Stay Secure with the Latest Linux Advisories

security advisorysoftware updateFedora

Fedora 39: 2024-453ee0b3b9 Moderate: Apptainer Resource Exhaustion

Update to upstream 1.3.0, and security fixes for CVE-2024-28176 and CVE-2024-28180. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-453ee0b3b9 2024-03-22 01:15:00.283844 -------------------------------------------------------------------------------- Name : apptainer Product : Fedora 39 Version : 1.3.0 Release : 1.fc39 URL : https://apptainer.org Summary : Application and environment virtualization formerly known as Singularity Description : Apptainer provides functionality to make portable containers that can be used across host environments. -------------------------------------------------------------------------------- Update Information: Update to upstream 1.3.0, and security fixes for CVE-2024-28176 and CVE-2024-28180 -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 13 2024 Dave Dykstra - 1.3.0 - Update to upstream 1.3.0 * Thu Feb 15 2024 Dave Dykstra - 1.3.0~rc.2 - Update to upstream 1.3.0-rc.2 * Wed Jan 10 2024 Dave Dykstra - 1.3.0~rc.1 - Update to upstream 1.3.0-rc.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2268820 - CVE-2024-28176 jose: resource exhaustion https://bugzilla.redhat.com/show_bug.cgi?id=2268820 [ 2 ] Bug #2268854 - CVE-2024-28180 jose-go: improper handling of highly compressed data https://bugzilla.redhat.com/show_bug.cgi?id=2268854 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-453ee0b3b9' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The latest version 1.3.0 of Apptainer introduces vital security enhancements. Update immediately to ensure your system remains secure and safeguarded.. Apptainer Security Updates, Fedora 39 Security, Container Security Fixes. . LinuxSecurity.com Team

Mar 22, 2024 Fedora