FEDORA-2024-24fbd327e3
Packages in this update:
firefox-132.0-2.fc41
Update description:
New upstream update (132.0)
firefox-132.0-2.fc41
New upstream update (132.0)
firefox-132.0-2.fc40
New upstream update (132.0)
Multiple vulnerabilities have been discovered in Siemens InterMesh Subscriber Devices, the most severe of which could allow for remote code execution. InterMesh leverages mesh radio technology and hardened alarm monitoring panels to create a private, self-healing network that delivers alarm signals. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution in the context of the system. Depending on the privileges associated with the system, an attacker could then install programs; view, change, or delete data.
Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
xorg-x11-server-Xwayland-23.2.7-2.fc39
CVE fix for CVE-2024-9632
xorg-x11-server-Xwayland-24.1.4-1.fc40
xwayland 24.1.4 – CVE fix for CVE-2024-9632
xorg-x11-server-Xwayland-24.1.4-1.fc41
xwayland 24.1.4 – CVE fix for CVE-2024-9632
ThreatFabric researchers have discovered significant updates to the LightSpy spyware, featuring plugins designed to interfere with device functionality
The phishing campaign targeted users via texts impersonating Amazon, linked to the threat actor Chenlun
It was discovered that urllib3 didn’t strip HTTP Proxy-Authorization header
on cross-origin redirects. A remote attacker could possibly use this issue
to obtain sensitive information.