The following Fedora EPEL 7 Security updates need testing:
Age URL
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a5abe545c6
wordpress-5.1.8-1.el7
10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-aeaf0b9bc0
pngcheck-2.4.0-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-f16789146a
chromium-86.0.4240.183-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
rpki-client-6.8p1-1.el7
seamonkey-2.53.5-1.el7
spectre-meltdown-checker-0.44-1.el7
tor-0.3.5.12-1.el7
xrootd-5.0.3-1.el7
Details about builds:
================================================================================
rpki-client-6.8p1-1.el7 (FEDORA-EPEL-2020-0fe15b3c39)
RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
rpki-client 6.8p1 ================= This is the second release based on OpenBSD
6.8. It includes the following changes to the previous release: * Incorporate
OpenBSD 6.8 errata 006 of November 10, 2020: rpki-client incorrectly checks the
manifest validity interval. In the portable version: * Add compat code for
the LibreSSL `ASN1_time_parse()` and `ASN1_time_tm_cmp()` functions. Those are
needed to properly check the validity of MFT files.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 12 2020 Robert Scheck <robert(a)fedoraproject.org> 6.8p1-1
- Upgrade to 6.8p1 (#1897161)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1897161 - rpki-client-6.8p1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1897161
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.53.5-1.el7 (FEDORA-EPEL-2020-b583975226)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 12 2020 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.5-1
- update to 2.53.5
- add patch to build with system libaom and libdav1d
- add official logo icon in svg format
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1868764 - SeaMonkey Web Browser icon on LXQt Quick Launch bar is smaller than
the rest of the icons
https://bugzilla.redhat.com/show_bug.cgi?id=1868764
--------------------------------------------------------------------------------
================================================================================
spectre-meltdown-checker-0.44-1.el7 (FEDORA-EPEL-2020-3f3a8c28a2)
Spectre & Meltdown vulnerability/mitigation checker for Linux
--------------------------------------------------------------------------------
Update Information:
# v0.44 Quite a big release this time again: - feat: add support for SRBDS
related vulnerabilities - feat: add zstd kernel decompression
([#370](https://github.com/speed47/spectre-meltdown-checker/issues/370)) - enh:
arm: add experimental support for binary arm images - enh: rsb filling: no
longer need the 'strings' tool to check for kernel support in live mode - fix:
fwdb: remove Intel extract tempdir on exit - fix: has_vmm: ignore kernel threads
when looking for a hypervisor (fixes [#278](https://github.com/speed47/spectre-
meltdown-checker/issues/278)) - fix: fwdb: use the commit date as the intel fwdb
version - fix: fwdb: update Intel's repository URL - fix: arm64: cve-2017-5753:
kernels 4.19+ use a different nospec macro - chore: github: add check run on
pull requests - chore: fwdb: update to v165.20201021+i20200616
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 12 2020 Reto Gantenbein <reto.gantenbein(a)linuxmonk.ch> - 0.44-1
- Update to 0.44
* Wed Jul 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.43-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.43-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
tor-0.3.5.12-1.el7 (FEDORA-EPEL-2020-d69636a383)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
update to latest upstream release (bz#1897167)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 12 2020 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.3.5.12-1
- update to latest upstream release (bz#1897167)
* Fri Jul 10 2020 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.3.5.11-1
- update to latest upstream release (bz#1855385)
* Thu Mar 19 2020 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.3.5.10-1
- update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1897167 - tor-0.4.4.6 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1897167
--------------------------------------------------------------------------------
================================================================================
xrootd-5.0.3-1.el7 (FEDORA-EPEL-2020-c8cf316036)
Extended ROOT file server
--------------------------------------------------------------------------------
Update Information:
xrootd 5.0.3
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 12 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.3-1
- Update to version 5.0.3
- Drop patches (accepted upstream or previously backported)
* Mon Nov 2 2020 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 1:5.0.2-2
- Fix for XrdPosix failing to compile with glibc 2.33 (2.32.9000)
--------------------------------------------------------------------------------