The following Fedora EPEL 7 Security updates need testing:
Age URL
61
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879
debmirror-2.35-1.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6d0e7309d6
wordpress-5.1.11-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
openssl11-1.1.1k-2.el7
snapd-2.53.2-1.el7
Details about builds:
================================================================================
openssl11-1.1.1k-2.el7 (FEDORA-EPEL-2021-70fe95babd)
Utilities from the general purpose cryptography library with TLS implementation
--------------------------------------------------------------------------------
Update Information:
- backport from 1.1.1k-5: CVE-2021-3712 openssl: Read buffer overruns processing
ASN.1 strings. Resolves: rhbz#2005400
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 17 2021 Robert Scheck <robert(a)fedoraproject.org> 1.1.1k-2
- backport from 1.1.1k-5: CVE-2021-3712 openssl: Read buffer overruns processing ASN.1
strings.
Resolves: rhbz#2005400
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1995634 - CVE-2021-3712 openssl: Read buffer overruns processing ASN.1
strings
https://bugzilla.redhat.com/show_bug.cgi?id=1995634
--------------------------------------------------------------------------------
================================================================================
snapd-2.53.2-1.el7 (FEDORA-EPEL-2021-217a4fc000)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
Update to 2.53.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 17 2021 Maciek Borzecki <maciek.borzecki(a)gmail.com> - 2.53.2-1
- Release 2.53.2 to Fedora
* Mon Nov 15 2021 Ian Johnson <ian.johnson(a)canonical.com>
- New upstream release 2.53.2
- interfaces/builtin/block_devices: allow blkid to print block
device attributes/run/udev/data/b{major}:{minor}
- cmd/libsnap-confine-private: do not deny all devices when reusing
the device cgroup
- interfaces/builtin/time-control: allow pps access
- interfaces/u2f-devices: add Trezor and Trezor v2 keys
- interfaces: timezone-control, add permission for ListTimezones
DBus call
- interfaces/apparmor/template.go: allow udevadm from merged usr
systems
- interface/modem-manager: allow connecting to the mbim/qmi proxy
- interfaces/network-manager-observe: Update for libnm client
library
- cmd/snap-seccomp/syscalls: update syscalls to match libseccomp
abad8a8f4
- sandbox/cgroup: freeze and thaw cgroups related to services and
scopes only
- o/hookstate: print cohort with snapctl refresh --pending
- cmd/snap-confine: lazy set up of device cgroup, only when devices
were assigned
- tests: ensure systemd-timesyncd is installed on debian
- tests/lib/pkgdb: install strace on Debian 11 and Sid
- tests/main/snapd-sigterm: flush, use retry
- tests/main/snapd-sigterm: fix race conditions
- release-tools/repack-debian-tarball.sh: fix c-vendor dir
- data/selinux: allow snap-confine to read udev's database
- interfaces/dsp: add more ambarella things* interfaces/dsp: add
more ambarella things
--------------------------------------------------------------------------------