The following Fedora EPEL 7 Security updates need testing: Age URL 5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-29630d7094 vte-0.28.2-42.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
chromium-126.0.6478.114-1.el7 perl-Fsdb-3.7-1.el7
Details about builds:
================================================================================ chromium-126.0.6478.114-1.el7 (FEDORA-EPEL-2024-40073a5fd9) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information:
update to 126.0.6478.114 High CVE-2024-6100: Type Confusion in V8 High CVE-2024-6101: Inappropriate implementation in WebAssembly High CVE-2024-6102: Out of bounds memory access in Dawn High CVE-2024-6103: Use after free in Dawn -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 19 2024 Than Ngo than@redhat.com - 126.0.6478.114-1 - update to 126.0.6478.114 * High CVE-2024-6100: Type Confusion in V8 * High CVE-2024-6101: Inappropriate implementation in WebAssembly * High CVE-2024-6102: Out of bounds memory access in Dawn * High CVE-2024-6103: Use after free in Dawn -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2292398 - CVE-2024-5171 chromium: libaom: Integer overflow in internal function��img_alloc_helper [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292398 [ 2 ] Bug #2292402 - CVE-2024-5171 chromium: libaom: Integer overflow in internal function��img_alloc_helper [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292402 [ 3 ] Bug #2293009 - CVE-2024-6100 CVE-2024-6101 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2293009 [ 4 ] Bug #2293013 - CVE-2024-6102 chromium: chromium-browser: out of bounds memory access in Dawn [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2293013 [ 5 ] Bug #2293016 - CVE-2024-6103 chromium: chromium-browser: use after free in Dawn [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2293016 --------------------------------------------------------------------------------
================================================================================ perl-Fsdb-3.7-1.el7 (FEDORA-EPEL-2024-7fcce186dd) A set of commands for manipulating flat-text databases from the shell -------------------------------------------------------------------------------- Update Information:
See http://www.isi.edu/~johnh/SOFTWARE/FSDB/ 3.6 release -------------------------------------------------------------------------------- ChangeLog:
* Wed Jun 19 2024 John Heidemann johnh@isi.edu 3.7-1 - See http://www.isi.edu/~johnh/SOFTWARE/FSDB/ --------------------------------------------------------------------------------
epel-devel@lists.fedoraproject.org