Fedora Linux 8706 Published by

The following two security updates have been released for Fedora Linux 39:

[SECURITY] Fedora 39 Update: frr-8.5.5-1.fc39
[SECURITY] Fedora 39 Update: python-setuptools-67.7.2-8.fc39




[SECURITY] Fedora 39 Update: frr-8.5.5-1.fc39


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-0c063be1cc
2024-08-11 03:29:03.062220
--------------------------------------------------------------------------------

Name : frr
Product : Fedora 39
Version : 8.5.5
Release : 1.fc39
URL : http://www.frrouting.org
Summary : Routing daemon
Description :
FRRouting is free software that manages TCP/IP based routing protocols. It takes
a multi-server and multi-threaded approach to resolve the current complexity
of the Internet.

FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR,
EIGRP and BFD.

FRRouting is a fork of Quagga.

--------------------------------------------------------------------------------
Update Information:

New version 8.5.5
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jul 31 2024 Michal Ruprich [mruprich@redhat.com] - 8.5.5-1
- New version 8.5.5
* Wed Jan 3 2024 Michal Ruprich [mruprich@redhat.com] - 8.5.4-1
- New version 8.5.4
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2273983 - CVE-2024-31948 frr: bgpd daemon crash [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2273983
[ 2 ] Bug #2273996 - CVE-2024-31950 frr: buffer overflow and daemon crash in ospf_te_parse_ri [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2273996
[ 3 ] Bug #2274000 - CVE-2024-31951 frr: buffer overflow [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2274000
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-0c063be1cc' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--



[SECURITY] Fedora 39 Update: python-setuptools-67.7.2-8.fc39


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-9ed182a5d3
2024-08-11 03:29:03.062191
--------------------------------------------------------------------------------

Name : python-setuptools
Product : Fedora 39
Version : 67.7.2
Release : 8.fc39
URL : https://pypi.python.org/pypi/setuptools
Summary : Easily build and distribute Python packages
Description :
Setuptools is a collection of enhancements to the Python distutils that allow
you to more easily build and distribute Python packages, especially ones that
have dependencies on other packages.

This package also contains the runtime components of setuptools, necessary to
execute the software that requires pkg_resources.

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2024-6345.
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jul 26 2024 Lumír Balhar - 67.7.2-8
- Security fix for CVE-2024-6345
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2297771 - CVE-2024-6345 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools
https://bugzilla.redhat.com/show_bug.cgi?id=2297771
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-9ed182a5d3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------