Fedora Security Advisories

FEDORA-EPEL-2024-0c24da3136 Packages in this update:

• chromium-124.0.6367.78-1.el9

Update description:

update to 124.0.6367.78

* Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after free in Dawn

update to 124.0.6367.60

• High CVE-2024-3832: Object corruption in V8
• High CVE-2024-3833: Object corruption in WebAssembly
• High CVE-2024-3914: Use after free in V8
• High CVE-2024-3834: Use after free in Downloads
• Medium CVE-2024-3837: Use after free in QUIC
• Medium CVE-2024-3838: Inappropriate implementation in Autofill
• Medium CVE-2024-3839: Out of bounds read in Fonts
• Medium CVE-2024-3840: Insufficient policy enforcement in Site Isolation
• Medium CVE-2024-3841: Insufficient data validation in Browser Switcher
• Medium CVE-2024-3843: Insufficient data validation in Downloads
• Low CVE-2024-3844: Inappropriate implementation in Extensions
• Low CVE-2024-3845: Inappropriate implementation in Network
• Low CVE-2024-3846: Inappropriate implementation in Prompts
• Low CVE-2024-3847: Insufficient policy enforcement in WebUI

update to 123.0.6312.122

• High CVE-2024-3157: Out of bounds write in Compositing
• High CVE-2024-3516: Heap buffer overflow in ANGLE
• High CVE-2024-3515: Use after free in Dawn

FEDORA-2024-2c9be9d949 Packages in this update:

• chromium-124.0.6367.78-1.fc38

Update description:

update to 124.0.6367.78

* Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after free in Dawn

FEDORA-2024-decb7e94a1 Packages in this update:

• chromium-124.0.6367.78-1.fc39

Update description:

update to 124.0.6367.78

* Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after free in Dawn

FEDORA-2024-de34d9d61f Packages in this update:

• chromium-124.0.6367.78-1.fc40

Update description:

update to 124.0.6367.78

* Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after free in Dawn

FEDORA-2024-9205c35b11 Packages in this update:

• stalld-1.19.2-1.fc39

Update description:

address issues found in Static Application Security testing Fix a service startup issue Fix file open issue when kernel lockdown is in effect

FEDORA-2024-d198253c42 Packages in this update:

• stalld-1.19.2-1.fc40

Update description:

address issues found in Static Application Security testing Fix a service startup issue Fix file open issue when kernel lockdown is in effect

FEDORA-2024-a047b1ca2d Packages in this update:

• stalld-1.19.2-1.fc38

Update description:

address issues found in Static Application Security testing Fix a service startup issue Fix file open issue when kernel lockdown is in effect

FEDORA-2024-75863445ff Packages in this update:

• libcoap-4.3.4a-2.fc40

Update description:

Patch to fix CVE-2024-31031

FEDORA-2024-14db7b21a2 Packages in this update:

• ruby-3.3.1-7.fc40

Update description:

Upgrade to Ruby 3.3.1.

FEDORA-2024-391ed3a61d Packages in this update:

• python-dns-2.4.2-2.fc39

Update description:

Fix for CVE-2023-29483 (rhbz#2274685)

FEDORA-2024-bbd76d7c63 Packages in this update:

• python-dns-2.3.0-3.fc38

Update description:

Fix for CVE-2023-29483 (rhbz#2274685)

FEDORA-FLATPAK-2024-de95fc1445 Packages in this update:

• thunderbird-flatpak-115.10.1-1

Update description:

Thunderbird 115.10.1 release.

FEDORA-2024-450b75e4a0 Packages in this update:

• libcoap-4.3.4a-2.fc39

Update description:

Patch to fix CVE-2024-31031

FEDORA-2024-7be0693731 Packages in this update:

• matrix-synapse-1.105.1-1.fc38
• rust-pythonize-0.21.1-1.fc38

Update description:

Update matrix-synapse to v1.105.1 (CVE-2024-31208)

Update to v1.105.0

FEDORA-2024-d408b654d6 Packages in this update:

• matrix-synapse-1.105.1-1.fc39
• rust-pythonize-0.21.1-1.fc39

Update description:

Update matrix-synapse to v1.105.1 (CVE-2024-31208)

Update to v1.105.0

FEDORA-2024-3ff83cb806 Packages in this update:

• matrix-synapse-1.105.1-1.fc40
• rust-pythonize-0.21.1-1.fc40

Update description:

Update matrix-synapse to v1.105.1 (CVE-2024-31208)

Update to v1.105.0

FEDORA-2024-81c9a3fe50 Packages in this update:

• thunderbird-115.10.1-4.fc39

Update description:

Update to 115.10.1

• https://www.thunderbird.net/en-US/thunderbird/115.10.1/releasenotes/
• Fix https://bugzilla.redhat.com/show_bug.cgi?id=2276078

Including security update to 115.10.0

• https://www.mozilla.org/en-US/security/advisories/mfsa2024-20/
• https://www.thunderbird.net/en-US/thunderbird/115.10.0/releasenotes/

FEDORA-2024-15b892ebd3 Packages in this update:

• thunderbird-115.10.1-4.fc38

Update description:

Update to 115.10.1

• https://www.thunderbird.net/en-US/thunderbird/115.10.1/releasenotes/
• Fix https://bugzilla.redhat.com/show_bug.cgi?id=2276078

Including security update to 115.10.0

• https://www.mozilla.org/en-US/security/advisories/mfsa2024-20/
• https://www.thunderbird.net/en-US/thunderbird/115.10.0/releasenotes/

FEDORA-EPEL-2024-bab8814ee2 Packages in this update:

• python-aiohttp-3.9.5-1.el9

Update description:

Security update for CVE-2024-27306

https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5

https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4

FEDORA-FLATPAK-2024-435e56c0b9 Packages in this update:

• flatpak-runtime-f39-24
• flatpak-sdk-f39-15

Update description:

Updated flatpak runtime and SDK, including latest Fedora 39 security and bug-fix errata.