf.modules.d/10-authnz_external.conf for
'LoadModule authnz_external_module modules/mod_authnz_external.so'
https://bugzilla.redhat.com/show_bug.cgi?id=1426862
--------------------------------------------------------------------------------
================================================================================
netcat-1.218-2.el7 (FEDORA-EPEL-2021-ff46f1b1ca)
OpenBSD netcat to read and write data across connections using TCP or UDP
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for libretls 3.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 16 2021 Robert Scheck <robert(a)fedoraproject.org> 1.218-2
- Rebuilt for libretls 3.4.1
--------------------------------------------------------------------------------
================================================================================
rpki-client-7.3-2.el7 (FEDORA-EPEL-2021-ab7101f6cd)
RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
- Rebuilt for libretls 3.4.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 16 2021 Robert Scheck <robert(a)fedoraproject.org> 7.3-2
- Rebuilt for libretls 3.4.1
--------------------------------------------------------------------------------