Fedora Security Advisories

• trafficserver-9.2.5-1.el8

Update to upstream 9.2.5 Resolves CVE-2023-38522, CVE-2024-35161, CVE-2024-35296

• trafficserver-9.2.5-1.el9

Update to upstream 9.2.5 Resolves CVE-2023-38522, CVE-2024-35161, CVE-2024-35296

• trafficserver-9.2.5-1.fc40

Update to upstream 9.2.5 Resolves CVE-2023-38522, CVE-2024-35161, CVE-2024-35296

• trafficserver-9.2.5-1.fc39

Update to upstream 9.2.5 Resolves CVE-2023-38522, CVE-2024-35161, CVE-2024-35296

• python-setuptools-69.0.3-4.fc40

Security fix for CVE-2024-6345.

• python-setuptools-67.7.2-8.fc39

Security fix for CVE-2024-6345.

• curl-8.6.0-9.fc40

• fix freeing stack buffer in utf8asn1str (CVE-2024-6197)

• binaryen-118-1.fc39

Latest stable release from upstream.

Fixes CVE-2021-46054 .

• binaryen-118-1.fc40

Latest stable release from upstream.

Fixes CVE-2021-46054 .

• exim-4.98-2.el8

This is an update enabling SRS support.

This is new version of exim fixing CVE-2024-39929.

• xdg-desktop-portal-hyprland-1.3.3-2.fc39

Update to 1.3.3

https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3

• xdg-desktop-portal-hyprland-1.3.3-2.fc40

Update to 1.3.3

https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3

• ffmpeg-6.1.1-4.fc39

Backport fix for CVE-2023-49528

• ffmpeg-6.1.1-19.fc40

Backport fix for CVE-2023-49528 and backport fixes for compatibility with Mesa 24.0.6+ / 24.1.4+ for VA-API

• httpd-2.4.62-1.fc39

• new version 2.4.62
• Fixes CVE-2024-40725

• httpd-2.4.62-1.fc40

• new version 2.4.62
• Fixes CVE-2024-40725

• gtk3-3.24.43-1.fc39

Update to 3.24.43

• darkhttpd-1.16-1.fc39

• Update to 1.16 fixes rhbz#2259096

• darkhttpd-1.16-1.fc40

• Update to 1.16 fixes rhbz#2259096

• openvpn-2.5.11-1.el9

Update to upstream OpenVPN 2.5.11 Fixes CVE-2024-5594