xwayland 24.1.6 CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-065909f8c6 2025-03-15 00:23:42.170070+00:00 -------------------------------------------------------------------------------- Name : xorg-x11-server-Xwayland Product : Fedora 42 Version : 24.1.6 Release : 1.fc42 URL : https://www.x.org/wiki/ Summary : Xwayland Description : Xwayland is an X server for running X clients under Wayland. -------------------------------------------------------------------------------- Update Information: xwayland 24.1.6 CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 26 2025 Olivier Fourdan - 24.1.6-1 - xwayland 24.1.6 (#2343992) - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2343992 - xorg-x11-server-Xwayland-24.1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2343992 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-065909f8c6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Update to Jetty 9.4.40 (fixes multiple CVEs). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-35f06984d7 2021-04-29 00:56:23.403143 --------------------------------------------------------------------------------Name : jetty Product : Fedora 33 Version : 9.4.40 Release : 1.fc33 URL : https://jetty.org/ Summary : Java Webserver and Servlet Container Description : Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server (like Apache) in order to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate server/container solutions, this means that your web server and web application run in the same process, without interconnection overheads and complications. Furthermore, as a pure java component, Jetty can be simply included in your application for demonstration, distribution or deployment. Jetty is available on all Java supported platforms. --------------------------------------------------------------------------------Update Information: Update to Jetty 9.4.40 (fixes multiple CVEs) --------------------------------------------------------------------------------ChangeLog: * Wed Apr 21 2021 Alexander Kurtakov 9.4.40-1 - Update to Jetty 9.4.40 (fixes multiple CVEs) --------------------------------------------------------------------------------References: [ 1 ] Bug #1945710 - CVE-2021-28163 jetty: Symlink directory exposes webapp directory contents https://bugzilla.redhat.com/show_bug.cgi?id=1945710 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-35f06984d7' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
An update for ose-cluster-svcat-apiserver-operator-container is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: OpenShift Container Platform 4.5.11 ose-cluster-svcat-apiserver-operator-container security update Advisory ID: RHSA-2020:3780-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2020:3780 Issue date: 2020-09-21 CVE Names: CVE-2020-14040 ==================================================================== 1. Summary: An update for ose-cluster-svcat-apiserver-operator-container is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. Security Fix(es): * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: For OpenShift Container Platform 4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errataupdate: https://docs.redhat.com/en/documentation/openshift_container_platform/4.5/html/release_notes/ocp-4-5-release-notes Details on how to access this content are available at - -cli.html. 4. Bugs fixed (https://bugzilla.redhat.com/): 1853652 - CVE-2020-14040 golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash 5. References: https://access.redhat.com/security/cve/CVE-2020-14040 https://access.redhat.com/security/updates/classification#moderate 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX2kEctzjgjWX9erEAQiLMxAAoCX1w6Z1+j/qc6LSempNoviVrFaMCPAH sTX7q5LyIeUXKBXgtkMLIt6hycRO0pbwGf8C9Cdga1LYWJ70ToOWzAzm+GG1KFyg 9S5h2aXRYkyKir12XsVcQsAdP/WK66PDkYNYelri8IvtYoefk/NOrgjFtYuHCL0z YOK/KlbUGEvUpnyKdSnc2miv/3HaWeSg6LjbiEC3nPllrl8XwOYSEu2vHITbbK4f vB5MrfiPC2lwrXyWbhy8OdNbdbZpkscwgAbHWf96pjjTu1H9EWsTohXyBC7mrs0F gUH5AN81207zs4V/qeSvOmY/jAZsGlqLUCDYezyy5uxL2qiBMEMwlw0LlwSKMGBs Stiuru9J9mn8Iw+Gm7ghrTQPetoK00nulluMoA1yUCjSVrfC8o9sEdnThqyccX1x 9y7k6ShC4dUmzNXVUFxk8TXhdQzizzOJucTvzuvhIubN4AyEMb4khf6Sdvn8vry4 cnDIJZ97o5OkimJt9evp0AocOjLi5/f5FDV0nJsQrefDGLNTE065iSWcf3wugxs1 F/etrEmOlLnCs2US0iDgcDFWxT6Qrb7I10pVmp1d0ch+HwVZnsawKFwx9d7CXniu n+2yRVS6FkZ5ZQ3/+YxDK0fw8Iew4B0ZcowWiCuYMQa/qW0d/p1+/BnAk1tfBs3n x5Oh7SyN3dg=Fh2a -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.