Fedora EPEL 7 updates-testing report
by updates@fedoraproject.org
The following builds have been pushed to Fedora EPEL 7 updates-testing
charliecloud-0.36-2.el7
chromium-121.0.6167.160-1.el7
singularity-ce-4.1.1-1.el7
Details about builds:
================================================================================
charliecloud-0.36-2.el7 (FEDORA-EPEL-2024-7f6a68e5c2)
Lightweight user-defined software stacks for high-performance computing
--------------------------------------------------------------------------------
Update Information:
Update to 0.36. Fix patches.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Jordan Ogas <jogas(a)lanl.gov> - 0.36-2
- fix epel7 patch
* Fri Feb 9 2024 Jordan Ogas <jogas(a)lanl.gov> - 0.36-1
- new version 0.36
* Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
chromium-121.0.6167.160-1.el7 (FEDORA-EPEL-2024-96ee75b9fe)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 121.0.6167.160
High CVE-2024-1284: Use after free in Mojo
High CVE-2024-1283: Heap buffer overflow in Skia
update to 121.0.6167.139
High CVE-2024-1060: Use after free in Canvas
High CVE-2024-1059: Use after free in WebRTC
High CVE-2024-1077: Use after free in Network
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 7 2024 Than Ngo <than(a)redhat.com> - 121.0.6167.160-1
- update to 121.0.6167.160
* High CVE-2024-1284: Use after free in Mojo
* High CVE-2024-1283: Heap buffer overflow in Skia
* Thu Feb 1 2024 Than Ngo <than(a)redhat.com> - 121.0.6167.139-2
- Support for 64K pages on Linux/AArch64
* Wed Jan 31 2024 Than Ngo <than(a)redhat.com> - 121.0.6167.139-1
- update to 121.0.6167.139
* High CVE-2024-1060: Use after free in Canvas
* High CVE-2024-1059: Use after free in WebRTC
* High CVE-2024-1077: Use after free in Network
* Wed Jan 24 2024 Than Ngo <than(a)redhat.com> - 121.0.6167.85-1
- update to 121.0.6167.85
* High CVE-2024-0807: Use after free in WebAudio
* High CVE-2024-0812: Inappropriate implementation in Accessibility
* High CVE-2024-0808: Integer underflow in WebUI
* Medium CVE-2024-0810: Insufficient policy enforcement in DevTools
* Medium CVE-2024-0814: Incorrect security UI in Payments
* Medium CVE-2024-0813: Use after free in Reading Mode
* Medium CVE-2024-0806: Use after free in Passwords
* Medium CVE-2024-0805: Inappropriate implementation in Downloads
* Medium CVE-2024-0804: Insufficient policy enforcement in iOS Security UI
* Low CVE-2024-0811: Inappropriate implementation in Extensions API
* Low CVE-2024-0809: Inappropriate implementation in Autofill
* Tue Jan 23 2024 Than Ngo <than(a)redhat.com> - 121.0.6167.71-1
- update to 121.0.6167.71
* Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 120.0.6099.224-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2263136 - CVE-2024-1283 CVE-2024-1284 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2263136
--------------------------------------------------------------------------------
================================================================================
singularity-ce-4.1.1-1.el7 (FEDORA-EPEL-2024-05e20edbbf)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.1.1 upstream version.
This is an incompatible upgrade, following EPEL policy.
Some functionality previously provided by the singularity remote command is
split into new singularity registry and singularity keyserver commands.
The singularity remote add command now sets a newly added remote as the default
(unless suppressed).
The --vm flag to start singularity inside a Virtual Machine has been removed.
Bind mounts are now performed in the order in which they are specified.
Current working directory on the host is now created in the container, restoring
a behaviour from Singularity <3.6.0.
If the current directory paths on the container and host contains symlinks to
different locations, the current working directory is not mounted.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 David Trudgian <dtrudg(a)sylabs.io> - 4.1.1-1
- Upgrade to 4.1.1 upstream version.
- This is an incompatible upgrade, following EPEL policy.
- Some functionality previously provided by the singularity remote
command is split into new singularity registry and singularity
keyserver commands.
- The singularity remote add command now sets a newly added remote as
the default (unless suppressed).
- The ���vm flag to start singularity inside a Virtual Machine has been
removed.
- Bind mounts are now performed in the order in which they are
specified.
- Current working directory on the host is now created in the
container, restoring a behaviour from Singularity <3.6.0.
- If the current directory paths on the container and host contains
symlinks to different locations, the current working directory is
not mounted.
--------------------------------------------------------------------------------