The following Fedora EPEL 8 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1183ac8862
sympa-6.2.74-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-073915237b
dr_libs-0-0.27.20241217git660795b.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
chromium-131.0.6778.204-1.el8
mold-2.35.1-2.el8
python-colcon-cmake-0.2.29-1.el8
python-colcon-core-0.18.4-1.el8
python-colcon-defaults-0.2.9-1.el8
python-colcon-lcov-result-0.5.3-1.el8
python-osrf-pycommon-2.1.5-1.el8
singularity-ce-4.2.2-1.el8
Details about builds:
================================================================================
chromium-131.0.6778.204-1.el8 (FEDORA-EPEL-2024-c27d1a40bc)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 131.0.6778.204
High CVE-2024-12692: Type Confusion in V8
High CVE-2024-12693: Out of bounds memory access in V8
High CVE-2024-12694: Use after free in Compositing
High CVE-2024-12695: Out of bounds write in V8
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2024 Than Ngo <[email protected]> - 131.0.6778.204-1
- Update to 131.0.6778.204
* High CVE-2024-12692: Type Confusion in V8
* High CVE-2024-12693: Out of bounds memory access in V8
* High CVE-2024-12694: Use after free in Compositing
* High CVE-2024-12695: Out of bounds write in V8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2333152 - CVE-2024-12692 chromium: Type Confusion in V8
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333152
[ 2 ] Bug #2333153 - CVE-2024-12692 chromium: Type Confusion in V8 [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333153
[ 3 ] Bug #2333154 - CVE-2024-12693 chromium: Out of bounds memory access in
V8 [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333154
[ 4 ] Bug #2333155 - CVE-2024-12693 chromium: Out of bounds memory access in
V8 [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333155
[ 5 ] Bug #2333156 - CVE-2024-12694 chromium: Use after free in Compositing
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333156
[ 6 ] Bug #2333157 - CVE-2024-12694 chromium: Use after free in Compositing
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333157
[ 7 ] Bug #2333159 - CVE-2024-12695 chromium: Out of bounds write in V8
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333159
[ 8 ] Bug #2333160 - CVE-2024-12695 chromium: Out of bounds write in V8
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2333160
--------------------------------------------------------------------------------
================================================================================
mold-2.35.1-2.el8 (FEDORA-EPEL-2024-2df5a6ea44)
A Modern Linker
--------------------------------------------------------------------------------
Update Information:
Fix linking against shared libmimalloc
Update to 2.35.1 (rhbz#2332563)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 19 2024 Christoph Erhardt <[email protected]> - 2.35.1-2
- Fix linking against shared `libmimalloc`
* Mon Dec 16 2024 Christoph Erhardt <[email protected]> - 2.35.1-1
- Update to 2.35.1 (rhbz#2332563)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2332563 - mold-2.35.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2332563
--------------------------------------------------------------------------------
================================================================================
python-colcon-cmake-0.2.29-1.el8 (FEDORA-EPEL-2024-1d2c27ec8c)
Extension for colcon to support CMake packages
--------------------------------------------------------------------------------
Update Information:
Update to the latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 0.2.29-1
- Update to 0.2.29 (rhbz#2328584)
- Add Recommends: cmake
- convert license to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2324372
[ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328584
[ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328585
[ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333150
--------------------------------------------------------------------------------
================================================================================
python-colcon-core-0.18.4-1.el8 (FEDORA-EPEL-2024-1d2c27ec8c)
Command line tool to build sets of software packages
--------------------------------------------------------------------------------
Update Information:
Update to the latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 0.18.4-1
- Update to 0.18.4 (rhbz#2328585)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2324372
[ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328584
[ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328585
[ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333150
--------------------------------------------------------------------------------
================================================================================
python-colcon-defaults-0.2.9-1.el8 (FEDORA-EPEL-2024-1d2c27ec8c)
Extension for colcon to read defaults from a config file
--------------------------------------------------------------------------------
Update Information:
Update to the latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 0.2.9-1
- Update to 0.2.9 (rhbz#2333150)
- convert license to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2324372
[ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328584
[ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328585
[ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333150
--------------------------------------------------------------------------------
================================================================================
python-colcon-lcov-result-0.5.3-1.el8 (FEDORA-EPEL-2024-1d2c27ec8c)
Extension for colcon to provide test results using LCOV
--------------------------------------------------------------------------------
Update Information:
Update to the latest colcon releases
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 0.5.3-1
- Update to 0.5.3 (rhbz#2324372)
- Drop spec file support for RHEL 7
- convert license to SPDX
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2324372
[ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328584
[ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2328585
[ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2333150
--------------------------------------------------------------------------------
================================================================================
python-osrf-pycommon-2.1.5-1.el8 (FEDORA-EPEL-2024-cf56c4ef94)
Commonly needed Python modules used by software developed at OSRF
--------------------------------------------------------------------------------
Update Information:
Update to osrf_pycommon 2.1.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 Scott K Logan <[email protected]> - 2.1.5-1
- Update to 2.1.5 (rhbz#2332954)
- Review SPDX licensing
- Drop spec file support for RHEL 7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2332954 - python-osrf-pycommon-2.1.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2332954
--------------------------------------------------------------------------------
================================================================================
singularity-ce-4.2.2-1.el8 (FEDORA-EPEL-2024-9bd2ccf431)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.2.2 upstream version.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 20 2024 David Trudgian <[email protected]> - 4.2.2-1
- Upgrade to 4.2.2 upstream version.
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
