The following Fedora EPEL 8 Security updates need testing:
Age URL
11
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3a29f0d349
python-paramiko-2.12.0-2.el8
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-d565ced023
gtkwave-3.3.118-1.el8
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-0ffe88f330
python39-jinja2-epel-3.1.3-1.el8.1
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-30bbfa1b75
python3.11-jinja2-epel-3.1.3-1.el8
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-36f55e6177
chromium-120.0.6099.216-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
cekit-4.10.0-1.el8
mongo-c-driver-1.24.3-2.el8
objfw-1.0.6-1.el8
Details about builds:
================================================================================
cekit-4.10.0-1.el8 (FEDORA-EPEL-2024-a98f0b27cb)
Container image creation tool
--------------------------------------------------------------------------------
Update Information:
CEKit 4.10
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jan 12 2024 Nick Cross <ncross(a)redhat.com> - 4.10.0-1
- Release 4.10.0
--------------------------------------------------------------------------------
================================================================================
mongo-c-driver-1.24.3-2.el8 (FEDORA-EPEL-2024-3f8d0039e7)
Client library written in C for MongoDB
--------------------------------------------------------------------------------
Update Information:
- fix: bson_utf8_validate on some inputs leads to an infinite loop
**CVE-2023-0437**
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 15 2024 Remi Collet <remi(a)remirepo.net> - 1.24.3-2
- fix: bson_utf8_validate on some inputs leads to an infinite loop CVE-2023-0437
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2258460 - CVE-2023-0437 mongo-c-driver: bson_utf8_validate��on some inputs
leads to an infinite loop
https://bugzilla.redhat.com/show_bug.cgi?id=2258460
--------------------------------------------------------------------------------
================================================================================
objfw-1.0.6-1.el8 (FEDORA-EPEL-2024-bc4b3d6270)
Portable, lightweight framework for the Objective-C language
--------------------------------------------------------------------------------
Update Information:
Update to 1.0.6
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 15 2024 Jonathan Schleifer <js(a)nil.im> - 1.0.6-1
- Update to 1.0.6
--------------------------------------------------------------------------------