The following Fedora EPEL 8 Security updates need testing:
Age URL
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-12d0e14fab
cacti-1.2.13-1.el8 cacti-spine-1.2.13-1.el8
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-1c906e59bb
mbedtls-2.16.7-1.el8
9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-442e619b4a
singularity-3.6.0-1.el8
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-31b5963358
tor-0.4.3.6-1.el8
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-a0f28fffcf
bashtop-0.9.24-1.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-cf34e230c7
clamav-0.102.4-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
CCfits-2.5-14.el8
chromium-84.0.4147.89-1.el8
hscolour-1.24.2-2.el8
java-latest-openjdk-14.0.2.12-1.rolling.el8
mg-20200723-1.el8
mimetex-1.74-15.el8
php-adodb-5.20.6-9.el8
python-netapp-lib-2020.7.16-1.el8
xxhash-0.7.4-2.el8
Details about builds:
================================================================================
CCfits-2.5-14.el8 (FEDORA-EPEL-2020-ca52d192e2)
A C++ interface for cfitsio
--------------------------------------------------------------------------------
Update Information:
Fix dependency with cfitsio
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 3 2020 Alejandro Alvarez Ayllon <aalva...@fedoraproject.org> 2.5-14
- Fix dependency on cfitsio-devel: it uses short version in epel8
--------------------------------------------------------------------------------
================================================================================
chromium-84.0.4147.89-1.el8 (FEDORA-EPEL-2020-cf43d780cc)
A WebKit (Blink) powered web browser
--------------------------------------------------------------------------------
Update Information:
Just enough time for one more update. Chromium 84. Fixes CVE-2020-6510
CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515
CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520
CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525
CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530
CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 15 2020 Tom Callaway <s...@fedoraproject.org> - 84.0.4147.89-1
- update to 84.0.4147.89
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1857320 - CVE-2020-6511 chromium-browser: Side-channel information
leakage in content security policy
https://bugzilla.redhat.com/show_bug.cgi?id=1857320
[ 2 ] Bug #1857321 - CVE-2020-6512 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1857321
[ 3 ] Bug #1857322 - CVE-2020-6513 chromium-browser: Heap buffer overflow in
PDFium
https://bugzilla.redhat.com/show_bug.cgi?id=1857322
[ 4 ] Bug #1857323 - CVE-2020-6515 chromium-browser: Use after free in tab
strip
https://bugzilla.redhat.com/show_bug.cgi?id=1857323
[ 5 ] Bug #1857324 - CVE-2020-6516 chromium-browser: Policy bypass in CORS
https://bugzilla.redhat.com/show_bug.cgi?id=1857324
[ 6 ] Bug #1857325 - CVE-2020-6518 chromium-browser: Use after free in
developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1857325
[ 7 ] Bug #1857326 - CVE-2020-6519 chromium-browser: Policy bypass in CSP
https://bugzilla.redhat.com/show_bug.cgi?id=1857326
[ 8 ] Bug #1857327 - CVE-2020-6520 chromium-browser: Heap buffer overflow in
Skia
https://bugzilla.redhat.com/show_bug.cgi?id=1857327
[ 9 ] Bug #1857328 - CVE-2020-6521 chromium-browser: Side-channel information
leakage in autofill
https://bugzilla.redhat.com/show_bug.cgi?id=1857328
[ 10 ] Bug #1857329 - CVE-2020-6523 chromium-browser: Out of bounds write in
Skia
https://bugzilla.redhat.com/show_bug.cgi?id=1857329
[ 11 ] Bug #1857330 - CVE-2020-6524 chromium-browser: Heap buffer overflow in
WebAudio
https://bugzilla.redhat.com/show_bug.cgi?id=1857330
[ 12 ] Bug #1857331 - CVE-2020-6525 chromium-browser: Heap buffer overflow in
Skia
https://bugzilla.redhat.com/show_bug.cgi?id=1857331
[ 13 ] Bug #1857332 - CVE-2020-6526 chromium-browser: Inappropriate
implementation in iframe sandbox
https://bugzilla.redhat.com/show_bug.cgi?id=1857332
[ 14 ] Bug #1857333 - CVE-2020-6527 chromium-browser: Insufficient policy
enforcement in CSP
https://bugzilla.redhat.com/show_bug.cgi?id=1857333
[ 15 ] Bug #1857334 - CVE-2020-6528 chromium-browser: Incorrect security UI
in basic auth
https://bugzilla.redhat.com/show_bug.cgi?id=1857334
[ 16 ] Bug #1857336 - CVE-2020-6529 chromium-browser: Inappropriate
implementation in WebRTC
https://bugzilla.redhat.com/show_bug.cgi?id=1857336
[ 17 ] Bug #1857337 - CVE-2020-6530 chromium-browser: Out of bounds memory
access in developer tools
https://bugzilla.redhat.com/show_bug.cgi?id=1857337
[ 18 ] Bug #1857338 - CVE-2020-6531 chromium-browser: Side-channel
information leakage in scroll to text
https://bugzilla.redhat.com/show_bug.cgi?id=1857338
[ 19 ] Bug #1857339 - CVE-2020-6533 chromium-browser: Type Confusion in V8
https://bugzilla.redhat.com/show_bug.cgi?id=1857339
[ 20 ] Bug #1857340 - CVE-2020-6534 chromium-browser: Heap buffer overflow in
WebRTC
https://bugzilla.redhat.com/show_bug.cgi?id=1857340
[ 21 ] Bug #1857341 - CVE-2020-6535 chromium-browser: Insufficient data
validation in WebUI
https://bugzilla.redhat.com/show_bug.cgi?id=1857341
[ 22 ] Bug #1857342 - CVE-2020-6536 chromium-browser: Incorrect security UI
in PWAs
https://bugzilla.redhat.com/show_bug.cgi?id=1857342
--------------------------------------------------------------------------------
================================================================================
hscolour-1.24.2-2.el8 (FEDORA-EPEL-2020-adb34aeaf3)
Colorize Haskell code
--------------------------------------------------------------------------------
Update Information:
backport from F28
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
java-latest-openjdk-14.0.2.12-1.rolling.el8 (FEDORA-EPEL-2020-0d4ceeda8e)
OpenJDK Runtime Environment 14
--------------------------------------------------------------------------------
Update Information:
OpenJDK 14 July security update
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 22 2020 Petra Alice Mikova <pmik...@redhat.com> -
1:14.0.2.12-1.rolling
- update to jdk 14.0.2.12 CPU version
- remove upstreamed patch
jdk8243059-build_fails_when_with_vendor_contains_comma.patch
* Thu Jul 9 2020 Andrew Hughes <gnu.and...@redhat.com> - 1:14.0.1.7-4.rolling
- Re-introduce java-openjdk-src & java-openjdk-demo for system_jdk builds.
- Fix accidental renaming of java-openjdk-devel to java-devel-openjdk.
--------------------------------------------------------------------------------
================================================================================
mg-20200723-1.el8 (FEDORA-EPEL-2020-5abb79be69)
Tiny Emacs-like editor
--------------------------------------------------------------------------------
Update Information:
upgrade to 20200723
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 24 2020 Mark McKinstry <mmcki...@fedoraproject.org> - 20200723-1
- upgrade to 20200723 (RHBZ#1860213)
* Wed Jul 22 2020 Tom Stellard <tstel...@redhat.com> - 20200215-2
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860213 - mg-20200723 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1860213
--------------------------------------------------------------------------------
================================================================================
mimetex-1.74-15.el8 (FEDORA-EPEL-2020-70ae85013a)
Easily embed LaTeX math in web pages
--------------------------------------------------------------------------------
Update Information:
Initial EL-8 build
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860476 - Mimetex missing in EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1860476
--------------------------------------------------------------------------------
================================================================================
php-adodb-5.20.6-9.el8 (FEDORA-EPEL-2020-59470dbb07)
Database abstraction layer for PHP
--------------------------------------------------------------------------------
Update Information:
Initial EL-8 build
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1860481 - php-adodb missing in EPEL 8
https://bugzilla.redhat.com/show_bug.cgi?id=1860481
--------------------------------------------------------------------------------
================================================================================
python-netapp-lib-2020.7.16-1.el8 (FEDORA-EPEL-2020-5ee508e621)
NetApp library for Python
--------------------------------------------------------------------------------
Update Information:
Initial Release to Fedora
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
xxhash-0.7.4-2.el8 (FEDORA-EPEL-2020-9bf705a4b9)
Extremely fast hash algorithm
--------------------------------------------------------------------------------
Update Information:
Fix wrong libdir in pkg-config file.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 24 2020 Mattias Ellert <mattias.ell...@physics.uu.se> - 0.7.4-2
- Fix libdir in pkg-config file
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1858407 - pkgconfig --libs libxxhash points to the wrong directory
https://bugzilla.redhat.com/show_bug.cgi?id=1858407
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
