The following Fedora EPEL 8 Security updates need testing:
Age URL
27
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-3a29f0d349
python-paramiko-2.12.0-2.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-76443fce3f
indent-2.2.13-5.el8
6
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-272d6fcaca
atril-1.26.2-1.el8
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-93d34f40f0
chromium-121.0.6167.85-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
ansible-collection-containers-podman-1.12.0-5.el8
python-aiohttp-3.7.4-2.el8
Details about builds:
================================================================================
ansible-collection-containers-podman-1.12.0-5.el8 (FEDORA-EPEL-2024-14d752a5a2)
Podman Ansible collection for Podman containers
--------------------------------------------------------------------------------
Update Information:
Bump to 1.12.0
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 30 2024 Sagi Shnaidman <sshnaidm(a)redhat.com> - 1.12.0-1
- Bump to 1.12.0
* Mon Jan 22 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-5
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-4
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jan 18 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.10.1-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2211545 - ansible-collection-containers-podman-1.11.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2211545
--------------------------------------------------------------------------------
================================================================================
python-aiohttp-3.7.4-2.el8 (FEDORA-EPEL-2024-11fae9c7fb)
Python HTTP client/server for asyncio
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2024-23334
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 30 2024 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.7.4-2
- Backport patch for CVE-2024-23334 (fix RHBZ#2261892)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2261887 - CVE-2024-23334 aiohttp: follow_symlinks directory traversal
vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=2261887
--------------------------------------------------------------------------------