The following Fedora EPEL 7 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-680600d10f
python-impacket-0.9.22-3.el7
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-352a65d3bc
djvulibre-3.5.25.3-23.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-c44d955770
prosody-0.11.9-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-113abf45ca
composer-1.10.22-1.el7
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4ab96a9920
wordpress-5.1.10-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
highway-0.12.0-1.20210518git376a400.el7
ipv6calc-3.1.0-52.el7
ne-3.3.1-1.el7
qpid-dispatch-1.16.0-1.el7
rpki-client-7.1-1.el7
scitokens-cpp-0.6.0-2.el7
upx-3.96-9.el7
Details about builds:
================================================================================
highway-0.12.0-1.20210518git376a400.el7 (FEDORA-EPEL-2021-fb5cae13e6)
Efficient and performance-portable SIMD
--------------------------------------------------------------------------------
Update Information:
Initial RPM
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1906980 - Review Request: highway - Efficient and performance-portable SIMD
https://bugzilla.redhat.com/show_bug.cgi?id=1906980
--------------------------------------------------------------------------------
================================================================================
ipv6calc-3.1.0-52.el7 (FEDORA-EPEL-2021-803f5347d3)
IPv6 address format change and calculation utility
--------------------------------------------------------------------------------
Update Information:
Final release 3.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 18 2021 Peter Bieringer <pb(a)bieringer.de> - 3.1.0-52
- Final release 3.1.0
--------------------------------------------------------------------------------
================================================================================
ne-3.3.1-1.el7 (FEDORA-EPEL-2021-48b875cd5a)
ne, the nice editor
--------------------------------------------------------------------------------
Update Information:
First release
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1952927 - Review Request: ne - ne, the nice editor
https://bugzilla.redhat.com/show_bug.cgi?id=1952927
--------------------------------------------------------------------------------
================================================================================
qpid-dispatch-1.16.0-1.el7 (FEDORA-EPEL-2021-e92fa734f6)
Dispatch router for Qpid
--------------------------------------------------------------------------------
Update Information:
Rebase to 1.16.0.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 18 2021 Irina Boverman <iboverma(a)redhat.com> - 1.16.0-1
- Rebased to 1.16.0
--------------------------------------------------------------------------------
================================================================================
rpki-client-7.1-1.el7 (FEDORA-EPEL-2021-ecd58b58fb)
RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
rpki-client 7.1 =============== * Add keep-alive support to the HTTP client
code for RRDP * Reference-count and delete unused files synced via RRDP, as far
as possible * In the JSON output, change the AS Number from a string ("AS123")
to an integer ("123") to make processing of the output easier * Add an
`expires` column to CSV & JSON output, based on certificate and CRL validity
times. The `expires` value can be used to avoid route selection based on stale
data when generating VRP sets, when faced with loss of communication between
consumer and valdiator, or validator and CA repository * Make the runtime
timeout (`-s` option) also triggers in child processes * Improved RRDP support,
upstream encourages testing of RRDP with the `-r` option so that RRDP can be
enabled by default in a future release; please report any RRDP issues found, if
possible, directly to upstream In the portable version, * Improve support for
older libressl versions (although the latest stable release is recommended) *
Add missing compat headers in release packages so they build on Alpine Linux and
macOS
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 18 2021 Robert Scheck <robert(a)fedoraproject.org> 7.1-1
- Upgrade to 7.1 (#1961870)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961870 - rpki-client-7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1961870
--------------------------------------------------------------------------------
================================================================================
scitokens-cpp-0.6.0-2.el7 (FEDORA-EPEL-2021-d9d2068267)
C++ Implementation of the SciTokens Library
--------------------------------------------------------------------------------
Update Information:
- Fix compilation errors on c++11 - Update to jwt-cpp-0.4.0 vendor - Change
scitoken profile name to match spec, scitoken:2.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 18 2021 Derek Weitzel <dweitzel(a)unl.edu> - 0.6.0-2
- Add back paren patch
* Tue Mar 9 2021 Derek Weitzel <dweitzel(a)unl.edu> - 0.6.0-1
- Fix compilation errors on c++11
- Update to jwt-cpp-0.4.0 vendor
- Change scitoken profile name to match spec, scitoken:2.0
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.5.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
upx-3.96-9.el7 (FEDORA-EPEL-2021-4b7c1b59f8)
Ultimate Packer for eXecutables
--------------------------------------------------------------------------------
Update Information:
Patch for CVE-2020-24119.
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 18 2021 Gwyn Ciesla <gwync(a)protonmail.com> - 3.96-9
- Patch for CVE-2020-24119
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1961593 - CVE-2020-24119 upx: heap buffer overflow in p_lx_elf.cpp
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1961593
--------------------------------------------------------------------------------