The following Fedora EPEL 8 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1183ac8862 sympa-6.2.74-1.el8 1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-073915237b dr_libs-0-0.27.20241217git660795b.el8 The following builds have been pushed to Fedora EPEL 8 updates-testing chromium-131.0.6778.204-1.el8 mold-2.35.1-2.el8 python-colcon-cmake-0.2.29-1.el8 python-colcon-core-0.18.4-1.el8 python-colcon-defaults-0.2.9-1.el8 python-colcon-lcov-result-0.5.3-1.el8 python-osrf-pycommon-2.1.5-1.el8 singularity-ce-4.2.2-1.el8 Details about builds: ================================================================================ chromium-131.0.6778.204-1.el8 (FEDORA-EPEL-2024-c27d1a40bc) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information: Update to 131.0.6778.204 High CVE-2024-12692: Type Confusion in V8 High CVE-2024-12693: Out of bounds memory access in V8 High CVE-2024-12694: Use after free in Compositing High CVE-2024-12695: Out of bounds write in V8 -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 19 2024 Than Ngo <than@xxxxxxxxxx> - 131.0.6778.204-1 - Update to 131.0.6778.204 * High CVE-2024-12692: Type Confusion in V8 * High CVE-2024-12693: Out of bounds memory access in V8 * High CVE-2024-12694: Use after free in Compositing * High CVE-2024-12695: Out of bounds write in V8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2333152 - CVE-2024-12692 chromium: Type Confusion in V8 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2333152 [ 2 ] Bug #2333153 - CVE-2024-12692 chromium: Type Confusion in V8 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2333153 [ 3 ] Bug #2333154 - CVE-2024-12693 chromium: Out of bounds memory access in V8 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2333154 [ 4 ] Bug #2333155 - CVE-2024-12693 chromium: Out of bounds memory access in V8 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2333155 [ 5 ] Bug #2333156 - CVE-2024-12694 chromium: Use after free in Compositing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2333156 [ 6 ] Bug #2333157 - CVE-2024-12694 chromium: Use after free in Compositing [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2333157 [ 7 ] Bug #2333159 - CVE-2024-12695 chromium: Out of bounds write in V8 [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2333159 [ 8 ] Bug #2333160 - CVE-2024-12695 chromium: Out of bounds write in V8 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2333160 -------------------------------------------------------------------------------- ================================================================================ mold-2.35.1-2.el8 (FEDORA-EPEL-2024-2df5a6ea44) A Modern Linker -------------------------------------------------------------------------------- Update Information: Fix linking against shared libmimalloc Update to 2.35.1 (rhbz#2332563) -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 19 2024 Christoph Erhardt <fedora@xxxxxxxxxxx> - 2.35.1-2 - Fix linking against shared `libmimalloc` * Mon Dec 16 2024 Christoph Erhardt <fedora@xxxxxxxxxxx> - 2.35.1-1 - Update to 2.35.1 (rhbz#2332563) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2332563 - mold-2.35.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2332563 -------------------------------------------------------------------------------- ================================================================================ python-colcon-cmake-0.2.29-1.el8 (FEDORA-EPEL-2024-1d2c27ec8c) Extension for colcon to support CMake packages -------------------------------------------------------------------------------- Update Information: Update to the latest colcon releases -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 20 2024 Scott K Logan <logans@xxxxxxxxxxx> - 0.2.29-1 - Update to 0.2.29 (rhbz#2328584) - Add Recommends: cmake - convert license to SPDX -------------------------------------------------------------------------------- References: [ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2324372 [ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328584 [ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328585 [ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2333150 -------------------------------------------------------------------------------- ================================================================================ python-colcon-core-0.18.4-1.el8 (FEDORA-EPEL-2024-1d2c27ec8c) Command line tool to build sets of software packages -------------------------------------------------------------------------------- Update Information: Update to the latest colcon releases -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 20 2024 Scott K Logan <logans@xxxxxxxxxxx> - 0.18.4-1 - Update to 0.18.4 (rhbz#2328585) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2324372 [ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328584 [ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328585 [ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2333150 -------------------------------------------------------------------------------- ================================================================================ python-colcon-defaults-0.2.9-1.el8 (FEDORA-EPEL-2024-1d2c27ec8c) Extension for colcon to read defaults from a config file -------------------------------------------------------------------------------- Update Information: Update to the latest colcon releases -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 20 2024 Scott K Logan <logans@xxxxxxxxxxx> - 0.2.9-1 - Update to 0.2.9 (rhbz#2333150) - convert license to SPDX -------------------------------------------------------------------------------- References: [ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2324372 [ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328584 [ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328585 [ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2333150 -------------------------------------------------------------------------------- ================================================================================ python-colcon-lcov-result-0.5.3-1.el8 (FEDORA-EPEL-2024-1d2c27ec8c) Extension for colcon to provide test results using LCOV -------------------------------------------------------------------------------- Update Information: Update to the latest colcon releases -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 20 2024 Scott K Logan <logans@xxxxxxxxxxx> - 0.5.3-1 - Update to 0.5.3 (rhbz#2324372) - Drop spec file support for RHEL 7 - convert license to SPDX -------------------------------------------------------------------------------- References: [ 1 ] Bug #2324372 - python-colcon-lcov-result-0.5.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2324372 [ 2 ] Bug #2328584 - python-colcon-cmake-0.2.29 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328584 [ 3 ] Bug #2328585 - python-colcon-core-0.18.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328585 [ 4 ] Bug #2333150 - python-colcon-defaults-0.2.9 is available https://bugzilla.redhat.com/show_bug.cgi?id=2333150 -------------------------------------------------------------------------------- ================================================================================ python-osrf-pycommon-2.1.5-1.el8 (FEDORA-EPEL-2024-cf56c4ef94) Commonly needed Python modules used by software developed at OSRF -------------------------------------------------------------------------------- Update Information: Update to osrf_pycommon 2.1.5 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 20 2024 Scott K Logan <logans@xxxxxxxxxxx> - 2.1.5-1 - Update to 2.1.5 (rhbz#2332954) - Review SPDX licensing - Drop spec file support for RHEL 7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2332954 - python-osrf-pycommon-2.1.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2332954 -------------------------------------------------------------------------------- ================================================================================ singularity-ce-4.2.2-1.el8 (FEDORA-EPEL-2024-9bd2ccf431) Application and environment virtualization -------------------------------------------------------------------------------- Update Information: Upgrade to 4.2.2 upstream version. -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 20 2024 David Trudgian <dtrudg@xxxxxxxxx> - 4.2.2-1 - Upgrade to 4.2.2 upstream version. -------------------------------------------------------------------------------- -- _______________________________________________ epel-devel mailing list -- epel-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to epel-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/epel-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
