The following Fedora EPEL 8 Security updates need testing: Age URL 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-fc5b08c7d5 engrampa-1.26.2-1.el8 3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-829db80b8a mbedtls-2.28.7-1.el8 0 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-33416db1e4 python-bleach-3.3.0-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
charliecloud-0.36-1.el8 chromium-121.0.6167.160-1.el8 mmv-2.6-1.el8 ocserv-1.2.4-2.el8 singularity-ce-4.1.1-1.el8
Details about builds:
================================================================================ charliecloud-0.36-1.el8 (FEDORA-EPEL-2024-b9cf328e23) Lightweight user-defined software stacks for high-performance computing -------------------------------------------------------------------------------- Update Information:
Onward to 0.36. -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 9 2024 Jordan Ogas jogas@lanl.gov - 0.36-1 - new version 0.36 * Tue Jan 23 2024 Fedora Release Engineering releng@fedoraproject.org - 0.32-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering releng@fedoraproject.org - 0.32-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Wed Jul 19 2023 Fedora Release Engineering releng@fedoraproject.org - 0.32-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild --------------------------------------------------------------------------------
================================================================================ chromium-121.0.6167.160-1.el8 (FEDORA-EPEL-2024-34c7addedb) A WebKit (Blink) powered web browser that Google doesn't want you to use -------------------------------------------------------------------------------- Update Information:
Update to 121.0.6167.160 High CVE-2024-1284: Use after free in Mojo High CVE-2024-1283: Heap buffer overflow in Skia -------------------------------------------------------------------------------- ChangeLog:
* Wed Feb 7 2024 Than Ngo than@redhat.com - 121.0.6167.160-1 - update to 121.0.6167.160 * High CVE-2024-1284: Use after free in Mojo * High CVE-2024-1283: Heap buffer overflow in Skia -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2263136 - CVE-2024-1283 CVE-2024-1284 chromium: various flaws [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2263136 --------------------------------------------------------------------------------
================================================================================ mmv-2.6-1.el8 (FEDORA-EPEL-2024-1925b35bdc) Move/copy/link multiple files -------------------------------------------------------------------------------- Update Information:
release 2.6 -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 9 2024 Jens Kuehnel JensKuehnel@users.noreply.github.com - 2.6-1 - release 2.6 - readded the mad command * Thu Jan 25 2024 Fedora Release Engineering releng@fedoraproject.org - 2.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering releng@fedoraproject.org - 2.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Tue Nov 21 2023 Jens Kuehnel bugzilla-redhat@jens.kuehnel.org - 2.5.1-1 - upgrade to release 2.5.1 based on fork from Reuben Thomas - Debian has moved as well and was used a upstream by the previous version of this package - upstream removed multi append (mad) from project * Thu Jul 20 2023 Fedora Release Engineering releng@fedoraproject.org - 1.01b-40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 1.01b-39 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Jul 21 2022 Fedora Release Engineering releng@fedoraproject.org - 1.01b-38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Thu Jan 20 2022 Fedora Release Engineering releng@fedoraproject.org - 1.01b-37 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Thu Jul 22 2021 Fedora Release Engineering releng@fedoraproject.org - 1.01b-36 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Jan 26 2021 Fedora Release Engineering releng@fedoraproject.org - 1.01b-35 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Aug 1 2020 Fedora Release Engineering releng@fedoraproject.org - 1.01b-34 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering releng@fedoraproject.org - 1.01b-33 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Wed Jan 29 2020 Fedora Release Engineering releng@fedoraproject.org - 1.01b-32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering releng@fedoraproject.org - 1.01b-31 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 1 2019 Fedora Release Engineering releng@fedoraproject.org - 1.01b-30 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Fri Jul 13 2018 Fedora Release Engineering releng@fedoraproject.org - 1.01b-29 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Feb 8 2018 Fedora Release Engineering releng@fedoraproject.org - 1.01b-28 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Aug 3 2017 Fedora Release Engineering releng@fedoraproject.org - 1.01b-27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering releng@fedoraproject.org - 1.01b-26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering releng@fedoraproject.org - 1.01b-25 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Thu Feb 4 2016 Fedora Release Engineering releng@fedoraproject.org - 1.01b-24 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jun 17 2015 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-23 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Sun Aug 17 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Fri Nov 22 2013 Zing zing@fastmail.fm - 1.01b-20 - sync with debian mmv_1.01b-18 - deb pkg format switch to 3.0 - format-security fix - added diagnostic for directories - man page improvements * Sat Aug 3 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Thu Feb 14 2013 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Fri Jul 20 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Fri Jan 13 2012 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Feb 8 2011 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Sat Jul 25 2009 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Tue Jun 2 2009 Zing zing@fastmail.fm - 1.01b-13 - enable LFS support - updated changelog and copyright files * Mon Jun 1 2009 Zing zing@fastmail.fm - 1.01b-12 - sync with debian mmv_1.01b-15 - man page formatting fixes - wrap cmdname in basename() (debian: #452989) - initialize tv_usec (debian: #452993) * Wed Feb 25 2009 Fedora Release Engineering rel-eng@lists.fedoraproject.org - 1.01b-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Tue Feb 19 2008 Fedora Release Engineering rel-eng@fedoraproject.org - 1.01b-10 - Autorebuild for GCC 4.3 * Thu Aug 16 2007 Zing zing@fastmail.fm - 1.01b-9 - conform to Fedora Licensing Guidelines * Fri Sep 8 2006 Zing zing@fastmail.fm - 1.01b-8 - fix perms on man page - rebuild for FE6 * Mon Apr 10 2006 Zing shishz@hotpop.com - 1.01b-7 - ok, now fix busted perms on doc directory * Mon Mar 20 2006 Zing shishz@hotpop.com - 1.01b-6 - fix permissions on doc files * Mon Feb 13 2006 Zing shishz@hotpop.com - 1.01b-5 - sync with debian mmv_1.01b-14 - symlink man page for mcp/mad/mln * Sat Oct 1 2005 Zing shishz@hotpop.com - 1.01b-4 - use dist tag * Sat Oct 1 2005 Zing shishz@hotpop.com - 1.01b-3 - cleanup changelog * Wed Sep 28 2005 Zing shishz@hotpop.com - 1.01b-2 - don't change source name - symlink mcp/mad/mln * Tue Aug 23 2005 Zing shishz@hotpop.com - 1.01b-1 - initial RPM release - pull from debian mmv_1.01b-12.2 - build executable as a PIE -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2102944 - Please provide mmv for EPEL8 https://bugzilla.redhat.com/show_bug.cgi?id=2102944 --------------------------------------------------------------------------------
================================================================================ ocserv-1.2.4-2.el8 (FEDORA-EPEL-2024-530720fa35) OpenConnect SSL VPN server -------------------------------------------------------------------------------- Update Information:
New upstream release: 1.2.4 -------------------------------------------------------------------------------- ChangeLog:
--------------------------------------------------------------------------------
================================================================================ singularity-ce-4.1.1-1.el8 (FEDORA-EPEL-2024-f299fbc570) Application and environment virtualization -------------------------------------------------------------------------------- Update Information:
Upgrade to 4.1.1 upstream version. This is an incompatible upgrade, following EPEL policy. Some functionality previously provided by the singularity remote command is split into new singularity registry and singularity keyserver commands. The singularity remote add command now sets a newly added remote as the default (unless suppressed). The --vm flag to start singularity inside a Virtual Machine has been removed. Bind mounts are now performed in the order in which they are specified. Current working directory on the host is now created in the container, restoring a behaviour from Singularity <3.6.0. If the current directory paths on the container and host contains symlinks to different locations, the current working directory is not mounted. -------------------------------------------------------------------------------- ChangeLog:
* Fri Feb 9 2024 David Trudgian dtrudg@sylabs.io - 4.1.1-1 - Upgrade to 4.1.1 upstream version. - This is an incompatible upgrade, following EPEL policy. - Some functionality previously provided by the singularity remote command is split into new singularity registry and singularity keyserver commands. - The singularity remote add command now sets a newly added remote as the default (unless suppressed). - The ���vm flag to start singularity inside a Virtual Machine has been removed. - Bind mounts are now performed in the order in which they are specified. - Current working directory on the host is now created in the container, restoring a behaviour from Singularity <3.6.0. - If the current directory paths on the container and host contains symlinks to different locations, the current working directory is not mounted. --------------------------------------------------------------------------------