The following Fedora EPEL 7 Security updates need testing: Age URL 61 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879 debmirror-2.35-1.el7 6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-6d0e7309d6 wordpress-5.1.11-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing openssl11-1.1.1k-2.el7 snapd-2.53.2-1.el7 Details about builds: ================================================================================ openssl11-1.1.1k-2.el7 (FEDORA-EPEL-2021-70fe95babd) Utilities from the general purpose cryptography library with TLS implementation -------------------------------------------------------------------------------- Update Information: - backport from 1.1.1k-5: CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings. Resolves: rhbz#2005400 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 17 2021 Robert Scheck <robert@xxxxxxxxxxxxxxxxx> 1.1.1k-2 - backport from 1.1.1k-5: CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings. Resolves: rhbz#2005400 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1995634 - CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings https://bugzilla.redhat.com/show_bug.cgi?id=1995634 -------------------------------------------------------------------------------- ================================================================================ snapd-2.53.2-1.el7 (FEDORA-EPEL-2021-217a4fc000) A transactional software package manager -------------------------------------------------------------------------------- Update Information: Update to 2.53.2 -------------------------------------------------------------------------------- ChangeLog: * Wed Nov 17 2021 Maciek Borzecki <maciek.borzecki@xxxxxxxxx> - 2.53.2-1 - Release 2.53.2 to Fedora * Mon Nov 15 2021 Ian Johnson <ian.johnson@xxxxxxxxxxxxx> - New upstream release 2.53.2 - interfaces/builtin/block_devices: allow blkid to print block device attributes/run/udev/data/b{major}:{minor} - cmd/libsnap-confine-private: do not deny all devices when reusing the device cgroup - interfaces/builtin/time-control: allow pps access - interfaces/u2f-devices: add Trezor and Trezor v2 keys - interfaces: timezone-control, add permission for ListTimezones DBus call - interfaces/apparmor/template.go: allow udevadm from merged usr systems - interface/modem-manager: allow connecting to the mbim/qmi proxy - interfaces/network-manager-observe: Update for libnm client library - cmd/snap-seccomp/syscalls: update syscalls to match libseccomp abad8a8f4 - sandbox/cgroup: freeze and thaw cgroups related to services and scopes only - o/hookstate: print cohort with snapctl refresh --pending - cmd/snap-confine: lazy set up of device cgroup, only when devices were assigned - tests: ensure systemd-timesyncd is installed on debian - tests/lib/pkgdb: install strace on Debian 11 and Sid - tests/main/snapd-sigterm: flush, use retry - tests/main/snapd-sigterm: fix race conditions - release-tools/repack-debian-tarball.sh: fix c-vendor dir - data/selinux: allow snap-confine to read udev's database - interfaces/dsp: add more ambarella things* interfaces/dsp: add more ambarella things -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure