The following Fedora EPEL 8 Security updates need testing:
Age URL
13 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5b2095e2c2
xpdf-4.06-1.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-e1a26dce63
stb-0-0.55.20251025gitf1c79c0.el8
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-1099c414ec
fcgi-2.4.7-1.el8
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f1e00653f9
suricata-7.0.13-1.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
apptainer-1.4.5-1.el8
tinyproxy-1.11.2-5.el8
Details about builds:
================================================================================
apptainer-1.4.5-1.el8 (FEDORA-EPEL-2025-730a1d821d)
Application and environment virtualization formerly known as Singularity
--------------------------------------------------------------------------------
Update Information:
Update to upstream 1.4.5, including a fix for CVE-2025-65105
--------------------------------------------------------------------------------
ChangeLog:
* Mon Dec 1 2025 Dave Dykstra <[email protected]> - 1.4.5
- Update to upstream 1.4.5
--------------------------------------------------------------------------------
================================================================================
tinyproxy-1.11.2-5.el8 (FEDORA-EPEL-2025-3e0de9b3c4)
A small, efficient HTTP/SSL proxy daemon
--------------------------------------------------------------------------------
Update Information:
Add upstream patch to fix CVE-2025-63938.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Dec 2 2025 Carl George <[email protected]> - 1.11.2-5
- Add upstream patch to fix CVE-2025-63938
* Fri Jul 25 2025 Fedora Release Engineering <[email protected]> -
1.11.2-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
1.11.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Sat Jul 20 2024 Fedora Release Engineering <[email protected]> -
1.11.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2417327 - CVE-2025-63938 tinyproxy: Tinyproxy integer overflow
[epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=2417327
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue