Fedora 41: 2024-203e9bc2fd Moderate: Securelib Memory Overflow Resolutions

Cryptlib is a powerful security toolkit that allows even inexperienced crypto

programmers to easily add encryption and authentication services to their

software. The high-level interface provides anyone with the ability to add

strong security capabilities to an application in as little as half an hour,

without needing to know any of the low-level details that make the encryption

or authentication work. Because of this, cryptlib dramatically reduces the

cost involved in adding security to new or existing applications.

At the highest level, cryptlib provides implementations of complete security

services such as S/MIME and PGP/OpenPGP secure enveloping, SSL/TLS and

SSH secure sessions, CA services such as CMP, SCEP, RTCS, and OCSP, and other

security operations such as secure time-stamping. Since cryptlib uses

industry-standard X.509, S/MIME, PGP/OpenPGP, and SSH/SSL/TLS data formats,

the resulting encrypted or signed data can be easily transported to other

systems and processed there, and cryptlib itself runs on virtually any

operating system - cryptlib doesn't tie you to a single system.

This allows email, files and EDI transactions to be authenticated with

digital signatures and encrypted in an industry-standard format.

Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639