The following Fedora EPEL 9 Security updates need testing: Age URL 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-c862af93eb libopenmpt-0.7.8-1.el9 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-01755f0acd composer-2.7.7-1.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
archlinux-keyring-20240609-1.el9 certbot-2.11.0-1.el9 chromium-126.0.6478.55-1.el9 cowsql-1.15.6-3.el9 distribution-gpg-keys-1.104-1.el9 gaupol-1.15-1.el9 rubberband-3.1.3-2.el9 rust-lz4-1.25.0-1.el9 rust-lz4-sys-1.9.5-1.el9 uwsgi-2.0.26-1.el9
Details about builds:
================================================================================ archlinux-keyring-20240609-1.el9 (FEDORA-EPEL-2024-5c46a5a154) GPG keys used by Arch Linux distribution to sign packages -------------------------------------------------------------------------------- Update Information:
Latest upstream release. -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 11 2024 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 20240609-1 - Version 20240609 (rhbz#2291115) * Tue Jun 11 2024 Zbigniew J��drzejewski-Szmek zbyszek@in.waw.pl - 20240520-1 - Version 20240520 (rhbz#2277698) --------------------------------------------------------------------------------
================================================================================ certbot-2.11.0-1.el9 (FEDORA-EPEL-2024-811859327d) A free, automated certificate authority client -------------------------------------------------------------------------------- Update Information:
update to 2.11.0 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 12 2024 Jonathan Wright jonathan@almalinux.org - 2.11.0-1 - update to 2.11.0 rhbz#2272763 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2272763 - certbot-2.11.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272763 --------------------------------------------------------------------------------
================================================================================ chromium-126.0.6478.55-1.el9 (FEDORA-EPEL-2024-3be7c643a4) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information:
update to 126.0.6478.55 * High CVE-2024-5830: Type Confusion in V8 * High CVE-2024-5831: Use after free in Dawn * High CVE-2024-5832: Use after free in Dawn * High CVE-2024-5833: Type Confusion in V8 * High CVE-2024-5834: Inappropriate implementation in Dawn * High CVE-2024-5835: Heap buffer overflow in Tab Groups * High CVE-2024-5836: Inappropriate Implementation in DevTools * High CVE-2024-5837: Type Confusion in V8 * High CVE-2024-5838: Type Confusion in V8 * Medium CVE-2024-5839: Inappropriate Implementation in Memory Allocator * Medium CVE-2024-5840: Policy Bypass in CORS * Medium CVE-2024-5841: Use after free in V8 * Medium CVE-2024-5842: Use after free in Browser UI * Medium CVE-2024-5843: Inappropriate implementation in Downloads * Medium CVE-2024-5844: Heap buffer overflow in Tab Strip * Medium CVE-2024-5845: Use after free in Audio * Medium CVE-2024-5846: Use after free in PDFium * Medium CVE-2024-5847: Use after free in PDFium -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 12 2024 Than Ngo than@redhat.com - 126.0.6478.55-1 - update to 126.0.6478.55 * High CVE-2024-5830: Type Confusion in V8 * High CVE-2024-5831: Use after free in Dawn * High CVE-2024-5832: Use after free in Dawn * High CVE-2024-5833: Type Confusion in V8 * High CVE-2024-5834: Inappropriate implementation in Dawn * High CVE-2024-5835: Heap buffer overflow in Tab Groups * High CVE-2024-5836: Inappropriate Implementation in DevTools * High CVE-2024-5837: Type Confusion in V8 * High CVE-2024-5838: Type Confusion in V8 * Medium CVE-2024-5839: Inappropriate Implementation in Memory Allocator * Medium CVE-2024-5840: Policy Bypass in CORS * Medium CVE-2024-5841: Use after free in V8 * Medium CVE-2024-5842: Use after free in Browser UI * Medium CVE-2024-5843: Inappropriate implementation in Downloads * Medium CVE-2024-5844: Heap buffer overflow in Tab Strip * Medium CVE-2024-5845: Use after free in Audio * Medium CVE-2024-5846: Use after free in PDFium * Medium CVE-2024-5847: Use after free in PDFium --------------------------------------------------------------------------------
================================================================================ cowsql-1.15.6-3.el9 (FEDORA-EPEL-2024-23a94cb21e) Embeddable, replicated and fault tolerant SQL engine -------------------------------------------------------------------------------- Update Information:
build for epel9 (fedora#2290603) -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 12 2024 Neil Hanlon neil@shrug.pw - 1.15.6-3 - build for epel9 (fedora#2290603) * Mon Apr 1 2024 topazus topazus@outlook.com - 1.15.6-2 - Only enable packit on Fedora rawhide * Sat Mar 30 2024 Packit hello@packit.dev - 1.15.6-1 - [packit] 1.15.6 upstream release - Resolves: rhbz#2272284 * Fri Jan 26 2024 topazus topazus@outlook.com - 1.15.4-1 - initial import; rhbz#2259103 --------------------------------------------------------------------------------
================================================================================ distribution-gpg-keys-1.104-1.el9 (FEDORA-EPEL-2024-ee8edc4842) GPG keys of various Linux distributions -------------------------------------------------------------------------------- Update Information:
Automatic update for distribution-gpg-keys-1.104-1.el9. Changelog for distribution-gpg-keys * Wed Jun 12 2024 Miroslav Such�� msuchy@redhat.com 1.104-1 - update copr keys - Add RPM-GPG-KEY-CentOS-Official-SHA256 * Mon Jun 03 2024 Miroslav Such�� msuchy@redhat.com 1.103-1 - update copr keys - add FFmpeg, LibreWolf, Monero, VideoLAN, and yt-dlp keys - Add CentOS 10 and EPEL 10 GPG keys - add Alpine Linux and postmarketOS keys -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 12 2024 Miroslav Such�� msuchy@redhat.com 1.104-1 - update copr keys - Add RPM-GPG-KEY-CentOS-Official-SHA256 * Mon Jun 3 2024 Miroslav Such�� msuchy@redhat.com 1.103-1 - update copr keys - add FFmpeg, LibreWolf, Monero, VideoLAN, and yt-dlp keys - Add CentOS 10 and EPEL 10 GPG keys - add Alpine Linux and postmarketOS keys --------------------------------------------------------------------------------
================================================================================ gaupol-1.15-1.el9 (FEDORA-EPEL-2024-443c56e002) Editor for text-based subtitle files -------------------------------------------------------------------------------- Update Information:
2024-06-10: Gaupol 1.15 Don't merge font tags with different values Drop dependency on chardet Add dependency on charset-normalizer Raise Python dependency to >= 3.5 -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 12 2024 Benjamin A. Beasley code@musicinmybrain.net - 1.15-1 - Update to 1.15 (close RHBZ#2291353) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2291353 - gaupol-1.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=2291353 --------------------------------------------------------------------------------
================================================================================ rubberband-3.1.3-2.el9 (FEDORA-EPEL-2024-9d59579e6e) Audio time-stretching and pitch-shifting library -------------------------------------------------------------------------------- Update Information:
Fix directory ownership -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 12 2024 Michel Lind salimma@fedoraproject.org - 3.1.3-2 - Fix directory ownership (rhbz#2283761) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2283761 - Directory is missing in RPM database. https://bugzilla.redhat.com/show_bug.cgi?id=2283761 --------------------------------------------------------------------------------
================================================================================ rust-lz4-1.25.0-1.el9 (FEDORA-EPEL-2024-2dd45ca8c8) Rust LZ4 bindings library -------------------------------------------------------------------------------- Update Information:
rust-lz4 1.25.0 Add content_size setting to Lz4FrameInfo Add LZ4_setStreamDecode Docs updates rust-lz4-sys 1.9.5 expand Lz4FrameInfo struct -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 11 2024 Benjamin A. Beasley code@musicinmybrain.net - 1.25.0-1 - Update to 1.25.0 (close RHBZ#2291270) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2291270 - rust-lz4-1.25.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2291270 [ 2 ] Bug #2291271 - rust-lz4-sys-1.9.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2291271 --------------------------------------------------------------------------------
================================================================================ rust-lz4-sys-1.9.5-1.el9 (FEDORA-EPEL-2024-2dd45ca8c8) Rust LZ4 sys package -------------------------------------------------------------------------------- Update Information:
rust-lz4 1.25.0 Add content_size setting to Lz4FrameInfo Add LZ4_setStreamDecode Docs updates rust-lz4-sys 1.9.5 expand Lz4FrameInfo struct -------------------------------------------------------------------------------- ChangeLog:
* Tue Jun 11 2024 Benjamin A. Beasley code@musicinmybrain.net - 1.9.5-1 - Update to 1.9.5 (close RHBZ#2291271) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2291270 - rust-lz4-1.25.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2291270 [ 2 ] Bug #2291271 - rust-lz4-sys-1.9.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2291271 --------------------------------------------------------------------------------
================================================================================ uwsgi-2.0.26-1.el9 (FEDORA-EPEL-2024-7cd021ecb4) Fast, self-healing, application container server -------------------------------------------------------------------------------- Update Information:
Update to 2.0.26 -------------------------------------------------------------------------------- ChangeLog:
* Sat Jun 1 2024 Ralf Ertzinger ralf@skytale.net - 2.0.26-1 - Update to 2.0.26 - Rework support for multiple python versions -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2279517 - [EPEL9] Please branch and build uwsgi-plugin-python312 in epel9 https://bugzilla.redhat.com/show_bug.cgi?id=2279517 [ 2 ] Bug #2284220 - uwsgi-2.0.26 is available https://bugzilla.redhat.com/show_bug.cgi?id=2284220 --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org