The following Fedora EPEL 7 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-b2c46a790d
radare2-5.6.4-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-b169dce5bc
chromium-99.0.4844.51-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
cobbler-2.8.5-5.el7
distribution-gpg-keys-1.67-1.el7
gfal2-python-1.11.1-1.el7
gfal2-util-1.7.1-1.el7
mock-core-configs-36.7-1.el7
nbd-3.24-1.el7
Details about builds:
================================================================================
cobbler-2.8.5-5.el7 (FEDORA-EPEL-2022-1f3ec359c3)
Boot server configurator
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-45082, CVE-2021-45083
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 7 2022 Orion Poplawski <orion(a)cora.nwra.com> - 2.8.5-5
- Restore EL7 requires
* Thu Mar 3 2022 Orion Poplawski <orion(a)nwra.com> - 2.8.5-4
- Fix apache group
* Thu Mar 3 2022 Orion Poplawski <orion(a)nwra.com> - 2.8.5-3
- Apply fixes for CVE-2021-45082/3
- Drop EL6 support
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2056392 - CVE-2021-45082 cobbler: incomplete template sanitization
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2056392
[ 2 ] Bug #2056393 - CVE-2021-45083 cobbler: unsafe permissions on sensitive files in
/etc/cobbler [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2056393
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.67-1.el7 (FEDORA-EPEL-2022-b3587545e4)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
distribution-gpg-keys - update copr keys - centos: Add new CentOS Extras SIG
key (SHA256) mock-core-configs - Update CentOS Stream 9 Extras repo to use
correct key (ngompa(a)centosproject.org) - Add AlmaLinux+EPEL 8 for POWER
(ppc64le) (ngompa13(a)gmail.com) - Add AlmaLinux 8 for POWER (ppc64le)
(ngompa13(a)gmail.com) - Delete Fedora 37/Rawhide armhfp configs (miro(a)hroncok.cz)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 8 2022 Pavel Raiskup <praiskup(a)redhat.com> 1.67-1
- Refresh all CentOS SIG keys (rhbz#2059424)
* Wed Mar 2 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.66-1
- update copr keys
- centos: Add new CentOS Extras SIG key (SHA256)
--------------------------------------------------------------------------------
================================================================================
gfal2-python-1.11.1-1.el7 (FEDORA-EPEL-2022-6bc542159f)
Python bindings for gfal 2
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream release 1.11.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 7 2022 Mihai Patrascoiu <mihai.patrascoiu(a)cern.ch> - 1.11.1-1
- Upgrade to upstream release 1.11.1
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.5-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Aug 6 2021 Jonathan Wakely <jwakely(a)redhat.com> - 1.9.5-15
- Rebuilt for Boost 1.76
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.5-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.9.5-13
- Rebuilt for Python 3.10
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.5-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Fri Jan 22 2021 Jonathan Wakely <jwakely(a)redhat.com> - 1.9.5-11
- Rebuilt for Boost 1.75
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.5-10
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.5-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri May 29 2020 Jonathan Wakely <jwakely(a)redhat.com> - 1.9.5-8
- Rebuilt for Boost 1.73
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 1.9.5-7
- Rebuilt for Python 3.9
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.5-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Sep 16 2019 Andrea Manzi <amanzi(a)cern.ch> - 1.9.5-5
- rename python3 package
- remove python2 package from f32 on
- remove el5 compilation
* Mon Aug 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 1.9.5-4
- Rebuilt for Python 3.8
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.9.5-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
gfal2-util-1.7.1-1.el7 (FEDORA-EPEL-2022-e6b36cfd30)
GFAL2 utility tools
--------------------------------------------------------------------------------
Update Information:
Upgrade to upstream release 1.7.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 7 2022 Mihai Patrascoiu <mipatras(a)cern.ch> - 1.7.1-1
- Upgrade to upstream release 1.7.1
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-36.7-1.el7 (FEDORA-EPEL-2022-b3587545e4)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
distribution-gpg-keys - update copr keys - centos: Add new CentOS Extras SIG
key (SHA256) mock-core-configs - Update CentOS Stream 9 Extras repo to use
correct key (ngompa(a)centosproject.org) - Add AlmaLinux+EPEL 8 for POWER
(ppc64le) (ngompa13(a)gmail.com) - Add AlmaLinux 8 for POWER (ppc64le)
(ngompa13(a)gmail.com) - Delete Fedora 37/Rawhide armhfp configs (miro(a)hroncok.cz)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 3 2022 Pavel Raiskup <praiskup(a)redhat.com> 36.7-1
- Update CentOS Stream 9 Extras repo to use correct key (ngompa(a)centosproject.org)
- Add AlmaLinux+EPEL 8 for POWER (ppc64le) (ngompa13(a)gmail.com)
- Add AlmaLinux 8 for POWER (ppc64le) (ngompa13(a)gmail.com)
- Delete Fedora 37/Rawhide armhfp configs (miro(a)hroncok.cz)
--------------------------------------------------------------------------------
================================================================================
nbd-3.24-1.el7 (FEDORA-EPEL-2022-db09048bde)
Network Block Device user-space tools (TCP version)
--------------------------------------------------------------------------------
Update Information:
Update to 3.24: fix CVE-2022-26495, CVE-2022-26496
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 8 2022 Robin Lee <cheeselee(a)fedoraproject.org> - 3.24-1
- Update to 3.24: fix CVE-2022-26495(RHBZ#2061541), CVE-2022-26496(RHBZ#2061542)
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.21-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.21-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sun Jan 17 2021 Fedora Release Monitoring <release-monitoring(a)fedoraproject.org> -
3.21-1
- Update to 3.21 (#1917135)
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.20-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.20-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Sat Sep 28 2019 Robin Lee <cheeselee(a)fedoraproject.org> - 3.20-1
- New upstream version 3.20 (RHBZ#1752353).
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.19-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu Feb 7 2019 Richard W.M. Jones <rjones(a)redhat.com> - 3.19-1
- New upstream version 3.19 (RHBZ#1671079).
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.18-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Sun Nov 4 2018 Robin Lee <cheeselee(a)fedoraproject.org> - 3.18-1
- Update to 3.18
* Sun Sep 2 2018 Richard W.M. Jones <rjones(a)redhat.com> - 3.17-3
- Add upstream fix for timeout issue which makes nbd-client almost unusable.
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.17-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Apr 2 2018 Robin Lee <cheeselee(a)fedoraproject.org> - 3.17-1
- Update to 3.17
* Sat Mar 10 2018 Robin Lee <cheeselee(a)fedoraproject.org> - 3.16.2-3
- BR gcc for
http://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.16.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sat Sep 23 2017 Robin Lee <cheeselee@fedoraproject> - 3.16.2-1
- Update to 3.16.2 (BZ#1490655, BZ#1490039)
- nbd@.service would automatically modprobe nbd (BZ#1480986)
- Fix scriptlets
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.16.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.16.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Mon May 29 2017 Robin Lee <cheeselee(a)fedoraproject.org> - 3.16.1-1
- Update to 3.16.1
* Tue May 23 2017 Robin Lee <cheeselee(a)fedoraproject.org> - 3.15.3-1
- Update to 3.15.3
* Sun Feb 12 2017 Robin Lee <cheeselee(a)fedoraproject.org> - 3.15.1-1
- Update to 3.15.1
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2061541 - CVE-2022-26495 nbd: heap-based buffer overflow in nbd-server.c
https://bugzilla.redhat.com/show_bug.cgi?id=2061541
[ 2 ] Bug #2061542 - CVE-2022-26496 nbd: stack-based buffer overflow during name parsing
in nbd-server.c
https://bugzilla.redhat.com/show_bug.cgi?id=2061542
--------------------------------------------------------------------------------