FEDORA-EPEL-2023-259055935d

Packages in this update:

chromium-120.0.6099.62-1.el7

Update description:

Update to 120.0.6099.62, upstream release fixes follow security issues:

High CVE-2023-6508: Use after free in Media Stream
High CVE-2023-6509: Use after free in Side Panel Search
Medium CVE-2023-6510: Use after free in Media Capture
Low CVE-2023-6511: Inappropriate implementation in Autofill
Low CVE-2023-6512: Inappropriate implementation in Web Browser UI

update to 119.0.6045.199, upstream security release

High CVE-2023-6348: Type Confusion in Spellcheck
High CVE-2023-6347: Use after free in Mojo
High CVE-2023-6346: Use after free in WebAudio
High CVE-2023-6350: Out of bounds memory access in libavif
High CVE-2023-6351: Use after free in libavif
High CVE-2023-6345: Integer overflow in Skia

Read More

FEDORA-EPEL-2023-8d617060ef

Packages in this update:

chromium-120.0.6099.62-2.el9

Update description:

Update to 120.0.6099.62, upstream release fixes follow security issues:

High CVE-2023-6508: Use after free in Media Stream
High CVE-2023-6509: Use after free in Side Panel Search
Medium CVE-2023-6510: Use after free in Media Capture
Low CVE-2023-6511: Inappropriate implementation in Autofill
Low CVE-2023-6512: Inappropriate implementation in Web Browser UI

update to 119.0.6045.199, upstream security release

High CVE-2023-6348: Type Confusion in Spellcheck
High CVE-2023-6347: Use after free in Mojo
High CVE-2023-6346: Use after free in WebAudio
High CVE-2023-6350: Out of bounds memory access in libavif
High CVE-2023-6351: Use after free in libavif
High CVE-2023-6345: Integer overflow in Skia

Read More

FEDORA-EPEL-2023-d0b9bcb64f

Packages in this update:

chromium-120.0.6099.62-2.el8

Update description:

Update to 120.0.6099.62, upstream release fixes follow security issues:

High CVE-2023-6508: Use after free in Media Stream
High CVE-2023-6509: Use after free in Side Panel Search
Medium CVE-2023-6510: Use after free in Media Capture
Low CVE-2023-6511: Inappropriate implementation in Autofill
Low CVE-2023-6512: Inappropriate implementation in Web Browser UI

update to 119.0.6045.199, upstream security release

High CVE-2023-6348: Type Confusion in Spellcheck
High CVE-2023-6347: Use after free in Mojo
High CVE-2023-6346: Use after free in WebAudio
High CVE-2023-6350: Out of bounds memory access in libavif
High CVE-2023-6351: Use after free in libavif
High CVE-2023-6345: Integer overflow in Skia

Read More

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the Hydra library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-42826.

Read More

It was discovered that BlueZ did not properly restrict non-bonded devices
from injecting HID events into the input subsystem. This could allow a
physically proximate attacker to inject keystrokes and execute arbitrary
commands whilst the device is discoverable.

Read More

FEDORA-2023-9c901b8c2d

Packages in this update:

dotnet6.0-6.0.125-1.fc38

Update description:

This is the November 2023 update for .NET 6. It includes fixes for multiple CVEs.

Release Notes: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.25/6.0.25.md

Read More

FEDORA-2023-d8a7c6928a

Packages in this update:

dotnet6.0-6.0.125-1.fc39

Update description:

This is the November 2023 update for .NET 6. It includes fixes for multiple CVEs.

Release Notes: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.25/6.0.25.md

Read More

FEDORA-2023-484d7950a9

Packages in this update:

dotnet7.0-7.0.114-1.fc38

Update description:

This is the November 2023 monthly update for .NET 7. It includes several security fixes.

Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.14/7.0.14.md

Read More

FEDORA-2023-4334d47fff

Packages in this update:

dotnet7.0-7.0.114-1.fc39

Update description:

This is the November 2023 monthly update for .NET 7. It includes several security fixes.

Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.14/7.0.14.md

Read More

FEDORA-2023-5d1b8507b8

Packages in this update:

chromium-120.0.6099.62-1.fc39

Update description:

Update to 120.0.6099.62, upstream release fixes follow security issues:

High CVE-2023-6508: Use after free in Media Stream
High CVE-2023-6509: Use after free in Side Panel Search
Medium CVE-2023-6510: Use after free in Media Capture
Low CVE-2023-6511: Inappropriate implementation in Autofill
Low CVE-2023-6512: Inappropriate implementation in Web Browser UI

Read More