Alistair Coles discovered that the s3api middleware of Swift, a distributed virtual object store, was susceptible to denial of service. The oldstable distribution (bookworm) is not affected. For the stable distribution (trixie), this problem has been fixed in version 2.35.1-0+deb13u2.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6314-1
The 6.10.7 stable kernel update contains a number of important fixes across the tree.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-8bda3bcaea 2024-09-05 04:06:20.352654 -------------------------------------------------------------------------------- Name : kernel Product : Fedora 40 Version : 6.10.7 Release : 200.fc40 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package -------------------------------------------------------------------------------- Update Information: The 6.10.7 stable kernel update contains a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Thu Aug 29 2024 Augusto Caringi [6.10.7-0] - KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHPKEYR in sync (Shivaprasad G Bhat) - KVM: PPC: Book3S HV: Add one-reg interface for HASHPKEYR register (Shivaprasad G Bhat) - KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHKEYR in sync (Shivaprasad G Bhat) - KVM: PPC: Book3S HV: Add one-reg interface for HASHKEYR register (Shivaprasad G Bhat) - KVM: PPC: Book3S HV nestedv2: Keep nested guest DEXCR in sync (Shivaprasad G Bhat) - KVM: PPC: Book3S HV: Add one-reg interface for DEXCR register (Shivaprasad G Bhat) - Revert the F39 commits which should not have pushed (Justin M. Forbes) - Turn off libbpf dynamic for perf on F39 (Justin M. Forbes) - Revert "cpupower: Bump soname version" (Justin M. Forbes) - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes) - Linux v6.10.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2308100 - CVE-2024-43884 kernel: Bluetooth: MGMT: Add error handling to pair_device() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2308100 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-8bda3bcaea' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
A buffer overflow was discovered in the MMS module of the VLC media player. For the oldstable distribution (bullseye), this problem has been fixed . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5707-1
The 5.17.6 stable kernel updates contain a number of important fixes across the tree.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-a0f65397a3 2022-05-11 01:33:42.866923 --------------------------------------------------------------------------------Name : kernel-headers Product : Fedora 34 Version : 5.17.6 Release : 100.fc34 URL : https://www.kernel.org/ Summary : Header files for the Linux kernel for use by glibc Description : Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package. --------------------------------------------------------------------------------Update Information: The 5.17.6 stable kernel updates contain a number of important fixes across the tree. --------------------------------------------------------------------------------ChangeLog: * Mon May 9 2022 Justin M. Forbes - 5.17.6-100 - Linux v5.17.6 --------------------------------------------------------------------------------References: [ 1 ] Bug #2080330 - kernel: Concurrency use-after-free in floppy's raw_cmd https://bugzilla.redhat.com/show_bug.cgi?id=2080330 [ 2 ] Bug #2080940 - CVE-2022-29968 kernel: io_rw_init_file in fs/io_uring.c lacks initialization of kiocb-> private https://bugzilla.redhat.com/show_bug.cgi?id=2080940 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-a0f65397a3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keysused by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Two security issues have been found in the Mozilla Firefox web browser, which result in the execution of arbitrary code. For the oldstable distribution (buster), these problems have been fixed . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5090-1
The 5.16.5 stable kernel rebase contains new features, additional hardware support, and a number of important fixes across the tree.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-667a5c6e26 2022-02-06 02:01:15.080487 --------------------------------------------------------------------------------Name : kernel Product : Fedora 34 Version : 5.16.5 Release : 100.fc34 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package --------------------------------------------------------------------------------Update Information: The 5.16.5 stable kernel rebase contains new features, additional hardware support, and a number of important fixes across the tree. --------------------------------------------------------------------------------ChangeLog: * Tue Feb 1 2022 Justin M. Forbes [5.16.5-0] - Linux v5.16.5 rebase - ath11k: add support for WCN6855 hw2.1 (Baochen Qiang) --------------------------------------------------------------------------------References: [ 1 ] Bug #2048492 - CVE-2022-24122 kernel: use-after-free and privilege escalation in kernel/ucount.c when unprivileged user namespaces are enabled https://bugzilla.redhat.com/show_bug.cgi?id=2048492 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-667a5c6e26' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list
The update for prosody released as DSA 5047 introduced a memory leak. Updated prosody packages are now available to correct this issue. For the oldstable distribution (buster), this problem has been fixed . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5047-2
The 5.11.7 stable kernel update contains a number if important fixes across the tree. ---- The 5.10.23 stable kernel update contains a number of important fixes across the tree.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-14f6642aa6 2021-03-21 01:20:55.569944 --------------------------------------------------------------------------------Name : kernel Product : Fedora 32 Version : 5.11.7 Release : 100.fc32 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package --------------------------------------------------------------------------------Update Information: The 5.11.7 stable kernel update contains a number if important fixes across the tree. ---- The 5.10.23 stable kernel update contains a number of important fixes across the tree. --------------------------------------------------------------------------------ChangeLog: * Wed Mar 17 2021 Justin M. Forbes [5.11.7-100] - This is a released kernel branch (Justin M. Forbes) * Wed Mar 17 2021 Justin M. Forbes [5.11.7-9] - Disable weak-modules again rhbz 1828455 (Justin M. Forbes) - More config updates for gcc-plugin turn off (Justin M. Forbes) - fedora: the PCH_CAN driver is x86-32 only (Peter Robinson) - common: disable legacy CAN device support (Peter Robinson) - common: Enable Microchip MCP251x/MCP251xFD CAN controllers (Peter Robinson) - common: Bosch MCAN support for Intel Elkhart Lake (Peter Robinson) - common: enable CAN_PEAK_PCIEFD PCI-E driver (Peter Robinson) - common: disable CAN_PEAK_PCIEC PCAN-ExpressCard (Peter Robinson) - common: enable common CAN layer 2 protocols (Peter Robinson) - ark: disable CAN_LEDS option (Peter Robinson) * Thu Mar 11 2021 Justin M. Forbes [5.11.6-8] - Forgot to turn this back on when disabling gcc plugins (Justin M. Forbes) - Fedora: Turn on SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC option (Hans de Goede) - common: enable RTC_SYSTOHC tosupplement update_persistent_clock64 (Peter Robinson) - Disable structleak gcc-plugins until a solution is upstream (Justin M. Forbes) - mmc: sdhci-iproc: Add ACPI bindings for the rpi (Jeremy Linton) - ACPI: platform: Hide ACPI_PLATFORM_PROFILE option (Maximilian Luz) - platform/x86: ideapad-laptop: DYTC Platform profile support (Jiaxun Yang) - platform/x86: thinkpad_acpi: Replace ifdef CONFIG_ACPI_PLATFORM_PROFILE with depends on (Hans de Goede) - platform/x86: thinkpad_acpi: Add platform profile support (Mark Pearson) - platform/x86: thinkpad_acpi: fixed warning and incorporated review comments (Nitin Joshi) - platform/x86: thinkpad_acpi: Don't register keyboard_lang unnecessarily (Hans de Goede) - platform/x86: thinkpad_acpi: set keyboard language (Nitin Joshi) - ACPI: platform-profile: Fix possible deadlock in platform_profile_remove() (Hans de Goede) - ACPI: platform-profile: Introduce object pointers to callbacks (Jiaxun Yang) - ACPI: platform-profile: Drop const qualifier for cur_profile (Jiaxun Yang) - ACPI: platform: Add platform profile support (Mark Pearson) - Documentation: Add documentation for new platform_profile sysfs attribute (Mark Pearson) --------------------------------------------------------------------------------References: [ 1 ] Bug #1939164 - CVE-2021-28375 kernel: fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages https://bugzilla.redhat.com/show_bug.cgi?id=1939164 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-14f6642aa6' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.