The following Fedora EPEL 8 Security updates need testing:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-f060b59d26
perl-Clipboard-0.29-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ampache_browser-1.0.7-3.el8
chromium-123.0.6312.122-1.el8
endlessh-1.1-12.el8
nordugrid-arc-6.19.0-1.el8
objfw-1.1.1-1.el8
plantuml-1.2024.4-2.el8
Details about builds:
================================================================================
ampache_browser-1.0.7-3.el8 (FEDORA-EPEL-2024-053410929b)
C++ and Qt based client library for Ampache access
--------------------------------------------------------------------------------
Update Information:
ampache_browser 1.0.7 (2023-12-30)
Fix infite 'Loading...' state.
If Ampache declares higher number of Albums than really available (for example,
when it groups multi-disk albums to a single albums) then 'Loading...' state
never finished in Ampache Browser. This is now fixed.
Fix sorting of tracks on albums with multiple disks.
Since version 6 Ampache started to serve multiple disk albums as one album
instead of each disk separately. Ampache Browser ordered tracks by track number
regardless of the disk number. This lead to wrong ordering if tracks were
numbered on each disk from "1". The track order in such case was:
track 1 (from disk 1)
track 1 (from disk 2)
...
After the fix the order is correct:
track 1 (from disk 1)
track 2 (from disk 1)
...
Required API version was increased to 440001.
Ampache Browser now uses Ampache API 440001 instead of 350001. This is because
of previous fix of tracks sorting as the older APIs does not contain information
about disk number.
Fix building with Qt < 5.15.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0.7-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Dec 30 2023 Michael Schwendt <mschwendt(a)fedoraproject.org> - 1.0.7-1
- Update to 1.0.7.
--------------------------------------------------------------------------------
================================================================================
chromium-123.0.6312.122-1.el8 (FEDORA-EPEL-2024-762aef7cb1)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 123.0.6312.122
High CVE-2024-3157: Out of bounds write in Compositing
High CVE-2024-3516: Heap buffer overflow in ANGLE
High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 11 2024 Than Ngo <than(a)redhat.com> - 123.0.6312.122-1
- update to 123.0.6312.122
* High CVE-2024-3157: Out of bounds write in Compositing
* High CVE-2024-3516: Heap buffer overflow in ANGLE
* High CVE-2024-3515: Use after free in Dawn
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2274473 - CVE-2024-3157 CVE-2024-3515 CVE-2024-3516 chromium: various flaws
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2274473
--------------------------------------------------------------------------------
================================================================================
endlessh-1.1-12.el8 (FEDORA-EPEL-2024-5415dbb3c2)
SSH tarpit that slowly sends an endless banner
--------------------------------------------------------------------------------
Update Information:
Fix systemd service
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 10 2024 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 1.1-12
- Fix systemd service
* Wed Jan 24 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Mar 2 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.1-4
- Rebuilt for updated systemd-rpm-macros
See
https://pagure.io/fesco/issue/2583.
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
nordugrid-arc-6.19.0-1.el8 (FEDORA-EPEL-2024-e997afd9a7)
Advanced Resource Connector Middleware
--------------------------------------------------------------------------------
Update Information:
ARC 6.19.0
--------------------------------------------------------------------------------
ChangeLog:
* Fri Apr 12 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.19.0-1
- Update to version 6.19.0
- Drop patches accepted upstream
* Mon Feb 19 2024 Jitka Plesnikova <jplesnik(a)redhat.com> - 6.18.0-6
- Fix compilation with SWIG 4.2
* Wed Feb 7 2024 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.18.0-5
- Disable test incompatible with SWIG 4.2
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.18.0-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 6.18.0-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Thu Nov 23 2023 Mattias Ellert <mattias.ellert(a)physics.uu.se> - 6.18.0-2
- Fix compilation with libxml2 2.12
--------------------------------------------------------------------------------
================================================================================
objfw-1.1.1-1.el8 (FEDORA-EPEL-2024-d27984839f)
Portable, lightweight framework for the Objective-C language
--------------------------------------------------------------------------------
Update Information:
Update to 1.1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1.1-1
- Update to 1.1.1
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-3
- Fix missing ${DESTDIR}, missing files
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-2
- Fix utils-pie.patch
* Sun Apr 14 2024 Jonathan Schleifer <js(a)nil.im> - 1.1-1
- Update to 1.1
--------------------------------------------------------------------------------
================================================================================
plantuml-1.2024.4-2.el8 (FEDORA-EPEL-2024-5d7bba0e01)
Program to generate UML diagram from a text description
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2024.4
--------------------------------------------------------------------------------
ChangeLog:
* Sun Apr 14 2024 blinxen <h-k-81(a)hotmail.com> - 1:1.2024.4-2
- Update to version 1.2024.4 (rhbz#2273825)
* Tue Feb 27 2024 Jiri Vanek <jvanek(a)redhat.com> - 1:1.2024.3-3
- Rebuilt for java-21-openjdk as system jdk
--------------------------------------------------------------------------------