krb5-1.21.2-6.fc41
Automatic update for krb5-1.21.2-6.fc41.
* Mon Jul 8 2024 Julien Rische <jrische@redhat.com> – 1.21.2-6
– CVE-2024-37370 CVE-2024-37371: GSS message token handling
Resolves: rhbz#2294678 rhbz#2294680
– Fix double free in klist’s show_ccache()
Resolves: rhbz#2257301
– Do not include files with “~” termination in krb5-tests
Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image
processing. An authenticated user could use this issue to access arbitrary
files on the server, possibly exposing sensitive information.
Martin Kaesberger discovered that Glance incorrectly handled QCOW2 image
processing. An authenticated user could use this issue to access arbitrary
files on the server, possibly exposing sensitive information.
Martin Kaesberger discovered that Cinder incorrectly handled QCOW2 image
processing. An authenticated user could use this issue to access arbitrary
files on the server, possibly exposing sensitive information.
It was discovered that Exim did not enforce STARTTLS sync point on client
side. An attacker could possibly use this issue to perform response
injection during MTA SMTP sending.
qt6-qtbase-6.7.2-3.fc40
Fix CVE-2024-39936.
golang-1.21.12-1.fc39
This update fixes CVE-2024-24791
golang-1.22.5-1.fc40
This update fixes CVE-2024-24791
erlang-jose-1.11.10-1.fc40
Re-reviewed Jose ver. 1.11.10
erlang-jose-1.11.10-1.fc39
Re-reviewed Jose ver. 1.11.10
