The following Fedora EPEL 7 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-bd2c412d62
zabbix40-4.0.39-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-54fdcd70bd
zabbix50-5.0.21-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-d009c17be8
abcm2ps-8.14.13-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-03421505cb
libcaca-0.99-0.40.beta20.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
knot-resolver-5.5.0-1.el7
nodejs-16.14.1-1.el7
nordugrid-arc6-6.15.0-1.el7
openvpn-2.4.12-1.el7
singularity-3.8.7-1.el7
Details about builds:
================================================================================
knot-resolver-5.5.0-1.el7 (FEDORA-EPEL-2022-7cee2e2a30)
Caching full DNS Resolver
--------------------------------------------------------------------------------
Update Information:
New upstream version 5.5.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 15 2022 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 5.5.0-1
- update to upstream version 5.5.0
- update upstream signing keys
--------------------------------------------------------------------------------
================================================================================
nodejs-16.14.1-1.el7 (FEDORA-EPEL-2022-5b61a393be)
JavaScript runtime
--------------------------------------------------------------------------------
Update Information:
Update to Node.js 16.14.1 Note that we will be skipping 16.14.2 since the only
changes were in the bundled copy of OpenSSL, which we do not use. The relevant
security patches are handled in Fedora's `openssl` package.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 17 2022 Stephen Gallagher <sgallagh(a)redhat.com> - 1:16.14.1-1
- Update to Node.js 16.14.1
- Drop corepack
* Thu Mar 3 2022 Zuzana Svetlikova <zsvetlik(a)redhat.com> - 1:16.14.0-3
- Build without corepack
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2016231 - nodejs-16.14.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2016231
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc6-6.15.0-1.el7 (FEDORA-EPEL-2022-13296f1084)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
ARF 6.15
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 18 2022 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.15.0-1
- Update to version 6.15.0
--------------------------------------------------------------------------------
================================================================================
openvpn-2.4.12-1.el7 (FEDORA-EPEL-2022-3f443e2e1e)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
This is a security and bugfix release of OpenVPN 2.4 with a security fix when
used in server mode (CVE-2022-0547). The other changes are available in [Changes
.rst](https://github.com/OpenVPN/openvpn/blob/release/2.4/Changes.rst#version-24
12). **NOTE:** Please read the CVE description carefully if you use
authentication plug-ins with a server configuration. **WARNING: ** OpenVPN 2.4
will from now only receive security and critical bug fixes for the next 12
months. Please consider to upgrade to [OpenVPN 2.5 via Fedora
Copr](https://copr.fedorainfracloud.org/coprs/dsommers/openvpn-release/) builds.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 17 2022 David Sommerseth <davids(a)openvpn.net> - 2.4.12-1
- Update to upstream OpenVPN 2.4.12
- Fixes CVE-2022-0547
--------------------------------------------------------------------------------
================================================================================
singularity-3.8.7-1.el7 (FEDORA-EPEL-2022-0b1648bedb)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream 3.8.7
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 17 2022 Dave Dykstra <dwd(a)fedoraproject.org> - 3.8.7-1
- Upgrade to upstream 3.8.7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2065414 - singularity-3.8.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2065414
--------------------------------------------------------------------------------