The following Fedora EPEL 7 Security updates need testing:
Age URL
43
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f005e1b879
debmirror-2.35-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-9db00036f5
java-latest-openjdk-17.0.1.0.12-1.rolling.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
rpki-client-7.4-1.el7
Details about builds:
================================================================================
rpki-client-7.4-1.el7 (FEDORA-EPEL-2021-c1992565eb)
RPKI validator to support BGP Origin Validation
--------------------------------------------------------------------------------
Update Information:
rpki-client 7.4 =============== * Added support for validating BGPsec Router
Public Keys. * Fix issues with chunked transfer encoding in the RRDP HTTP
client. * Cleanup and improvement of how IO is handled. * Improvements in
the way X509 certificates are verified. * Make rpki-client more resilient
regarding untrusted input: - Limit the allowed character set for filename
listings on Manifests. - Limit the length of SIA URIs. - Limit the size
of certain untrusted inputs. - Don't exit on failures to parse x509 objects.
- Limit the size of objects retreived via RRDP or RSYNC. - Limit the number
of FileAndHash entries on a manifest. - Constrain RRDP such that the
delta/snapshot files must be hosted at the same host as the notification file.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 30 2021 Robert Scheck <robert(a)fedoraproject.org> 7.4-1
- Upgrade to 7.4 (#2018729)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2018729 - rpki-client-7.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2018729
--------------------------------------------------------------------------------