January 2019 - epel-package-announce

Fedora EPEL 6 Update: php-horde-kronolith-4.2.26-1.el6

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-d78e4b3641 2019-01-23 00:38:36.951644 -------------------------------------------------------------------------------- Name : php-horde-kronolith Product : Fedora EPEL 6 Version : 4.2.26 Release : 1.el6 URL : http://www.horde.org/apps/kronolith Summary : A web based calendar Description : Kronolith is the Horde calendar application. It provides web-based calendars backed by a SQL database or a Kolab server. Supported features include Ajax and mobile interfaces, shared calendars, remote calendars, invitation management (iCalendar/iTip), free/busy management, resource management, alarms, recurring events, and a sophisticated day/week view which handles arbitrary numbers of overlapping events. -------------------------------------------------------------------------------- Update Information: **kronolith 4.2.26** * [mjr] Remove hard coded end date for calendar feed and allow it to be specified in url. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-horde-kronolith' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

[SECURITY] Fedora EPEL 6 Update: php-horde-Horde-Form-2.0.19-1.el6

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-f49d74241e 2019-01-23 00:38:36.951595 -------------------------------------------------------------------------------- Name : php-horde-Horde-Form Product : Fedora EPEL 6 Version : 2.0.19 Release : 1.el6 URL : http://pear.horde.org Summary : Horde Form API Description : The Horde_Form package provides form rendering, validation, and other functionality for the Horde Application Framework. -------------------------------------------------------------------------------- Update Information: **Horde_Form 2.0.19** * [mjr] SECURITY: Prevent RCE vulnerability due to potential directory traversal in Image uploads (An independent security researcher has reported this vulnerability to SecuriTeam Secure Disclosure program). -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-horde-Horde-Form' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

Fedora EPEL 7 Update: fernflower-183.5153.8-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-6f118372b8 2019-01-22 02:05:34.450473 -------------------------------------------------------------------------------- Name : fernflower Product : Fedora EPEL 7 Version : 183.5153.8 Release : 1.el7 URL : https://github.com/JetBrains/intellij-community/tree/master/plugins/java-... Summary : JIdea's java decompiler Description : JIdea's decompiler is the first actually working analytical decompiler for Java and probably for a high-level programming language in general. Naturally it is still under development, please send your bug reports and improvement suggestions to the issue tracker. -------------------------------------------------------------------------------- Update Information: New package - jidea's fernflower decompiler. Please note its cooperating update - https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-779e04bf5d -------------------------------------------------------------------------------- References: [ 1 ] Bug #1662974 - Review Request: fernflower - jidea's java decompiler https://bugzilla.redhat.com/show_bug.cgi?id=1662974 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update fernflower' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

Fedora EPEL 7 Update: clamav-0.101.1-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-95a6047bc6 2019-01-22 02:05:34.450398 -------------------------------------------------------------------------------- Name : clamav Product : Fedora EPEL 7 Version : 0.101.1 Release : 1.el7 URL : https://www.clamav.net/ Summary : End-user tools for the Clam Antivirus scanner Description : Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use with your own software. The virus database is based on the virus database from OpenAntiVirus, but contains additional signatures (including signatures for popular polymorphic viruses, too) and is KEPT UP TO DATE. -------------------------------------------------------------------------------- Update Information: ClamAV 0.101.1 Patch has been released ClamAV 0.101.1 is an urgent patch release to address an issue in 0.101.0 specifically for developers that depend on libclamav. The issue in 0.101.0 is that clamav.h required supporting headers that were not provided on make install. To address this issue, the internal cltypes.h header has been replaced by a clamav-types.h that is generated on ./configure and will be installed alongside clamav.h. Other changes Increased the default CommandReadTimeout to reduce the chance of mail loss if using clamav-milter with the TCP socket. Contribution by Scott Kitterman. Fixes for --with-libjson and --with-libcurl to correctly accept library install path arguments. Acknowledgements The ClamAV team thanks the following individuals for their code submissions: Scott Kitterman Known Issues Some users have observed crashes the first time running freshclam after upgrading from 0.100 to 0.101. We haven't yet tracked down the source of the issue, but have found that the issue resolves itself and that subsequent calls to freshclam work as expected. ---- Fix libclamav headers -------------------------------------------------------------------------------- References: [ 1 ] Bug #1663011 - clamav-devel-0.101 unusable due to missing cltypes.h https://bugzilla.redhat.com/show_bug.cgi?id=1663011 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update clamav' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

Fedora EPEL 6 Update: zstd-1.3.8-1.el6

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-a5361d7e94 2019-01-21 00:52:16.653089 -------------------------------------------------------------------------------- Name : zstd Product : Fedora EPEL 6 Version : 1.3.8 Release : 1.el6 URL : https://github.com/facebook/zstd Summary : Zstd compression library Description : Zstd, short for Zstandard, is a fast lossless compression algorithm, targeting real-time compression scenarios at zlib-level compression ratio. -------------------------------------------------------------------------------- Update Information: Latest upstream -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update zstd' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

Fedora EPEL 7 Update: php-maxminddb-1.4.1-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-437583a850 2019-01-21 00:48:52.659557 -------------------------------------------------------------------------------- Name : php-maxminddb Product : Fedora EPEL 7 Version : 1.4.1 Release : 1.el7 URL : https://github.com/maxmind/MaxMind-DB-Reader-php Summary : MaxMind DB Reader extension Description : MaxMind DB is a binary file format that stores data indexed by IP address subnets (IPv4 or IPv6). This optional PHP C Extension is a drop-in replacement for MaxMind\Db\Reader. Databases are available in geolite2-country and geolite2-city packages. -------------------------------------------------------------------------------- Update Information: **Version 1.4.1** (2019-01-04) ------------------ * The `maxminddb` extension now returns a string when a `uint32` value is greater than `LONG_MAX`. Previously, the value would overflow. This generally only affects 32-bit machines. Reported by Remi Collet. GitHub #79. * For `uint64` values, the `maxminddb` extension now returns an integer rather than a string when the value is less than or equal to `LONG_MAX`. This more closely matches the behavior of the pure PHP reader. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-maxminddb' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

Fedora EPEL 7 Update: zstd-1.3.8-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-9fb4fd8b89 2019-01-21 00:48:52.659445 -------------------------------------------------------------------------------- Name : zstd Product : Fedora EPEL 7 Version : 1.3.8 Release : 1.el7 URL : https://github.com/facebook/zstd Summary : Zstd compression library Description : Zstd, short for Zstandard, is a fast lossless compression algorithm, targeting real-time compression scenarios at zlib-level compression ratio. -------------------------------------------------------------------------------- Update Information: Latest upstream -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update zstd' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

Fedora EPEL 7 Update: chirp-20190104-1.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-05370f6010 2019-01-20 01:36:16.290076 -------------------------------------------------------------------------------- Name : chirp Product : Fedora EPEL 7 Version : 20190104 Release : 1.el7 URL : http://chirp.danplanet.com/ Summary : A tool for programming two-way radio equipment Description : Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood. -------------------------------------------------------------------------------- Update Information: Changes for Build #545 [Vinny Stipo <v(a)xpctech.com>] FT-818ND US Model Bug #6289 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update chirp' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

Fedora EPEL 6 Update: stripesnoop-1.5-24.el6

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-b228dbafdf 2019-01-19 02:33:12.619072 -------------------------------------------------------------------------------- Name : stripesnoop Product : Fedora EPEL 6 Version : 1.5 Release : 24.el6 URL : http://stripesnoop.sourceforge.net Summary : Magnetic Stripe Reader Description : Stripe Snoop is a suite of research tools that captures, modifies, validates, generates, analyzes, and shares data from magstripe cards. Numerous readers are supported to gather this information. In addition to simply displaying the raw characters that are encoded on the card, Stripe Snoop has a database of known card formats. It uses this to give you more detailed information about the card. -------------------------------------------------------------------------------- Update Information: Rename ss binary to resolve conflict. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1249328 - stripesnoop /usr/bin/ss interferes with start of remote desktop https://bugzilla.redhat.com/show_bug.cgi?id=1249328 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update stripesnoop' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

[SECURITY] Fedora EPEL 7 Update: chromium-71.0.3578.98-2.el7

by updates＠fedoraproject.org

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2019-6c3fb8b090 2019-01-19 00:43:40.315227 -------------------------------------------------------------------------------- Name : chromium Product : Fedora EPEL 7 Version : 71.0.3578.98 Release : 2.el7 URL : http://www.chromium.org/Home Summary : A WebKit (Blink) powered web browser Description : Chromium is an open-source web browser, powered by WebKit (Blink). -------------------------------------------------------------------------------- Update Information: Finally, a new chromium build for EL7. Hold on to your butts, this fixes so many CVEs. Fixes CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068 CVE-2018-16069 CVE-2018-16070 CVE-2018-16071 CVE-2018-16073 CVE-2018-16074 CVE-2018-16075 CVE-2018-16076 CVE-2018-16077 CVE-2018-16078 CVE-2018-16079 CVE-2018-16080 CVE-2018-16081 CVE-2018-16082 CVE-2018-16083 CVE-2018-16084 CVE-2018-16085 CVE-2018-16088 CVE-2018-16087 CVE-2018-16086 CVE-2018-17458 CVE-2018-17459 CVE-2018-6119 CVE-2018-6055 CVE-2018-16435 CVE-2018-17462 CVE-2018-17463 CVE-2018-17464 CVE-2018-17465 CVE-2018-17466 CVE-2018-17467 CVE-2018-17468 CVE-2018-17469 CVE-2018-17470 CVE-2018-17471 CVE-2018-17473 CVE-2018-17474 CVE-2018-17475 CVE-2018-17476 CVE-2018-5179 CVE-2018-17477 CVE-2018-17478 CVE-2018-17479 CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-2018-18344 CVE-2018-18345 CVE-2018-18346 CVE-2018-18347 CVE-2018-18348 CVE-2018-18349 CVE-2018-18350 CVE-2018-18351 CVE-2018-18352 CVE-2018-18353 CVE-2018-18354 CVE-2018-18355 CVE-2018-18356 CVE-2018-18357 CVE-2018-18358 CVE-2018-18359 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1656573 - CVE-2018-18359 chromium-browser: Out of bounds read in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1656573 [ 2 ] Bug #1656572 - CVE-2018-18358 chromium-browser: Insufficient policy enforcement in Proxy https://bugzilla.redhat.com/show_bug.cgi?id=1656572 [ 3 ] Bug #1656571 - CVE-2018-18357 chromium-browser: Insufficient policy enforcement in URL Formatter https://bugzilla.redhat.com/show_bug.cgi?id=1656571 [ 4 ] Bug #1656570 - CVE-2018-18356 chromium-browser: Use after free in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1656570 [ 5 ] Bug #1656569 - CVE-2018-18355 chromium-browser: Insufficient policy enforcement in URL Formatter https://bugzilla.redhat.com/show_bug.cgi?id=1656569 [ 6 ] Bug #1656568 - CVE-2018-18354 chromium-browser: Insufficient data validation in Shell Integration https://bugzilla.redhat.com/show_bug.cgi?id=1656568 [ 7 ] Bug #1656567 - CVE-2018-18353 chromium-browser: Inappropriate implementation in Network Authentication https://bugzilla.redhat.com/show_bug.cgi?id=1656567 [ 8 ] Bug #1656566 - CVE-2018-18352 chromium-browser: Inappropriate implementation in Media https://bugzilla.redhat.com/show_bug.cgi?id=1656566 [ 9 ] Bug #1656565 - CVE-2018-18351 chromium-browser: Insufficient policy enforcement in Navigation https://bugzilla.redhat.com/show_bug.cgi?id=1656565 [ 10 ] Bug #1656564 - CVE-2018-18350 chromium-browser: Insufficient policy enforcement in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1656564 [ 11 ] Bug #1656563 - CVE-2018-18349 chromium-browser: Insufficient policy enforcement in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1656563 [ 12 ] Bug #1656562 - CVE-2018-18348 chromium-browser: Inappropriate implementation in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1656562 [ 13 ] Bug #1656561 - CVE-2018-18347 chromium-browser: Inappropriate implementation in Navigation https://bugzilla.redhat.com/show_bug.cgi?id=1656561 [ 14 ] Bug #1656560 - CVE-2018-18346 chromium-browser: Incorrect security UI in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1656560 [ 15 ] Bug #1656559 - CVE-2018-18345 chromium-browser: Inappropriate implementation in Site Isolation https://bugzilla.redhat.com/show_bug.cgi?id=1656559 [ 16 ] Bug #1656558 - CVE-2018-18344 chromium-browser: Inappropriate implementation in Extensions https://bugzilla.redhat.com/show_bug.cgi?id=1656558 [ 17 ] Bug #1656557 - CVE-2018-18343 chromium-browser: Use after free in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1656557 [ 18 ] Bug #1656556 - CVE-2018-18342 chromium-browser: Out of bounds write in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1656556 [ 19 ] Bug #1656555 - CVE-2018-18341 chromium-browser: Heap buffer overflow in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1656555 [ 20 ] Bug #1656554 - CVE-2018-18340 chromium-browser: Use after free in MediaRecorder https://bugzilla.redhat.com/show_bug.cgi?id=1656554 [ 21 ] Bug #1656553 - CVE-2018-18339 chromium-browser: Use after free in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1656553 [ 22 ] Bug #1656552 - CVE-2018-18338 chromium-browser: Heap buffer overflow in Canvas https://bugzilla.redhat.com/show_bug.cgi?id=1656552 [ 23 ] Bug #1656551 - CVE-2018-18337 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1656551 [ 24 ] Bug #1656550 - CVE-2018-18336 chromium-browser: Use after free in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1656550 [ 25 ] Bug #1656549 - CVE-2018-18335 chromium-browser: Heap buffer overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1656549 [ 26 ] Bug #1656548 - CVE-2018-17481 chromium-browser: Use after frees in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1656548 [ 27 ] Bug #1656547 - CVE-2018-17480 chromium-browser: Out of bounds write in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1656547 [ 28 ] Bug #1651487 - CVE-2018-17479 chromium-browser: Use-after-free in GPU https://bugzilla.redhat.com/show_bug.cgi?id=1651487 [ 29 ] Bug #1648855 - CVE-2018-17478 chromium-browser: Out of bounds memory access in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1648855 [ 30 ] Bug #1640118 - chromium-browser: Heap buffer overflow in lcms in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1640118 [ 31 ] Bug #1640115 - CVE-2018-17477 chromium-browser: UI spoof in Extensions https://bugzilla.redhat.com/show_bug.cgi?id=1640115 [ 32 ] Bug #1640114 - CVE-2018-5179 chromium-browser: Lack of limits on update() in ServiceWorker https://bugzilla.redhat.com/show_bug.cgi?id=1640114 [ 33 ] Bug #1640113 - CVE-2018-17476 chromium-browser: Security UI occlusion in full screen mode https://bugzilla.redhat.com/show_bug.cgi?id=1640113 [ 34 ] Bug #1640112 - CVE-2018-17475 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1640112 [ 35 ] Bug #1640111 - CVE-2018-17474 chromium-browser: Use after free in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1640111 [ 36 ] Bug #1640110 - CVE-2018-17473 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1640110 [ 37 ] Bug #1640108 - CVE-2018-17472 chromium-browser: iframe sandbox escape on iOS https://bugzilla.redhat.com/show_bug.cgi?id=1640108 [ 38 ] Bug #1640107 - CVE-2018-17471 chromium-browser: Security UI occlusion in full screen mode https://bugzilla.redhat.com/show_bug.cgi?id=1640107 [ 39 ] Bug #1640106 - CVE-2018-17470 chromium-browser: Memory corruption in GPU Internals https://bugzilla.redhat.com/show_bug.cgi?id=1640106 [ 40 ] Bug #1640105 - CVE-2018-17469 chromium-browser: Heap buffer overflow in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1640105 [ 41 ] Bug #1640104 - CVE-2018-17468 chromium-browser: Cross-origin URL disclosure in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1640104 [ 42 ] Bug #1640103 - CVE-2018-17467 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1640103 [ 43 ] Bug #1640102 - CVE-2018-17466 chromium-browser, firefox: Memory corruption in Angle https://bugzilla.redhat.com/show_bug.cgi?id=1640102 [ 44 ] Bug #1640101 - CVE-2018-17465 chromium-browser: Use after free in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1640101 [ 45 ] Bug #1640100 - CVE-2018-17464 chromium-browser: URL spoof in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1640100 [ 46 ] Bug #1640099 - CVE-2018-17463 chromium-browser: Remote code execution in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1640099 [ 47 ] Bug #1640098 - CVE-2018-17462 chromium-browser: Sandbox escape in AppCache https://bugzilla.redhat.com/show_bug.cgi?id=1640098 [ 48 ] Bug #1633393 - CVE-2018-6055 chromium-browser: Insufficient policy enforcement in Catalog Service https://bugzilla.redhat.com/show_bug.cgi?id=1633393 [ 49 ] Bug #1633390 - CVE-2018-6119 chromium-browser: Spoof of contents of the Omnibox (URL bar) via a crafted HTML page https://bugzilla.redhat.com/show_bug.cgi?id=1633390 [ 50 ] Bug #1628080 - CVE-2018-17459 chromium-browser: URL Spoofing in Omnibox https://bugzilla.redhat.com/show_bug.cgi?id=1628080 [ 51 ] Bug #1628078 - CVE-2018-17458 chromium-browser: Function signature mismatch in WebAssembly https://bugzilla.redhat.com/show_bug.cgi?id=1628078 [ 52 ] Bug #1625488 - CVE-2018-16085 chromium-browser: Use after free in Memory Instrumentation https://bugzilla.redhat.com/show_bug.cgi?id=1625488 [ 53 ] Bug #1625487 - CVE-2018-16084 chromium-browser: User confirmation bypass in external protocol handling https://bugzilla.redhat.com/show_bug.cgi?id=1625487 [ 54 ] Bug #1625486 - CVE-2018-16083 chromium-browser: Out of bounds read in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1625486 [ 55 ] Bug #1625485 - CVE-2018-16082 chromium-browser: Stack buffer overflow in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1625485 [ 56 ] Bug #1625484 - CVE-2018-16081 chromium-browser: Local file access in DevTools https://bugzilla.redhat.com/show_bug.cgi?id=1625484 [ 57 ] Bug #1625482 - CVE-2018-16080 chromium-browser: URL spoof in full screen mode https://bugzilla.redhat.com/show_bug.cgi?id=1625482 [ 58 ] Bug #1625481 - CVE-2018-16079 chromium-browser: URL spoof in permission dialogs https://bugzilla.redhat.com/show_bug.cgi?id=1625481 [ 59 ] Bug #1625480 - CVE-2018-16078 chromium-browser: Credit card information leak in Autofill https://bugzilla.redhat.com/show_bug.cgi?id=1625480 [ 60 ] Bug #1625479 - CVE-2018-16077 chromium-browser: Content security policy bypass in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1625479 [ 61 ] Bug #1625478 - CVE-2018-16076 chromium-browser: Out of bounds read in PDFium https://bugzilla.redhat.com/show_bug.cgi?id=1625478 [ 62 ] Bug #1625477 - CVE-2018-16075 chromium-browser: Local file access in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1625477 [ 63 ] Bug #1625476 - CVE-2018-16074 chromium-browser: Site Isolation bypass using Blob URLS https://bugzilla.redhat.com/show_bug.cgi?id=1625476 [ 64 ] Bug #1625475 - CVE-2018-16073 chromium-browser: Site Isolation bypass after tab restore https://bugzilla.redhat.com/show_bug.cgi?id=1625475 [ 65 ] Bug #1625474 - CVE-2018-16072 chromium-browser: Cross origin pixel leak in Chrome's interaction with Android's MediaPlayer https://bugzilla.redhat.com/show_bug.cgi?id=1625474 [ 66 ] Bug #1625473 - CVE-2018-16071 chromium-browser: Use after free in WebRTC https://bugzilla.redhat.com/show_bug.cgi?id=1625473 [ 67 ] Bug #1625472 - CVE-2018-16070 chromium-browser: Integer overflow in Skia https://bugzilla.redhat.com/show_bug.cgi?id=1625472 [ 68 ] Bug #1625471 - CVE-2018-16069 chromium-browser: Out of bounds read in SwiftShader https://bugzilla.redhat.com/show_bug.cgi?id=1625471 [ 69 ] Bug #1625470 - CVE-2018-16068 chromium-browser: Out of bounds write in Mojo https://bugzilla.redhat.com/show_bug.cgi?id=1625470 [ 70 ] Bug #1625469 - CVE-2018-16067 chromium-browser: Out of bounds read in WebAudio https://bugzilla.redhat.com/show_bug.cgi?id=1625469 [ 71 ] Bug #1625467 - CVE-2018-16066 chromium-browser: Out of bounds read in Blink https://bugzilla.redhat.com/show_bug.cgi?id=1625467 [ 72 ] Bug #1625466 - CVE-2018-16065 chromium-browser: Out of bounds write in V8 https://bugzilla.redhat.com/show_bug.cgi?id=1625466 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update chromium' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

5 years, 3 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce January 2019