Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 39: FEDORA-2024-07c811c7b3 urgent: golang date management library

Security fix for CVE-2023-39325. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-07c811c7a5 2024-01-19 02:40:58.995881 -------------------------------------------------------------------------------- Name : golang-github-facebook-time Product : Fedora 39 Version : 0^20240110git1649917 Release : 1.fc39 URL : https://github.com/facebook/time Summary : Meta's Time libraries Description : Meta's Time libraries. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-39325 -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 10 2024 Michel Lind - 0^20240110git1649917-1 - Allow setting custom API timeouts (PR#318) - Enforce we are building against golang.org/x/net > = 0.17.0 for CVE-2023-39325 - Use SPDX license identifier - Backfill correct release tags in the changelog * Wed Jan 10 2024 Oleg Obleukhov - 0-0.16.20240110gitd1456d1 - Rebuild latest to include Calnex changes such as sptp and --save * Fri Oct 6 2023 Oleg Obleukhov - 0-0.15.20231006git599359b - Rebuild latest * Wed Oct 4 2023 Oleg Obleukhov - 0-0.14.20231004gite5c45cf - Add sptp package build and rebase on new commit -------------------------------------------------------------------------------- References: [ 1 ] Bug #2248209 - golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) https://bugzilla.redhat.com/show_bug.cgi?id=2248209 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-07c811c7a5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPGkey. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . An essential update for Fedora 39 resolves CVE-2023-39325 affecting the golang time library, offering comprehensive details on the enhancements made.. Fedora 39 security advisory,golang time library,critical updates. . Severity: Critical. LinuxSecurity.com Team

Jan 19, 2024 •Critical Fedora