The following Fedora EPEL 9 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-a5952fc093
sympa-6.2.74-1.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-55f18fb87f
dr_libs-0^20241216git660795b-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
chromium-131.0.6778.204-1.el9
mold-2.35.1-2.el9
python-apprise-1.9.1-1.el9
python-colcon-cmake-0.2.29-1.el9
python-colcon-core-0.18.4-1.el9
python-colcon-defaults-0.2.9-1.el9
python-colcon-lcov-result-0.5.3-1.el9
python-osrf-pycommon-2.1.5-1.el9
rust-target-lexicon-0.13.1-1.el9
rust-target-lexicon0.12-0.12.16-1.el9
singularity-ce-4.2.2-1.el9
waycheck-1.5.0-1.el9
Details about builds:
================================================================================
chromium-131.0.6778.204-1.el9 (FEDORA-EPEL-2024-74ea1d7890)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 131.0.6778.204
High CVE-2024-12692: Type Confusion in V8
High CVE-2024-12693: Out of bounds memory access in V8
High CVE-2024-12694: Use after free in Compositing
High CVE-2024-12695: Out of bounds write in V8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2024 Than Ngo <[email protected]> - 131.0.6778.204-1
- Update to 131.0.6778.204
* High CVE-2024-12692: Type Confusion in V8
* High CVE-2024-12693: Out of bounds memory access in V8
* High CVE-2024-12694: Use after free in Compositing
* High CVE-2024-12695: Out of bounds write in V8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2333152 - CVE-2024-12692 chromium: Type Confusion in V8
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333152
[ 2 ] Bug #2333153 - CVE-2024-12692 chromium: Type Confusion in V8 [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333153
[ 3 ] Bug #2333154 - CVE-2024-12693 chromium: Out of bounds memory access in
V8 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333154
[ 4 ] Bug #2333155 - CVE-2024-12693 chromium: Out of bounds memory access in
V8 [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333155
[ 5 ] Bug #2333156 - CVE-2024-12694 chromium: Use after free in Compositing
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333156
[ 6 ] Bug #2333157 - CVE-2024-12694 chromium: Use after free in Compositing
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333157
[ 7 ] Bug #2333159 - CVE-2024-12695 chromium: Out of bounds write in V8
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333159
[ 8 ] Bug #2333160 - CVE-2024-12695 chromium: Out of bounds write in V8
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333160
--------------------------------------------------------------------------------
================================================================================
mold-2.35.1-2.el9 (FEDORA-EPEL-2024-e6b9ecf0f4)
A Modern Linker
--------------------------------------------------------------------------------
Update Information:
Fix linking against shared libmimalloc
Update to 2.35.1 (rhbz#2332563)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2024 Christoph Erhardt <[email protected]> - 2.35.1-2
- Fix linking against shared `libmimalloc`
* Mon Dec 16 2024 Christoph Erhardt <[email protected]> - 2.35.1-1
- Update to 2.35.1 (rhbz#2332563)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2332563 - mold-2.35.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2332563
--------------------------------------------------------------------------------
================================================================================
python-apprise-1.9.1-1.el9 (FEDORA-EPEL-2024-542691c430)
A simple wrapper to many popular notification services used today
--------------------------------------------------------------------------------
Update Information:
Updated to v1.9.1
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 17 2024 Chris Caron <[email protected]> - 1.9.1
- Updated to v1.9.1
* Mon Sep 2 2024 Chris Caron <[email protected]> - 1.9.0
- Updated to v1.9.0
--------------------------------------------------------------------------------
================================================================================
python-colcon-cmake-0.2.29-1.el9 (FEDORA-EPEL-2024-0714a76cdc)
Extension for colcon to support CMake packages
--------------------------------------------------------------------------------
Update Information:
Update to the latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 0.2.29-1
- Update to 0.2.29 (rhbz#2328584)
- Add Recommends: cmake
- convert license to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2324372
[ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328584
[ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328585
[ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333150
--------------------------------------------------------------------------------
================================================================================
python-colcon-core-0.18.4-1.el9 (FEDORA-EPEL-2024-0714a76cdc)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to the latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 0.18.4-1
- Update to 0.18.4 (rhbz#2328585)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2324372
[ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328584
[ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328585
[ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333150
--------------------------------------------------------------------------------
================================================================================
python-colcon-defaults-0.2.9-1.el9 (FEDORA-EPEL-2024-0714a76cdc)
Extension for colcon to read defaults from a config file
--------------------------------------------------------------------------------
Update Information:
Update to the latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 0.2.9-1
- Update to 0.2.9 (rhbz#2333150)
- convert license to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2324372
[ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328584
[ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328585
[ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333150
--------------------------------------------------------------------------------
================================================================================
python-colcon-lcov-result-0.5.3-1.el9 (FEDORA-EPEL-2024-0714a76cdc)
Extension for colcon to provide test results using LCOV
--------------------------------------------------------------------------------
Update Information:
Update to the latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 0.5.3-1
- Update to 0.5.3 (rhbz#2324372)
- Drop spec file support for RHEL 7
- convert license to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2324372
[ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328584
[ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328585
[ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333150
--------------------------------------------------------------------------------
================================================================================
python-osrf-pycommon-2.1.5-1.el9 (FEDORA-EPEL-2024-eb8da3347e)
Commonly needed Python modules used by software developed at OSRF
--------------------------------------------------------------------------------
Update Information:
Update to osrf_pycommon 2.1.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 2.1.5-1
- Update to 2.1.5 (rhbz#2332954)
- Review SPDX licensing
- Drop spec file support for RHEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2332954 - python-osrf-pycommon-2.1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2332954
--------------------------------------------------------------------------------
================================================================================
rust-target-lexicon-0.13.1-1.el9 (FEDORA-EPEL-2024-31f52473e3)
LLVM target triple types
--------------------------------------------------------------------------------
Update Information:
Update the target-lexicon crate to version 0.13.1 and add a compat package for
version 0.12 of the crate.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Fabio Valentini <[email protected]> - 0.13.1-1
- Update to version 0.13.1; Fixes RHBZ#2330705
--------------------------------------------------------------------------------
================================================================================
rust-target-lexicon0.12-0.12.16-1.el9 (FEDORA-EPEL-2024-31f52473e3)
Targeting utilities for compilers and related tools
--------------------------------------------------------------------------------
Update Information:
Update the target-lexicon crate to version 0.13.1 and add a compat package for
version 0.12 of the crate.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Fabio Valentini <[email protected]> - 0.12.16-1
- Initial import (target-lexicon 0.12 compat package)
--------------------------------------------------------------------------------
================================================================================
singularity-ce-4.2.2-1.el9 (FEDORA-EPEL-2024-ba9e1654f0)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.2.2 upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 David Trudgian <[email protected]> - 4.2.2-1
- Upgrade to 4.2.2 upstream version.
--------------------------------------------------------------------------------
================================================================================
waycheck-1.5.0-1.el9 (FEDORA-EPEL-2024-bf118010ff)
Simple GUI that displays protocols implemented by a Wayland compositor
--------------------------------------------------------------------------------
Update Information:
ð Features
Update upstream protocol list to v1.39
Add detection of COSMIC overlap notify protocol
ð Bug Fixes
Remove margins on tab view
Detect COSMIC protocols properly
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Neal Gompa <[email protected]> - 1.5.0-1
- Update to 1.5.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2333599 - waycheck-1.5.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333599
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
