FEDORA-2024-92d80d7f9a
Packages in this update:
webkit2gtk4.0-2.46.1-2.fc41
Update description:
Update to 2.46.1
webkit2gtk4.0-2.46.1-2.fc41
Update to 2.46.1
Dom Walden discovered that the AbuseFilter extension in MediaWiki, a
website engine for collaborative work, performed incomplete authorisation
checks.
Integer overflows flaws were discovered in the Compound Document Binary
File format parser of libgsf, the GNOME Project G Structured File
Library, which could result in the execution of arbitrary code if a
specially crafted file is processed.
firefox-131.0-2.fc39
New upstream version (131.0)
chromium-129.0.6668.89-1.fc39
update to 129.0.6668.89
High CVE-2024-7025: Integer overflow in Layout
High CVE-2024-9369: Insufficient data validation in Mojo
High CVE-2024-9370: Inappropriate implementation in V8
chromium-129.0.6668.89-1.fc40
update to 129.0.6668.89
High CVE-2024-7025: Integer overflow in Layout
High CVE-2024-9369: Insufficient data validation in Mojo
High CVE-2024-9370: Inappropriate implementation in V8
Posted by Security Explorations on Oct 04
Hello All,
Those interested in SIM / USIM card security might find some
information at our spin-off project page dedicated to the topic
potentially useful:
https://security-explorations.com/sim-usim-cards.html
We share there some information based on the experiences gained in the
SIM / USIM card security space, all in a hope this leads to the
increase of public awareness on the topic, change perspective on the
SIM / USIM card industry and…
chromium-129.0.6668.89-1.el8
update to 129.0.6668.89
* High CVE-2024-7025: Integer overflow in Layout
* High CVE-2024-9369: Insufficient data validation in Mojo
* High CVE-2024-9370: Inappropriate implementation in V8
chromium-129.0.6668.89-1.el9
update to 129.0.6668.89
* High CVE-2024-7025: Integer overflow in Layout
* High CVE-2024-9369: Insufficient data validation in Mojo
* High CVE-2024-9370: Inappropriate implementation in V8
apache-commons-io-2.11.0-5.fc39
Fixes possible denial of service attack on untrusted input