Fedora Linux 8783 Published by

Updated qt5-qtnetworkauth and .NET 8 packages are available for Fedora Linux to address security issues:

Fedora 39 Update: qt5-qtnetworkauth-5.15.13-2.fc39
Fedora 39 Update: dotnet8.0-8.0.105-1.fc39




Fedora 39 Update: qt5-qtnetworkauth-5.15.13-2.fc39


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-3936682805
2024-06-05 08:34:04.450571
--------------------------------------------------------------------------------

Name : qt5-qtnetworkauth
Product : Fedora 39
Version : 5.15.13
Release : 2.fc39
URL : http://www.qt.io
Summary : Qt5 - NetworkAuth component
Description :
Qt5 - NetworkAuth component

--------------------------------------------------------------------------------
Update Information:

Fix CVE-2024-36048
--------------------------------------------------------------------------------
ChangeLog:

* Mon May 27 2024 Jan Grulich [jgrulich@redhat.com] - 5.15.13-2
- QAbstractOAuth: fix data race and poor seeding in generateRandomString
Resolves: CVE-2024-36048
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2282866 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=2282866
[ 2 ] Bug #2282867 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-39]
https://bugzilla.redhat.com/show_bug.cgi?id=2282867
[ 3 ] Bug #2282869 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-40]
https://bugzilla.redhat.com/show_bug.cgi?id=2282869
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-3936682805' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--



Fedora 39 Update: dotnet8.0-8.0.105-1.fc39


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-3acd2ba1d3
2024-06-05 08:34:04.450514
--------------------------------------------------------------------------------

Name : dotnet8.0
Product : Fedora 39
Version : 8.0.105
Release : 1.fc39
URL : https://github.com/dotnet/
Summary : .NET Runtime and SDK
Description :
.NET is a fast, lightweight and modular platform for creating
cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web
applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of
framework libraries, an SDK containing compilers and a 'dotnet'
application to drive everything.

--------------------------------------------------------------------------------
Update Information:

This is the May 2024 release for .NET 8.
This is a security update for .NET 8.
Release notes: https://github.com/dotnet/core/blob/main/release-
notes/8.0/8.0.5/8.0.5.md
--------------------------------------------------------------------------------
ChangeLog:

* Tue May 14 2024 Omair Majid [omajid@redhat.com] - 8.0.105-1
- Update to .NET SDK 8.0.105 and Runtime 8.0.5
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-3acd2ba1d3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--