The following Fedora EPEL 8 Security updates need testing:
Age URL
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-762aef7cb1
chromium-123.0.6312.122-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
jemalloc-5.2.1-3.el8
netconsd-0.4.1-1.el8
putty-0.81-1.el8
valkey-7.2.5-1.el8
Details about builds:
================================================================================
jemalloc-5.2.1-3.el8 (FEDORA-EPEL-2024-1c8794a8c4)
General-purpose scalable concurrent malloc implementation
--------------------------------------------------------------------------------
Update Information:
Rebuild for epel8 to fix debuginfo package
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Ingvar Hagelund <ingvar(a)redpill-linpro.com> - 5.2.1-2
- Rebuild for epel8 to fix debuginfo package, bz#1630926, bz#2273740
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2273740 - jemalloc-debuginfo rpm is corrupted
https://bugzilla.redhat.com/show_bug.cgi?id=2273740
--------------------------------------------------------------------------------
================================================================================
netconsd-0.4.1-1.el8 (FEDORA-EPEL-2024-b49939a2d0)
The Netconsole Daemon
--------------------------------------------------------------------------------
Update Information:
Update to latest 0.4.1 release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Michel Lind <salimma(a)fedoraproject.org> - 0.4.1-1
- Update to 0.4.1 (rhbz#2274122)
* Thu Jan 25 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2274122 - netconsd-0.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2274122
--------------------------------------------------------------------------------
================================================================================
putty-0.81-1.el8 (FEDORA-EPEL-2024-99cf4e74b7)
SSH, Telnet and Rlogin client
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2024-31497.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Jaroslav ��karvada <jskarvad(a)redhat.com> - 0.81-1
- New version
Resolves: rhbz#2275179
- Fixed vulnerability allowing recovery of NIST P-521 private keys
Resolves: CVE-2024-31497
* Fri Jan 26 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.80-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.80-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2275183 - CVE-2024-31497 putty: secret key recovery of NIST P-521 private
keys through biased ECDSA nonces in putty client
https://bugzilla.redhat.com/show_bug.cgi?id=2275183
--------------------------------------------------------------------------------
================================================================================
valkey-7.2.5-1.el8 (FEDORA-EPEL-2024-82fb296f51)
A persistent key-value database
--------------------------------------------------------------------------------
Update Information:
update to 7.2.5
update to 7.2.5-rc1
initial build, rc1
--------------------------------------------------------------------------------
ChangeLog:
* Wed Apr 17 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5-1
- update to 7.2.5 rhbz#2275379
* Fri Apr 12 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5~rc1-2
- add compat subpackage with migration scripts from redis
* Fri Apr 12 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.5~rc1-1
- update to 7.2.5-rc1
* Tue Apr 9 2024 Jonathan Wright <jonathan(a)almalinux.org> - 7.2.4~rc1-1
- Initial package build, release candidate
--------------------------------------------------------------------------------