The following Fedora EPEL 9 Security updates need testing:
Age URL
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-a01823abe4
java-latest-openjdk-20.0.2.0.9-1.rolling.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
beakerlib-libraries-0.7-7.el9
chromium-115.0.5790.170-1.el9
distribution-gpg-keys-1.91-1.el9
gensio-2.7.1-1.el9
kiwi-9.25.12-1.el9
mock-5.0-1.el9
mock-core-configs-39-1.el9
pgbouncer-1.20.1-1.el9
pspg-5.8.0-1.el9
rust-plist-1.5.0-1.el9
rust-quick-xml-0.30.0-1.el9
zmap-3.0.0-2.el9
Details about builds:
================================================================================
beakerlib-libraries-0.7-7.el9 (FEDORA-EPEL-2023-8de16857ba)
Beakerlib libraries
--------------------------------------------------------------------------------
Update Information:
Update license in .spec
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 10 2023 Andrei Stepanov <astepano(a)redhat.com> - 0.7-7
- Tune License entry.
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.7-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
chromium-115.0.5790.170-1.el9 (FEDORA-EPEL-2023-369c889880)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 115.0.5790.170. Fixes several security issues
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 3 2023 Than Ngo <than(a)redhat.com> - 115.0.5790.170-1
- update to 115.0.5790.170
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2227630 - CVE-2022-3443 CVE-2022-3444 CVE-2022-4911 chromium: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227630
[ 2 ] Bug #2227631 - CVE-2022-3443 CVE-2022-3444 CVE-2022-4911 chromium: various flaws
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227631
[ 3 ] Bug #2227634 - CVE-2022-4912 CVE-2022-4913 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227634
[ 4 ] Bug #2227635 - CVE-2022-4912 CVE-2022-4913 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227635
[ 5 ] Bug #2227637 - CVE-2022-4914 chromium: chromium-browser: Heap buffer overflow in
PrintPreview [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227637
[ 6 ] Bug #2227638 - CVE-2022-4914 chromium: chromium-browser: Heap buffer overflow in
PrintPreview [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227638
[ 7 ] Bug #2227646 - CVE-2022-2477 CVE-2022-2478 CVE-2022-2479 CVE-2022-2480
CVE-2022-2481 CVE-2022-4915 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227646
[ 8 ] Bug #2227647 - CVE-2022-2477 CVE-2022-2478 CVE-2022-2479 CVE-2022-2480
CVE-2022-2481 CVE-2022-4915 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227647
[ 9 ] Bug #2227650 - CVE-2022-4916 CVE-2022-4917 chromium: various flaws [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227650
[ 10 ] Bug #2227651 - CVE-2022-4916 CVE-2022-4917 chromium: various flaws [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227651
[ 11 ] Bug #2227653 - CVE-2022-4918 chromium: chromium-browser: Use after free in UI
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227653
[ 12 ] Bug #2227654 - CVE-2022-4918 chromium: chromium-browser: Use after free in UI
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227654
[ 13 ] Bug #2227658 - CVE-2022-1919 CVE-2022-4919 CVE-2022-4920 chromium: various flaws
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2227658
--------------------------------------------------------------------------------
================================================================================
distribution-gpg-keys-1.91-1.el9 (FEDORA-EPEL-2023-05d741e02d)
GPG keys of various Linux distributions
--------------------------------------------------------------------------------
Update Information:
updated Google key, Coprs keys, added Fedora 41 key
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 10 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.91-1
- update Google key
* Thu Aug 10 2023 Miroslav Such�� <msuchy(a)redhat.com> 1.90-1
- add Fedora 41 key
- Add source URL for AL2023
- update copr keys
--------------------------------------------------------------------------------
================================================================================
gensio-2.7.1-1.el9 (FEDORA-EPEL-2023-e26676cda8)
General Stream I/O
--------------------------------------------------------------------------------
Update Information:
Mostly internal fixes related to build system and linking
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 10 2023 Felix Kaechele <felix(a)kaechele.ca> - 2.7.1-1
- update to 2.7.1
* Mon Aug 7 2023 Felix Kaechele <felix(a)kaechele.ca> - 2.7.0-1
- update yo 2.7.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2231011 - gensio-2.7.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2231011
--------------------------------------------------------------------------------
================================================================================
kiwi-9.25.12-1.el9 (FEDORA-EPEL-2023-fc4b8c76da)
Flexible operating system image builder
--------------------------------------------------------------------------------
Update Information:
Update to add fix for issue where GRUB entries were doubled for legacy BIOS boot
in ISO images
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 9 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 9.25.12-1
- Update to 9.25.12 (RH#2227909)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2227909 - kiwi-9.25.12 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2227909
--------------------------------------------------------------------------------
================================================================================
mock-5.0-1.el9 (FEDORA-EPEL-2023-e03c59145d)
Builds packages inside chroots
--------------------------------------------------------------------------------
Update Information:
new upstream release, per
https://rpm-software-
management.github.io/mock/Release-Notes-5.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 9 2023 Pavel Raiskup <praiskup(a)redhat.com> 5.0-1
- new upstream release, per
https://rpm-software-management.github.io/mock/Release-Notes-5.0
--------------------------------------------------------------------------------
================================================================================
mock-core-configs-39-1.el9 (FEDORA-EPEL-2023-e03c59145d)
Mock core config files basic chroots
--------------------------------------------------------------------------------
Update Information:
new upstream release, per
https://rpm-software-
management.github.io/mock/Release-Notes-5.0
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 9 2023 Pavel Raiskup <praiskup(a)redhat.com> 39-1
- new upstream release, per
https://rpm-software-management.github.io/mock/Release-Notes-5.0
--------------------------------------------------------------------------------
================================================================================
pgbouncer-1.20.1-1.el9 (FEDORA-EPEL-2023-d1b88d36f8)
Lightweight connection pooler for PostgreSQL
--------------------------------------------------------------------------------
Update Information:
Update to 1.20.1, per changes described at
https://www.pgbouncer.org/changelog.html#pgbouncer-120x ---- Update to bugfix
release 1.20.0.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 10 2023 Devrim G��nd��z <devrim(a)gunduz.org> - 1.20.1-1
- Update to 1.20.1, per changes described at:
https://www.pgbouncer.org/changelog.html#pgbouncer-120x
* Mon Aug 7 2023 Simone Caronni <negativo17(a)gmail.com> - 1.20.0-1
- Update to 1.20.0.
--------------------------------------------------------------------------------
================================================================================
pspg-5.8.0-1.el9 (FEDORA-EPEL-2023-bfe66a4087)
A unix pager optimized for psql
--------------------------------------------------------------------------------
Update Information:
https://github.com/okbob/pspg/releases/tag/5.8.0
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 10 2023 Pavel Raiskup <praiskup(a)redhat.com> - 5.8.0-1
-
https://github.com/okbob/pspg/releases/tag/5.8.0
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.7.8-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-plist-1.5.0-1.el9 (FEDORA-EPEL-2023-cd28546562)
Rusty plist parser
--------------------------------------------------------------------------------
Update Information:
- Update the quick-xml crate to version 0.30.0. - Update the plist crate to
version 1.5.0. - Port the plist crate to quick-xml v0.30.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 10 2023 Fabio Valentini <decathorpe(a)gmail.com> - 1.5.0-1
- Update to version 1.5.0; Fixes RHBZ#2221496
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.4.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-quick-xml-0.30.0-1.el9 (FEDORA-EPEL-2023-cd28546562)
High performance xml reader and writer
--------------------------------------------------------------------------------
Update Information:
- Update the quick-xml crate to version 0.30.0. - Update the plist crate to
version 1.5.0. - Port the plist crate to quick-xml v0.30.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 10 2023 Fabio Valentini <decathorpe(a)gmail.com> - 0.30.0-1
- Update to version 0.30.0; Fixes RHBZ#2214395
* Fri Jul 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.28.2-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
zmap-3.0.0-2.el9 (FEDORA-EPEL-2023-1c8912581b)
Network scanner for Internet-wide network studies
--------------------------------------------------------------------------------
Update Information:
zmap 3.0.0 for el9
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 10 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 3.0.0-2
- upstream removed redis & mongodb support
* Thu Aug 10 2023 Filipe Rosset <rosset.filipe(a)gmail.com> - 3.0.0-1
- update zmap to 3.0.0 fixes rhbz#1989719
* Sat Jul 22 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-22
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Sat Jan 21 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-21
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Sat Jul 23 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-20
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Sat Jan 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.1.1-19
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Jan 18 2022 Kevin Fenzi <kevin(a)scrye.com> - 2.1.1-18
- Rebuild for hiredis 1.0.2
--------------------------------------------------------------------------------