The following Fedora EPEL 7 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-8f7f2eda61
drupal7-7.82-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
batctl-2021.3-1.el7
gifsicle-1.93-1.el7
mod_auth_token-1.0.5-26.el7
python-rpm-head-signing-1.4.2-1.el7
Details about builds:
================================================================================
batctl-2021.3-1.el7 (FEDORA-EPEL-2021-30e098f8ff)
B.A.T.M.A.N. advanced control and management tool
--------------------------------------------------------------------------------
Update Information:
Version number change to match batman-adv, no other changes.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 14 2021 Felix Kaechele <heffer(a)fedoraproject.org> - 2021.3-1
- update to 2021.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2004113 - batctl-2021.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2004113
--------------------------------------------------------------------------------
================================================================================
gifsicle-1.93-1.el7 (FEDORA-EPEL-2021-78aede2789)
Powerful program for manipulating GIF images and animations
--------------------------------------------------------------------------------
Update Information:
Update to 1.93, fixes CVE-2020-19752
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 1 2021 Orion Poplawski <orion(a)nwra.com> - 1.93-1
- Update to 1.93
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.92-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.92-5
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.92-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.92-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.92-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Apr 18 2019 Orion Poplawski <orion(a)cora.nwra.com> - 1.92-1
- Update to 1.92
* Thu Jan 31 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.91-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.91-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2004042 - CVE-2020-19752 gifsicle: NULL pointer dereference in
find_color_or_error function
https://bugzilla.redhat.com/show_bug.cgi?id=2004042
--------------------------------------------------------------------------------
================================================================================
mod_auth_token-1.0.5-26.el7 (FEDORA-EPEL-2021-c99f8a3c1c)
Token based URI access module for Apache
--------------------------------------------------------------------------------
Update Information:
- Add a patch for improvements with Apache httpd >= 2.4. - Consolidate the
patches for Autotools with more fixes. - Apply CFLAGS properly. - Add a patch to
add the AuthTokenLimitByIp configuration option. - Modernize spec file.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 14 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 1.0.5-26
- Consolidate the patches for Autotools with more fixes
- Add a patch to add the AuthTokenLimitByIp configuration option
- Modernize spec file
* Tue Sep 14 2021 Bj��rn Esser <besser82(a)fedoraproject.org> - 1.0.5-25
- Add a patch for improvements with Apache httpd >= 2.4
- Update Patch1 to also apply CFLAGS properly
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.5-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.5-23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.5-22
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.5-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.5-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.5-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
python-rpm-head-signing-1.4.2-1.el7 (FEDORA-EPEL-2021-298604c0cf)
Small python module to extract RPM header and file digests
--------------------------------------------------------------------------------
Update Information:
Fixes handling of symbolic links during verification ---- Ensure xattrs are
passed in as bytes
--------------------------------------------------------------------------------
ChangeLog:
* Tue Sep 14 2021 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 1.4.2-1
- Ignore symbolic links when verifying RPMs
* Fri Sep 10 2021 Patrick Uiterwijk <patrick(a)puiterwijk.org> - 1.4.1-1
- Ensure xattrs are passed in as bytes
--------------------------------------------------------------------------------