Fedora Security Advisories

• mingw-python3-3.11.10-2.fc41

Backport fix for CVE-2024-9287

Update to python-3.11.0.

• mingw-python3-3.11.10-2.fc40

Backport fix for CVE-2024-9287

Update to python-3.11.0.

• mingw-libsoup-2.74.3-8.fc40

Backport fixes for CVE-2024-52530 and CVE-2024-52532.

• mingw-libsoup-2.74.3-8.fc41

Backport fixes for CVE-2024-52530 and CVE-2024-52532.

• mingw-glib2-2.82.2-1.fc40

Update to 2.82.2, fixes CVE-2024-52533.

• mingw-glib2-2.82.2-1.fc41

Update to 2.82.2, fixes CVE-2024-52533.

• cobbler3.2-3.2.3-2.el8

Update to 3.2.3 - CVE-2024-47533

• cobbler3.2-3.2.3-2.el9

Update to 3.2.3 - CVE-2024-47533

• cobbler-3.3.7-1.el9

Update to 3.3.7 - CVE-2024-47533

• cobbler-3.3.7-1.fc39

Update to 3.3.7 - CVE-2024-47533

• cobbler-3.3.7-1.fc40

Update to 3.3.7 - CVE-2024-47533

• cobbler-3.3.7-1.fc41

Update to 3.3.7 - CVE-2024-47533

• dotnet9.0-9.0.100-1.fc40

This is the .NET 9.0 GA release.

It contains security fixes for CVE-2024-43498 and CVE-2024-43499

Announcement: https://devblogs.microsoft.com/dotnet/announcing-dotnet-9/

Release Notes: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.0/9.0.0.md

• python3.6-3.6.15-39.fc41

Security fix for CVE-2024-11168

• dotnet9.0-9.0.100-1.fc41

This is the .NET 9.0 GA release.

It contains security fixes for CVE-2024-43498 and CVE-2024-43499

Announcement: https://devblogs.microsoft.com/dotnet/announcing-dotnet-9/

Release Notes: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.0/9.0.0.md

• python3.6-3.6.15-39.fc40

Security fix for CVE-2024-11168

• xen-4.17.5-3.fc39

Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818] libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]

• trafficserver-9.2.6-2.fc40

• Update to upstream 9.2.6
• Backport fix for broken oubound TLS with OpenSSL 3.2+
• Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306

• trafficserver-9.2.6-2.fc39

• Update to upstream 9.2.6
• Backport fix for broken oubound TLS with OpenSSL 3.2+
• Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306

• trafficserver-9.2.6-2.el9

• Update to upstream 9.2.6
• Backport fix for broken oubound TLS with OpenSSL 3.2+
• Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306