Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 40 - FEDORA-2024-9bf3ff4133 Critical: qt6-qtbase CVE-2024-39936

Fix CVE-2024-39936.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-9bf3ff4133 2024-07-11 01:14:50.363603 -------------------------------------------------------------------------------- Name : qt6-qtbase Product : Fedora 40 Version : 6.7.2 Release : 3.fc40 URL : https://contribute.qt-project.org/ Summary : Qt6 - QtBase components Description : Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling. -------------------------------------------------------------------------------- Update Information: Fix CVE-2024-39936. -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 8 2024 Jan Grulich - 6.7.2-3 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: CVE-2024-39936 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2295882 - CVE-2024-39936 qt6-qtbase: Delay any communication until encrypted() can be responded to [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2295882 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-9bf3ff4133' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. FedoraCode of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . The recent update for Fedora 40 includes a critical patch addressing CVE-2024-39936 in qt6-qtbase, enhancing the overall security of network operations.. Fedora Security Advisory, qt6-qtbase Update, CVE Fixes, Application Toolkit Security. . Severity: Critical. LinuxSecurity.com Team

Jul 11, 2024 •Critical Fedora