The following Fedora EPEL 7 Security updates need testing:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-af51ba0333
wordpress-5.1.12-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-568a1eb67d
btrbk-0.31.3-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
argparse-manpage-2.1-1.el7
binaryen-104-1.el7
libmetalink-0.1.3-5.el7
pspg-5.5.3-1.el7
seamonkey-2.53.10.2-1.el7
Details about builds:
================================================================================
argparse-manpage-2.1-1.el7 (FEDORA-EPEL-2022-2c11373be4)
Build manual page from Python ArgumentParser object
--------------------------------------------------------------------------------
Update Information:
new upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 12 2022 Pavel Raiskup <praiskup(a)redhat.com> - 2.1-1
- new upstream release:
https://github.com/praiskup/argparse-manpage/releases/tag/v2.1
--------------------------------------------------------------------------------
================================================================================
binaryen-104-1.el7 (FEDORA-EPEL-2022-2d515d4692)
Compiler and toolchain infrastructure library for WebAssembly
--------------------------------------------------------------------------------
Update Information:
Bugfix release including fix for CVE-2021-45290 and CVE-2021-45293.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 11 2022 Dominik Mierzejewski <rpm(a)greysector.net> 104-1
- update to 104 (#2033827)
- fixes CVE-2021-45290 (#2037323, #2037325)
- fixes CVE-2021-45293 (#2037324, #2037326)
* Sun Dec 5 2021 Dominik Mierzejewski <rpm(a)greysector.net> 103-1
- update to 103 (#2028875)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2033827 - binaryen-104 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2033827
[ 2 ] Bug #2037327 - CVE-2021-45290 binaryen: assertion abort in
wasm::handle_unreachable [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2037327
[ 3 ] Bug #2037328 - CVE-2021-45293 binaryen: Invalid memory address dereference in
wasm::WasmBinaryBuilder::visitLet [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2037328
--------------------------------------------------------------------------------
================================================================================
libmetalink-0.1.3-5.el7 (FEDORA-EPEL-2022-673d6fb241)
Metalink library written in C
--------------------------------------------------------------------------------
Update Information:
Fix a [memory safety
issue](https://bugs.launchpad.net/libmetalink/+bug/1888672)
and some less serious [memory
issues](https://bugs.launchpad.net/libmetalink/+bug/1784359).
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 12 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.1.3-5
- Package AUTHORS, ChangeLog, and NEWS files
* Wed Jan 12 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> 0.1.3-4
- Backport packaging improvements from F36/Rawhide
--------------------------------------------------------------------------------
================================================================================
pspg-5.5.3-1.el7 (FEDORA-EPEL-2022-b3c1fe1949)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.5.3
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 12 2022 Pavel Raiskup <praiskup(a)redhat.com> - 5.5.3-1
- new upstream release, per release notes:
https://github.com/okbob/pspg/releases/tag/5.5.3
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2032870 - pspg-5.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2032870
--------------------------------------------------------------------------------
================================================================================
seamonkey-2.53.10.2-1.el7 (FEDORA-EPEL-2022-39037b2dd1)
Web browser, e-mail, news, IRC client, HTML editor
--------------------------------------------------------------------------------
Update Information:
Update to 2.53.10.2 Backport some fixes to improve compatibility with modern
sites
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 12 2022 Dmitry Butskoy <Dmitry(a)Butskoy.name> 2.53.10.2-1
- update to 2.53.10.2
- backport nullish coalescing support (mozbz 1566141 and others)
- backport optional chaining support (mozbz 1566143 and others)
--------------------------------------------------------------------------------