Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 39: Critical OS Command Execution in xdg-desktop-portal-hyprland

Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-295a735fbc 2024-07-31 01:32:35.066451 -------------------------------------------------------------------------------- Name : xdg-desktop-portal-hyprland Product : Fedora 39 Version : 1.3.3 Release : 2.fc39 URL : https://github.com/hyprwm/xdg-desktop-portal-hyprland Summary : xdg-desktop-portal backend for hyprland Description : xdg-desktop-portal backend for hyprland. -------------------------------------------------------------------------------- Update Information: Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3 -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 22 2024 Pavel Solovev - 1.3.3-2 - add missing br * Mon Jul 22 2024 Pavel Solovev - 1.3.3-1 - Update to 1.3.3 * Mon Jul 22 2024 Pavel Solovev - 1.3.2-1 - Update to 1.3.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2300328 - CVE-2024-42029 xdg-desktop-portal-hyprland: OS Command Execution due to Insecure Environment Variable Handling [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2300328 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-295a735fbc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 39 has released xdg-desktop-portal-hyprland 1.3.3 to address OS Command Execution vulnerabilities, ensuring safer updates.. Fedora Security, xdg-desktop-portal, OS Command Fixes, Update Notifications. . Severity: Critical. LinuxSecurity.com Team

Jul 31, 2024 •Critical Fedora