The following Fedora EPEL 7 Security updates need testing: Age URL 61 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6d0e7309d6 wordpress-5.1.11-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
openssl11-1.1.1k-2.el7 snapd-2.53.2-1.el7
Details about builds:
================================================================================ openssl11-1.1.1k-2.el7 (FEDORA-EPEL-2021-70fe95babd) Utilities from the general purpose cryptography library with TLS implementation -------------------------------------------------------------------------------- Update Information:
- backport from 1.1.1k-5: CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings. Resolves: rhbz#2005400 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 17 2021 Robert Scheck robert@fedoraproject.org 1.1.1k-2 - backport from 1.1.1k-5: CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings. Resolves: rhbz#2005400 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1995634 - CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings https://bugzilla.redhat.com/show_bug.cgi?id=1995634 --------------------------------------------------------------------------------
================================================================================ snapd-2.53.2-1.el7 (FEDORA-EPEL-2021-217a4fc000) A transactional software package manager -------------------------------------------------------------------------------- Update Information:
Update to 2.53.2 -------------------------------------------------------------------------------- ChangeLog:
* Wed Nov 17 2021 Maciek Borzecki maciek.borzecki@gmail.com - 2.53.2-1 - Release 2.53.2 to Fedora * Mon Nov 15 2021 Ian Johnson ian.johnson@canonical.com - New upstream release 2.53.2 - interfaces/builtin/block_devices: allow blkid to print block device attributes/run/udev/data/b{major}:{minor} - cmd/libsnap-confine-private: do not deny all devices when reusing the device cgroup - interfaces/builtin/time-control: allow pps access - interfaces/u2f-devices: add Trezor and Trezor v2 keys - interfaces: timezone-control, add permission for ListTimezones DBus call - interfaces/apparmor/template.go: allow udevadm from merged usr systems - interface/modem-manager: allow connecting to the mbim/qmi proxy - interfaces/network-manager-observe: Update for libnm client library - cmd/snap-seccomp/syscalls: update syscalls to match libseccomp abad8a8f4 - sandbox/cgroup: freeze and thaw cgroups related to services and scopes only - o/hookstate: print cohort with snapctl refresh --pending - cmd/snap-confine: lazy set up of device cgroup, only when devices were assigned - tests: ensure systemd-timesyncd is installed on debian - tests/lib/pkgdb: install strace on Debian 11 and Sid - tests/main/snapd-sigterm: flush, use retry - tests/main/snapd-sigterm: fix race conditions - release-tools/repack-debian-tarball.sh: fix c-vendor dir - data/selinux: allow snap-confine to read udev's database - interfaces/dsp: add more ambarella things* interfaces/dsp: add more ambarella things --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org