Fedora Security Advisories

• xen-4.19.2-3.fc41

x86: Indirect Target Selection [XSA-469, CVE-2024-28956]

• sudo-rs-0.2.6-1.fc41

Update to version 0.2.6.

• sudo-rs-0.2.6-1.fc42

Update to version 0.2.6.

• firefox-138.0.3-1.fc40

• New upstream update (138.0.3)

• Update to latest upstream (138.0)

• xen-4.19.2-4.fc42

x86: Indirect Target Selection [XSA-469, CVE-2024-28956]

• perl-Mojolicious-9.39-1.fc40

Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default.

Mojolicious 9.39 added EXPERIMENTAL support for encrypted session cookies. This feature is much more secure than signed cookies and can be enabled by installing CryptX and setting the encrypted attribute.

• perl-Mojolicious-9.39-1.fc41

Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default.

Mojolicious 9.39 added EXPERIMENTAL support for encrypted session cookies. This feature is much more secure than signed cookies and can be enabled by installing CryptX and setting the encrypted attribute.

• znc-1.8.2-16.el9

CVE-2024-39844

• znc-1.8.2-16.el8

CVE-2024-39844

• woff-0.20091126-40.el8

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• woff-0.20091126-40.el9

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• woff-0.20091126-47.el10_0

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• woff-0.20091126-47.el10_1

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• woff-0.20091126-47.fc41

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• woff-0.20091126-47.fc42

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• sfnt2woff-zopfli-1.3.1-9.el9

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• sfnt2woff-zopfli-1.3.1-15.el10_0

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• sfnt2woff-zopfli-1.3.1-15.el10_1

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• sfnt2woff-zopfli-1.3.1-15.fc41

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.

• sfnt2woff-zopfli-1.3.1-15.fc42

Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.