Aggregator

Version:6.9-rc6 (mainline) Released:2024-04-28 Source:linux-6.9-rc6.tar.gz Patch:full (incremental)

FEDORA-2024-0c9d3b51d4 Packages in this update:

• tpm2-tools-5.7-1.fc40
• tpm2-tss-4.1.0-1.fc40

Update description:

tpm2-tss:

Fixed CVE-2024-29040

tpm2-tools:

Fixed CVE-2024-29038 Fixed CVE-2024-29039

FEDORA-2024-4512dc54af Packages in this update:

• tpm2-tools-5.5.1-1.fc39
• tpm2-tss-4.0.2-1.fc39

Update description:

tpm2-tss:

Fixed CVE-2024-29040

tpm2-tools:

Fixed CVE-2024-29038 Fixed CVE-2024-29039

FEDORA-2024-3265d70b61 Packages in this update:

• tpm2-tools-5.5.1-1.fc38
• tpm2-tss-4.0.2-1.fc38

Update description:

tpm2-tss:

Fixed CVE-2024-29040

tpm2-tools:

Fixed CVE-2024-29038 Fixed CVE-2024-29039

FEDORA-2024-a1246372a4 Packages in this update:

• webkit2gtk4.0-2.44.1-1.fc40

Update description:

Update to 2.44.1

Version:6.8.8 (stable) Released:2024-04-27 Source:linux-6.8.8.tar.xz PGP Signature:linux-6.8.8.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.8.8

Version:6.6.29 (longterm) Released:2024-04-27 Source:linux-6.6.29.tar.xz PGP Signature:linux-6.6.29.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.6.29

Version:6.1.88 (longterm) Released:2024-04-27 Source:linux-6.1.88.tar.xz PGP Signature:linux-6.1.88.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-6.1.88

Version:5.15.157 (longterm) Released:2024-04-27 Source:linux-5.15.157.tar.xz PGP Signature:linux-5.15.157.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-5.15.157

FEDORA-2024-11821b16ac Packages in this update:

• gdcm-3.0.23-5.fc39

Update description: Security fixes

• TALOS-2024-1924, CVE-2024-22391: heap overflow
• TALOS-2024-1935, CVE-2024-22373: out-of-bounds write
• TALOS-2024-1944, CVE-2024-25569: out-of-bounds read

Bug fixes

• Replace deprecated PyEval_CallObject for compatibility with Python 3.13

FEDORA-EPEL-2024-f5884f808a Packages in this update:

• gdcm-3.0.12-7.el9

Update description: Security fixes

• TALOS-2024-1924, CVE-2024-22391: heap overflow
• TALOS-2024-1935, CVE-2024-22373: out-of-bounds write
• TALOS-2024-1944, CVE-2024-25569: out-of-bounds read

Bug fixes

• Replace deprecated PyEval_CallObject for compatibility with Python 3.13

FEDORA-2024-7a57842ec3 Packages in this update:

• gdcm-3.0.21-4.fc38

Update description: Security fixes

• TALOS-2024-1924, CVE-2024-22391: heap overflow
• TALOS-2024-1935, CVE-2024-22373: out-of-bounds write
• TALOS-2024-1944, CVE-2024-25569: out-of-bounds read

Bug fixes

• Replace deprecated PyEval_CallObject for compatibility with Python 3.13

FEDORA-2024-fae33e6e9f Packages in this update:

• gdcm-3.0.23-5.fc40

Update description: Security fixes

• TALOS-2024-1924, CVE-2024-22391: heap overflow
• TALOS-2024-1935, CVE-2024-22373: out-of-bounds write
• TALOS-2024-1944, CVE-2024-25569: out-of-bounds read

Bug fixes

• Replace deprecated PyEval_CallObject for compatibility with Python 3.13

FEDORA-2024-c5909efa5c Packages in this update:

• gdcm-3.0.23-5.fc41

Update description:

Automatic update for gdcm-3.0.23-5.fc41.

Changelog * Fri Apr 26 2024 Sandro <devel@penguinpee.nl> - 3.0.23-5 - Apply security patches - Fix TALOS-2024-1924, CVE-2024-22391 (RHBZ#2277288) - Fix TALOS-2024-1935, CVE-2024-22373 (RHBZ#2277292) - Fix TALOS-2024-1944, CVE-2024-25569 (RHBZ#2277296) * Fri Apr 19 2024 Sandro <devel@penguinpee.nl> - 3.0.23-4 - Replace deprecated PyEval_CallObject() (RHBZ#2245816) * Fri Mar 22 2024 Sérgio M. Basto <sergio@serjux.com> - 3.0.23-3 - Update URL

Version:next-20240426 (linux-next) Released:2024-04-26

FEDORA-2024-29120efcc4 Packages in this update:

• et-6.2.1-15.fc38

Update description:

Unbundle cpp-httlib, fixing CVE-2023-26130

FEDORA-2024-a09bfceb28 Packages in this update:

• et-6.2.1-15.fc39

Update description:

Unbundle cpp-httlib, fixing CVE-2023-26130

FEDORA-2024-cd94b2df32 Packages in this update:

• et-6.2.1-15.fc40

Update description:

Unbundle cpp-httlib, fixing CVE-2023-26130

FEDORA-2024-34474f346b Packages in this update:

• clamav-1.0.6-1.fc40

Update description:

ClamAV 1.0.6 is a critical patch release with the following fixes:

• Updated select Rust dependencies to the latest versions. This resolved Cargo audit complaints and included PNG parser bug fixes.

  • GitHub pull requesthttps://github.com/Cisco-Talos/clamav/pull/1225

  • Fixed a bug causing some text to be truncated when converting from UTF-16.

  • GitHub pull requesthttps://github.com/Cisco-Talos/clamav/pull/1232

  • Fixed assorted complaints identified by Coverity static analysis.

  • GitHub pull requesthttps://github.com/Cisco-Talos/clamav/pull/1237

  • Fixed a bug causing CVDs downloaded by the DatabaseCustomURL Freshclam config option to be pruned and then re-downloaded with every update.

  • GitHub pull requesthttps://github.com/Cisco-Talos/clamav/pull/1240

  • Added the new 'valhalla' database name to the list of optional databases in preparation for future work.

  • GitHub pull requesthttps://github.com/Cisco-Talos/clamav/pull/1240

  • Silenced a warning "Unexpected early end-of-file" that occured when scanning some PNG files.

  • GitHub pull requesthttps://github.com/Cisco-Talos/clamav/pull/1216