The following Fedora EPEL 7 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1f259a45ef
openjpeg2-2.3.1-11.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9eaea6f65c
audacious-plugins-4.0.5-4.el7 fluidsynth-2.1.8-4.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f706ca6458
radsecproxy-1.9.0-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-8c50b78c57
nginx-1.20.1-2.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
distribution-gpg-keys-1.54-1.el7
mock-2.11-1.el7
mock-core-configs-34.4-1.el7
radare2-5.3.0-1.el7
resalloc-3.6-1.el7
rpminspect-1.5-1.el7
Details about builds:
================================================================================
distribution-gpg-keys-1.54-1.el7 (FEDORA-EPEL-2021-bea8f54571)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
mock - mock: fix broken --help output - compress_logs: compress also after repo
failures - suggest moving to libera.chat - Define _platform_multiplier macro -
allow to --install external:* - honor --cwd for --shell (msuchy(a)redhat.com)
mock-core-configs - Add GPG keys and RPM repositories for openSUSE Leap 15.3 -
EOL Fedora 32 (msuchy(a)redhat.com) - sync centos-stream-8 with centos-stream-
repos distribution-gpg-keys - update copr keys - Add openSUSE Backports OBS
project key - Add SUSE's package signing keys
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 7 2021 Miroslav Such�� <msuchy(a)redhat.com> 1.54-1
- update copr keys
- Add openSUSE Backports OBS project key
- Add SUSE's package signing keys
--------------------------------------------------------------------------------
================================================================================
mock-2.11-1.el7 (FEDORA-EPEL-2021-bea8f54571)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
mock - mock: fix broken --help output - compress_logs: compress also after repo
failures - suggest moving to libera.chat - Define _platform_multiplier macro -
allow to --install external:* - honor --cwd for --shell (msuchy(a)redhat.com)
mock-core-configs - Add GPG keys and RPM repositories for openSUSE Leap 15.3 -
EOL Fedora 32 (msuchy(a)redhat.com) - sync centos-stream-8 with centos-stream-
repos distribution-gpg-keys - update copr keys - Add openSUSE Backports OBS
project key - Add SUSE's package signing keys
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 8 2021 Pavel Raiskup <praiskup(a)redhat.com> 2.11-1
- mock: fix broken --help output
- compress_logs: compress also after repo failures
- move to libera.chat (msuchy(a)redhat.com)
- Define _platform_multiplier macro (msuchy(a)redhat.com)
- allow to --install external:* (msuchy(a)redhat.com)
- move installation of external:* to separate function (msuchy(a)redhat.com)
- honor --cwd for --shell (msuchy(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-34.4-1.el7 (FEDORA-EPEL-2021-bea8f54571)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
mock - mock: fix broken --help output - compress_logs: compress also after repo
failures - suggest moving to libera.chat - Define _platform_multiplier macro -
allow to --install external:* - honor --cwd for --shell (msuchy(a)redhat.com)
mock-core-configs - Add GPG keys and RPM repositories for openSUSE Leap 15.3 -
EOL Fedora 32 (msuchy(a)redhat.com) - sync centos-stream-8 with centos-stream-
repos distribution-gpg-keys - update copr keys - Add openSUSE Backports OBS
project key - Add SUSE's package signing keys
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jun 8 2021 Pavel Raiskup <praiskup(a)redhat.com> 34.4-1
- Add GPG keys and RPM repositories for openSUSE Leap 15.3 (ngompa13(a)gmail.com)
- EOL Fedora 32 (msuchy(a)redhat.com)
- sync centos-stream-8 with centos-stream-repos (msuchy(a)redhat.com)
--------------------------------------------------------------------------------
================================================================================
radare2-5.3.0-1.el7 (FEDORA-EPEL-2021-31821562c4)
The reverse engineering framework
--------------------------------------------------------------------------------
Update Information:
re-enable build for s390x on EPEL8 (libuv should be available for 8.4)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 9 2021 Michal Ambroz <rebus at, seznam.cz> 5.3.0-1
- re-enable build for s390x on EPEL8 (libuv should be available for 8.4)
- bump to 5.3.0
- remove radare2-5.2.1-meson_rhel8.patch - accepted upstream
- remove radare2-5.2.1-xxhash.patch - accepted upstream
* Sat May 15 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.1-3
- adding the global plugins directory - for example /usr/lib64/radare2/5.2.1
* Tue May 11 2021 Michal Ambroz <rebus at, seznam.cz> 5.2.1-2
- patch for older version of meson used on EPEL8
- use pkgconfig where possible for BR
- use ldconfig_scriptlets only on older platforms
- add ExcludeArch for s390x on EPEL8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1966400 - radare2-5.3.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1966400
--------------------------------------------------------------------------------
================================================================================
resalloc-3.6-1.el7 (FEDORA-EPEL-2021-321382a810)
Resource allocator for expensive resources - client tooling
--------------------------------------------------------------------------------
Update Information:
rebase to a new version having DB performance fixes
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 9 2021 Pavel Raiskup <praiskup(a)redhat.com> - 3.6-1
- rebase to a new version having DB performance fixes
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 3.4-3
- Rebuilt for Python 3.10
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 3.4-2
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
--------------------------------------------------------------------------------
================================================================================
rpminspect-1.5-1.el7 (FEDORA-EPEL-2021-aa56cc3024)
Build deviation compliance tool
--------------------------------------------------------------------------------
Update Information:
Upgrade to rpminspect-1.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 30 2021 David Cantrell <dcantrell(a)redhat.com> - 1.5-1
- Begin work on version 1.5
- Use llabs() instead of labs() in the filesize inspection
- Improve has invalid execstack flags reporting
- Use long unsigned int to report size changes in patches
- Fix some errors in the changedfiles inspection
- Update the changedfiles test cases
- Check DT_SONAME in is_elf_shared_library()
- Skip debuginfo and debugsource files in abidiff
- Make sure abidiff test cases add a DT_SONAME to the test lib
- Report INFO level for patches findings by default
- Python black fixes in test/test_abidiff.py
- Update the test/test_patches.py cases for patches changes
- Generate regular changelog in utils/srpm.h
- Skip branches without targets in submit-koji-builds.sh
- Fedora and CentOS systems in ci need diffstat
- opensuse-leap CI job requires diffstat
- Fix the Debian CI jobs in GitHub Actions
- Fix and enable the Ubuntu extra-ci job in GitHub Actions
- Use pip instead of pip3 for the Ubuntu command
- Use apt-get -y install in
- Enable the opensuse-tumbleweed GHA job again
- Make sure the Gentoo GHA job has diffstat
- Get the Arch Linux GHA job working again
- Use ubuntu:latest for the ubuntu GHA image
- Simplify the utils/determine-os.sh script
- Update license table in README.md
- Allow any number of builds specified for fetch only mode
- Handle old or broken versions of libmagic in changedfiles
- Update GitHub Action status badges in README.md
- Fix $(OS) check in the Makefile
- Fix the ubuntu GitHub Actions extra-ci job
- Make sure the centos8 job has git available before cloning
- Change strappend() to work as a variadic function
- Use json_tokener_parse_ex() to get better error reporting
- Fix reading of the javabytecode block in the config file
- Catch missing/losing -fPIC correctly on .a ELF objects (#352)
- Refactor elf_archive_tests() and its helper functions
- Followup fix for find_no_pic, find_pic, and find_all
- Install cpp-coveralls using pacman on Arch Linux
- Install cpp-coveralls using pip on Arch Linux
- Install cpp-coveralls in pre.sh on Arch Linux
- Install required Python modules in pre.sh on Arch Linux
- Do not upgrade pip on Arch Linux, go back to using pip.txt
- Drop DEBUG_PRINT from source generated by pic_bits.sh
- Do not run apt-get update as a second time on Debians systems
- The lost PIC tests need to invoke gcc with -fno-PIC
- Update the OpenSUSE Tumbleweed files, but disable it anyway
- Define inspection_ignores in struct rpminspect
- Clean up the config file section reading code
- Add add_ignore() to init.c
- Fix fetch only mode download directory
- Stub out libcurl download progress callback function
- Perform symbolic owner and group matching in ownership (#364)
- Restrict download_progress() to systems with CURLOPT_XFERINFOFUNCTION
- Read per-inspection ignore lists from the config file.
- Add commented out per-inspection ignore blocks
- Implement per-inspection path ignore support (#351)
- Report annocheck failures correctly in librpminspect.
- Note all regular expression settings use regex(7) syntax
- Allow size_threshold: info in the config file (#261)
- Check ignore list in files for path prefixes to ignore (#360)
- Support a list of expected empty RPMs in the config file (#355)
- Call mparse_reset() before mparse_readfd()
- Do not crash with the -c option specifies a non-existent file
- Update TODO list
- Make sure brp-compress is disabled in test_manpage.py
- Require/Recommend /usr/bin/annocheck
- Note size_threshold can be the keyword info
- Ensure ctxt->lastError.message is not NULL before strdup (#382)
- Handle corrupt compressed files in changedfiles (#382)
- Disable debugging output for the ignore lists in init.c
- Drop debugging output in the xml inspection
- Remove what working directories we can
- Correctly find icons for desktop files in subpackages (#367)
- Followup to the Icon= check in the desktop inspection (#367)
- BuildRequires libmandoc-devel >= 1.14.5
- Manually install mandoc on centos7 for now
--------------------------------------------------------------------------------