Fedora Security Advisories

FEDORA-2024-87d30b4fbf Packages in this update:

• swiftlint-0.57.1-1.fc42

Update description:

Automatic update for swiftlint-0.57.1-1.fc42.

Changelog * Fri Dec 20 2024 Davide Cavalca <dcavalca@fedoraproject.org> - 0.57.1-1 - Update to 0.57.1; Fixes: RHBZ#2280939, RHBZ#2301323, RHBZ#2280426, RHBZ#2280433, RHBZ#2280449, RHBZ#2280455, RHBZ#2280469, RHBZ#2280475, RHBZ#2280487, RHBZ#2302835, RHBZ#2307674 * Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 0.53.0-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

FEDORA-EPEL-2024-c27d1a40bc Packages in this update:

• chromium-131.0.6778.204-1.el8

Update description:

Update to 131.0.6778.204

• High CVE-2024-12692: Type Confusion in V8
• High CVE-2024-12693: Out of bounds memory access in V8
• High CVE-2024-12694: Use after free in Compositing
• High CVE-2024-12695: Out of bounds write in V8

FEDORA-EPEL-2024-b98ed0b39c Packages in this update:

• chromium-131.0.6778.204-1.el10_0

Update description:

Update to 131.0.6778.204

• High CVE-2024-12692: Type Confusion in V8
• High CVE-2024-12693: Out of bounds memory access in V8
• High CVE-2024-12694: Use after free in Compositing
• High CVE-2024-12695: Out of bounds write in V8

FEDORA-2024-21c7531146 Packages in this update:

• chromium-131.0.6778.204-1.fc41

Update description:

Update to 131.0.6778.204

• High CVE-2024-12692: Type Confusion in V8
• High CVE-2024-12693: Out of bounds memory access in V8
• High CVE-2024-12694: Use after free in Compositing
• High CVE-2024-12695: Out of bounds write in V8

FEDORA-2024-4808dce926 Packages in this update:

• chromium-131.0.6778.204-1.fc40

Update description:

Update to 131.0.6778.204

• High CVE-2024-12692: Type Confusion in V8
• High CVE-2024-12693: Out of bounds memory access in V8
• High CVE-2024-12694: Use after free in Compositing
• High CVE-2024-12695: Out of bounds write in V8

FEDORA-EPEL-2024-74ea1d7890 Packages in this update:

• chromium-131.0.6778.204-1.el9

Update description:

Update to 131.0.6778.204

• High CVE-2024-12692: Type Confusion in V8
• High CVE-2024-12693: Out of bounds memory access in V8
• High CVE-2024-12694: Use after free in Compositing
• High CVE-2024-12695: Out of bounds write in V8

FEDORA-2024-03a1955920 Packages in this update:

• webkitgtk-2.46.5-1.fc40

Update description:

Update to 2.46.5:

• Fix several crashes and rendering issues.
• CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505

FEDORA-2024-32bc143584 Packages in this update:

• webkitgtk-2.46.5-1.fc41

Update description:

Update to 2.46.5:

• Fix several crashes and rendering issues.
• CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505

FEDORA-2024-0912cd3ad9 Packages in this update:

• incus-6.8-1.fc41

Update description:

Update to 6.8 to get various features and fixes

FEDORA-2024-4f08c1a90a Packages in this update:

• age-1.2.1-1.fc41

Update description:

Update to 1.2.1 to fix https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c security issue.

FEDORA-2024-e922e33593 Packages in this update:

• dante-1.4.4-1.fc42

Update description:

Automatic update for dante-1.4.4-1.fc42.

Changelog * Wed Dec 18 2024 Tim Semeijn <tim@semeijn.net> - 1.4.4-1 - Update to 1.4.4 (fixes rhbz#2332886, rhbz#2332915, rhbz#2332916, rhbz#2332917 & rhbz#2332918)

FEDORA-2024-bdda1791b5 Packages in this update:

• moodle-4.3.9-1.fc40

Update description:

Multiple CVE fixes

FEDORA-2024-ddb5f7c0a3 Packages in this update:

• moodle-4.4.5-1.fc41

Update description:

Multiple CVE fixes.

FEDORA-EPEL-2024-073915237b Packages in this update:

• dr_libs-0-0.27.20241217git660795b.el8

Update description:

Update to 0^20241216git660795b

• dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC.
• dr_mp3 0.6.40: Improve detection of ARM64EC
• dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded files. Improve detection of ARM64EC.

FEDORA-EPEL-2024-55f18fb87f Packages in this update:

• dr_libs-0^20241216git660795b-1.el9

Update description:

Update to 0^20241216git660795b

• dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC.
• dr_mp3 0.6.40: Improve detection of ARM64EC
• dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded files. Improve detection of ARM64EC.

Add a SourceLicense field

FEDORA-EPEL-2024-704d471aec Packages in this update:

• dr_libs-0^20241216git660795b-1.el10_0

Update description:

Update to 0^20241216git660795b

• dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC.
• dr_mp3 0.6.40: Improve detection of ARM64EC
• dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded files. Improve detection of ARM64EC.

Add a SourceLicense field

FEDORA-2024-4b0288e34f Packages in this update:

• dr_libs-0^20241216git660795b-1.fc40

Update description:

Update to 0^20241216git660795b

• dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC.
• dr_mp3 0.6.40: Improve detection of ARM64EC
• dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded files. Improve detection of ARM64EC.

Add a SourceLicense field

FEDORA-2024-72a8e64069 Packages in this update:

• dr_libs-0^20241216git660795b-1.fc41

Update description:

Update to 0^20241216git660795b

• dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC.
• dr_mp3 0.6.40: Improve detection of ARM64EC
• dr_wav 0.13.17: Fix a possible crash when reading from MS-ADPCM encoded files. Improve detection of ARM64EC.

Add a SourceLicense field

FEDORA-2024-1a2f1733ad Packages in this update:

• python-sql-1.5.2-3.fc41

Update description:

• update to 1.5.2

FEDORA-EPEL-2024-5b320e416d Packages in this update:

• sympa-6.2.74-1.el10_0

Update description:

• Update to 6.2.74, fix for CVE-2024-55919
• Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74