The following Fedora EPEL 8 Security updates need testing:
Age URL
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-63d2fd37d2
radare2-5.8.8-2.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
chromium-119.0.6045.123-1.el8
did-0.21-1.el8
fedora-license-data-1.34-1.el8
nordugrid-arc-nagios-plugins-2.0.1-1.el8
openvpn-2.4.12-2.el8
python-specfile-0.24.0-1.el8
remmina-1.4.33-1.el8
tor-0.4.8.9-1.el8
Details about builds:
================================================================================
chromium-119.0.6045.123-1.el8 (FEDORA-EPEL-2023-f535d91d21)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 119.0.6045.123. Security fix for CVE-2023-5996 ---- update to
119.0.6045.105. Security fixes: High CVE-2023-5480: Inappropriate
implementation in Payments. High CVE-2023-5482: Insufficient data validation
in USB. High CVE-2023-5849: Integer overflow in USB. Medium
CVE-2023-5850: Incorrect security UI in Downloads. Medium CVE-2023-5851:
Inappropriate implementation in Downloads. Medium CVE-2023-5852: Use after
free in Printing. Medium CVE-2023-5853: Incorrect security UI in Downloads.
Medium CVE-2023-5854: Use after free in Profiles. Medium CVE-2023-5855: Use
after free in Reading Mode. Medium CVE-2023-5856: Use after free in Side
Panel. Medium CVE-2023-5857: Inappropriate implementation in Downloads.
Low CVE-2023-5858: Inappropriate implementation in WebApp Provider. Low
CVE-2023-5859: Incorrect security UI in Picture In Picture.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 8 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.123-1
- update to 119.0.6045.123, include following security fixes:
high CVE-2023-5996: Use after free in WebAudio
* Tue Nov 7 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.105-2
- enable debuginfo
* Wed Nov 1 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.105-1
- update to 119.0.6045.105
* Fri Oct 27 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.59-1
- update 119.0.6045.59
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2247403 - CVE-2023-5480 chromium: chromium-browser: Inappropriate
implementation in Payments [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247403
[ 2 ] Bug #2247404 - CVE-2023-5480 chromium: chromium-browser: Inappropriate
implementation in Payments [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247404
[ 3 ] Bug #2247405 - CVE-2023-5482 chromium: chromium-browser: Insufficient data
validation in USB [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247405
[ 4 ] Bug #2247406 - CVE-2023-5482 chromium: chromium-browser: Insufficient data
validation in USB [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247406
[ 5 ] Bug #2247408 - CVE-2023-5849 chromium: chromium-browser: Integer overflow in USB
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247408
[ 6 ] Bug #2247409 - CVE-2023-5849 chromium: chromium-browser: Integer overflow in USB
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247409
[ 7 ] Bug #2247410 - CVE-2023-5850 chromium: chromium-browser: Incorrect security UI in
Downloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247410
[ 8 ] Bug #2247411 - CVE-2023-5850 chromium: chromium-browser: Incorrect security UI in
Downloads [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247411
[ 9 ] Bug #2247412 - CVE-2023-5851 chromium: chromium-browser: Inappropriate
implementation in Downloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247412
[ 10 ] Bug #2247413 - CVE-2023-5851 chromium: chromium-browser: Inappropriate
implementation in Downloads [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247413
[ 11 ] Bug #2247414 - CVE-2023-5852 chromium: chromium-browser: Use after free in
Printing [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247414
[ 12 ] Bug #2247415 - CVE-2023-5852 chromium: chromium-browser: Use after free in
Printing [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247415
[ 13 ] Bug #2247416 - CVE-2023-5853 chromium: chromium-browser: Incorrect security UI in
Downloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247416
[ 14 ] Bug #2247417 - CVE-2023-5853 chromium: chromium-browser: Incorrect security UI in
Downloads [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247417
[ 15 ] Bug #2247418 - CVE-2023-5854 chromium: chromium-browser: Use after free in
Profiles [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247418
[ 16 ] Bug #2247419 - CVE-2023-5855 chromium: chromium-browser: Use after free in
Reading Mode [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247419
[ 17 ] Bug #2247420 - CVE-2023-5854 chromium: chromium-browser: Use after free in
Profiles [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247420
[ 18 ] Bug #2247421 - CVE-2023-5855 chromium: chromium-browser: Use after free in
Reading Mode [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247421
[ 19 ] Bug #2247422 - CVE-2023-5856 chromium: chromium-browser: Use after free in Side
Panel [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247422
[ 20 ] Bug #2247423 - CVE-2023-5856 chromium: chromium-browser: Use after free in Side
Panel [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247423
[ 21 ] Bug #2247424 - CVE-2023-5858 chromium: chromium-browser: Inappropriate
implementation in WebApp Provider [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247424
[ 22 ] Bug #2247425 - CVE-2023-5859 chromium: chromium-browser: Incorrect security UI in
Picture In Picture [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247425
[ 23 ] Bug #2247426 - CVE-2023-5858 chromium: chromium-browser: Inappropriate
implementation in WebApp Provider [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247426
[ 24 ] Bug #2247427 - CVE-2023-5859 chromium: chromium-browser: Incorrect security UI in
Picture In Picture [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247427
[ 25 ] Bug #2247429 - CVE-2023-5857 chromium: chromium-browser: Inappropriate
implementation in Downloads [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247429
[ 26 ] Bug #2247430 - CVE-2023-5857 chromium: chromium-browser: Inappropriate
implementation in Downloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247430
--------------------------------------------------------------------------------
================================================================================
did-0.21-1.el8 (FEDORA-EPEL-2023-57fa5e9939)
What did you do last week, month, year?
--------------------------------------------------------------------------------
Update Information:
Support markdown format, subitems for header and footer
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 10 2023 Petr ��pl��chal <psplicha(a)redhat.com> - 0.21-1
- Pass plugin configuration to koji `ClientSession`
- Add `markdown` format output to `bodhi` plugin
- Add `markdown` format output to `pagure` plugin
- Handle connection error fetching gitlab user
- Update instructions for the `google` plugin
- Add `sphinx_rtd_theme` to the list of extensions
- Replace deprecated calls to `warn`
- Fix docs building warnings, pin sphinx version
- Add support for `markdown` format output (#315)
- Move line length recommendation to proper section
- Update pre-commit GH action with latest version
- Add dependency on `python3-feedparser`
- Replace `readfp()` with `read_file()`
- Support defining subitems for header and footer
- Give a reasonable error for unreachable wiki url
- Report Gitlab tasks-commented properly
- Fix typo in section name
- Skip own pull requests in `pull-requests-reviewed`
--------------------------------------------------------------------------------
================================================================================
fedora-license-data-1.34-1.el8 (FEDORA-EPEL-2023-28e402191d)
Fedora Linux license data
--------------------------------------------------------------------------------
Update Information:
Automatic update for fedora-license-data-1.34-1.el8. ##### **Changelog for
fedora-license-data** ``` * Fri Nov 10 2023 Miroslav Such�� <msuchy(a)redhat.com>
1.34-1 - new license: hdparm - add not allowed license LicenseRef-LLaMA-2 ```
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 10 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.34-1
- new license: hdparm
- add not allowed license LicenseRef-LLaMA-2
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-nagios-plugins-2.0.1-1.el8 (FEDORA-EPEL-2023-3cf628957b)
Nagios plugins for ARC
--------------------------------------------------------------------------------
Update Information:
ARC nagios plugins 2.0.1
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 10 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.0.1-1
- Version 2.0.1
* Wed Nov 1 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 2.0.1~rc1-1
- Version 2.0.1 rc1
* Thu Jul 20 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-13
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jun 14 2023 Python Maint <python-maint(a)redhat.com> - 2.0.0-12
- Rebuilt for Python 3.12
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 2.0.0-9
- Rebuilt for Python 3.11
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 2.0.0-6
- Rebuilt for Python 3.10
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 2.0.0-3
- Rebuilt for Python 3.9
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.0.0-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
openvpn-2.4.12-2.el8 (FEDORA-EPEL-2023-08658cdbc9)
A full-featured SSL VPN solution
--------------------------------------------------------------------------------
Update Information:
Packaging fixes: Fix false exit status on pre runtime scriptlet (Elkhan Mammadli
elkhan(a)almalinux.org, #2239722) and misbehaving systemctl scriptlet globbing
issues (RHBZ#1887984)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 9 2023 David Sommerseth <davids(a)openvpn.net> - 2.4.12-2
- Fix false exit status on pre runtime scriptlet (Elkhan Mammadli
<elkhan(a)almalinux.org>, RHBZ#2239722)
- Misbehaving systemctl scriptlet globbing issues (RHBZ#1887984)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1887984 - systemctl scriptlet error
https://bugzilla.redhat.com/show_bug.cgi?id=1887984
[ 2 ] Bug #2239722 - The pre runtime scriptlet returns false exit status on some
installations
https://bugzilla.redhat.com/show_bug.cgi?id=2239722
--------------------------------------------------------------------------------
================================================================================
python-specfile-0.24.0-1.el8 (FEDORA-EPEL-2023-11f8867ce6)
A library for parsing and manipulating RPM spec files
--------------------------------------------------------------------------------
Update Information:
Automatic update for python-specfile-0.24.0-1.el8. ##### **Changelog for
python-specfile** ``` * Mon Nov 06 2023 Packit <hello(a)packit.dev> - 0.24.0-1 -
Improved type annotations for `UserList` subclasses. (#299) - Macro definitions
gained a new `commented_out` property indicating that a macro definition is
commented out. Another new property, `comment_out_style`, determines if it is
achieved by using a `%dnl` (discard next line) directive (e.g. `%dnl %global
prerelease beta2`) or by replacing the starting `%` with `#` (e.g. `#global
prerelease beta2`). (#298) ```
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 6 2023 Packit <hello(a)packit.dev> - 0.24.0-1
- Improved type annotations for `UserList` subclasses. (#299)
- Macro definitions gained a new `commented_out` property indicating that a macro
definition is commented out. Another new property, `comment_out_style`, determines if it
is achieved by using a `%dnl` (discard next line) directive (e.g. `%dnl %global prerelease
beta2`) or by replacing the starting `%` with `#` (e.g. `#global prerelease beta2`).
(#298)
--------------------------------------------------------------------------------
================================================================================
remmina-1.4.33-1.el8 (FEDORA-EPEL-2023-d349b34498)
Remote Desktop Client
--------------------------------------------------------------------------------
Update Information:
update to 1.4.33
--------------------------------------------------------------------------------
ChangeLog:
* Fri Nov 10 2023 Jonathan Wright <jonathan(a)almalinux.org> - 1.4.33-1
- Update to 1.4.33 rhbz#2240240
- Recommends openh264 on Fedora rhbz#2242462
* Thu Oct 5 2023 Remi Collet <remi(a)remirepo.net> - 1.4.32-2
- rebuild for new libsodium
--------------------------------------------------------------------------------
================================================================================
tor-0.4.8.9-1.el8 (FEDORA-EPEL-2023-6b5f919719)
Anonymizing overlay network for TCP
--------------------------------------------------------------------------------
Update Information:
update to latest upstream release
https://forum.torproject.org/t/security-
release-0-4-8-9/10155
--------------------------------------------------------------------------------
ChangeLog:
* Thu Nov 9 2023 Marcel H��rry <mh+fedora(a)scrit.ch> - 0.4.8.9-1
- update to latest upstream release
https://forum.torproject.org/t/security-release-0-4-8-9/10155
- security fixes for bz#2248562 & bz#2248563
- add --enable-gpl build options to enable PoW as DDoS protection bz#2247828
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2247828 - New feature supports : PoW
https://bugzilla.redhat.com/show_bug.cgi?id=2247828
--------------------------------------------------------------------------------