The following Fedora EPEL 7 Security updates need testing: Age URL 710 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-3c9292b62d condor-8.6.11-1.el7 449 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-bc0182548b bubblewrap-0.3.3-2.el7 159 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-fa8a2e97c6 python-waitress-1.4.3-1.el7 99 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-19d171a465 python34-3.4.10-5.el7 10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2f9c63b80c php-horde-kronolith-4.2.29-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-dab5d98f39 cacti-1.2.13-1.el7 cacti-spine-1.2.13-1.el7 9 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-07adc005e6 mbedtls-2.7.16-1.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-192ef0b5e1 hostapd-2.9-3.el7 7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-3d8bba637d clamav-0.102.4-1.el7 4 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-2c80eb66b5 libASL-0.1.7-6.el7 matio-1.5.17-3.el7 openmeeg-2.4-0.4.rc4.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-489c36a241 snmptt-1.4.2-1.el7 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-90cbb3a9ff golang-1.13.14-1.el7 The following builds have been pushed to Fedora EPEL 7 updates-testing chromium-84.0.4147.89-1.el7 java-latest-openjdk-14.0.2.12-1.rolling.el7 xxhash-0.7.4-2.el7 Details about builds: ================================================================================ chromium-84.0.4147.89-1.el7 (FEDORA-EPEL-2020-c9e7aa6a08) A WebKit (Blink) powered web browser -------------------------------------------------------------------------------- Update Information: Just enough time for one more update. Chromium 84. Fixes CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6519 CVE-2020-6520 CVE-2020-6521 CVE-2020-6522 CVE-2020-6523 CVE-2020-6524 CVE-2020-6525 CVE-2020-6526 CVE-2020-6527 CVE-2020-6528 CVE-2020-6529 CVE-2020-6530 CVE-2020-6531 CVE-2020-6533 CVE-2020-6534 CVE-2020-6535 CVE-2020-6536 -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 15 2020 Tom Callaway <spot@xxxxxxxxxxxxxxxxx> - 84.0.4147.89-1 - update to 84.0.4147.89 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1857320 - CVE-2020-6511 chromium-browser: Side-channel information leakage in content security policy https://bugzilla.redhat.com/show_bug.cgi?id=1857320 [ 2 ] Bug #1857321 - CVE-2020-6512 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1857321 [ 3 ] Bug #1857322 - CVE-2020-6513 chromium-browser: Heap buffer overflow in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1857322 [ 4 ] Bug #1857323 - CVE-2020-6515 chromium-browser: Use after free in tab strip https://bugzilla.redhat.com/show_bug.cgi?id=1857323 [ 5 ] Bug #1857324 - CVE-2020-6516 chromium-browser: Policy bypass in CORS https://bugzilla.redhat.com/show_bug.cgi?id=1857324 [ 6 ] Bug #1857325 - CVE-2020-6518 chromium-browser: Use after free in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1857325 [ 7 ] Bug #1857326 - CVE-2020-6519 chromium-browser: Policy bypass in CSP https://bugzilla.redhat.com/show_bug.cgi?id=1857326 [ 8 ] Bug #1857327 - CVE-2020-6520 chromium-browser: Heap buffer overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1857327 [ 9 ] Bug #1857328 - CVE-2020-6521 chromium-browser: Side-channel information leakage in autofill https://bugzilla.redhat.com/show_bug.cgi?id=1857328 [ 10 ] Bug #1857329 - CVE-2020-6523 chromium-browser: Out of bounds write in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1857329 [ 11 ] Bug #1857330 - CVE-2020-6524 chromium-browser: Heap buffer overflow in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1857330 [ 12 ] Bug #1857331 - CVE-2020-6525 chromium-browser: Heap buffer overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1857331 [ 13 ] Bug #1857332 - CVE-2020-6526 chromium-browser: Inappropriate implementation in iframe sandbox https://bugzilla.redhat.com/show_bug.cgi?id=1857332 [ 14 ] Bug #1857333 - CVE-2020-6527 chromium-browser: Insufficient policy enforcement in CSP https://bugzilla.redhat.com/show_bug.cgi?id=1857333 [ 15 ] Bug #1857334 - CVE-2020-6528 chromium-browser: Incorrect security UI in basic auth https://bugzilla.redhat.com/show_bug.cgi?id=1857334 [ 16 ] Bug #1857336 - CVE-2020-6529 chromium-browser: Inappropriate implementation in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1857336 [ 17 ] Bug #1857337 - CVE-2020-6530 chromium-browser: Out of bounds memory access in developer tools https://bugzilla.redhat.com/show_bug.cgi?id=1857337 [ 18 ] Bug #1857338 - CVE-2020-6531 chromium-browser: Side-channel information leakage in scroll to text https://bugzilla.redhat.com/show_bug.cgi?id=1857338 [ 19 ] Bug #1857339 - CVE-2020-6533 chromium-browser: Type Confusion in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1857339 [ 20 ] Bug #1857340 - CVE-2020-6534 chromium-browser: Heap buffer overflow in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1857340 [ 21 ] Bug #1857341 - CVE-2020-6535 chromium-browser: Insufficient data validation in WebUI https://bugzilla.redhat.com/show_bug.cgi?id=1857341 [ 22 ] Bug #1857342 - CVE-2020-6536 chromium-browser: Incorrect security UI in PWAs https://bugzilla.redhat.com/show_bug.cgi?id=1857342 -------------------------------------------------------------------------------- ================================================================================ java-latest-openjdk-14.0.2.12-1.rolling.el7 (FEDORA-EPEL-2020-452d014b82) OpenJDK Runtime Environment 14 -------------------------------------------------------------------------------- Update Information: OpenJDK 14 July security update -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 22 2020 Petra Alice Mikova <pmikova@xxxxxxxxxx> - 1:14.0.2.12-1.rolling - update to jdk 14.0.2.12 CPU version - remove upstreamed patch jdk8243059-build_fails_when_with_vendor_contains_comma.patch * Thu Jul 9 2020 Andrew Hughes <gnu.andrew@xxxxxxxxxx> - 1:14.0.1.7-4.rolling - Re-introduce java-openjdk-src & java-openjdk-demo for system_jdk builds. - Fix accidental renaming of java-openjdk-devel to java-devel-openjdk. -------------------------------------------------------------------------------- ================================================================================ xxhash-0.7.4-2.el7 (FEDORA-EPEL-2020-4b90013b56) Extremely fast hash algorithm -------------------------------------------------------------------------------- Update Information: Fix wrong libdir in pkg-config file. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 24 2020 Mattias Ellert <mattias.ellert@xxxxxxxxxxxxx> - 0.7.4-2 - Fix libdir in pkg-config file -------------------------------------------------------------------------------- References: [ 1 ] Bug #1858407 - pkgconfig --libs libxxhash points to the wrong directory https://bugzilla.redhat.com/show_bug.cgi?id=1858407 -------------------------------------------------------------------------------- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx
