The following Fedora EPEL 7 Security updates need testing:
Age URL
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-96ee75b9fe
chromium-121.0.6167.160-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
libmodsecurity-3.0.12-1.el7
Details about builds:
================================================================================
libmodsecurity-3.0.12-1.el7 (FEDORA-EPEL-2024-4a6bba707d)
A library that loads/interprets rules written in the ModSecurity SecRules
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.12
Security fix for CVE-2024-1019
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 11 2024 Mikel Olasagasti Uranga <mikel(a)olasagasti.info> - 3.0.12-1
- Update to 3.0.12 rhbz#2253518
- Fix CVE-2024-1019 rhbz#2262017 rhbz#2262018 rhbz#2262019
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2262019 - CVE-2024-1019 libmodsecurity: WAF bypass for path-based payloads
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2262019
--------------------------------------------------------------------------------