Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image
processing. An authenticated user could use this issue to access arbitrary
files on the server, possibly exposing sensitive information.
Martin Kaesberger discovered that Glance incorrectly handled QCOW2 image
processing. An authenticated user could use this issue to access arbitrary
files on the server, possibly exposing sensitive information.
Martin Kaesberger discovered that Cinder incorrectly handled QCOW2 image
processing. An authenticated user could use this issue to access arbitrary
files on the server, possibly exposing sensitive information.
It was discovered that Exim did not enforce STARTTLS sync point on client
side. An attacker could possibly use this issue to perform response
injection during MTA SMTP sending.
qt6-qtbase-6.7.2-3.fc40
Fix CVE-2024-39936.
golang-1.21.12-1.fc39
This update fixes CVE-2024-24791
golang-1.22.5-1.fc40
This update fixes CVE-2024-24791
erlang-jose-1.11.10-1.fc40
Re-reviewed Jose ver. 1.11.10
erlang-jose-1.11.10-1.fc39
Re-reviewed Jose ver. 1.11.10
jpegxl-0.8.3-1.fc40
update to 0.8.3
