Read Time:8 Second
FEDORA-2024-0078a55acf
Packages in this update:
mosquitto-2.0.19-1.fc41
Update description:
Update to 2.0.19
Fix FTBFS (closes rhbz#2300978)
Category Archives: Advisories
USN-7021-4: Linux kernel vulnerabilities
Read Time:22 Second
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
– GPU drivers;
– BTRFS file system;
– F2FS file system;
– GFS2 file system;
– BPF subsystem;
– Netfilter;
– RxRPC session sockets;
– Integrity Measurement Architecture(IMA) framework;
(CVE-2024-41009, CVE-2024-26677, CVE-2024-42160, CVE-2024-39494,
CVE-2024-39496, CVE-2024-38570, CVE-2024-27012, CVE-2024-42228)
redis-7.2.6-1.fc39
Read Time:23 Second
FEDORA-2024-68f9c0741f
Packages in this update:
redis-7.2.6-1.fc39
Update description:
Redis Community Edition 7.2.6 Released Wed 02 Oct 2024 20:17:04 IDT
Upgrade urgency SECURITY: See security fixes below.
Security fixes
CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE.
CVE-2024-31227 Potential Denial-of-service due to malformed ACL selectors.
CVE-2024-31228 Potential Denial-of-service due to unbounded pattern matching.
redis-7.2.6-1.fc40
Read Time:23 Second
FEDORA-2024-5d4eb04e76
Packages in this update:
redis-7.2.6-1.fc40
Update description:
Redis Community Edition 7.2.6 Released Wed 02 Oct 2024 20:17:04 IDT
Upgrade urgency SECURITY: See security fixes below.
Security fixes
CVE-2024-31449 Lua library commands may lead to stack overflow and potential RCE.
CVE-2024-31227 Potential Denial-of-service due to malformed ACL selectors.
CVE-2024-31228 Potential Denial-of-service due to unbounded pattern matching.
USN-7052-1: GNOME Shell vulnerabilities
Read Time:23 Second
It was discovered that GNOME Shell mishandled extensions that fail to
reload, possibly leading to extensions staying enabled on the lock screen.
An attacker could possibly use this issue to launch applications, view
sensitive information, or execute arbitrary commands. (CVE-2017-8288)
It was discovered that the GNOME Shell incorrectly handled certain
keyboard inputs. An attacker could possibly use this issue to invoke
keyboard shortcuts, and potentially other actions while the workstation
was locked. (CVE-2019-3820)
DSA-5781-1 chromium – security update
Read Time:9 Second
Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.
DSA-5782-1 linux – security update
Read Time:9 Second
Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation, denial of service or information
leaks.
firefox-131.0-2.fc41
Read Time:6 Second
FEDORA-2024-1d8785c391
Packages in this update:
firefox-131.0-2.fc41
Update description:
New upstream builds (131.0)
firefox-131.0-2.fc40
Read Time:6 Second
FEDORA-2024-5f39927e90
Packages in this update:
firefox-131.0-2.fc40
Update description:
New upstream builds (131.0)
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
Read Time:28 Second
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.