Fedora Security Advisories

• sssd-2.9.4-2.fc39

Fix CVE-2023-3758 https://bugzilla.redhat.com/show_bug.cgi?id=2275905

• sssd-2.9.4-2.fc38

Fix CVE-2023-3758 https://bugzilla.redhat.com/show_bug.cgi?id=2275905

• nextcloud-28.0.3-1.fc38

• update to 28.0.3
• fix CVE-2024-22403

• chromium-124.0.6367.60-1.el9

update to 124.0.6367.60

• High CVE-2024-3832: Object corruption in V8
• High CVE-2024-3833: Object corruption in WebAssembly
• High CVE-2024-3914: Use after free in V8
• High CVE-2024-3834: Use after free in Downloads
• Medium CVE-2024-3837: Use after free in QUIC
• Medium CVE-2024-3838: Inappropriate implementation in Autofill
• Medium CVE-2024-3839: Out of bounds read in Fonts
• Medium CVE-2024-3840: Insufficient policy enforcement in Site Isolation
• Medium CVE-2024-3841: Insufficient data validation in Browser Switcher
• Medium CVE-2024-3843: Insufficient data validation in Downloads
• Low CVE-2024-3844: Inappropriate implementation in Extensions
• Low CVE-2024-3845: Inappropriate implementation in Network
• Low CVE-2024-3846: Inappropriate implementation in Prompts
• Low CVE-2024-3847: Insufficient policy enforcement in WebUI

update to 123.0.6312.122

• High CVE-2024-3157: Out of bounds write in Compositing
• High CVE-2024-3516: Heap buffer overflow in ANGLE
• High CVE-2024-3515: Use after free in Dawn

• golang-gvisor-20240408.0-1.20240418git9e5a99b.fc38

Update golang-gvisor to 20240408.0

• golang-gvisor-20240408.0-1.20240418git9e5a99b.fc39

Update golang-gvisor to 20240408.0

• golang-gvisor-20240408.0-1.20240418git9e5a99b.fc40

Update golang-gvisor to 20240408.0

• python-reportlab-4.2.0-1.fc39

• Release 4.2.0

• python-reportlab-4.2.0-1.fc40

• Release 4.2.0

• flatpak-1.15.8-1.fc39

Update to 1.15.8

Fix CVE-2024-32462

• flatpak-1.15.8-1.fc40

Update to 1.15.8

Fixes CVE-2024-32462

• chromium-124.0.6367.60-1.fc38

update to 124.0.6367.60

• High CVE-2024-3832: Object corruption in V8
• High CVE-2024-3833: Object corruption in WebAssembly
• High CVE-2024-3914: Use after free in V8
• High CVE-2024-3834: Use after free in Downloads
• Medium CVE-2024-3837: Use after free in QUIC
• Medium CVE-2024-3838: Inappropriate implementation in Autofill
• Medium CVE-2024-3839: Out of bounds read in Fonts
• Medium CVE-2024-3840: Insufficient policy enforcement in Site Isolation
• Medium CVE-2024-3841: Insufficient data validation in Browser Switcher
• Medium CVE-2024-3843: Insufficient data validation in Downloads
• Low CVE-2024-3844: Inappropriate implementation in Extensions
• Low CVE-2024-3845: Inappropriate implementation in Network
• Low CVE-2024-3846: Inappropriate implementation in Prompts
• Low CVE-2024-3847: Insufficient policy enforcement in WebUI

• chromium-124.0.6367.60-2.fc39

update to 124.0.6367.60

• High CVE-2024-3832: Object corruption in V8
• High CVE-2024-3833: Object corruption in WebAssembly
• High CVE-2024-3914: Use after free in V8
• High CVE-2024-3834: Use after free in Downloads
• Medium CVE-2024-3837: Use after free in QUIC
• Medium CVE-2024-3838: Inappropriate implementation in Autofill
• Medium CVE-2024-3839: Out of bounds read in Fonts
• Medium CVE-2024-3840: Insufficient policy enforcement in Site Isolation
• Medium CVE-2024-3841: Insufficient data validation in Browser Switcher
• Medium CVE-2024-3843: Insufficient data validation in Downloads
• Low CVE-2024-3844: Inappropriate implementation in Extensions
• Low CVE-2024-3845: Inappropriate implementation in Network
• Low CVE-2024-3846: Inappropriate implementation in Prompts
• Low CVE-2024-3847: Insufficient policy enforcement in WebUI

• python-idna-3.7-1.fc38

Update to 3.7 (rhbz#2274439), security fix for CVE-2024-3651

• python-idna-3.7-1.fc39

Update to 3.7 (rhbz#2274439), security fix for CVE-2024-3651

• glibc-2.37-19.fc38

This update includes several bug fixes from the upstream glibc release branch, including a fix for CVE-2024-2961.

• glibc-2.38-18.fc39

This update includes several bug fixes from the upstream glibc release branch, including a fix for CVE-2024-2961.

• python-idna-3.7-1.fc40

Update to 3.7 (rhbz#2274439), security fix for CVE-2024-3651

• thunderbird-115.10.0-1.fc39

Update to 115.10.0

• https://www.thunderbird.net/en-US/thunderbird/115.10.0/releasenotes/

• thunderbird-115.10.0-1.fc38

Update to 115.10.0

• https://www.thunderbird.net/en-US/thunderbird/115.10.0/releasenotes/