Fedora Security Advisories

FEDORA-EPEL-2024-adbc0c7fd0 Packages in this update:

• cjson-1.7.17-1.el8

Update description:

Update to latest upstream version 1.7.17 (closes rhbz#2255953)

FEDORA-EPEL-2024-cda1e4035b Packages in this update:

• cjson-1.7.17-1.el9

Update description:

Update to latest upstream version 1.7.17 (closes rhbz#2255953)

FEDORA-2024-5b487ca10a Packages in this update:

• cjson-1.7.17-1.fc38

Update description:

Update to latest upstream version 1.7.17 (closes rhbz#2255953)

FEDORA-2024-74563262c0 Packages in this update:

• cjson-1.7.17-1.fc39

Update description:

Update to latest upstream version 1.7.17 (closes rhbz#2255953)

FEDORA-2024-b93a6b1325 Packages in this update:

• cjson-1.7.17-1.fc40

Update description:

Update to latest upstream version 1.7.17 (closes rhbz#2255953)

FEDORA-2024-ef33631a3c Packages in this update:

• cjson-1.7.17-1.fc41

Update description:

Automatic update for cjson-1.7.17-1.fc41.

Changelog * Sun Apr 7 2024 Fabian Affolter <mail@fabian-affolter.ch> - 1.7.17.-1 - Update to latest upstream version 1.7.17 (closes rhbz#2255953) - Fix rhbz#2254647

FEDORA-2024-45b02f63e4 Packages in this update:

• python-mechanicalsoup-1.3.0-1.fc41

Update description:

Automatic update for python-mechanicalsoup-1.3.0-1.fc41.

Changelog * Sun Apr 7 2024 Fabian Affolter <mail@fabian-affolter.ch> - 1.3.0-1 - Update to latest upstream version 1.3.0 (closes rhbz#2219697) - Fix rhbz#2219756, rhbz#2261581 and rhbz#2232585

FEDORA-2024-4812897dd1 Packages in this update:

• mod_http2-2.0.27-1.fc40

Update description:

Security fix for CVE-2024-27316

FEDORA-2024-528301bac2 Packages in this update:

• mod_http2-2.0.27-1.fc39

Update description:

Security fix for CVE-2024-27316

FEDORA-2024-1f11550e31 Packages in this update:

• mod_http2-2.0.27-1.fc38

Update description:

Security fix for CVE-2024-27316

FEDORA-EPEL-2024-3cb841c5f0 Packages in this update:

• chromium-123.0.6312.105-1.el7

Update description:

update to 123.0.6312.105

• High CVE-2024-3156: Inappropriate implementation in V8
• High CVE-2024-3158: Use after free in Bookmarks
• High CVE-2024-3159: Out of bounds memory access in V8

FEDORA-EPEL-2024-7bc0a1d338 Packages in this update:

• chromium-123.0.6312.105-1.el9

Update description:

update to 123.0.6312.105

• High CVE-2024-3156: Inappropriate implementation in V8
• High CVE-2024-3158: Use after free in Bookmarks
• High CVE-2024-3159: Out of bounds memory access in V8

FEDORA-EPEL-2024-fe061342ca Packages in this update:

• chromium-123.0.6312.105-1.el8

Update description:

update to 123.0.6312.105

• High CVE-2024-3156: Inappropriate implementation in V8
• High CVE-2024-3158: Use after free in Bookmarks
• High CVE-2024-3159: Out of bounds memory access in V8

FEDORA-EPEL-2024-a224e708a6 Packages in this update:

• rust-h2-0.3.26-1.el9

Update description:

Update to version 0.3.26. Addresses RUSTSEC-2024-0332.

FEDORA-2024-c5b42e6462 Packages in this update:

• rust-h2-0.3.26-1.fc38

Update description:

Update to version 0.3.26. Addresses RUSTSEC-2024-0332.

FEDORA-2024-638f25a317 Packages in this update:

• rust-h2-0.3.26-1.fc39

Update description:

Update to version 0.3.26. Addresses RUSTSEC-2024-0332.

FEDORA-2024-f99ee6bf95 Packages in this update:

• rust-h2-0.3.26-1.fc40

Update description:

Update to version 0.3.26. Addresses RUSTSEC-2024-0332.

FEDORA-EPEL-2024-866ac60917 Packages in this update:

• nghttp2-1.33.0-1.3.el7

Update description:

• fix CONTINUATION frames DoS (CVE-2024-28182)

FEDORA-2024-ec22e51ec2 Packages in this update:

• nghttp2-1.52.0-3.fc38

Update description:

• fix CONTINUATION frames DoS (CVE-2024-28182)

FEDORA-2024-a09456b7a9 Packages in this update:

• curl-8.6.0-8.fc40

Update description:

• fix Usage of disabled protocol (CVE-2024-2004)
• fix HTTP/2 push headers memory-leak (CVE-2024-2398)