The following Fedora EPEL 8 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-0e7cdf6123
apptainer-1.2.2-1.el8
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1a8a33f65f
kitty-0.26.5-9.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-cf48c50360
seamonkey-2.53.17-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
chromium-115.0.5790.110-1.el8
git-review-2.2.0-1.el8
guacamole-server-1.5.3-1.el8
openjdk-asmtools-8.0.b02.ea-0.6.20230113.gitc0e14f4.el8
Details about builds:
================================================================================
chromium-115.0.5790.110-1.el8 (FEDORA-EPEL-2023-fd3407699e)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 115.0.5790.110. Fixes the following security issue: CVE-2022-4908
CVE-2022-4909 CVE-2022-4910 CVE-2022-4908 CVE-2022-4909 CVE-2022-4910
CVE-2022-4906 CVE-2022-4907 CVE-2022-4906 CVE-2022-4907 CVE-2023-2311
CVE-2023-2313 CVE-2023-2311 CVE-2023-2313 CVE-2023-2929 CVE-2023-2929
CVE-2023-2314 CVE-2023-2314 CVE-2023-3598 CVE-2023-3598 ---- update to
115.0.5790.102
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 26 2023 Than Ngo <than(a)redhat.com> - 115.0.5790.110-1
- update to 115.0.5790.110
* Sat Jul 22 2023 Than Ngo <than(a)redhat.com> - 115.0.5790.102-1
- update to 115.0.5790.102
* Tue Jul 18 2023 Than Ngo <than(a)redhat.com> - 115.0.5790.98-1
- update to 115.0.5790.98
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2227602 - CVE-2023-2929 chromium: chromium-browser: Out of bounds write in
Swiftshader [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227602
[ 2 ] Bug #2227603 - CVE-2023-2929 chromium: chromium-browser: Out of bounds write in
Swiftshader [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227603
[ 3 ] Bug #2227605 - CVE-2023-3598 chromium: chromium-browser: Out of bounds read and
write in ANGLE [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227605
[ 4 ] Bug #2227606 - CVE-2023-3598 chromium: chromium-browser: Out of bounds read and
write in ANGLE [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227606
[ 5 ] Bug #2227611 - CVE-2023-2314 chromium: chromium-browser: Insufficient data
validation in DevTools [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227611
[ 6 ] Bug #2227612 - CVE-2023-2314 chromium: chromium-browser: Insufficient data
validation in DevTools [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227612
[ 7 ] Bug #2227616 - CVE-2023-2311 CVE-2023-2313 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227616
[ 8 ] Bug #2227617 - CVE-2023-2311 CVE-2023-2313 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227617
[ 9 ] Bug #2227620 - CVE-2022-4906 CVE-2022-4907 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227620
[ 10 ] Bug #2227621 - CVE-2022-4906 CVE-2022-4907 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227621
[ 11 ] Bug #2227625 - CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 chromium: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227625
[ 12 ] Bug #2227626 - CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 chromium: various flaws
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227626
--------------------------------------------------------------------------------
================================================================================
git-review-2.2.0-1.el8 (FEDORA-EPEL-2023-a22af6f0ec)
A Git helper for integration with Gerrit
--------------------------------------------------------------------------------
Update Information:
This update makes git-review compatible with the git that we already ship in
EPEL 8.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Dec 17 2021 Terje Rosten <terje.rosten(a)ntnu.no> - 2.2.0-1
- Update to 2.2.0 (needed by git 2.34.0+)
- Only Python 3 is supported
- Releases is done on pypi
- Avoid macro in url, makes cut and paste hard
- Make lines shorter than 80 chars
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2188001 - git-review is broken with git 2.34+
https://bugzilla.redhat.com/show_bug.cgi?id=2188001
[ 2 ] Bug #2218280 - git-review release incompatible w/ git version shipped in epel8 and
epel9
https://bugzilla.redhat.com/show_bug.cgi?id=2218280
--------------------------------------------------------------------------------
================================================================================
guacamole-server-1.5.3-1.el8 (FEDORA-EPEL-2023-1374e0fb47)
Server-side native components that form the Guacamole proxy
--------------------------------------------------------------------------------
Update Information:
# Apache Guacamole 1.5.3 ## User interface / platform * Bug: ���Error: blob is
undefined��� when creating new SessionRecording from Blob (GUACAMOLE-1793) *
Bug: Change password form missing for administrators without edit self
permission (GUACAMOLE-1812) ## Authentication, integration, and storage *
Bug: KSM Vault extension broken with any record containing new ���passkey��� field
type (GUACAMOLE-1794) * Bug: Default batch size for SQL Server is too large
(GUACAMOLE-1796) ## Protocol support / guacd * Bug: Regression: Fix for
GUACAMOLE-1717 causes guacd segfault (GUACAMOLE-1802) ## Documentation * Bug:
Manual build fails as of Sphinx 6.x (GUACAMOLE-1834) ## General housekeeping
and cleanup * Update Java dependencies to patched versions (GUACAMOLE-1806)
* Update webapp dependencies to latest stable and compatible versions
(GUACAMOLE-1807) * Replace library used for IP address matching
(GUACAMOLE-1809) * Bump version to 1.5.3 (GUACAMOLE-1816)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 2 2023 Robert Scheck <robert(a)fedoraproject.org> - 1.5.3-1
- Update to 1.5.3 (#2223510)
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.5.2-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openjdk-asmtools-8.0.b02.ea-0.6.20230113.gitc0e14f4.el8 (FEDORA-EPEL-2023-ccc7612be6)
Set of tools used to assemble / disassemble proper and improper Java .class files
--------------------------------------------------------------------------------
Update Information:
by excluding generated requires, made finallyinstallable
--------------------------------------------------------------------------------
ChangeLog:
* Tue Aug 1 2023 Marian Koncek <mkoncek(a)redhat.com> -
8.0.b02.ea-0.6.20230113.gitc0e14f4
- excluding generated requires
--------------------------------------------------------------------------------