The following Fedora EPEL 8 Security updates need testing:
Age URL
21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3a29f0d349
python-paramiko-2.12.0-2.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-be7448f09b
monit-5.33.0-1.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-2f5bf56806
chromium-120.0.6099.224-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
atril-1.26.2-1.el8
csdiff-3.2.0-1.el8
csmock-3.5.1-1.el8
indent-2.2.13-5.el8
knot-3.3.4-1.el8
Details about builds:
================================================================================
atril-1.26.2-1.el8 (FEDORA-EPEL-2024-272d6fcaca)
Document viewer
--------------------------------------------------------------------------------
Update Information:
- update to 1.26.2 - fix security security advisory
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Wolfgang Ulbrich <fedora(a)raveit.de> - 1.26.2-1
- update to 1.26.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2258392 - CVE-2023-51698 atril: vulnerable to Command Injection Vulnerability
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2258392
[ 2 ] Bug #2258393 - CVE-2023-51698 atril: vulnerable to Command Injection Vulnerability
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2258393
--------------------------------------------------------------------------------
================================================================================
csdiff-3.2.0-1.el8 (FEDORA-EPEL-2024-eb604b32e5)
Non-interactive tools for processing code scan results in plain-text
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Kamil Dudka <kdudka(a)redhat.com> 3.2.0-1
- update to latest upstream release
--------------------------------------------------------------------------------
================================================================================
csmock-3.5.1-1.el8 (FEDORA-EPEL-2024-eb604b32e5)
A mock wrapper for Static Analysis tools
--------------------------------------------------------------------------------
Update Information:
- update to latest upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Kamil Dudka <kdudka(a)redhat.com> 3.5.1-1
- update to latest upstream
--------------------------------------------------------------------------------
================================================================================
indent-2.2.13-5.el8 (FEDORA-EPEL-2024-76443fce3f)
A GNU program for formatting C code
--------------------------------------------------------------------------------
Update Information:
This release fixes a heap buffer underread in indent tool when processing a code
in which an opening parenthesis follows a comment with a text.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Petr Pisar <ppisar(a)redhat.com> - 2.2.13-5
- Fix a heap buffer underread in set_buf_break() (bug #2259883)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2259883 - Heap-buffer-overflow at src/output.c:319
https://bugzilla.redhat.com/show_bug.cgi?id=2259883
--------------------------------------------------------------------------------
================================================================================
knot-3.3.4-1.el8 (FEDORA-EPEL-2024-0fcb1ef039)
High-performance authoritative DNS server
--------------------------------------------------------------------------------
Update Information:
Knot DNS 3.3.4 (and 3.2.12 for EPEL7)
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 24 2024 Jakub Ru��i��ka <jakub.ruzicka(a)nic.cz> - 3.3.4-1
- Update to 3.3.4
--------------------------------------------------------------------------------