This update includes httpd version 2.4.59, fixing various security issues and bugs. See https://downloads.apache.org/httpd/CHANGES_2.4.59 for complete details of the changes in this release.

Source: Fedora 40: httpd 2024-937be154d8 Security Advisory Updates

New upstream release (125.0) New upstream release (124.0.2)

Source: Fedora 40: firefox 2024-c6a1d4e0ec Security Advisory Updates

update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use after free in Dawn update to 123.0.6312.105

Source: Fedora 40: chromium 2024-4d2d73ab31 Security Advisory Updates

Update llhttp to 9.2.1, fixing CVE-2024-27982. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.

Source: Fedora 40: python-aiohttp 2024-2f15e6e876 Security Advisory Updates

2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @RafaelGSS This is a security release. Notable Changes CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows

Source: Fedora 40: nodejs18 2024-2c52524694 Security Advisory Updates

Update to 0.29 - Fixes 'clipbrowse command execution with multi-line clipboard text including "| sh"'

Source: Fedora 40: perl-Clipboard 2024-2843f37353 Security Advisory Updates

PHP version 8.3.6 (11 Apr 2024) Core: Fixed GH-13569 (GC buffer unnecessarily grows up to GC_MAX_BUF_SIZE when scanning WeakMaps). (Arnaud) Fixed bug GH-13612 (Corrupted memory in destructor with weak references).

Source: Fedora 40: php 2024-5e8ae0def0 Security Advisory Updates

Security fix for CVE-2024-24576 (Windows command injection)

Source: Fedora 40: rust 2024-ab4573fb3b Security Advisory Updates

Update to 0.9.0; fix rhbz#2274045 and rhbz#2266791; Security fix for CVE-2024-25713

Source: Fedora 40: yyjson 2024-8c48a81cb9 Security Advisory Updates

New version 4.2.4. Includes a fix for CVE-2024-2955

Source: Fedora 40: wireshark 2024-b96e2c3cc2 Security Advisory Updates

Update to latest upstream release (closes rhbz#2261550, closes rhbz#2245361)

Source: Fedora 40: python-cbor2 2024-619ac47ce9 Security Advisory Updates

This update includes several bug fixes from the upstream glibc release branch, including the fix for a buffer overflow in iconv when converting to the ISO-2022-CN-EXT character set (CVE-2024-2961, RHBZ#2275855).

Source: Fedora 40: glibc 2024-eafbf519ec Security Advisory Updates

Rebase gnutls to version 3.8.5 Rebase gnutls to version 3.8.4 - contains fixes for CVE-2024-28834 and CVE-2024-28835 Automatic update for gnutls-3.8.3-3.fc40.

Source: Fedora 40: gnutls 2024-f69ecb0511 Security Advisory Updates

Update to version 0.3.26. Addresses RUSTSEC-2024-0332.

Source: Fedora 40: rust-h2 2024-f99ee6bf95 Security Advisory Updates

fix Usage of disabled protocol (CVE-2024-2004) fix HTTP/2 push headers memory-leak (CVE-2024-2398)

Source: Fedora 40: curl 2024-a09456b7a9 Security Advisory Updates

fix CONTINUATION frames DoS (CVE-2024-28182)

Source: Fedora 40: nghttp2 2024-da8cdd8414 Security Advisory Updates

Update to upstream 9.2.4, resolves CVE-2024-31309 (CONTINUATION frames DoS)

Source: Fedora 40: trafficserver 2024-111a8a624b Security Advisory Updates

Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.

Source: Fedora 40: editorconfig 2024-86d287b270 Security Advisory Updates

Update to latest upstream release.

Source: Fedora 40: libdwarf 2024-60627905b6 Security Advisory Updates

Update to 2.28.8 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8

Source: Fedora 40: mbedtls 2024-a23b5f0783 Security Advisory Updates

In a recent interview, Olympian Simone Biles opens up about the viral video of her husband saying that he "didn't know who she was" when they first matched on a celebrity dating app.

Source: Simone Biles responds to backlash a...usband's viral interview: 'I broke down'

Las Vegas Aces star A’ja Wilson is setting the record straight when it comes to her feelings towards Indiana Fever rookie and WNBA phenom Caitlin Clark.

Source: WNBA champion A’ja Wilson dismiss... Caitlin Clark: 'I have no reason to be'

Max Homa says a woman paid for his Chick-fil-A meal this week on his way to the RBC Heritage because he’s her son’s favorite golfer.

Source: Max Homa says woman paid for his Ch...he’s her son’s ‘favorite golfer’

[link] [7 comments]

Source: [url=https://www.fark.com/comments/13226654?utm_source=feed&utm_medium=comments&utm_campaign=fark]I can't believe the news today. Fifteen former soldiers investigated for perjury over Bloody Sunday will not face any charges. I can't close my eyes and make it go away [Interesting][/url]

[link] [32 comments]

Source: [url=https://www.fark.com/comments/13226678?utm_source=feed&utm_medium=comments&utm_campaign=fark]So, apparently, we've given AI control of a fully armed Air Force fighter jet. I mean, what's the worst that could happen? [Scary][/url]