Stay Secure with the Latest Linux Advisories

security advisoryfedoraheap overflow

Fedora 40: FEDORA-2024-47dbf2a4de Critical: obs-cef Heap Overflow

Security fix for CVE-2023-6349 & FTBFS fixes. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-47dbf2a4de 2024-08-01 02:52:09.189205 -------------------------------------------------------------------------------- Name : obs-cef Product : Fedora 40 Version : 5060^cr103.0.5060.134~git20231010.17f8588 Release : 6.fc40 URL : https://github.com/obsproject/cef Summary : OBS fork of the Chromium Embedded Framework Description : CEF is an embeddable build of Chromium, powered by WebKit (Blink). This version is a fork by the OBS project designed to be used as part of the OBS Browser Source plugin. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-6349 & FTBFS fixes -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 31 2024 Asahi Lina - 5060^cr103.0.5060.134~git20231010.17f8588-6 - Fix CVE-2023-6349 & FTBFS on f40/rawhide * Thu Jul 18 2024 Fedora Release Engineering - 5060^cr103.0.5060.134~git20231010.17f8588-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Thu Jan 25 2024 Fedora Release Engineering - 5060^cr103.0.5060.134~git20231010.17f8588-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 5060^cr103.0.5060.134~git20231010.17f8588-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2283553 - CVE-2023-6349 libvpx: Heap buffer overflow related to VP9 encoding https://bugzilla.redhat.com/show_bug.cgi?id=2283553 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-47dbf2a4de' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Important security patch released for Fedora 40 tackling CVE-2023-6349 along with FTBFS remedies for obs-cef.. Fedora Updates, Security Advisory, OBS CEF, CVE-2023-6349, Heap Overflow. . Severity: Critical. LinuxSecurity.com Team

Aug 01, 2024 •Critical Fedora