The following Fedora EPEL 8 Security updates need testing:
Age URL
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-63d2fd37d2
radare2-5.8.8-2.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
afflib-3.7.20-1.el8
chromium-119.0.6045.105-1.el8
libre-3.6.1-1.el8
libsocketcan-0.0.12-3.el8
munin-2.0.75-1.el8
perl-Time-Out-0.21-1.el8
resalloc-5.1-1.el8
Details about builds:
================================================================================
afflib-3.7.20-1.el8 (FEDORA-EPEL-2023-d3b53aeb4b)
Library to support the Advanced Forensic Format
--------------------------------------------------------------------------------
Update Information:
bugfix release
--------------------------------------------------------------------------------
ChangeLog:
* Sat Nov 4 2023 Michal Ambroz <rebus _AT seznam.cz> - 3.7.20-1
- bump to version 3.7.20
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.19-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 3.7.19-10
- Rebuilt for Python 3.12
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.19-9
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.19-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 3.7.19-7
- Rebuilt for Python 3.11
* Wed Jan 19 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.19-6
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 3.7.19-5
- Rebuilt with OpenSSL 3.0.0
* Wed Jul 21 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.19-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 3.7.19-3
- Rebuilt for Python 3.10
* Mon Jan 25 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.19-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Sun Nov 29 2020 Michal Ambroz <rebus _AT seznam.cz> - 3.7.19-1
- bump to version 3.7.19
* Fri Jul 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.18-11
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.7.18-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue May 26 2020 Miro Hron��ok <mhroncok(a)redhat.com> - 3.7.18-9
- Rebuilt for Python 3.9
--------------------------------------------------------------------------------
================================================================================
chromium-119.0.6045.105-1.el8 (FEDORA-EPEL-2023-6e863522f4)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
update to 119.0.6045.105. Security fixes: High CVE-2023-5480: Inappropriate
implementation in Payments. High CVE-2023-5482: Insufficient data validation
in USB. High CVE-2023-5849: Integer overflow in USB. Medium
CVE-2023-5850: Incorrect security UI in Downloads. Medium CVE-2023-5851:
Inappropriate implementation in Downloads. Medium CVE-2023-5852: Use after
free in Printing. Medium CVE-2023-5853: Incorrect security UI in Downloads.
Medium CVE-2023-5854: Use after free in Profiles. Medium CVE-2023-5855: Use
after free in Reading Mode. Medium CVE-2023-5856: Use after free in Side
Panel. Medium CVE-2023-5857: Inappropriate implementation in Downloads.
Low CVE-2023-5858: Inappropriate implementation in WebApp Provider. Low
CVE-2023-5859: Incorrect security UI in Picture In Picture.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 1 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.105-1
- update to 119.0.6045.105
* Fri Oct 27 2023 Than Ngo <than(a)redhat.com> - 119.0.6045.59-1
- update 119.0.6045.59
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2247403 - CVE-2023-5480 chromium: chromium-browser: Inappropriate
implementation in Payments [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247403
[ 2 ] Bug #2247404 - CVE-2023-5480 chromium: chromium-browser: Inappropriate
implementation in Payments [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247404
[ 3 ] Bug #2247405 - CVE-2023-5482 chromium: chromium-browser: Insufficient data
validation in USB [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247405
[ 4 ] Bug #2247406 - CVE-2023-5482 chromium: chromium-browser: Insufficient data
validation in USB [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247406
[ 5 ] Bug #2247408 - CVE-2023-5849 chromium: chromium-browser: Integer overflow in USB
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247408
[ 6 ] Bug #2247409 - CVE-2023-5849 chromium: chromium-browser: Integer overflow in USB
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247409
[ 7 ] Bug #2247410 - CVE-2023-5850 chromium: chromium-browser: Incorrect security UI in
Downloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247410
[ 8 ] Bug #2247411 - CVE-2023-5850 chromium: chromium-browser: Incorrect security UI in
Downloads [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247411
[ 9 ] Bug #2247412 - CVE-2023-5851 chromium: chromium-browser: Inappropriate
implementation in Downloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247412
[ 10 ] Bug #2247413 - CVE-2023-5851 chromium: chromium-browser: Inappropriate
implementation in Downloads [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247413
[ 11 ] Bug #2247414 - CVE-2023-5852 chromium: chromium-browser: Use after free in
Printing [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247414
[ 12 ] Bug #2247415 - CVE-2023-5852 chromium: chromium-browser: Use after free in
Printing [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247415
[ 13 ] Bug #2247416 - CVE-2023-5853 chromium: chromium-browser: Incorrect security UI in
Downloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247416
[ 14 ] Bug #2247417 - CVE-2023-5853 chromium: chromium-browser: Incorrect security UI in
Downloads [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247417
[ 15 ] Bug #2247418 - CVE-2023-5854 chromium: chromium-browser: Use after free in
Profiles [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247418
[ 16 ] Bug #2247419 - CVE-2023-5855 chromium: chromium-browser: Use after free in
Reading Mode [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247419
[ 17 ] Bug #2247420 - CVE-2023-5854 chromium: chromium-browser: Use after free in
Profiles [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247420
[ 18 ] Bug #2247421 - CVE-2023-5855 chromium: chromium-browser: Use after free in
Reading Mode [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247421
[ 19 ] Bug #2247422 - CVE-2023-5856 chromium: chromium-browser: Use after free in Side
Panel [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247422
[ 20 ] Bug #2247423 - CVE-2023-5856 chromium: chromium-browser: Use after free in Side
Panel [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247423
[ 21 ] Bug #2247424 - CVE-2023-5858 chromium: chromium-browser: Inappropriate
implementation in WebApp Provider [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247424
[ 22 ] Bug #2247425 - CVE-2023-5859 chromium: chromium-browser: Incorrect security UI in
Picture In Picture [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247425
[ 23 ] Bug #2247426 - CVE-2023-5858 chromium: chromium-browser: Inappropriate
implementation in WebApp Provider [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247426
[ 24 ] Bug #2247429 - CVE-2023-5857 chromium: chromium-browser: Inappropriate
implementation in Downloads [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247429
[ 25 ] Bug #2247430 - CVE-2023-5857 chromium: chromium-browser: Inappropriate
implementation in Downloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2247430
--------------------------------------------------------------------------------
================================================================================
libre-3.6.1-1.el8 (FEDORA-EPEL-2023-5514895571)
Generic library for real-time communications
--------------------------------------------------------------------------------
Update Information:
# libre v3.6.1 (2023-11-03) * ice: `AI_V4MAPPED` doesn't exist on OpenBSD *
dialog: REVERT fix rtags of forking `INVITE` with 100rel
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Robert Scheck <robert(a)fedoraproject.org> 3.6.1-1
- Upgrade to 3.6.1 (#2247959)
* Sun Oct 29 2023 Robert Scheck <robert(a)fedoraproject.org> 3.6.0-1
- Upgrade to 3.6.0 (#2244979)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2247959 - libre-3.6.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2247959
--------------------------------------------------------------------------------
================================================================================
libsocketcan-0.0.12-3.el8 (FEDORA-EPEL-2023-4dabd4ca36)
Library for SocketCAN
--------------------------------------------------------------------------------
Update Information:
Initial packaging.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Nov 5 2023 Vasiliy Glazov <vascom2(a)gmail.com> - 0.0.12-3
- Update spec
* Thu Nov 2 2023 Vasiliy Glazov <vascom2(a)gmail.com> - 0.0.12-2
- Added BR gcc
- Removed patch
* Mon Oct 30 2023 Vasiliy Glazov <vascom2(a)gmail.com> - 0.0.12-1
- Initial packaging for Fedora
--------------------------------------------------------------------------------
================================================================================
munin-2.0.75-1.el8 (FEDORA-EPEL-2023-ba7556d757)
Network-wide resource monitoring tool
--------------------------------------------------------------------------------
Update Information:
Upstream update to 2.0.75.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 6 2023 Kim B. Heino <b(a)bbbs.net> - 2.0.75-1
- Upgrade to 2.0.75
--------------------------------------------------------------------------------
================================================================================
perl-Time-Out-0.21-1.el8 (FEDORA-EPEL-2023-7d16dd8efd)
Easily time out long running operations
--------------------------------------------------------------------------------
Update Information:
This release fixes handling a call context and a documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 6 2023 Petr Pisar <ppisar(a)redhat.com> - 0.21-1
- 0.21 bump
* Fri Nov 3 2023 Petr Pisar <ppisar(a)redhat.com> - 0.20-1
- 0.20 bump
- Package the tests
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2247795 - perl-Time-Out-0.20 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2247795
[ 2 ] Bug #2248029 - perl-Time-Out-0.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2248029
--------------------------------------------------------------------------------
================================================================================
resalloc-5.1-1.el8 (FEDORA-EPEL-2023-9d9b733414)
Resource allocator for expensive resources - client tooling
--------------------------------------------------------------------------------
Update Information:
new upstream release
https://github.com/praiskup/resalloc/releases/tag/v5.1
--------------------------------------------------------------------------------
ChangeLog:
* Mon Nov 6 2023 Pavel Raiskup <praiskup(a)redhat.com> - 5.1-1
- new upstream release
https://github.com/praiskup/resalloc/releases/tag/v5.1
--------------------------------------------------------------------------------