The following Fedora EPEL 7 Security updates need testing:
Age URL
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-72bc7cd989
apptainer-1.2.2-1.el7
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-e594723d53
seamonkey-2.53.17-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
chromium-115.0.5790.110-1.el7
guacamole-server-1.5.3-1.el7
Details about builds:
================================================================================
chromium-115.0.5790.110-1.el7 (FEDORA-EPEL-2023-f173cdf0c6)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 115.0.5790.110. Fixes the following security issue: CVE-2022-4908
CVE-2022-4909 CVE-2022-4910 CVE-2022-4908 CVE-2022-4909 CVE-2022-4910
CVE-2022-4906 CVE-2022-4907 CVE-2022-4906 CVE-2022-4907 CVE-2023-2311
CVE-2023-2313 CVE-2023-2311 CVE-2023-2313 CVE-2023-2929 CVE-2023-2929
CVE-2023-2314 CVE-2023-2314 CVE-2023-3598 CVE-2023-3598 ---- update to
115.0.5790.102
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 26 2023 Than Ngo <than(a)redhat.com> - 115.0.5790.110-1
- update to 115.0.5790.110
* Sat Jul 22 2023 Than Ngo <than(a)redhat.com> - 115.0.5790.102-1
- update to 115.0.5790.102
* Tue Jul 18 2023 Than Ngo <than(a)redhat.com> - 115.0.5790.98-1
- update to 115.0.5790.98
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2227602 - CVE-2023-2929 chromium: chromium-browser: Out of bounds write in
Swiftshader [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227602
[ 2 ] Bug #2227603 - CVE-2023-2929 chromium: chromium-browser: Out of bounds write in
Swiftshader [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227603
[ 3 ] Bug #2227605 - CVE-2023-3598 chromium: chromium-browser: Out of bounds read and
write in ANGLE [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227605
[ 4 ] Bug #2227606 - CVE-2023-3598 chromium: chromium-browser: Out of bounds read and
write in ANGLE [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227606
[ 5 ] Bug #2227611 - CVE-2023-2314 chromium: chromium-browser: Insufficient data
validation in DevTools [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227611
[ 6 ] Bug #2227612 - CVE-2023-2314 chromium: chromium-browser: Insufficient data
validation in DevTools [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227612
[ 7 ] Bug #2227616 - CVE-2023-2311 CVE-2023-2313 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227616
[ 8 ] Bug #2227617 - CVE-2023-2311 CVE-2023-2313 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227617
[ 9 ] Bug #2227620 - CVE-2022-4906 CVE-2022-4907 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227620
[ 10 ] Bug #2227621 - CVE-2022-4906 CVE-2022-4907 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227621
[ 11 ] Bug #2227625 - CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 chromium: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227625
[ 12 ] Bug #2227626 - CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 chromium: various flaws
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227626
--------------------------------------------------------------------------------
================================================================================
guacamole-server-1.5.3-1.el7 (FEDORA-EPEL-2023-bd0853f2f4)
Server-side native components that form the Guacamole proxy
--------------------------------------------------------------------------------
Update Information:
# Apache Guacamole 1.5.3 ## User interface / platform * Bug: ���Error: blob is
undefined��� when creating new SessionRecording from Blob (GUACAMOLE-1793) *
Bug: Change password form missing for administrators without edit self
permission (GUACAMOLE-1812) ## Authentication, integration, and storage *
Bug: KSM Vault extension broken with any record containing new ���passkey��� field
type (GUACAMOLE-1794) * Bug: Default batch size for SQL Server is too large
(GUACAMOLE-1796) ## Protocol support / guacd * Bug: Regression: Fix for
GUACAMOLE-1717 causes guacd segfault (GUACAMOLE-1802) ## Documentation * Bug:
Manual build fails as of Sphinx 6.x (GUACAMOLE-1834) ## General housekeeping
and cleanup * Update Java dependencies to patched versions (GUACAMOLE-1806)
* Update webapp dependencies to latest stable and compatible versions
(GUACAMOLE-1807) * Replace library used for IP address matching
(GUACAMOLE-1809) * Bump version to 1.5.3 (GUACAMOLE-1816)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 2 2023 Robert Scheck <robert(a)fedoraproject.org> - 1:1.5.3-1
- Update to 1.5.3 (#2223510)
--------------------------------------------------------------------------------