The following Fedora EPEL 7 Security updates need testing:
Age URL
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-fbdcbc3c7a
python-templated-dictionary-1.4-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
chromium-120.0.6099.224-1.el7
fedora-license-data-1.39-1.el7
monit-5.30.0-2.el7
Details about builds:
================================================================================
chromium-120.0.6099.224-1.el7 (FEDORA-EPEL-2024-107e90b6b6)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 120.0.6099.224 - High CVE-2024-0517: Out of bounds write in V8 - High
CVE-2024-0518: Type Confusion in V8 - High CVE-2024-0519: Out of bounds memory
access in V8 ---- update to 120.0.6099.216 * High CVE-2024-0333: Insufficient
data validation in Extensions
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 16 2024 Than Ngo <than(a)redhat.com> - 120.0.6099.224-1
- update to 120.0.6099.224
* High CVE-2024-0517: Out of bounds write in V8
* High CVE-2024-0518: Type Confusion in V8
* High CVE-2024-0519: Out of bounds memory access in V8
* Wed Jan 10 2024 Than Ngo <than(a)redhat.com> - 120.0.6099.216-1
- update to 120.0.6099.216
* High CVE-2024-0333: Insufficient data validation in Extensions
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2257631 - CVE-2024-0333 chromium: chromium-browser: Insufficient data
validation in Extensions [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2257631
[ 2 ] Bug #2258720 - CVE-2024-0517 CVE-2024-0518 CVE-2024-0519 chromium: various flaws
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2258720
--------------------------------------------------------------------------------
================================================================================
fedora-license-data-1.39-1.el7 (FEDORA-EPEL-2024-679ce7aee8)
Fedora Linux license data
--------------------------------------------------------------------------------
Update Information:
Automatic update for fedora-license-data-1.39-1.el7.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 18 2024 Miroslav Such�� <msuchy(a)redhat.com> 1.39-1
- add LicenseRef-docbook-dtds
- public domain dedication for iw
- add HPND-MIT-disclaimer
- add Caldera-no-preamble
- Delete TOML files for licenses that cannot be found
- Add xkeyboard-config-Zinoviev
- Add Adobe-Display-Postscript
- Add DEC-3-Clause
- Add HPND-sell-MIT-disclaimer-xserver
- add not allowed license LicenseRef-sph2pipe
- add LGPL-2.1-or-later WITH GNU-compiler-exception
- GNU-compiler-exception: GPL-3.0 -> GPL-2.0
- firmware.txt: add license for microcode_ctl
- firmware.txt: remove trailing whitespace
- public domain dedication for jansson
--------------------------------------------------------------------------------
================================================================================
monit-5.30.0-2.el7 (FEDORA-EPEL-2024-cc00d17a57)
Manages and monitors processes, files, directories and devices
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2022-26563
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jan 18 2024 Stewart Adam <s.adam(a)diffingo.com> - 5.30.0-2
- Apply fix for CVE-2022-26563
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2257635 - CVE-2022-26563 monit: privilege escalation due to improper
PAM-authorization
https://bugzilla.redhat.com/show_bug.cgi?id=2257635
--------------------------------------------------------------------------------