Updated to 124.0
Archive for Fedora Linux Distribution – Security Advisories
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
Fedora 38: mingw-freeimage 2024-e6a35cd250
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
Fedora 38: shim-unsigned-x64 2024-2aa28a4cfc
Update to shim-15.8
Fedora 38: shim-unsigned-aarch64 2024-2aa28a4cfc
Update to shim-15.8
Security fix for CVE-2007-4559.
New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454
upstream security release 122.0.6261.128 High CVE-2024-2400: Use after free in Performance Manager
Security fix for CVE-2007-4559.
Baresip v3.10.1 (2024-03-12) Security Release (possible Denial of Service): A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang forever, for details see: #2954 aureceiver: fix mtx_unlock on discard
Baresip v3.10.1 (2024-03-12) Security Release (possible Denial of Service): A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang forever, for details see: #2954 aureceiver: fix mtx_unlock on discard
Fedora 38: python-multipart 2024-09c7f715c9
python-multipart 0.0.7 (2024-02-03) Refactor header option parser to use the standard library instead of a custom RegEx #75. Fixes a denial of service vulnerability, GHSA-qf9m-vfgh-m389, initially reported in FastAPI but applicable to other libraries and applications.
Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects https://www.thunderbird.net/en-US/thunderbird/115.8.1/releasenotes/
The 6.7.9 stable kernel update contains a number of important fixes across the tree.
Update to git f1da555, fixes CVE-2024-27507.
Security fix for CVE-2024-1048
2267205 – CVE-2024-24246 qpdf – Heap Buffer Overflow vulnerability in qpdf [fedora-all]
Fedora 38: wpa_supplicant 2024-36d2be00d0
backport fix for PEAP client (CVE-2023-52160)
2267205 – CVE-2024-24246 qpdf – Heap Buffer Overflow vulnerability in qpdf [fedora-all]
Update to latest version Security fix for CVE-2023-39325
upstream security release 122.0.6261.111 – High CVE-2024-2173: Out of bounds memory access in V8 – High CVE-2024-2174: Inappropriate implementation in V8 – High CVE-2024-2176: Use after free in FedCM
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63:
upstream security release 122.0.6261.111 – High CVE-2024-2173: Out of bounds memory access in V8 – High CVE-2024-2174: Inappropriate implementation in V8 – High CVE-2024-2176: Use after free in FedCM
Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects https://www.thunderbird.net/en-US/thunderbird/115.8.1/releasenotes/
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63:
Fedora 38: golang-github-tdewolff-minify 2024-0d4d9925a2
Update to latest version Security fix for CVE-2023-39325
Fedora 38: golang-github-tdewolff-parse 2024-0d4d9925a2
Update to latest version Security fix for CVE-2023-39325
This is the February 2024 security update for .NET 6
This is the February 2024 update for .NET 6
This is the February 2024 update for .NET 8. Release Notes: – Runtime: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.2/8.0.2.md – SDK: https://github.com/dotnet/core/blob/main/release-