The following Fedora EPEL 7 Security updates need testing:
Age URL
59
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-4a9fc09599
openjpeg2-2.3.1-10.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6eebad70ee
SDL2-2.0.14-2.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-01679b76db
chromium-88.0.4324.150-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-692420cee2
snapd-2.49-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
amiri-fonts-0.113-1.el7
nordugrid-arc6-6.10.1-1.el7
php-horde-Horde-Text-Filter-2.3.7-1.el7
prosody-0.11.8-1.el7
Details about builds:
================================================================================
amiri-fonts-0.113-1.el7 (FEDORA-EPEL-2021-93145b9879)
A classical Arabic font in Naskh style
--------------------------------------------------------------------------------
Update Information:
- Update to 0.113
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 15 2021 Mosaab Alzoubi <moceap[At]hotmail[Dot]com> - 0.113-1
- Update to 0.113
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.112-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.112-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.112-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1843326 - amiri-fonts-0.113 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1843326
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc6-6.10.1-1.el7 (FEDORA-EPEL-2021-34ad34aead)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
NorduGrid ARC 6.10.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 15 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.10.1-1
- Update to version 6.10.1
* Wed Feb 10 2021 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.10.0-1
- Update to version 6.10.0
- Drop RHEL6 support from spec file (EOL)
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Text-Filter-2.3.7-1.el7 (FEDORA-EPEL-2021-3cc28d5469)
Horde Text Filter API
--------------------------------------------------------------------------------
Update Information:
**Horde_Text_Filter 2.3.7** * [mjr] SECURITY: Fix XSS via Text2Html filter
(Reported by: Alex Birnberg&lt;birnbergalex(a)gmail.com&gt;, **CVE 2021-26929**)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 15 2021 Remi Collet <remi(a)remirepo.net> - 2.3.7-1
- update to 2.3.7
- add dependency on Horde_Secret
* Mon Oct 15 2018 Remi Collet <remi(a)fedoraproject.org> - 2.3.5-6
- add patch for PHP 7.3 from
https://github.com/horde/Text_Filter/pull/1
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.5-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Fri Feb 9 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.5-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jul 27 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Sat Feb 11 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.5-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
prosody-0.11.8-1.el7 (FEDORA-EPEL-2021-bb1731457c)
Flexible communications server for Jabber/XMPP
--------------------------------------------------------------------------------
Update Information:
Prosody 0.11.8 ============== This is a new minor release for the 0.11.x stable
branch, it includes bug fixes and performance improvements! Upstream would like
to thank the Jitsi folks for helping to improve websocket performance in this
and the previous release. This release also fixes a security issue, where
channel binding, which connects the authentication layer (i.e. SASL) with the
security layer (i.e. TLS) to detect man-in-the-middle attacks, could be used on
connections encrypted with TLS 1.3, despite the holy texts declaring this
undefined. Security -------- * mod_saslauth: Disable ���tls-unique��� channel
binding with TLS 1.3 (#1542) Fixes and improvements ----------------------
* net.websocket.frames: Improve websocket masking performance by using the new
util.strbitop * util.strbitop: Library for efficient bitwise operations on
strings Minor changes ------------- * MUC: Correctly advertise whether the
subject can be changed (#1155) * MUC: Preserve disco ���node��� attribute (or lack
thereof) in responses (#1595) * MUC: Fix logic bug causing unnecessary
presence to be sent (#1615) * mod_bosh: Fix error if client tries to connect
to component (#425) * mod_bosh: Pick out the ���wait��� before checking it instead
of earlier * mod_pep: Advertise base PubSub feature (#1632) * mod_pubsub:
Fix notification stanza type setting (#1605) * mod_s2s: Prevent keepalives
before client has established a stream * net.adns: Fix bug that sent empty DNS
packets (#1619) * net.http.server: Don���t send Content-Length on 1xx/204
responses (#1596) * net.websocket.frames: Fix length calculation bug (#1598)
* util.dbuffer: Make length API in line with Lua strings * util.dbuffer:
Optimize substring operations * util.debug: Fix locals being reported under
wrong stack frame in some cases * util.dependencies: Fix check for Lua bitwise
operations library (#1594) * util.interpolation: Fix combination of filters
and fallback values #1623 * util.promise: Preserve tracebacks * util.stanza:
Reject ASCII control characters (#1606) * timers: Ensure timers can���t block
other processing (#1620)
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 15 2021 Robert Scheck <robert(a)fedoraproject.org> 0.11.8-1
- Upgrade to 0.11.8 (#1928951)
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.11.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928951 - prosody-0.11.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1928951
--------------------------------------------------------------------------------