Fedora 40 Update: thunderbird-128.5.0-1.fc40
Fedora 40 Update: webkitgtk-2.46.4-1.fc40
Fedora 40 Update: tuned-2.24.1-1.fc40
[SECURITY] Fedora 40 Update: thunderbird-128.5.0-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-515180fdb3
2024-12-05 01:32:53.503540+00:00
--------------------------------------------------------------------------------
Name : thunderbird
Product : Fedora 40
Version : 128.5.0
Release : 1.fc40
URL : http://www.mozilla.org/projects/thunderbird/
Summary : Mozilla Thunderbird mail/newsgroup client
Description :
Mozilla Thunderbird is a standalone mail and newsgroup client.
--------------------------------------------------------------------------------
Update Information:
Update to 128.5.0
https://www.thunderbird.net/en-US/thunderbird/128.5.0esr/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2024-68/
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 27 2024 Eike Rathke [erack@redhat.com] - 128.5.0-1
- Update to 128.5.0
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-515180fdb3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
[SECURITY] Fedora 40 Update: webkitgtk-2.46.4-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-4014fa4ecc
2024-12-05 01:32:53.503546+00:00
--------------------------------------------------------------------------------
Name : webkitgtk
Product : Fedora 40
Version : 2.46.4
Release : 1.fc40
URL : https://www.webkitgtk.org/
Summary : GTK web content engine library
Description :
WebKitGTK is the port of the WebKit web rendering engine to the
GTK platform.
--------------------------------------------------------------------------------
Update Information:
Improve memory consumption and performance of Canvas getImageData.
Fix preserve-3D intersection rendering.
Fix video dimensions since GStreamer 1.24.9.
Fix the HTTP-based remote Web Inspector not loading in Chromium.
Fix content filters not working on about:blank iframes.
Fix several crashes and rendering issues.
Fix CVE-2024-44308, CVE-2024-44309
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 27 2024 Michael Catanzaro [mcatanzaro@redhat.com] - 2.46.4-1
- Update to 2.46.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2327930 - CVE-2024-44309 webkitgtk: data isolation bypass vulnerability [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2327930
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-4014fa4ecc' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--
[SECURITY] Fedora 40 Update: tuned-2.24.1-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-0cab161b46
2024-12-05 01:32:53.503309+00:00
--------------------------------------------------------------------------------
Name : tuned
Product : Fedora 40
Version : 2.24.1
Release : 1.fc40
URL : http://www.tuned-project.org/
Summary : A dynamic adaptive system tuning daemon
Description :
The tuned package contains a daemon that tunes system settings dynamically.
It does so by monitoring the usage of several system components periodically.
Based on that information components will then be put into lower or higher
power saving modes to adapt to the current usage. Currently only ethernet
network and ATA harddisk devices are implemented.
--------------------------------------------------------------------------------
Update Information:
This is new version that fixes CVE-2024-52336 and CVE-2024-52337 which allowed
privileged execution by non-privileged active local user and log injection.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 26 2024 Jaroslav Škarvada - 2.24.1-1
- new release
- fixed privileged execution of arbitrary scripts by active local user
resolves: CVE-2024-52336
- added sanity checks for API methods parameters
resolves: CVE-2024-52337
- tuned-ppd: fixed controller init to correctly set _on_battery
* Tue Nov 5 2024 Jaroslav Škarvada - 2.24.0-6
- Added workaround for systemd-boot
Resolves: rhbz#2323514
* Mon Oct 28 2024 Neal Gompa - 2.24.0-5
- Bump obsoletes of ppd for tuned-ppd to fix upgrades
* Mon Oct 14 2024 Pavol Žáčik - 2.24.0-4
- Support the new UPower PPD namespace in tuned-ppd
* Wed Oct 9 2024 Jaroslav Škarvada - 2.24.0-3
- Obsolete power-profiles-daemon, patch by Kate Hsuan
Resolves: rhbz#2293628
* Thu Aug 15 2024 Adam Williamson - 2.24.0-2
- Backport PR #672 to fix a crash on startup
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-0cab161b46' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
