Fedora Essential and Critical Security Patch Updates - Page 34
Find the information you need for your favorite open source distribution .
Critical Security Advisory for Emacs 29.4 on Fedora 40: Address CVE-2024-39331
Update to Emacs 29.4, fixing CVE-2024-39331.
Critical Security Advisory for Fedora 40: Kernel 6.9.6 Update Overview
The 6.9.6 stable kernel update contains a number of important fixes across the tree.
Fedora 40 Chromium Security Update: Addressing Critical CVE-2024-6290 and CVE-2024-6291
update to 126.0.6478.126 High CVE-2024-6290: Use after free in Dawn High CVE-2024-6291: Use after free in Swiftshader High CVE-2024-6292: Use after free in Dawn High CVE-2024-6293: Use after free in Dawn
OpenVPN 2.6.11 Critical Update: Fixing CVE-2024-5594 and CVE-2024-28882
Update to upstream OpenVPN 2.6.11 CVE-2024-5594: control channel: refuse control channel messages with nonprintable characters in them CVE-2024-28882: only call schedule_exit() once (on a given peer)
Critical Security Advisory for Fedora 40 FreeIPA: Important Fixes for CVEs
Fix CVE-2024-2698 and CVE-2024-3183
Critical Security Update for Fedora 39: Addressing Chromium Vulnerabilities
update to 126.0.6478.126 High CVE-2024-6290: Use after free in Dawn High CVE-2024-6291: Use after free in Swiftshader High CVE-2024-6292: Use after free in Dawn High CVE-2024-6293: Use after free in Dawn
Critical Advisory for Fedora 39: Firefox Upgrade to Version 127.0.2
New upstream version (127.0.2) New upstream version (127.0)
Enhance Your Fedora 40 System with Libopenmpt Security Advisory Updates
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-ac4860090c 2024-06-26 01:54:41.557225 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 40 Version : 0.7.8 Release : 1.fc40 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Update from 0.7.6 to 0.7.8 for more bug-fixes. update-0.7.8-releases-0.6.17-0.5.31-0.4.43/ 0.4.42/ -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 9 2024 Michael Schwendt - 0.7.8-1 - Update to 0.7.8. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ac4860090c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Discover the Security Advisory for Thunderbird 115.12.1 on Fedora 40
Update to 115.12.1 https://www.thunderbird.net/en-US/thunderbird/115.12.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-28/
Critical Security Advisory for Fedora 39: libopenmpt Update to Version 0.7.8
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-018a95fb38 2024-06-26 01:26:22.509723 -------------------------------------------------------------------------------- Name : libopenmpt Product : Fedora 39 Version : 0.7.8 Release : 1.fc39 URL : https://lib.openmpt.org/libopenmpt/ Summary : C/C++ library to decode tracker music module (MOD) files Description : libopenmpt is a cross-platform C++ and C library to decode tracked music files (modules) into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project (Open ModPlug Tracker). In order to avoid code base fragmentation, libopenmpt is developed in the same source code repository as OpenMPT. -------------------------------------------------------------------------------- Update Information: Update from 0.7.6 to 0.7.8 for more bug-fixes. update-0.7.8-releases-0.6.17-0.5.31-0.4.43/ 0.4.42/ -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 9 2024 Michael Schwendt - 0.7.8-1 - Update to 0.7.8. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-018a95fb38' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Essential Thunderbird 115.12.1 Security Advisory for Fedora 39
Update to 115.12.1 https://www.thunderbird.net/en-US/thunderbird/115.12.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-28/ Update to 115.12.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-28/
Critical Security Update for Python-PyMySQL in Fedora 40: CVE-2024-36039
Update to 1.1.1 to fix CVE CVE-2024-36039
Essential Update for python-PyMySQL: Addressing CVE-2024-36039 on Fedora 39
Update to 1.1.1 to fix CVE CVE-2024-36039
Critical Security Updates for Fedora 40 Tomcat: CVE-2024-24549 and CVE-2024-23672
This update includes a rebase from 9.0.83 to 9.0.89. #2269611 CVE-2024-24549 tomcat: CVE-2024-24549: Apache Tomcat: HTTP/2 header handling DoS #2269612 CVE-2024-23672 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake
Secure Your Fedora 39 with WebKitGTK Update Addressing CVE-2024-27834
Update to 2.44.2: Make gamepads visible on axis movements, and not only on button presses. Disable the gst-libav AAC decoder. Make user scripts and style sheets visible in the Web Inspector. Use the geolocation portal where available, with the existing geoclue as
Fedora 39 Composer Security Advisory Update: Command Injection Vulnerabilities Resolved
Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name (GHSA-47f6-5gq3-vx9c / CVE-2024-35241) Security: Fixed multiple command injections via malicious git/hg branch names (GHSA-v9qv-c7wm-wgmf / CVE-2024-35242)
