This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
This vulnerability allows local attackers to disclose sensitive information on Microsoft Azure. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
libX11-1.8.6-1.fc38
libX11 1.8.6 (CVE-2023-3138)
Several vulnerabilities have been discovered in the OpenJDK Java runtime,
which may result in denial of service, information disclosure or bypass
of sandbox restrictions.
Xu Biang discovered that missing input sanitising in Sofia-SIP, a SIP
User-Agent library could result in denial of service.
dotnet7.0-7.0.107-1.fc37
This is the June 2023 monthly update for .NET 7. It includes fixes for several CVEs.
Release Notes:
– Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.7/7.0.7.md
– SDK: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.7/7.0.107.md
dotnet7.0-7.0.107-1.fc38
This is the June 2023 monthly update for .NET 7. It includes fixes for several CVEs.
Release Notes:
– Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.7/7.0.7.md
– SDK: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.7/7.0.107.md
dotnet6.0-6.0.118-1.fc37
This is the June 2023 monthly update for .NET 6. It includes fixes for several CVEs.
Release Notes:
– Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.18.md
– SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.118.md
dotnet6.0-6.0.118-1.fc38
This is the June 2023 monthly update for .NET 6. It includes fixes for several CVEs.
Release Notes:
– Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.18.md
– SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.18/6.0.118.md
It was discovered that GNU SASL’s GSSAPI server could make an
out-of-bounds reads if given specially crafted GSS-API authentication
data. A remote attacker could possibly use this issue to cause a
denial of service or to expose sensitive information.
