Daily Archives: July 27, 2023

Advisories

USN-6258-1: LLVM Toolchain vulnerabilities

Read Time:33 Second

It was discovered that LLVM Toolchain did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted MLIR file, an attacker could possibly use this issue to cause LLVM
Toolchain to crash, resulting in a denial of service. (CVE-2023-29932,
CVE-2023-29934, CVE-2023-29939)

It was discovered that LLVM Toolchain did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted MLIR file, an attacker could possibly use this issue to cause LLVM
Toolchain to crash, resulting in a denial of service. This issue only
affected llvm-toolchain-15. (CVE-2023-29933)

Read More

Advisories

caddy-2.7.0~beta2-1.fc39

Read Time:48 Second

FEDORA-2023-30431913bc

Packages in this update:

caddy-2.7.0~beta2-1.fc39

Update description:

Automatic update for caddy-2.7.0~beta2-1.fc39.

Changelog

* Thu Jul 27 2023 Carl George <carl@george.computer> – 2.7.0~beta2-1
– Update to version 2.7.0~beta2, resolves rhbz#2225732 rhbz#2124366
– Resolves CVE-2022-41717 rhbz#2164315
– Resolves CVE-2022-41723 rhbz#2178412
– Add man pages
– Use generated shell completion files instead of static ones
– Add fish shell completions
– Switch to systemd sysusers
* Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> – 2.5.2-4
– Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jan 24 2023 Carl George <carl@george.computer> – 2.5.2-3
– Rebuild for CVE-2022-41717 in golang
* Wed Jan 18 2023 Fedora Release Engineering <releng@fedoraproject.org> – 2.5.2-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

Read More