The following Fedora EPEL 7 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-1c906d04ee
golang-1.20.10-3.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a371f42add
openssl11-1.1.1k-6.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
chromium-119.0.6045.199-1.el7
Details about builds:
================================================================================
chromium-119.0.6045.199-1.el7 (FEDORA-EPEL-2023-46696cc30b)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 119.0.6045.199, upstream security release * High CVE-2023-6348: Type
Confusion in Spellcheck * High CVE-2023-6347: Use after free in Mojo * High
CVE-2023-6346: Use after free in WebAudio * High CVE-2023-6350: Out of bounds
memory access in libavif * High CVE-2023-6351: Use after free in libavif * High
CVE-2023-6345: Integer overflow in Skia
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 29 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.199-1
- update to 119.0.6045.199
* Sun Nov 19 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.159-2
- fix ffmpeg conflicts
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2252009 - CVE-2023-6346 CVE-2023-6347 CVE-2023-6350 CVE-2023-6351 chromium:
various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2252009
[ 2 ] Bug #2252188 - CVE-2023-6345 chromium: chromium-browser: Integer overflow
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2252188
[ 3 ] Bug #2252191 - CVE-2023-6348 chromium: chromium-browser: Type Confusion in
Spellcheck [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2252191
--------------------------------------------------------------------------------