The following Fedora EPEL 7 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-a8b1cd8e52 perl-Clipboard-0.29-1.el7
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-9bc8e80200 chromium-123.0.6312.122-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
snapd-2.62-0.el7
tio-2.8-1.el7
Details about builds:
================================================================================
snapd-2.62-0.el7 (FEDORA-EPEL-2024-e153bfdcaf)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
New upstream release 2.62
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 21 2024 Ernest Lotter <ernest.lotter(a)canonical.com>
- New upstream release 2.62
- Aspects based configuration schema support (experimental)
- Refresh app awareness support for UI (experimental)
- Support for user daemons by introducing new control switches
--user/--system/--users for service start/stop/restart
(experimental)
- Add AppArmor prompting experimental flag (feature currently
unsupported)
- Installation of local snap components of type test
- Packaging of components with snap pack
- Expose experimental features supported/enabled in snapd REST API
endpoint /v2/system-info
- Support creating and removing recovery systems for use by factory
reset
- Enable API route for creating and removing recovery systems using
/v2/systems with action create and /v2/systems/{label} with action
remove
- Lift requirements for fde-setup hook for single boot install
- Enable single reboot gadget update for UC20+
- Allow core to be removed on classic systems
- Support for remodeling on hybrid systems
- Install desktop files on Ubuntu Core and update after snapd
upgrade
- Upgrade sandbox features to account for cgroup v2 device filtering
- Support snaps to manage their own cgroups
- Add support for AppArmor 4.0 unconfined profile mode
- Add AppArmor based read access to /etc/default/keyboard
- Upgrade to squashfuse 0.5.0
- Support useradd utility to enable removing Perl dependency for
UC24+
- Support for recovery-chooser to use console-conf snap
- Add support for --uid/--gid using strace-static
- Add support for notices (from pebble) and expose via the snapd
REST API endpoints /v2/notices and /v2/notice
- Add polkit authentication for snapd REST API endpoints
/v2/snaps/{snap}/conf and /v2/apps
- Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
- Add refresh-inhibited select query to REST API endpoint /v2/snaps
- Take into account validation sets during remodeling
- Improve offline remodeling to use installed revisions of snaps to
fulfill the remodel revision requirement
- Add rpi configuration option sdtv_mode
- When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
present on host
- Fix gadget zero-sized disk mapping caused by not ignoring zero
sized storage traits
- Fix gadget install case where size of existing partition was not
correctly taken into account
- Fix trying to unmount early kernel mount if it does not exist
- Fix restarting mount units on snapd start
- Fix call to udev in preseed mode
- Fix to ensure always setting up the device cgroup for base bare
and core24+
- Fix not copying data from newly set homedirs on revision change
- Fix leaving behind empty snap home directories after snap is
removed (resulting in broken symlink)
- Fix to avoid using libzstd from host by adding to snapd snap
- Fix autorefresh to correctly handle forever refresh hold
- Fix username regex allowed for system-user assertion to not allow
'+'
- Fix incorrect application icon for notification after autorefresh
completion
- Fix to restart mount units when changed
- Fix to support AppArmor running under incus
- Fix case of snap-update-ns dropping synthetic mounts due to
failure to match desired mount dependencies
- Fix parsing of base snap version to enable pre-seeding of Ubuntu
Core Desktop
- Fix packaging and tests for various distributions
- Add remoteproc interface to allow developers to interact with
Remote Processor Framework which enables snaps to load firmware to
ARM Cortex microcontrollers
- Add kernel-control interface to enable controlling the kernel
firmware search path
- Add nfs-mount interface to allow mounting of NFS shares
- Add ros-opt-data interface to allow snaps to access the host
/opt/ros/ paths
- Add snap-refresh-observe interface that provides refresh-app-
awareness clients access to relevant snapd API endpoints
- steam-support interface: generalize Pressure Vessel root paths and
allow access to driver information, features and container
versions
- steam-support interface: make implicit on Ubuntu Core Desktop
- desktop interface: improved support for Ubuntu Core Desktop and
limit autoconnection to implicit slots
- cups-control interface: make autoconnect depend on presence of
cupsd on host to ensure it works on classic systems
- opengl interface: allow read access to /usr/share/nvidia
- personal-files interface: extend to support automatic creation of
missing parent directories in write paths
- network-control interface: allow creating /run/resolveconf
- network-setup-control and network-setup-observe interfaces: allow
busctl bind as required for systemd 254+
- libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
ro and read access to /var/lib/libvirt/dnsmasq/**
- fwupd interface: allow access to IMPI devices (including locking
of device nodes), sysfs attributes needed by amdgpu and the COD
capsule update directory
- uio interface: allow configuring UIO drivers from userspace
libraries
- serial-port interface: add support for NXP Layerscape SoC
- lxd-support interface: add attribute enable-unconfined-mode to
require LXD to opt-in to run unconfined
- block-devices interface: add support for ZFS volumes
- system-packages-doc interface: add support for reading jquery and
sphinx documentation
- system-packages-doc interface: workaround to prevent autoconnect
failure for snaps using base bare
- microceph-support interface: allow more types of block devices to
be added as an OSD
- mount-observe interface: allow read access to
/proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
- polkit interface: changed to not be implicit on core because
installing policy files is not possible
- upower-observe interface: allow stats refresh
- gpg-public-keys interface: allow creating lock file for certain
gpg operations
- shutdown interface: allow access to SetRebootParameter method
- media-control interface: allow device file locking
- u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
Kensington VeriMark Guard, RSA DS100, Google Titan v2
* Wed Mar 6 2024 Ernest Lotter <ernest.lotter(a)canonical.com>
- New upstream release 2.61.3
- Install systemd files in correct location for 24.04
--------------------------------------------------------------------------------
================================================================================
tio-2.8-1.el7 (FEDORA-EPEL-2024-65f3870520)
Simple TTY terminal I/O application
--------------------------------------------------------------------------------
Update Information:
tio v2.8
Rework resolve_config_file()
Rework line_pulse_duration_option_parse()
Introduce proper sscanf() checks.
Rework rs485_parse_config()
Introduce proper sscanf() checks.
Clean up file descriptor name shadowing
Add missing header guard
Upgrade inih subproject
Remove options --response-wait, --response-timeout
Remove options and rework input handling so it is possible to do the same thing
but via script which is much more flexible.
These options were always a bit of a hardcoded solution. With the new script
expect feature we can wait for any type of response.
For example, pipe command to serial device and wait for line response within 1
second:
$ echo "*IDN?" | tio /dev/ttyACM0 --script "expect('\r\n', 1000)" --mute
Add lua exit(code)
Add timeout feature to expect()
Add lua expect(string)
Add simple expect functionality.
The expect(string) function will wait for input from the tty device and only
return when there is a string match. Regular expressions are supported.
Example: script = expect('password:'); send('my_password\n')
Add lua send(string)
Add lua modem_send(file,protocol)
Fix xymodem error print outs
Rework x/y-modem transfer command
Remove ctrl-t X option and instead introduce submenu to ctrl-t x option for
picking which xmodem protocol to use.
Update README
Cleanup options
Add independent input and output mode
Replaces -x, --hexadecimal option with --input-mode and --output-mode so it is
possible to select hex or normal mode for both input and output independently.
To obtain same behaviour as -x, --hexadecimal use the following configuration:
input-mode = hex
output-mode = hex
Fix file descriptor handling on MacOS
Add tty line configuration script API
On some platforms calling high()/low() to switch line states result in costly
system calls whick makes it impossible to swith two or more tty lines
simultaneously.
To help solve this timing issue we introduce a tty line state configuration API
which can be used instead of using high()/low().
Using config_low(line) and config_high(line) one can set up a new line state
configuration for multiple lines and then use config_apply() to finally apply
the configuration. This will result in only one system call to instruct the
serial port drive to switch all the configured line states which should help
ensure that the lines are switched simultaneously.
Example: script = config_high(DTR); config_low(RTS); config_apply()
Add ONULBRK mapping flag
Add ONULBRK mapping to map nul (zero) to send break signal on output.
This is useful if one needs to e.g. send the break signal to the tty device when
connected via socket.
Add --log-directory option
For specifying directory path in which to save automatically named log files.
Add Lua scripting feature
Add support for running Lua scripts that can manipulate the tty control lines.
Script is activated automatically on connect or manually via in session key
command.
The Lua scripting feature opens up for many posibilities in the future such as
adding expect like functionality to easily and programatically interact with the
connected device.
Invert line states to reflect true electrical level
Add support for disabling prefix key handling
To disable prefix key input handing simply set prefix-ctrl-key to none.
Add meson man pages install option
Defaults to installing man pages.
Poll on serial port read instead of delay.
Add Xmodem-CRC support.
CYGWIN: Fix port auto connection.
Check return values of sscanf()
Failing to check that a call to sscanf actually writes to an output variable can
lead to unexpected behavior at reading time.
Support NO_COLOR env variable as per no-color.org
Fix troff warning
.eo/.ec sections seemingly need explicit empty lines using .sp
Otherwise, troff complains:
troff:<standard input>:535: warning: expected numeric expression, got '\'
troff:<standard input>:538: warning: expected numeric expression, got '\'
troff:<standard input>:541: warning: expected numeric expression, got '\'
Add map FF to ESC-c on input
Added map of form feed to ESC-c on input for terminals that do not clear screen
on ^L but do on ESC-c.
Add CodeQL Workflow for Code Security Analysis
Fix double call of tty_disconnect() on macOS/Darwin.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 15 2024 Robert Scheck <robert(a)fedoraproject.org> 2.8-1
- Upgrade to 2.8 (#2275155)
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2275155 - tio-2.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2275155
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f060b59d26 perl-Clipboard-0.29-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-762aef7cb1 chromium-123.0.6312.122-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
castxml-0.6.5-1.el8
snapd-2.62-0.el8
tio-2.8-1.el8
Details about builds:
================================================================================
castxml-0.6.5-1.el8 (FEDORA-EPEL-2024-d2fe54e367)
C-family abstract syntax tree XML output tool
--------------------------------------------------------------------------------
Update Information:
CastXML 0.6.5
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 15 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.6.5-1
- Update to version 0.6.5
* Wed Mar 6 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 0.6.4-2
- Backport LLVM 18 support from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2274886 - castxml-0.6.5 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2274886
--------------------------------------------------------------------------------
================================================================================
snapd-2.62-0.el8 (FEDORA-EPEL-2024-27362990ef)
A transactional software package manager
--------------------------------------------------------------------------------
Update Information:
New upstream release 2.62
--------------------------------------------------------------------------------
ChangeLog:
* Thu Mar 21 2024 Ernest Lotter <ernest.lotter(a)canonical.com>
- New upstream release 2.62
- Aspects based configuration schema support (experimental)
- Refresh app awareness support for UI (experimental)
- Support for user daemons by introducing new control switches
--user/--system/--users for service start/stop/restart
(experimental)
- Add AppArmor prompting experimental flag (feature currently
unsupported)
- Installation of local snap components of type test
- Packaging of components with snap pack
- Expose experimental features supported/enabled in snapd REST API
endpoint /v2/system-info
- Support creating and removing recovery systems for use by factory
reset
- Enable API route for creating and removing recovery systems using
/v2/systems with action create and /v2/systems/{label} with action
remove
- Lift requirements for fde-setup hook for single boot install
- Enable single reboot gadget update for UC20+
- Allow core to be removed on classic systems
- Support for remodeling on hybrid systems
- Install desktop files on Ubuntu Core and update after snapd
upgrade
- Upgrade sandbox features to account for cgroup v2 device filtering
- Support snaps to manage their own cgroups
- Add support for AppArmor 4.0 unconfined profile mode
- Add AppArmor based read access to /etc/default/keyboard
- Upgrade to squashfuse 0.5.0
- Support useradd utility to enable removing Perl dependency for
UC24+
- Support for recovery-chooser to use console-conf snap
- Add support for --uid/--gid using strace-static
- Add support for notices (from pebble) and expose via the snapd
REST API endpoints /v2/notices and /v2/notice
- Add polkit authentication for snapd REST API endpoints
/v2/snaps/{snap}/conf and /v2/apps
- Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
- Add refresh-inhibited select query to REST API endpoint /v2/snaps
- Take into account validation sets during remodeling
- Improve offline remodeling to use installed revisions of snaps to
fulfill the remodel revision requirement
- Add rpi configuration option sdtv_mode
- When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
present on host
- Fix gadget zero-sized disk mapping caused by not ignoring zero
sized storage traits
- Fix gadget install case where size of existing partition was not
correctly taken into account
- Fix trying to unmount early kernel mount if it does not exist
- Fix restarting mount units on snapd start
- Fix call to udev in preseed mode
- Fix to ensure always setting up the device cgroup for base bare
and core24+
- Fix not copying data from newly set homedirs on revision change
- Fix leaving behind empty snap home directories after snap is
removed (resulting in broken symlink)
- Fix to avoid using libzstd from host by adding to snapd snap
- Fix autorefresh to correctly handle forever refresh hold
- Fix username regex allowed for system-user assertion to not allow
'+'
- Fix incorrect application icon for notification after autorefresh
completion
- Fix to restart mount units when changed
- Fix to support AppArmor running under incus
- Fix case of snap-update-ns dropping synthetic mounts due to
failure to match desired mount dependencies
- Fix parsing of base snap version to enable pre-seeding of Ubuntu
Core Desktop
- Fix packaging and tests for various distributions
- Add remoteproc interface to allow developers to interact with
Remote Processor Framework which enables snaps to load firmware to
ARM Cortex microcontrollers
- Add kernel-control interface to enable controlling the kernel
firmware search path
- Add nfs-mount interface to allow mounting of NFS shares
- Add ros-opt-data interface to allow snaps to access the host
/opt/ros/ paths
- Add snap-refresh-observe interface that provides refresh-app-
awareness clients access to relevant snapd API endpoints
- steam-support interface: generalize Pressure Vessel root paths and
allow access to driver information, features and container
versions
- steam-support interface: make implicit on Ubuntu Core Desktop
- desktop interface: improved support for Ubuntu Core Desktop and
limit autoconnection to implicit slots
- cups-control interface: make autoconnect depend on presence of
cupsd on host to ensure it works on classic systems
- opengl interface: allow read access to /usr/share/nvidia
- personal-files interface: extend to support automatic creation of
missing parent directories in write paths
- network-control interface: allow creating /run/resolveconf
- network-setup-control and network-setup-observe interfaces: allow
busctl bind as required for systemd 254+
- libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
ro and read access to /var/lib/libvirt/dnsmasq/**
- fwupd interface: allow access to IMPI devices (including locking
of device nodes), sysfs attributes needed by amdgpu and the COD
capsule update directory
- uio interface: allow configuring UIO drivers from userspace
libraries
- serial-port interface: add support for NXP Layerscape SoC
- lxd-support interface: add attribute enable-unconfined-mode to
require LXD to opt-in to run unconfined
- block-devices interface: add support for ZFS volumes
- system-packages-doc interface: add support for reading jquery and
sphinx documentation
- system-packages-doc interface: workaround to prevent autoconnect
failure for snaps using base bare
- microceph-support interface: allow more types of block devices to
be added as an OSD
- mount-observe interface: allow read access to
/proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
- polkit interface: changed to not be implicit on core because
installing policy files is not possible
- upower-observe interface: allow stats refresh
- gpg-public-keys interface: allow creating lock file for certain
gpg operations
- shutdown interface: allow access to SetRebootParameter method
- media-control interface: allow device file locking
- u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
Kensington VeriMark Guard, RSA DS100, Google Titan v2
* Wed Mar 6 2024 Ernest Lotter <ernest.lotter(a)canonical.com>
- New upstream release 2.61.3
- Install systemd files in correct location for 24.04
--------------------------------------------------------------------------------
================================================================================
tio-2.8-1.el8 (FEDORA-EPEL-2024-ca0f6325e8)
Simple TTY terminal I/O application
--------------------------------------------------------------------------------
Update Information:
tio v2.8
Rework resolve_config_file()
Rework line_pulse_duration_option_parse()
Introduce proper sscanf() checks.
Rework rs485_parse_config()
Introduce proper sscanf() checks.
Clean up file descriptor name shadowing
Add missing header guard
Upgrade inih subproject
Remove options --response-wait, --response-timeout
Remove options and rework input handling so it is possible to do the same thing
but via script which is much more flexible.
These options were always a bit of a hardcoded solution. With the new script
expect feature we can wait for any type of response.
For example, pipe command to serial device and wait for line response within 1
second:
$ echo "*IDN?" | tio /dev/ttyACM0 --script "expect('\r\n', 1000)" --mute
Add lua exit(code)
Add timeout feature to expect()
Add lua expect(string)
Add simple expect functionality.
The expect(string) function will wait for input from the tty device and only
return when there is a string match. Regular expressions are supported.
Example: script = expect('password:'); send('my_password\n')
Add lua send(string)
Add lua modem_send(file,protocol)
Fix xymodem error print outs
Rework x/y-modem transfer command
Remove ctrl-t X option and instead introduce submenu to ctrl-t x option for
picking which xmodem protocol to use.
Update README
Cleanup options
Add independent input and output mode
Replaces -x, --hexadecimal option with --input-mode and --output-mode so it is
possible to select hex or normal mode for both input and output independently.
To obtain same behaviour as -x, --hexadecimal use the following configuration:
input-mode = hex
output-mode = hex
Fix file descriptor handling on MacOS
Add tty line configuration script API
On some platforms calling high()/low() to switch line states result in costly
system calls whick makes it impossible to swith two or more tty lines
simultaneously.
To help solve this timing issue we introduce a tty line state configuration API
which can be used instead of using high()/low().
Using config_low(line) and config_high(line) one can set up a new line state
configuration for multiple lines and then use config_apply() to finally apply
the configuration. This will result in only one system call to instruct the
serial port drive to switch all the configured line states which should help
ensure that the lines are switched simultaneously.
Example: script = config_high(DTR); config_low(RTS); config_apply()
Add ONULBRK mapping flag
Add ONULBRK mapping to map nul (zero) to send break signal on output.
This is useful if one needs to e.g. send the break signal to the tty device when
connected via socket.
Add --log-directory option
For specifying directory path in which to save automatically named log files.
Add Lua scripting feature
Add support for running Lua scripts that can manipulate the tty control lines.
Script is activated automatically on connect or manually via in session key
command.
The Lua scripting feature opens up for many posibilities in the future such as
adding expect like functionality to easily and programatically interact with the
connected device.
Invert line states to reflect true electrical level
Add support for disabling prefix key handling
To disable prefix key input handing simply set prefix-ctrl-key to none.
Add meson man pages install option
Defaults to installing man pages.
Poll on serial port read instead of delay.
Add Xmodem-CRC support.
CYGWIN: Fix port auto connection.
Check return values of sscanf()
Failing to check that a call to sscanf actually writes to an output variable can
lead to unexpected behavior at reading time.
Support NO_COLOR env variable as per no-color.org
Fix troff warning
.eo/.ec sections seemingly need explicit empty lines using .sp
Otherwise, troff complains:
troff:<standard input>:535: warning: expected numeric expression, got '\'
troff:<standard input>:538: warning: expected numeric expression, got '\'
troff:<standard input>:541: warning: expected numeric expression, got '\'
Add map FF to ESC-c on input
Added map of form feed to ESC-c on input for terminals that do not clear screen
on ^L but do on ESC-c.
Add CodeQL Workflow for Code Security Analysis
Fix double call of tty_disconnect() on macOS/Darwin.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Apr 15 2024 Robert Scheck <robert(a)fedoraproject.org> 2.8-1
- Upgrade to 2.8 (#2275155)
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2275155 - tio-2.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2275155
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f060b59d26 perl-Clipboard-0.29-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ampache_browser-1.0.7-3.el8
chromium-123.0.6312.122-1.el8
endlessh-1.1-12.el8
nordugrid-arc-6.19.0-1.el8
objfw-1.1.1-1.el8
plantuml-1.2024.4-2.el8
Details about builds:
================================================================================
ampache_browser-1.0.7-3.el8 (FEDORA-EPEL-2024-053410929b)
C++ and Qt based client library for Ampache access
--------------------------------------------------------------------------------
Update Information:
ampache_browser 1.0.7 (2023-12-30)
Fix infite 'Loading...' state.
If Ampache declares higher number of Albums than really available (for example,
when it groups multi-disk albums to a single albums) then 'Loading...' state
never finished in Ampache Browser. This is now fixed.
Fix sorting of tracks on albums with multiple disks.
Since version 6 Ampache started to serve multiple disk albums as one album
instead of each disk separately. Ampache Browser ordered tracks by track number
regardless of the disk number. This lead to wrong ordering if tracks were
numbered on each disk from "1". The track order in such case was:
track 1 (from disk 1)
track 1 (from disk 2)
...
After the fix the order is correct:
track 1 (from disk 1)
track 2 (from disk 1)
...
Required API version was increased to 440001.
Ampache Browser now uses Ampache API 440001 instead of 350001. This is because
of previous fix of tracks sorting as the older APIs does not contain information
about disk number.
Fix building with Qt < 5.15.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Dec 30 2023 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.0.7-1
- Update to 1.0.7.
--------------------------------------------------------------------------------
================================================================================
chromium-123.0.6312.122-1.el8 (FEDORA-EPEL-2024-762aef7cb1)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 123.0.6312.122
High CVE-2024-3157: Out of bounds write in Compositing
High CVE-2024-3516: Heap buffer overflow in ANGLE
High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2024 Than Ngo <than(a)redhat.com> - 123.0.6312.122-1
- update to 123.0.6312.122
* High CVE-2024-3157: Out of bounds write in Compositing
* High CVE-2024-3516: Heap buffer overflow in ANGLE
* High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2274473 - CVE-2024-3157 CVE-2024-3515 CVE-2024-3516 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2274473
--------------------------------------------------------------------------------
================================================================================
endlessh-1.1-12.el8 (FEDORA-EPEL-2024-5415dbb3c2)
SSH tarpit that slowly sends an endless banner
--------------------------------------------------------------------------------
Update Information:
Fix systemd service
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 10 2024 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 1.1-12
- Fix systemd service
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.1-4
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-6.19.0-1.el8 (FEDORA-EPEL-2024-e997afd9a7)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
ARC 6.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.19.0-1
- Update to version 6.19.0
- Drop patches accepted upstream
* Mon Feb 19 2024 Jitka Plesnikova <jplesnik(a)redhat.com> - 6.18.0-6
- Fix compilation with SWIG 4.2
* Wed Feb 7 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.18.0-5
- Disable test incompatible with SWIG 4.2
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.18.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.18.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Nov 23 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.18.0-2
- Fix compilation with libxml2 2.12
--------------------------------------------------------------------------------
================================================================================
objfw-1.1.1-1.el8 (FEDORA-EPEL-2024-d27984839f)
Portable, lightweight framework for the Objective-C language
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1.1-1
- Update to 1.1.1
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-3
- Fix missing ${DESTDIR}, missing files
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-2
- Fix utils-pie.patch
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-1
- Update to 1.1
--------------------------------------------------------------------------------
================================================================================
plantuml-1.2024.4-2.el8 (FEDORA-EPEL-2024-5d7bba0e01)
Program to generate UML diagram from a text description
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2024.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 blinxen <h-k-81(a)hotmail.com> - 1:1.2024.4-2
- Update to version 1.2024.4 (rhbz#2273825)
* Tue Feb 27 2024 Jiri Vanek <jvanek(a)redhat.com> - 1:1.2024.3-3
- Rebuilt for java-21-openjdk as system jdk
--------------------------------------------------------------------------------
The following Fedora EPEL 7 Security updates need testing:
Age URL
4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-a8b1cd8e52 perl-Clipboard-0.29-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ampache_browser-1.0.7-3.el7
chromium-123.0.6312.122-1.el7
nordugrid-arc6-6.19.0-1.el7
Details about builds:
================================================================================
ampache_browser-1.0.7-3.el7 (FEDORA-EPEL-2024-f14042fbe5)
C++ and Qt based client library for Ampache access
--------------------------------------------------------------------------------
Update Information:
ampache_browser 1.0.7 (2023-12-30)
Fix infite 'Loading...' state.
If Ampache declares higher number of Albums than really available (for example,
when it groups multi-disk albums to a single albums) then 'Loading...' state
never finished in Ampache Browser. This is now fixed.
Fix sorting of tracks on albums with multiple disks.
Since version 6 Ampache started to serve multiple disk albums as one album
instead of each disk separately. Ampache Browser ordered tracks by track number
regardless of the disk number. This lead to wrong ordering if tracks were
numbered on each disk from "1". The track order in such case was:
track 1 (from disk 1)
track 1 (from disk 2)
...
After the fix the order is correct:
track 1 (from disk 1)
track 2 (from disk 1)
...
Required API version was increased to 440001.
Ampache Browser now uses Ampache API 440001 instead of 350001. This is because
of previous fix of tracks sorting as the older APIs does not contain information
about disk number.
Fix building with Qt < 5.15.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Dec 30 2023 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.0.7-1
- Update to 1.0.7.
--------------------------------------------------------------------------------
================================================================================
chromium-123.0.6312.122-1.el7 (FEDORA-EPEL-2024-9bc8e80200)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 123.0.6312.122
High CVE-2024-3157: Out of bounds write in Compositing
High CVE-2024-3516: Heap buffer overflow in ANGLE
High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2024 Than Ngo <than(a)redhat.com> - 123.0.6312.122-1
- update to 123.0.6312.122
* High CVE-2024-3157: Out of bounds write in Compositing
* High CVE-2024-3516: Heap buffer overflow in ANGLE
* High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2274473 - CVE-2024-3157 CVE-2024-3515 CVE-2024-3516 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2274473
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc6-6.19.0-1.el7 (FEDORA-EPEL-2024-0f85eabfa0)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
ARC 6.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.19.0-1
- Update to version 6.19.0
--------------------------------------------------------------------------------
The following Fedora EPEL 9 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-7c7a65fa6c wordpress-6.5.2-1.el9
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-6ebc36e81d perl-Clipboard-0.29-1.el9
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-76d6941f10 python-django3-3.2.25-1.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-ce142428af llhttp-9.2.1-1.el9 python-aiohttp-3.9.3-2.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-5fc8709aa5 python-pycryptodomex-3.20.0-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
ampache_browser-1.0.7-3.el9
chromium-123.0.6312.122-1.el9
fluidsynth-2.3.5-1.el9
nordugrid-arc-6.19.0-1.el9
objfw-1.1.1-1.el9
plantuml-1.2024.4-2.el9
python-google-auth-2.29.0-1.el9
raft-0.22.1-1.el9
rust-ctrlc-3.4.4-1.el9
rust-jobserver-0.1.30-1.el9
rust-uluru-3.1.0-2.el9
Details about builds:
================================================================================
ampache_browser-1.0.7-3.el9 (FEDORA-EPEL-2024-6277d9958e)
C++ and Qt based client library for Ampache access
--------------------------------------------------------------------------------
Update Information:
ampache_browser 1.0.7 (2023-12-30)
Fix infite 'Loading...' state.
If Ampache declares higher number of Albums than really available (for example,
when it groups multi-disk albums to a single albums) then 'Loading...' state
never finished in Ampache Browser. This is now fixed.
Fix sorting of tracks on albums with multiple disks.
Since version 6 Ampache started to serve multiple disk albums as one album
instead of each disk separately. Ampache Browser ordered tracks by track number
regardless of the disk number. This lead to wrong ordering if tracks were
numbered on each disk from "1". The track order in such case was:
track 1 (from disk 1)
track 1 (from disk 2)
...
After the fix the order is correct:
track 1 (from disk 1)
track 2 (from disk 1)
...
Required API version was increased to 440001.
Ampache Browser now uses Ampache API 440001 instead of 350001. This is because
of previous fix of tracks sorting as the older APIs does not contain information
about disk number.
Fix building with Qt < 5.15.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Dec 30 2023 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.0.7-1
- Update to 1.0.7.
--------------------------------------------------------------------------------
================================================================================
chromium-123.0.6312.122-1.el9 (FEDORA-EPEL-2024-2445965799)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 123.0.6312.122
High CVE-2024-3157: Out of bounds write in Compositing
High CVE-2024-3516: Heap buffer overflow in ANGLE
High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2024 Than Ngo <than(a)redhat.com> - 123.0.6312.122-1
- update to 123.0.6312.122
* High CVE-2024-3157: Out of bounds write in Compositing
* High CVE-2024-3516: Heap buffer overflow in ANGLE
* High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2274473 - CVE-2024-3157 CVE-2024-3515 CVE-2024-3516 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2274473
--------------------------------------------------------------------------------
================================================================================
fluidsynth-2.3.5-1.el9 (FEDORA-EPEL-2024-81a4e11125)
Real-time software synthesizer
--------------------------------------------------------------------------------
Update Information:
Update to 2.3.5
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2024 Christoph Karl <pampelmuse [AT] gmx [DOT] at> - 2.3.5-1
- Update to 2.3.5
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.3.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-6.19.0-1.el9 (FEDORA-EPEL-2024-0914ba8794)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
ARC 6.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.19.0-1
- Update to version 6.19.0
- Drop patches accepted upstream
* Mon Feb 19 2024 Jitka Plesnikova <jplesnik(a)redhat.com> - 6.18.0-6
- Fix compilation with SWIG 4.2
* Wed Feb 7 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.18.0-5
- Disable test incompatible with SWIG 4.2
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.18.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.18.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Nov 23 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.18.0-2
- Fix compilation with libxml2 2.12
--------------------------------------------------------------------------------
================================================================================
objfw-1.1.1-1.el9 (FEDORA-EPEL-2024-4415c50aea)
Portable, lightweight framework for the Objective-C language
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1.1-1
- Update to 1.1.1
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-3
- Fix missing ${DESTDIR}, missing files
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-2
- Fix utils-pie.patch
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-1
- Update to 1.1
--------------------------------------------------------------------------------
================================================================================
plantuml-1.2024.4-2.el9 (FEDORA-EPEL-2024-c7d0eb6bbf)
Program to generate UML diagram from a text description
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2024.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 blinxen <h-k-81(a)hotmail.com> - 1:1.2024.4-2
- Update to version 1.2024.4 (rhbz#2273825)
* Tue Feb 27 2024 Jiri Vanek <jvanek(a)redhat.com> - 1:1.2024.3-3
- Rebuilt for java-21-openjdk as system jdk
--------------------------------------------------------------------------------
================================================================================
python-google-auth-2.29.0-1.el9 (FEDORA-EPEL-2024-86127a3e30)
Google Auth Python Library
--------------------------------------------------------------------------------
Update Information:
Update python-google-auth to 2.29.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 13 2024 Jason Montloon <jmontleo(a)redhat.com> - 1:2.29.0-1
- Update to 2.29.0 (#2270854)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2270854 - python-google-auth-2.29.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2270854
--------------------------------------------------------------------------------
================================================================================
raft-0.22.1-1.el9 (FEDORA-EPEL-2024-490907392d)
C implementation of the Raft consensus protocol
--------------------------------------------------------------------------------
Update Information:
Update to 0.22.1
--------------------------------------------------------------------------------
ChangeLog:
* Sat Apr 13 2024 Reto Gantenbein <reto.gantenbein(a)linuxmonk.ch> - 0.22.1-1
- Update to 0.22.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2272285 - raft-0.22.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2272285
--------------------------------------------------------------------------------
================================================================================
rust-ctrlc-3.4.4-1.el9 (FEDORA-EPEL-2024-7d2af7bc49)
Easy Ctrl-C handler for Rust projects
--------------------------------------------------------------------------------
Update Information:
Update to version 3.4.4.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 Fabio Valentini <decathorpe(a)gmail.com> - 3.4.4-1
- Update to version 3.4.4; Fixes RHBZ#2268727
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.4.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-jobserver-0.1.30-1.el9 (FEDORA-EPEL-2024-7b2addb41c)
Implementation of the GNU Make jobserver for Rust
--------------------------------------------------------------------------------
Update Information:
Update to version 0.1.30.
Update to version 0.1.29.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.30-1
- Update to version 0.1.30; Fixes RHBZ#2274753
* Fri Apr 12 2024 Fabio Valentini <decathorpe(a)gmail.com> - 0.1.29-1
- Update to version 0.1.29; Fixes RHBZ#2274541
--------------------------------------------------------------------------------
================================================================================
rust-uluru-3.1.0-2.el9 (FEDORA-EPEL-2024-3fa9907d74)
Simple, fast, LRU cache implementation
--------------------------------------------------------------------------------
Update Information:
Update to version 3.1.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 blinxen <h-k-81(a)hotmail.com> - 3.1.0-2
- Update to version 3.1.0 (rhbz#2273910)
* Sat Jan 27 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.0.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
The following Fedora EPEL 8 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-adbc0c7fd0 cjson-1.7.17-1.el8
2 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f060b59d26 perl-Clipboard-0.29-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
fedora-license-data-1.45-1.el8
python-virt-firmware-24.4-1.el8
valkey-7.2.5~rc1-1.el8
Details about builds:
================================================================================
fedora-license-data-1.45-1.el8 (FEDORA-EPEL-2024-50ae69af3b)
Fedora Linux license data
--------------------------------------------------------------------------------
Update Information:
Automatic update for fedora-license-data-1.45-1.el8.
Changelog for fedora-license-data
* Fri Apr 12 2024 Miroslav Such�� <msuchy(a)redhat.com> 1.45-1
- Update public-domain-text.txt for OpenCTM
- lark-parser was renamed to lark, allow both
- public domain dedication for libtcd
- public domain dedication for mopac7
- Public domain for sshguard
- public domain dedication for tcd-utils
- public domain dedication for minicom
- add LicenseRef-Catharon license
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2024 Miroslav Such�� <msuchy(a)redhat.com> 1.45-1
- Update public-domain-text.txt for OpenCTM
- lark-parser was renamed to lark, allow both
- public domain dedication for libtcd
- public domain dedication for mopac7
- Public domain for sshguard
- public domain dedication for tcd-utils
- public domain dedication for minicom
- add LicenseRef-Catharon license
--------------------------------------------------------------------------------
================================================================================
python-virt-firmware-24.4-1.el8 (FEDORA-EPEL-2024-0758baeb17)
Tools for virtual machine firmware volumes
--------------------------------------------------------------------------------
Update Information:
update to version 24.4
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2024 Gerd Hoffmann <kraxel(a)redhat.com> - 24.4-1
- update to version 24.4
--------------------------------------------------------------------------------
================================================================================
valkey-7.2.5~rc1-1.el8 (FEDORA-EPEL-2024-4fe6e831c9)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
update to 7.2.5-rc1
initial build, rc1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5~rc1-1
- update to 7.2.5-rc1
* Tue Apr 9 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.4~rc1-1
- Initial package build, release candidate
--------------------------------------------------------------------------------