The following Fedora EPEL 7 Security updates need testing:
Age URL
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-01679b76db
chromium-88.0.4324.150-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3cc28d5469
php-horde-Horde-Text-Filter-2.3.7-1.el7
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bb1731457c
prosody-0.11.8-1.el7
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f93d3d26db
privoxy-3.0.31-1.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-389d1fe8e6
libmysofa-1.2-4.el7
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4dda69dcf1
rubygem-rack-cors-1.0.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-2.9.18-1.el7
drbd-9.16.0-3.el7
netdata-1.29.2-1.el7
Details about builds:
================================================================================
ansible-2.9.18-1.el7 (FEDORA-EPEL-2021-9ec8ceb857)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to security and bugfix release 2.9.18.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 20 2021 Kevin Fenzi <[email protected]> - 2.9.18-1
- Update to 2.9.18.
- Fixes: CVE-2021-20228 CVE-2021-20178 CVE-2021-20180 CVE-2021-20191
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917287 - CVE-2021-20178 ansible: user data leak in snmp_facts
module [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917287
[ 2 ] Bug #1917330 - CVE-2021-20178 ansible: user data leak in snmp_facts
module [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917330
[ 3 ] Bug #1917463 - CVE-2021-20180 ansible: ansible-collection:
bitbucket_pipeline_variable exposes secured values [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917463
[ 4 ] Bug #1917465 - CVE-2021-20180 ansible: ansible-collection:
bitbucket_pipeline_variable exposes secured values [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917465
[ 5 ] Bug #1917473 - CVE-2021-20191 ansible: multiple collections exposes
secured values [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917473
[ 6 ] Bug #1917474 - CVE-2021-20191 ansible: multiple collections exposes
secured values [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917474
--------------------------------------------------------------------------------
================================================================================
drbd-9.16.0-3.el7 (FEDORA-EPEL-2021-d53779ad1c)
DRBD user-land tools and scripts
--------------------------------------------------------------------------------
Update Information:
Upstream release of 9.16.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 Peter Hanecak <[email protected]> - 9.16.0-1
- Upstream release of 9.16.0
* Tue Jan 26 2021 Fedora Release Engineering <[email protected]> -
9.15.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1926718 - drbd-9.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1926718
--------------------------------------------------------------------------------
================================================================================
netdata-1.29.2-1.el7 (FEDORA-EPEL-2021-5f6bbecb42)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 19 2021 Didier Fabert <[email protected]> 1.29.2-1
- Update from upstream
* Thu Feb 11 2021 Didier Fabert <[email protected]> 1.29.1-1
- Update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1927059 - netdata-1.29.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1927059
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure