Stay Secure with the Latest Linux Advisories

security advisoryFedoraDenial of Service

Fedora 40 python-zipp CVE-2024-5569 Denial of Service Security Advisory

Security fix for CVE-2024-5569 (rhbz#2297118). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-c678f46845 2024-07-25 01:27:23.772113 -------------------------------------------------------------------------------- Name : python-zipp Product : Fedora 40 Version : 3.17.0 Release : 4.fc40 URL : https://github.com/jaraco/zipp Summary : Backport of pathlib-compatible object wrapper for zip files Description : A pathlib-compatible Zipfile object wrapper. A backport of the Path object. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2024-5569 (rhbz#2297118) -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 16 2024 Lumir Balhar - 3.17.0-4 - Security fix for CVE-2024-5569 (rhbz#2297118) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2297118 - CVE-2024-5569 python-zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2297118 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c678f46845' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code ofConduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Fedora alert regarding python-zipp upgrade addressing CVE-2024-5569 Denial of Service vulnerability—critical security insights. Fedora Python-zipp Update, Denial of Service Security Advisory. . Severity: Important. LinuxSecurity.com Team

Jul 25, 2024 •Important Fedora