The following Fedora EPEL 8 Security updates need testing:
Age URL
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-768199da7e
cutter-re-2.3.4-6.el8 rizin-0.7.4-5.el8
3 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-9176cc66c2
openssl3-3.2.2-7.1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
exim-4.98.1-1.el8
printer-driver-brlaser-6.2.7-1.el8
scitokens-cpp-1.1.3-2.el8
strongswan-5.9.10-2.el8
zcfan-1.4.0-3.el8
Details about builds:
================================================================================
exim-4.98.1-1.el8 (FEDORA-EPEL-2025-8e24d6e349)
The exim mail transfer agent
--------------------------------------------------------------------------------
Update Information:
This is an update fixing possible remote SQL injection.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 24 2025 Jaroslav Å karvada <[email protected]> - 4.98.1-1
- New version
Resolves: rhbz#2346977
- Fixed possible remote SQL injection
Resolves: CVE-2025-26794
- Updated exim maintainers keyring
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2346977 - exim-4.98.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2346977
[ 2 ] Bug #2347247 - CVE-2025-26794 exim: Exim: remote SQL injection [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=2347247
--------------------------------------------------------------------------------
================================================================================
printer-driver-brlaser-6.2.7-1.el8 (FEDORA-EPEL-2025-5438d6693e)
Brother laser printer driver
--------------------------------------------------------------------------------
Update Information:
:xUpdate to 6.2.7
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 24 2025 OndÅej Budai <[email protected]> - 6.2.7-1
- :xUpdate to 6.2.7
* Sat Jan 18 2025 Fedora Release Engineering <[email protected]> -
6.2.6-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
6.2.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
6.2.6-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <[email protected]> -
6.2.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2238458 - duplex printing always flips on the short edge
https://bugzilla.redhat.com/show_bug.cgi?id=2238458
--------------------------------------------------------------------------------
================================================================================
scitokens-cpp-1.1.3-2.el8 (FEDORA-EPEL-2025-a4abd6f54e)
C++ Implementation of the SciTokens Library
--------------------------------------------------------------------------------
Update Information:
Update compatibility for new compilers
--------------------------------------------------------------------------------
ChangeLog:
* Mon Feb 24 2025 Derek Weitzel <[email protected]> - 1.1.3-2
- Fix source file
* Mon Feb 24 2025 Derek Weitzel <[email protected]> - 1.1.3-1
- Include cstdint import for jwt library to support newer compilers
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
1.1.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
strongswan-5.9.10-2.el8 (FEDORA-EPEL-2025-81567f7bfa)
An OpenSource IPsec-based VPN and TNC solution
--------------------------------------------------------------------------------
Update Information:
Add upstream patch to fix CVE-2023-4191 rhbz#2254562
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 23 2025 Carl George <[email protected]> - 5.9.10-2
- Add upstream patch to fix CVE-2023-4191 rhbz#2254562
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2254562 - CVE-2023-41913 strongswan: buffer overflow [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2254562
--------------------------------------------------------------------------------
================================================================================
zcfan-1.4.0-3.el8 (FEDORA-EPEL-2025-bf743171a0)
Zero-configuration fan daemon for ThinkPads
--------------------------------------------------------------------------------
Update Information:
Set a correct path to zcfan binary in systemd service
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 9 2025 ireka <[email protected]> - 1.4.0-3
- Set a correct path to zcfan binary in systemd service
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
1.4.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2338425 - zcfan.service: Failed at step EXEC spawning
/usr/local/bin/zcfan: No such file or directory
https://bugzilla.redhat.com/show_bug.cgi?id=2338425
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue