The following Fedora EPEL 7 Security updates need testing:
Age URL
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-314d2feba2
chromium-90.0.4430.93-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-80d45ac7ec
ansible-2.9.21-1.el7
9
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-680600d10f
python-impacket-0.9.22-3.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-352a65d3bc
djvulibre-3.5.25.3-23.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c44d955770
prosody-0.11.9-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
composer-1.10.22-1.el7
hedley-15-5.el7
libinstpatch-1.1.6-2.el7
monitor-edid-3.2-4.el7
php-horde-Horde-Imap-Client-2.30.2-1.el7
rclone-1.55.1-1.el7
sleef-3.5.1-4.el7
tito-0.6.17-1.el7
wordpress-5.1.10-1.el7
Details about builds:
================================================================================
composer-1.10.22-1.el7 (FEDORA-EPEL-2021-113abf45ca)
Dependency Manager for PHP
--------------------------------------------------------------------------------
Update Information:
**Version 1.10.22** 2021-04-27 * Security: Fixed command injection
vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and
downloaders (GHSA-h5h8-pc6h-jvvx / **CVE-2021-29472**)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 27 2021 Remi Collet <remi(a)remirepo.net> - 1.10.22-1
- update to 1.10.22
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1955727 - CVE-2021-29472 composer: Specifically crafted URL values allow code
to be executed in the HgDriver
https://bugzilla.redhat.com/show_bug.cgi?id=1955727
--------------------------------------------------------------------------------
================================================================================
hedley-15-5.el7 (FEDORA-EPEL-2021-45914d9133)
A C/C++ header to help move #ifdefs out of your code
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL7
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
libinstpatch-1.1.6-2.el7 (FEDORA-EPEL-2021-9c43f89371)
Instrument file software library
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL7
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
monitor-edid-3.2-4.el7 (FEDORA-EPEL-2021-7c73876fd7)
Tool for probing and parsing monitor EDID
--------------------------------------------------------------------------------
Update Information:
Fix missing required BZ1960811
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 17 2021 Pat Riehecky <riehecky(a)fnal.gov - 3.2-4
- Fix missing required BZ1960811
* Wed Feb 19 2020 Pat Riehecky <riehecky(a)fnal.gov - 3.2-3
- Fix double include
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1960811 - missing requires: File::Find module for monitor-edid
https://bugzilla.redhat.com/show_bug.cgi?id=1960811
--------------------------------------------------------------------------------
================================================================================
php-horde-Horde-Imap-Client-2.30.2-1.el7 (FEDORA-EPEL-2021-857d08c2d9)
Horde IMAP abstraction interface
--------------------------------------------------------------------------------
Update Information:
**Horde_Imap_Client 2.30.2** * Remove redundant array_diff that could cause
removal of emails from local message cache
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 17 2021 Remi Collet <remi(a)remirepo.net> - 2.30.2-1
- update to 2.30.2
--------------------------------------------------------------------------------
================================================================================
rclone-1.55.1-1.el7 (FEDORA-EPEL-2021-e6ee74808e)
Rsync for cloud storage
--------------------------------------------------------------------------------
Update Information:
Update to 1.55.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 17 2021 Robert-Andr�� Mauchin <zebob.m(a)gmail.com> - 1.55.1-1
- Update to 1.55.1
- Fix: rhbz#1961130
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961130 - rclone 1.55 ifor EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1961130
--------------------------------------------------------------------------------
================================================================================
sleef-3.5.1-4.el7 (FEDORA-EPEL-2021-d8f5e81967)
Vectorized math library
--------------------------------------------------------------------------------
Update Information:
Initial package for EPEL7
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
tito-0.6.17-1.el7 (FEDORA-EPEL-2021-d295c35176)
A tool for managing rpm based git projects
--------------------------------------------------------------------------------
Update Information:
- Add support for centpkg - Add support for repos that use submodules. - Make
build --verbose autocompletable
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 17 2021 Jakub Kadlcik <frostyx(a)email.cz> 0.6.17-1
- Update releasers.conf (frostyx(a)email.cz)
- Make build --verbose autocompletable (nmoumoul(a)redhat.com)
- Add support for centpkg (wpoteat(a)redhat.com)
- Remove extraneous extra newline (areese(a)users.noreply.github.com)
- Add some documentation for tito.builder.SubmoduleAwareBuilder
(areese999(a)apple.com)
- Update based on feedback: 1. Remove PushDir, tito.common.chdir has the same
functionality so use that instead. 2. Remove useless override of constructor,
it's just extra noise. (areese999(a)apple.com)
- 150 Add support for repos that use submodules. Allow though submodules are a
contentious topic, this adds a submodule_aware_builder (areese999(a)apple.com)
- doc: fix typo tito.props (subpop(a)users.noreply.github.com)
- Update fedora releaser in .tito/releasers.conf (frostyx(a)email.cz)
--------------------------------------------------------------------------------
================================================================================
wordpress-5.1.10-1.el7 (FEDORA-EPEL-2021-4ab96a9920)
Blog tool and publishing platform
--------------------------------------------------------------------------------
Update Information:
**Wordpress 5.1.10**
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 17 2021 Remi Collet <remi(a)remirepo.net> - 5.1.10-1
- WordPress 5.1.10 Security Release
--------------------------------------------------------------------------------