FEDORA-EPEL-2024-3ed223d8ce
Packages in this update:
chromium-131.0.6778.108-1.el9
Update description:
Update to 131.0.6778.108
High CVE-2024-12053: Type Confusion in V8
chromium-131.0.6778.108-1.el9
Update to 131.0.6778.108
High CVE-2024-12053: Type Confusion in V8
chromium-131.0.6778.108-1.el10_0
Update to 131.0.6778.108
High CVE-2024-12053: Type Confusion in V8
chromium-131.0.6778.108-1.fc40
Update to 131.0.6778.108
High CVE-2024-12053: Type Confusion in V8
chromium-131.0.6778.108-1.el8
Update to 131.0.6778.108
High CVE-2024-12053: Type Confusion in V8
Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Dec 04
SEC Consult Vulnerability Lab Security Advisory < 20241204-0 >
=======================================================================
title: Multiple Critical Vulnerabilities
product: Image Access Scan2Net
vulnerable version: Firmware <=7.40, <=7.42, <7.42B
(depending on the vulnerability)
fixed version: mostly fixed in v7.42B
CVE number: CVE-2024-28138,…
python3.12-3.12.8-1.fc40
python3-docs-3.12.8-1.fc40
Update to 3.12.8
python3.13-3.13.1-1.fc42
Automatic update for python3.13-3.13.1-1.fc42.
* Tue Dec 3 2024 Charalampos Stratakis <cstratak@redhat.com> – 3.13.1-1
– Update to 3.13.1
– Security fix for CVE-2024-9287
– Fixes: rhbz#2321657
python3.12-3.12.8-1.fc41
Update to 3.12.8
python3.12-3.12.8-1.fc42
Automatic update for python3.12-3.12.8-1.fc42.
* Tue Dec 3 2024 Charalampos Stratakis <cstratak@redhat.com> – 3.12.8-1
– Update to 3.12.8
– Security fix for CVE-2024-9287
– Fixes: rhbz#2321656
It was discovered that recutils incorrectly handled memory when parsing
comments with the recparser utility. An attacker could possibly use this
issue to cause a denial of service or run arbitrary commands.
(CVE-2021-46019, CVE-2021-46021, CVE-2021-46022)
It was discovered that recutils incorrectly handled memory when parsing CSV
files. An attacker could possibly use this issue to cause a denial of
service or run arbitrary commands. (CVE-2019-11637, CVE-2019-11638,
CVE-2019-11639, CVE-2019-11640)
It was discovered that recutils incorrectly handled memory when parsing
maliciously crafted recfiles. An attacker could possibly use this issue to
cause a denial of service. (CVE-2019-6455, CVE-2019-6456, CVE-2019-6457,
CVE-2019-6458, CVE-2019-6459, CVE-2019-6460)