The following Fedora EPEL 7 Security updates need testing: Age URL 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-314d2feba2 chromium-90.0.4430.93-1.el7 12 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80d45ac7ec ansible-2.9.21-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-680600d10f python-impacket-0.9.22-3.el7 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-352a65d3bc djvulibre-3.5.25.3-23.el7 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c44d955770 prosody-0.11.9-1.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

composer-1.10.22-1.el7 hedley-15-5.el7 libinstpatch-1.1.6-2.el7 monitor-edid-3.2-4.el7 php-horde-Horde-Imap-Client-2.30.2-1.el7 rclone-1.55.1-1.el7 sleef-3.5.1-4.el7 tito-0.6.17-1.el7 wordpress-5.1.10-1.el7

Details about builds:

================================================================================ composer-1.10.22-1.el7 (FEDORA-EPEL-2021-113abf45ca) Dependency Manager for PHP -------------------------------------------------------------------------------- Update Information:

**Version 1.10.22** 2021-04-27 * Security: Fixed command injection vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and downloaders (GHSA-h5h8-pc6h-jvvx / **CVE-2021-29472**) -------------------------------------------------------------------------------- ChangeLog:

* Tue Apr 27 2021 Remi Collet remi@remirepo.net - 1.10.22-1 - update to 1.10.22 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1955727 - CVE-2021-29472 composer: Specifically crafted URL values allow code to be executed in the HgDriver https://bugzilla.redhat.com/show_bug.cgi?id=1955727 --------------------------------------------------------------------------------

================================================================================ hedley-15-5.el7 (FEDORA-EPEL-2021-45914d9133) A C/C++ header to help move #ifdefs out of your code -------------------------------------------------------------------------------- Update Information:

Initial package for EPEL7 -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ libinstpatch-1.1.6-2.el7 (FEDORA-EPEL-2021-9c43f89371) Instrument file software library -------------------------------------------------------------------------------- Update Information:

Initial package for EPEL7 -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ monitor-edid-3.2-4.el7 (FEDORA-EPEL-2021-7c73876fd7) Tool for probing and parsing monitor EDID -------------------------------------------------------------------------------- Update Information:

Fix missing required BZ1960811 -------------------------------------------------------------------------------- ChangeLog:

* Mon May 17 2021 Pat Riehecky <riehecky@fnal.gov - 3.2-4 - Fix missing required BZ1960811 * Wed Feb 19 2020 Pat Riehecky <riehecky@fnal.gov - 3.2-3 - Fix double include * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1960811 - missing requires: File::Find module for monitor-edid https://bugzilla.redhat.com/show_bug.cgi?id=1960811 --------------------------------------------------------------------------------

================================================================================ php-horde-Horde-Imap-Client-2.30.2-1.el7 (FEDORA-EPEL-2021-857d08c2d9) Horde IMAP abstraction interface -------------------------------------------------------------------------------- Update Information:

**Horde_Imap_Client 2.30.2** * Remove redundant array_diff that could cause removal of emails from local message cache -------------------------------------------------------------------------------- ChangeLog:

* Mon May 17 2021 Remi Collet remi@remirepo.net - 2.30.2-1 - update to 2.30.2 --------------------------------------------------------------------------------

================================================================================ rclone-1.55.1-1.el7 (FEDORA-EPEL-2021-e6ee74808e) Rsync for cloud storage -------------------------------------------------------------------------------- Update Information:

Update to 1.55.1 -------------------------------------------------------------------------------- ChangeLog:

* Mon May 17 2021 Robert-Andr�� Mauchin zebob.m@gmail.com - 1.55.1-1 - Update to 1.55.1 - Fix: rhbz#1961130 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1961130 - rclone 1.55 ifor EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1961130 --------------------------------------------------------------------------------

================================================================================ sleef-3.5.1-4.el7 (FEDORA-EPEL-2021-d8f5e81967) Vectorized math library -------------------------------------------------------------------------------- Update Information:

Initial package for EPEL7 -------------------------------------------------------------------------------- ChangeLog:

--------------------------------------------------------------------------------

================================================================================ tito-0.6.17-1.el7 (FEDORA-EPEL-2021-d295c35176) A tool for managing rpm based git projects -------------------------------------------------------------------------------- Update Information:

- Add support for centpkg - Add support for repos that use submodules. - Make build --verbose autocompletable -------------------------------------------------------------------------------- ChangeLog:

* Mon May 17 2021 Jakub Kadlcik frostyx@email.cz 0.6.17-1 - Update releasers.conf (frostyx@email.cz) - Make build --verbose autocompletable (nmoumoul@redhat.com) - Add support for centpkg (wpoteat@redhat.com) - Remove extraneous extra newline (areese@users.noreply.github.com) - Add some documentation for tito.builder.SubmoduleAwareBuilder (areese999@apple.com) - Update based on feedback: 1. Remove PushDir, tito.common.chdir has the same functionality so use that instead. 2. Remove useless override of constructor, it's just extra noise. (areese999@apple.com) - 150 Add support for repos that use submodules. Allow though submodules are a contentious topic, this adds a submodule_aware_builder (areese999@apple.com) - doc: fix typo tito.props (subpop@users.noreply.github.com) - Update fedora releaser in .tito/releasers.conf (frostyx@email.cz) --------------------------------------------------------------------------------

================================================================================ wordpress-5.1.10-1.el7 (FEDORA-EPEL-2021-4ab96a9920) Blog tool and publishing platform -------------------------------------------------------------------------------- Update Information:

**Wordpress 5.1.10** -------------------------------------------------------------------------------- ChangeLog:

* Mon May 17 2021 Remi Collet remi@remirepo.net - 5.1.10-1 - WordPress 5.1.10 Security Release --------------------------------------------------------------------------------