Fedora 40: 2024-129d8ca6fc High: Type Confusion in Apache Commons
fedora
March 7, 2024
Change for system JDK from 17 to 21
Summary
The Apache Commons Compress library defines an API for working with
ar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files.
In version 1.14 read-only support for Brotli decompression has been added,
but it has been removed form this package.
Update Information:
Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639
Change Log
* Sat Mar 2 2024 Jiri Vanek
References
[ 1 ] Bug #2123726 - consoleImageViewer crashes at start
https://bugzilla.redhat.com/show_bug.cgi?id=2123726
[ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40
https://bugzilla.redhat.com/show_bug.cgi?id=2261062
[ 3 ] Bug #2266639 - directory-maven-plugin fails to build with java-21-openjdk
https://bugzilla.redhat.com/show_bug.cgi?id=2266639
[ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266934
[ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266937
[ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta
https://bugzilla.redhat.com/show_bug.cgi?id=2267486
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Name: apache-commons-compress
Product: Fedora 40
Version: 1.25.0
Release: 5.fc40
Summary: Java API for working with compressed files and archivers
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!