Read Time:11 Second
FEDORA-2024-8f1374ecfb
Packages in this update:
mbedtls3.6-3.6.2-1.fc41
Update description:
Update to 3.6.2
Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.2
Category Archives: Advisories
python-fastapi-0.111.1-7.fc40 python-openapi-core-0.19.4-3.fc40 python-platformio-6.1.14-7.fc40 python-starlette-0.40.0-1.fc40
Read Time:28 Second
FEDORA-2024-f1615b58e6
Packages in this update:
python-fastapi-0.111.1-7.fc40
python-openapi-core-0.19.4-3.fc40
python-platformio-6.1.14-7.fc40
python-starlette-0.40.0-1.fc40
Update description:
Security fix for CVE-2024-47874.
Starlette 0.40.0 (October 15, 2024)
This release fixes a Denial of service (DoS) via multipart/form-data requests.
You can view the full security advisory:
GHSA-f96h-pmfr-66vw
Fixed
Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data
requests fd038f3.
python-fastapi-0.115.2-1.fc41 python-openapi-core-0.19.4-4.fc41 python-platformio-6.1.14-7.fc41 python-starlette-0.40.0-1.fc41
Read Time:36 Second
FEDORA-2024-05dedb1a53
Packages in this update:
python-fastapi-0.115.2-1.fc41
python-openapi-core-0.19.4-4.fc41
python-platformio-6.1.14-7.fc41
python-starlette-0.40.0-1.fc41
Update description:
Security fix for CVE-2024-47874.
Starlette 0.40.0 (October 15, 2024)
This release fixes a Denial of service (DoS) via multipart/form-data requests.
You can view the full security advisory:
GHSA-f96h-pmfr-66vw
Fixed
Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data
requests fd038f3.
FastAPI 0.115.2
https://github.com/fastapi/fastapi/releases/tag/0.115.2
https://github.com/fastapi/fastapi/releases/tag/0.115.1
python-openapi-core-0.19.4-4.fc42 python-platformio-6.1.16-2.fc42 python-starlette-0.40.0-1.fc42
Read Time:26 Second
FEDORA-2024-466c574575
Packages in this update:
python-openapi-core-0.19.4-4.fc42
python-platformio-6.1.16-2.fc42
python-starlette-0.40.0-1.fc42
Update description:
Security fix for CVE-2024-47874.
Starlette 0.40.0 (October 15, 2024)
This release fixes a Denial of service (DoS) via multipart/form-data requests.
You can view the full security advisory:
GHSA-f96h-pmfr-66vw
Fixed
Add max_part_size to MultiPartParser to limit the size of parts in multipart/form-data
requests fd038f3.
yarnpkg-1.22.22-5.el9
Read Time:6 Second
FEDORA-EPEL-2024-78df19aaf3
Packages in this update:
yarnpkg-1.22.22-5.el9
Update description:
Sync with fedora package.
libarchive-3.7.1-3.fc39
Read Time:6 Second
FEDORA-2024-ab6348928b
Packages in this update:
libarchive-3.7.1-3.fc39
Update description:
Fix for CVE-2024-48957
dotnet6.0-6.0.135-1.fc39
Read Time:20 Second
FEDORA-2024-00855b1d76
Packages in this update:
dotnet6.0-6.0.135-1.fc39
Update description:
This is the October 2024 monthly update for .NET 6.
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.35/6.0.135.md
Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.35/6.0.35.md
dotnet6.0-6.0.135-1.fc40
Read Time:20 Second
FEDORA-2024-87d8204201
Packages in this update:
dotnet6.0-6.0.135-1.fc40
Update description:
This is the October 2024 monthly update for .NET 6.
Release Notes:
SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.35/6.0.135.md
Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.35/6.0.35.md
yarnpkg-1.22.22-5.fc39
Read Time:9 Second
FEDORA-2024-d79685d847
Packages in this update:
yarnpkg-1.22.22-5.fc39
Update description:
Update bundled ws (CVE-2024-37890)
Update bundled dependencies to fix CVE-2024-48949.
yarnpkg-1.22.22-5.fc41
Read Time:9 Second
FEDORA-2024-362915851c
Packages in this update:
yarnpkg-1.22.22-5.fc41
Update description:
Update bundled ws (CVE-2024-37890)
Update bundled elliptic to fix CVE-2024-48949.