The following Fedora EPEL 7 Security updates need testing:
Age URL
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1f259a45ef
openjpeg2-2.3.1-11.el7
15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9eaea6f65c
audacious-plugins-4.0.5-4.el7 fluidsynth-2.1.8-4.el7
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f706ca6458
radsecproxy-1.9.0-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-8c50b78c57
nginx-1.20.1-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
golang-github-cpuguy83-md2man-2.0.0-4.20210612gitaf8da76.el7
google-benchmark-1.5.5-1.el7
radare2-5.3.1-1.el7
Details about builds:
================================================================================
golang-github-cpuguy83-md2man-2.0.0-4.20210612gitaf8da76.el7
(FEDORA-EPEL-2021-5ab799ce8c)
Converts markdown into roff (man pages)
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
google-benchmark-1.5.5-1.el7 (FEDORA-EPEL-2021-97b6c5810e)
A microbenchmark support library
--------------------------------------------------------------------------------
Update Information:
Updated to version 1.5.5.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 12 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1.5.5-1
- Updated to version 1.5.5.
* Mon May 31 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1.5.4-1
- Updated to version 1.5.4.
--------------------------------------------------------------------------------
================================================================================
radare2-5.3.1-1.el7 (FEDORA-EPEL-2021-c4678a5e4b)
The reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
bump to 5.3.1 ---- bump to radare2 5.3.0 also fixes CVE-2021-32613
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jun 11 2021 Michal Ambroz <rebus at, seznam.cz> 5.3.1-1
- bump to 5.3.1
* Wed Jun 9 2021 Michal Ambroz <rebus at, seznam.cz> 5.3.0-1
- re-enable build for s390x on EPEL8 (libuv should be available for 8.4)
- bump to 5.3.0
- remove radare2-5.2.1-meson_rhel8.patch - accepted upstream
- remove radare2-5.2.1-xxhash.patch - accepted upstream
* Sat May 15 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.1-3
- adding the global plugins directory - for example /usr/lib64/radare2/5.2.1
* Tue May 11 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.1-2
- patch for older version of meson used on EPEL8
- use pkgconfig where possible for BR
- use ldconfig_scriptlets only on older platforms
- add ExcludeArch for s390x on EPEL8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1959941 - CVE-2021-32613 radare2: double free in pyc parse via creafted file
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1959941
[ 2 ] Bug #1966400 - radare2-5.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1966400
--------------------------------------------------------------------------------