The following Fedora EPEL 7 Security updates need testing:
Age URL
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-64174e7a0d
gtkwave-3.3.118-1.el7
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-8edcddc48e
chromium-120.0.6099.216-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
conserver-8.2.1-5.el7
python-templated-dictionary-1.4-1.el7
Details about builds:
================================================================================
conserver-8.2.1-5.el7 (FEDORA-EPEL-2024-485ca40cbd)
Serial console server daemon/client
--------------------------------------------------------------------------------
Update Information:
fix buffer-overflow caused by SIGHUP during SSH connections (rhbz#2256665)
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 16 2024 Luk���� Zaoral <lzaoral(a)redhat.com> - 8.2.1-5
- fix buffer-overflow caused by SIGHUP during SSH connections (rhbz#2256665)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2256665 - conserver buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=2256665
--------------------------------------------------------------------------------
================================================================================
python-templated-dictionary-1.4-1.el7 (FEDORA-EPEL-2024-fbdcbc3c7a)
Dictionary with Jinja2 expansion
--------------------------------------------------------------------------------
Update Information:
Fixing CVE-2023-6395
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 16 2024 Pavel Raiskup <praiskup(a)redhat.com>
- make the TemplatedDictionary objects picklable
- use a sandboxed jinja2 environment, fixes CVE-2023-6395
* Tue Jan 16 2024 Pavel Raiskup <praiskup(a)redhat.com>
- make the TemplatedDictionary objects picklable
- Use a sandboxed jinja2 environment, CVE-2023-6395
* Wed Nov 30 2022 Miroslav Such�� <msuchy(a)redhat.com> 1.2-1
- use spdx license
* Fri Jul 22 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 1.1-6
- Rebuilt for Python 3.11
* Fri Jan 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 1.1-3
- Rebuilt for Python 3.10
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2258607 - CVE-2023-6395 mock: Privilege escalation for users that can access
mock configuration [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2258607
--------------------------------------------------------------------------------