FEDORA-2023-e5d4a632a5
Packages in this update:
ansible-core-2.14.11-1.fc38
Update description:
Update to 2.14.11.
Mitigates CVE-2023-5115.
ansible-core-2.14.11-1.fc38
Update to 2.14.11.
Mitigates CVE-2023-5115.
rclone-1.64.0-1.fc40
Automatic update for rclone-1.64.0-1.fc40.
* Thu Oct 12 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> – 1.64.0-1
– Update to 1.64.0 – Closes rhbz#2238581 rhbz#2229610 rhbz#2229606
With over 20,000 active installations, the plugin is used for user-generated content submissions
Governor Newsom signed the first US bill requiring data brokers to delete personal data upon request
It was discovered that FFmpeg did not properly handle certain inputs in
vf_lagfun.c, resulting in a buffer overflow vulnerability. An attacker
could possibly use this issue to cause a denial of service via application
crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22024)
It was discovered that FFmpeg incorrectly managed memory in avienc.c,
resulting in a memory leak. An attacker could possibly use this issue
to cause a denial of service via application crash. (CVE-2020-22039)
It was discovered that FFmpeg incorrectly handled certain files due to a
memory leak in frame.c. An attacker could possibly use this issue to cause
a denial of service via application crash. This issue affected
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22040)
It was discovered that FFmpeg incorrectly handled certain files due to a
memory leak in fifo.c. An attacker could possibly use this issue to cause
a denial of service via application crash. This issue only affected
Ubuntu 20.04 LTS. (CVE-2020-22043)
It was discovered that FFmpeg incorrectly handled certain files due to a
memory leak in vf_tile.c. If a user or automated system were tricked into
processing a specially crafted MOV file, an attacker could possibly use
this issue to cause a denial of service. (CVE-2020-22051)
It was discovered that FFmpeg incorrectly handled certain MOV files in
timecode.c, leading to an integer overflow. An attacker could possibly
use this issue to cause a denial of service using a crafted MOV file.
This issue only affected Ubuntu 16.04 LTS. (CVE-2021-28429)
thunderbird-115.3.2-1.fc37
Rebase / Update to 115.3.2 ;
https://www.thunderbird.net/en-US/thunderbird/115.0/whatsnew/ ;
https://support.mozilla.org/en-US/kb/thunderbird-115-supernova-faq ;
https://www.thunderbird.net/en-US/thunderbird/115.2.3/releasenotes/ ;
https://www.thunderbird.net/en-US/thunderbird/115.3.0/releasenotes/ ;
https://www.thunderbird.net/en-US/thunderbird/115.3.1/releasenotes/ ;
https://www.thunderbird.net/en-US/thunderbird/115.3.2/releasenotes/
nghttp2-1.33.0-1.2.el7
fix HTTP/2 Rapid Reset (CVE-2023-44487)
golang-github-colinmarc-hdfs-2-2.4.0-1.fc40
Automatic update for golang-github-colinmarc-hdfs-2-2.4.0-1.fc40.
* Thu Oct 12 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> – 2.4.0-1
– Update to 2.4.0 – Closes rhbz#2051033 rhbz#2163111
nghttp2-1.51.0-2.fc37
fix HTTP/2 Rapid Reset (CVE-2023-44487)