The following Fedora EPEL 7 Security updates need testing: Age URL 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0859a9d61e x11vnc-0.9.13-12.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9fbe0750f7 privoxy-3.0.32-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f1e9ccd247 zabbix40-4.0.29-1.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-04cc5bcb08 nagios-4.4.6-4.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-780cd884ad cabextract-1.9-7.el7 2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-32d4f4a583 python3-pillow-6.2.2-2.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-d7ae32a6da upx-3.96-8.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

chromium-89.0.4389.82-1.el7 gnome-shell-extension-historymanager-prefix-search-12-7.el7 java-latest-openjdk-16.0.0.0.36-0.rolling.el7 python-bloom-0.10.2-1.el7 python-shapely-1.5.2-3.el7 singularity-3.7.2-1.el7

Details about builds:

================================================================================ chromium-89.0.4389.82-1.el7 (FEDORA-EPEL-2021-7b1c8f21d9) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information:

Hi there. This is the latest release of the browser that Google doesn't want you to use. It fixes a bag full of security issues: CVE-2021-21162 CVE-2021-21180 CVE-2021-21164 CVE-2021-21170 CVE-2021-21181 CVE-2021-21166 CVE-2021-21160 CVE-2021-21179 CVE-2021-21187 CVE-2021-21173 CVE-2021-21174 CVE-2021-21183 CVE-2021-21161 CVE-2021-21171 CVE-2021-21178 CVE-2021-21169 CVE-2021-21163 CVE-2021-21175 CVE-2021-21177 CVE-2021-21185 CVE-2021-21190 CVE-2021-21184 CVE-2021-21168 CVE-2021-21167 CVE-2021-21188 CVE-2021-21172 CVE-2021-21182 CVE-2021-21176 CVE-2021-21159 CVE-2021-21186 CVE-2021-21165 CVE-2021-21189 ---- Fix issue with swiftshader where symbols were not properly generated for the dlopened shared objects, preventing proper functionality. ---- Update to 88.0.4324.182. Fixes CVE-2021-21149 CVE-2021-21150 CVE-2021-21151 CVE-2021-21152 CVE-2021-21153 CVE-2021-21154 CVE-2021-21155 CVE-2021-21156 CVE-2021-21157 -------------------------------------------------------------------------------- ChangeLog:

* Mon Mar 8 2021 Tom Callaway spot@fedoraproject.org - 89.0.4389.82-1 - update to 89.0.4389.82 * Thu Mar 4 2021 Tom Callaway spot@fedoraproject.org - 89.0.4389.72-1 - update to 89.0.4389.72 * Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 88.0.4324.182-3 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. * Thu Feb 25 2021 Tom Callaway spot@fedoraproject.org - 88.0.4234.182-2 - fix swiftshader symbols in libEGL/libGLESv2 with gcc * Wed Feb 17 2021 Tom Callaway spot@fedoraproject.org - 88.0.4234.182-1 - update to 88.0.4234.182 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1929523 - CVE-2021-21149 chromium-browser: Stack overflow in Data Transfer https://bugzilla.redhat.com/show_bug.cgi?id=1929523 [ 2 ] Bug #1929524 - CVE-2021-21150 chromium-browser: Use after free in Downloads https://bugzilla.redhat.com/show_bug.cgi?id=1929524 [ 3 ] Bug #1929525 - CVE-2021-21151 chromium-browser: Use after free in Payments https://bugzilla.redhat.com/show_bug.cgi?id=1929525 [ 4 ] Bug #1929526 - CVE-2021-21152 chromium-browser: Heap buffer overflow in Media https://bugzilla.redhat.com/show_bug.cgi?id=1929526 [ 5 ] Bug #1929527 - CVE-2021-21153 chromium-browser: Stack overflow in GPU Process https://bugzilla.redhat.com/show_bug.cgi?id=1929527 [ 6 ] Bug #1929528 - CVE-2021-21154 chromium-browser: Heap buffer overflow in Tab Strip https://bugzilla.redhat.com/show_bug.cgi?id=1929528 [ 7 ] Bug #1929529 - CVE-2021-21155 chromium-browser: Heap buffer overflow in Tab Strip https://bugzilla.redhat.com/show_bug.cgi?id=1929529 [ 8 ] Bug #1929530 - CVE-2021-21156 chromium-browser: Heap buffer overflow in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1929530 [ 9 ] Bug #1929531 - CVE-2021-21157 chromium-browser: Use after free in Web Sockets https://bugzilla.redhat.com/show_bug.cgi?id=1929531 [ 10 ] Bug #1935934 - CVE-2021-21162 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1935934 [ 11 ] Bug #1935935 - CVE-2021-21180 chromium-browser: Use after free in tab search https://bugzilla.redhat.com/show_bug.cgi?id=1935935 [ 12 ] Bug #1935936 - CVE-2021-21164 chromium-browser: Insufficient data validation in Chrome for iOS https://bugzilla.redhat.com/show_bug.cgi?id=1935936 [ 13 ] Bug #1935937 - CVE-2021-21170 chromium-browser: Incorrect security UI in Loader https://bugzilla.redhat.com/show_bug.cgi?id=1935937 [ 14 ] Bug #1935938 - CVE-2021-21181 chromium-browser: Side-channel information leakage in autofill https://bugzilla.redhat.com/show_bug.cgi?id=1935938 [ 15 ] Bug #1935939 - CVE-2021-21166 chromium-browser: Object lifecycle issue in audio https://bugzilla.redhat.com/show_bug.cgi?id=1935939 [ 16 ] Bug #1935940 - CVE-2021-21160 chromium-browser: Heap buffer overflow in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1935940 [ 17 ] Bug #1935941 - CVE-2021-21179 chromium-browser: Use after free in Network Internals https://bugzilla.redhat.com/show_bug.cgi?id=1935941 [ 18 ] Bug #1935942 - CVE-2021-21187 chromium-browser: Insufficient data validation in URL formatting https://bugzilla.redhat.com/show_bug.cgi?id=1935942 [ 19 ] Bug #1935943 - CVE-2021-21173 chromium-browser: Side-channel information leakage in Network Internals https://bugzilla.redhat.com/show_bug.cgi?id=1935943 [ 20 ] Bug #1935944 - CVE-2021-21174 chromium-browser: Inappropriate implementation in Referrer https://bugzilla.redhat.com/show_bug.cgi?id=1935944 [ 21 ] Bug #1935945 - CVE-2021-21183 chromium-browser: Inappropriate implementation in performance APIs https://bugzilla.redhat.com/show_bug.cgi?id=1935945 [ 22 ] Bug #1935946 - CVE-2021-21161 chromium-browser: Heap buffer overflow in TabStrip https://bugzilla.redhat.com/show_bug.cgi?id=1935946 [ 23 ] Bug #1935947 - CVE-2021-21171 chromium-browser: Incorrect security UI in TabStrip and Navigation https://bugzilla.redhat.com/show_bug.cgi?id=1935947 [ 24 ] Bug #1935948 - CVE-2021-21178 chromium-browser: Inappropriate implementation in Compositing https://bugzilla.redhat.com/show_bug.cgi?id=1935948 [ 25 ] Bug #1935950 - CVE-2021-21169 chromium-browser: Out of bounds memory access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1935950 [ 26 ] Bug #1935951 - CVE-2021-21163 chromium-browser: Insufficient data validation in Reader Mode https://bugzilla.redhat.com/show_bug.cgi?id=1935951 [ 27 ] Bug #1935952 - CVE-2021-21175 chromium-browser: Inappropriate implementation in Site isolation https://bugzilla.redhat.com/show_bug.cgi?id=1935952 [ 28 ] Bug #1935953 - CVE-2021-21177 chromium-browser: Insufficient policy enforcement in Autofill https://bugzilla.redhat.com/show_bug.cgi?id=1935953 [ 29 ] Bug #1935954 - CVE-2021-21185 chromium-browser: Insufficient policy enforcement in extensions https://bugzilla.redhat.com/show_bug.cgi?id=1935954 [ 30 ] Bug #1935955 - CVE-2021-21190 chromium-browser: Uninitialized Use in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1935955 [ 31 ] Bug #1935956 - CVE-2021-21184 chromium-browser: Inappropriate implementation in performance APIs https://bugzilla.redhat.com/show_bug.cgi?id=1935956 [ 32 ] Bug #1935958 - CVE-2021-21168 chromium-browser: Insufficient policy enforcement in appcache https://bugzilla.redhat.com/show_bug.cgi?id=1935958 [ 33 ] Bug #1935959 - CVE-2021-21167 chromium-browser: Use after free in bookmarks https://bugzilla.redhat.com/show_bug.cgi?id=1935959 [ 34 ] Bug #1935960 - CVE-2021-21188 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1935960 [ 35 ] Bug #1935961 - CVE-2021-21172 chromium-browser: Insufficient policy enforcement in File System API https://bugzilla.redhat.com/show_bug.cgi?id=1935961 [ 36 ] Bug #1935962 - CVE-2021-21182 chromium-browser: Insufficient policy enforcement in navigations https://bugzilla.redhat.com/show_bug.cgi?id=1935962 [ 37 ] Bug #1935963 - CVE-2021-21176 chromium-browser: Inappropriate implementation in full screen mode https://bugzilla.redhat.com/show_bug.cgi?id=1935963 [ 38 ] Bug #1935964 - CVE-2021-21159 chromium-browser: Heap buffer overflow in TabStrip https://bugzilla.redhat.com/show_bug.cgi?id=1935964 [ 39 ] Bug #1935965 - CVE-2021-21186 chromium-browser: Insufficient policy enforcement in QR scanning https://bugzilla.redhat.com/show_bug.cgi?id=1935965 [ 40 ] Bug #1935966 - CVE-2021-21165 chromium-browser: Object lifecycle issue in audio https://bugzilla.redhat.com/show_bug.cgi?id=1935966 [ 41 ] Bug #1935967 - CVE-2021-21189 chromium-browser: Insufficient policy enforcement in payments https://bugzilla.redhat.com/show_bug.cgi?id=1935967 --------------------------------------------------------------------------------

================================================================================ gnome-shell-extension-historymanager-prefix-search-12-7.el7 (FEDORA-EPEL-2021-883b27d504) Use PageUp and PageDown to search for previous GNOME Shell commands -------------------------------------------------------------------------------- Update Information:

Minor rebuild to mark HistoryManager Prefix Search as incompatible with GNOME 40. -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ java-latest-openjdk-16.0.0.0.36-0.rolling.el7 (FEDORA-EPEL-2021-3bcf99274f) OpenJDK 16 Runtime Environment -------------------------------------------------------------------------------- Update Information:

This update have intentionally autokarma-off butany user review highly appreciated -------------------------------------------------------------------------------- ChangeLog:

* Fri Feb 19 2021 Andrew Hughes gnu.andrew@redhat.com - 1:16.0.0.0.36-0.0.ea.rolling - Update to jdk-16.0.0.0+36 - Update tarball generation script to use git following OpenJDK's move to github - Update tarball generation script to use PR3823 which handles JDK-8235710 changes - Use upstream default for version-pre rather than setting it to "ea" or "" - Drop libsunec.so which is no longer generated, thanks to JDK-8235710 - Drop unnecessary compiler flags, dating back to work on GCC 6 & 10 - Adapt RH1750419 alt-java patch to still apply after some variable re-naming in the makefiles - Update filever to remove any trailing zeros, as in the OpenJDK build, and use for source filename - Use system harfbuzz now this is supported. - Pass SOURCE_DATE_EPOCH to build for reproducible builds * Fri Feb 19 2021 Stephan Bergmann sbergman@redhat.com - 1:15.0.2.0.7-1.rolling - Hardcode /usr/sbin/alternatives for Flatpak builds * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 1:15.0.2.0.7-0.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1936809 - java-latest-openjdk-headless-15.0.2.0.7-0.rolling.el7.x86_64 requires pcsc-lite-devel which is not in the ubi* repositories https://bugzilla.redhat.com/show_bug.cgi?id=1936809 --------------------------------------------------------------------------------

================================================================================ python-bloom-0.10.2-1.el7 (FEDORA-EPEL-2021-ee2a375b4b) Bloom is a release automation tool -------------------------------------------------------------------------------- Update Information:

Update to the latest release of `bloom` -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 11 2021 Scott K Logan logans@cottsay.net - 0.10.2-1 - Update to 0.10.2 --------------------------------------------------------------------------------

================================================================================ python-shapely-1.5.2-3.el7 (FEDORA-EPEL-2021-d7f7e69cde) Manipulation and analysis of geometric objects in the Cartesian plane -------------------------------------------------------------------------------- Update Information:

Build HTML documentation and add a -doc subpackage. Properly install license file. Various packaging improvements, including the following (and others): * De-conditionalize Python 3 support * Switch to GitHub tarball * Do not use unversioned python * Use appropriate spec file macros * Ensure Cython C sources are always regenerated * Properly install _geos.pxi -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 11 2021 Benjamin A. Beasley code@musicinmybrain.net - 1.5.2-3 - De-conditionalize Python 3 support; this is now an EPEL7-only spec file - Add a _description macro rather than repeating the description - Build the Python 2 version as a subpackage, like the Python 3 version - Use the py_provides macro now that it is available - Update URLs - Switch to GitHub tarball - Do not use unversioned python - Use py?_build/py?_install and similar macros - Use python3_pkgversion macro - Improve BR���s - Filter compiled Python 3 extensions from Provides - Drop obsolete Group field - Ensure Cython C sources are always regenerated - Simplify file lists - Build HTML documentation and add a -doc subpackage - Properly install license file - Use python[23] -m unittest instead of deprecated python[23] setup.py test - Properly install _geos.pxi --------------------------------------------------------------------------------

================================================================================ singularity-3.7.2-1.el7 (FEDORA-EPEL-2021-be86113a13) Application and environment virtualization -------------------------------------------------------------------------------- Update Information:

Upgrade to upstream 3.7.2. -------------------------------------------------------------------------------- ChangeLog:

* Thu Mar 11 2021 Dave Dykstra dwd@fedoraproject.org - 3.7.2-1 - Upgrade to upstream 3.7.2. -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1937530 - singularity-3.7.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1937530 --------------------------------------------------------------------------------