The following Fedora EPEL 8 Security updates need testing:
Age URL
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-fc5b08c7d5
engrampa-1.26.2-1.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-829db80b8a
mbedtls-2.28.7-1.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-33416db1e4
python-bleach-3.3.0-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
charliecloud-0.36-1.el8
chromium-121.0.6167.160-1.el8
mmv-2.6-1.el8
ocserv-1.2.4-2.el8
singularity-ce-4.1.1-1.el8
Details about builds:
================================================================================
charliecloud-0.36-1.el8 (FEDORA-EPEL-2024-b9cf328e23)
Lightweight user-defined software stacks for high-performance computing
--------------------------------------------------------------------------------
Update Information:
Onward to 0.36.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Jordan Ogas <jogas(a)lanl.gov> - 0.36-1
- new version 0.36
* Tue Jan 23 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.32-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
chromium-121.0.6167.160-1.el8 (FEDORA-EPEL-2024-34c7addedb)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 121.0.6167.160
High CVE-2024-1284: Use after free in Mojo
High CVE-2024-1283: Heap buffer overflow in Skia
--------------------------------------------------------------------------------
ChangeLog:
* Wed Feb 7 2024 Than Ngo <than(a)redhat.com> - 121.0.6167.160-1
- update to 121.0.6167.160
* High CVE-2024-1284: Use after free in Mojo
* High CVE-2024-1283: Heap buffer overflow in Skia
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2263136 - CVE-2024-1283 CVE-2024-1284 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2263136
--------------------------------------------------------------------------------
================================================================================
mmv-2.6-1.el8 (FEDORA-EPEL-2024-1925b35bdc)
Move/copy/link multiple files
--------------------------------------------------------------------------------
Update Information:
release 2.6
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 Jens Kuehnel <JensKuehnel(a)users.noreply.github.com> - 2.6-1
- release 2.6
- readded the mad command
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.5.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Tue Nov 21 2023 Jens Kuehnel <bugzilla-redhat(a)jens.kuehnel.org> - 2.5.1-1
- upgrade to release 2.5.1 based on fork from Reuben Thomas
- Debian has moved as well and was used a upstream by the previous version of this
package
- upstream removed multi append (mad) from project
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-40
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-39
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-38
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-37
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-36
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-35
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-34
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-33
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-32
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-31
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 1 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-30
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-29
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Feb 8 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-28
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Aug 3 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-27
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-26
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Fri Feb 10 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-25
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Feb 4 2016 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.01b-24
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-23
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 7 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri Nov 22 2013 Zing <zing(a)fastmail.fm> - 1.01b-20
- sync with debian mmv_1.01b-18
- deb pkg format switch to 3.0
- format-security fix
- added diagnostic for directories
- man page improvements
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-18
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-17
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-16
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Tue Feb 8 2011 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-15
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-14
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Tue Jun 2 2009 Zing <zing(a)fastmail.fm> - 1.01b-13
- enable LFS support
- updated changelog and copyright files
* Mon Jun 1 2009 Zing <zing(a)fastmail.fm> - 1.01b-12
- sync with debian mmv_1.01b-15
- man page formatting fixes
- wrap cmdname in basename() (debian: #452989)
- initialize tv_usec (debian: #452993)
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> -
1.01b-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1.01b-10
- Autorebuild for GCC 4.3
* Thu Aug 16 2007 Zing <zing(a)fastmail.fm> - 1.01b-9
- conform to Fedora Licensing Guidelines
* Fri Sep 8 2006 Zing <zing(a)fastmail.fm> - 1.01b-8
- fix perms on man page
- rebuild for FE6
* Mon Apr 10 2006 Zing <shishz(a)hotpop.com> - 1.01b-7
- ok, now fix busted perms on doc directory
* Mon Mar 20 2006 Zing <shishz(a)hotpop.com> - 1.01b-6
- fix permissions on doc files
* Mon Feb 13 2006 Zing <shishz(a)hotpop.com> - 1.01b-5
- sync with debian mmv_1.01b-14
- symlink man page for mcp/mad/mln
* Sat Oct 1 2005 Zing <shishz(a)hotpop.com> - 1.01b-4
- use dist tag
* Sat Oct 1 2005 Zing <shishz(a)hotpop.com> - 1.01b-3
- cleanup changelog
* Wed Sep 28 2005 Zing <shishz(a)hotpop.com> - 1.01b-2
- don't change source name
- symlink mcp/mad/mln
* Tue Aug 23 2005 Zing <shishz(a)hotpop.com> - 1.01b-1
- initial RPM release
- pull from debian mmv_1.01b-12.2
- build executable as a PIE
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2102944 - Please provide mmv for EPEL8
https://bugzilla.redhat.com/show_bug.cgi?id=2102944
--------------------------------------------------------------------------------
================================================================================
ocserv-1.2.4-2.el8 (FEDORA-EPEL-2024-530720fa35)
OpenConnect SSL VPN server
--------------------------------------------------------------------------------
Update Information:
New upstream release: 1.2.4
--------------------------------------------------------------------------------
ChangeLog:
--------------------------------------------------------------------------------
================================================================================
singularity-ce-4.1.1-1.el8 (FEDORA-EPEL-2024-f299fbc570)
Application and environment virtualization
--------------------------------------------------------------------------------
Update Information:
Upgrade to 4.1.1 upstream version.
This is an incompatible upgrade, following EPEL policy.
Some functionality previously provided by the singularity remote command is
split into new singularity registry and singularity keyserver commands.
The singularity remote add command now sets a newly added remote as the default
(unless suppressed).
The --vm flag to start singularity inside a Virtual Machine has been removed.
Bind mounts are now performed in the order in which they are specified.
Current working directory on the host is now created in the container, restoring
a behaviour from Singularity <3.6.0.
If the current directory paths on the container and host contains symlinks to
different locations, the current working directory is not mounted.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 9 2024 David Trudgian <dtrudg(a)sylabs.io> - 4.1.1-1
- Upgrade to 4.1.1 upstream version.
- This is an incompatible upgrade, following EPEL policy.
- Some functionality previously provided by the singularity remote
command is split into new singularity registry and singularity
keyserver commands.
- The singularity remote add command now sets a newly added remote as
the default (unless suppressed).
- The ���vm flag to start singularity inside a Virtual Machine has been
removed.
- Bind mounts are now performed in the order in which they are
specified.
- Current working directory on the host is now created in the
container, restoring a behaviour from Singularity <3.6.0.
- If the current directory paths on the container and host contains
symlinks to different locations, the current working directory is
not mounted.
--------------------------------------------------------------------------------