The following Fedora EPEL 7 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-113abf45ca
composer-1.10.22-1.el7
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4ab96a9920
wordpress-5.1.10-1.el7
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4b7c1b59f8
upx-3.96-9.el7
8
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6cc996cdc4
opendmarc-1.4.1-1.el7
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-969456590e
rxvt-unicode-9.21-4.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0fec8057df
python3-lxml-4.2.5-4.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-17f170d38c
caribou0-0.4.21-26.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-7e9a7ecfb4
slurm-20.11.7-3.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-0402b44d82
chromium-90.0.4430.212-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-15abda18e1
singularity-3.7.4-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-1f259a45ef
openjpeg2-2.3.1-11.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c64b965c33
nginx-1.20.1-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9eaea6f65c
audacious-plugins-4.0.5-4.el7 fluidsynth-2.1.8-4.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
eggdrop-1.9.1-1.el7
google-benchmark-1.5.4-1.el7
highway-0.12.1-2.el7
radsecproxy-1.9.0-1.el7
Details about builds:
================================================================================
eggdrop-1.9.1-1.el7 (FEDORA-EPEL-2021-4e23fab38a)
World's most popular Open Source IRC bot
--------------------------------------------------------------------------------
Update Information:
Eggdrop v1.9.1 ============== General changes --------------- - Fixed an
issue where an IP address was incorrectly overwritten after a `CTCP chat` was
received - Fixed an issue where Eggdrop would occassionally crash if no port
was provided when the server was added - Error, instead of silently change,
when adding a bot with invalid ASCII characters in the handle (`.+bot`) -
Removed an incorrect error message after restarting the bot with the PBKDF2
module loaded - Further improved error reporting for socket connections Tcl
API changes --------------- - Fixed the `isaway` command to properly track
`AWAY` server messages Eggdrop config file changes ---------------------------
- Added Libera Chat to the accepted server types
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 31 2021 Robert Scheck <robert(a)fedoraproject.org> 1.9.1-1
- Upgrade to 1.9.1 (#1958575)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1958575 - eggdrop-1.9.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1958575
--------------------------------------------------------------------------------
================================================================================
google-benchmark-1.5.4-1.el7 (FEDORA-EPEL-2021-97b6c5810e)
A microbenchmark support library
--------------------------------------------------------------------------------
Update Information:
Updated to version 1.5.4.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 31 2021 Vitaly Zaitsev <vitaly(a)easycoding.org> - 1.5.4-1
- Updated to version 1.5.4.
--------------------------------------------------------------------------------
================================================================================
highway-0.12.1-2.el7 (FEDORA-EPEL-2021-1c7e291c32)
Efficient and performance-portable SIMD
--------------------------------------------------------------------------------
Update Information:
Add workaround for the lack of pkgconfig in RHEL8 gtest ---- Update to 0.12.1
---- Initial RPM
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1906980 - Review Request: highway - Efficient and performance-portable SIMD
https://bugzilla.redhat.com/show_bug.cgi?id=1906980
[ 2 ] Bug #1963675 - highway-0.12.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1963675
--------------------------------------------------------------------------------
================================================================================
radsecproxy-1.9.0-1.el7 (FEDORA-EPEL-2021-f706ca6458)
Generic RADIUS proxy with RadSec support
--------------------------------------------------------------------------------
Update Information:
radsecproxy 1.9.0 (2021-05-28) ============================== New features
------------ - Accept multiple source* configs for IPv4/v6 - Specify source
per server - User configurable cipher-list and ciphersuites - User
configurable TLS versions - Config option for DH-file - Add rID and
otherName options to certifcateAttributeCheck - Allow multiple
matchCertificateAttribute - Option to start dynamic server in blocking mode
Misc ---- - Move radsecproxy manpage to section 8 - Log CUI and operator-
name if present - Log CN for incomming TLS connections Bug fixes ---------
- Fix overlapping log lines - Fix memory leak in logging - Fix dynidsc
example scripts input validation (CVE-2021-32642)
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 31 2021 Robert Scheck <robert(a)fedoraproject.org> 1.9.0-1
- Upgrade to 1.9.0 (#1959532, #1965675)
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.8.2-4
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1965675 - CVE-2021-32642 radsecproxy: missing input validation in dynamic
discovery example scripts
https://bugzilla.redhat.com/show_bug.cgi?id=1965675
--------------------------------------------------------------------------------