FEDORA-2023-c3c8cc5f8b
Packages in this update:
matrix-synapse-1.94.0-2.fc38
Update description:
Update to v1.94.0 (CVE-2023-45129)
matrix-synapse-1.94.0-2.fc38
Update to v1.94.0 (CVE-2023-45129)
matrix-synapse-1.94.0-2.fc39
Update to v1.94.0 (CVE-2023-45129)
The flaw impacts curl and libcurl, causing SOCKS5 proxy handshake to suffer heap buffer overflow
USN-6429-1 fixed a vulnerability in curl. This update provides
the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS
and Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that curl incorrectly handled cookies when an application
duplicated certain handles. A local attacker could possibly create a cookie
file and inject arbitrary cookies into subsequent connections.
(CVE-2023-38546)
The recommendations are designed to reduce the life-safety implications of cyber incidents in ICS environments
Facebook’s official UK account was compromised on Friday evening by a cricket lover, who was seemingly just as surprised as the rest of us…
The figures from the latest Critical Start report also suggest 30% come from phishing campaigns
samba-4.17.12-1.fc37
Update to 4.17.12 – Security fixes for CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670
samba-4.18.8-1.fc38
Update to version 4.18.8 – Security fixes for CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670
Graham Cluley Security News is sponsored this week by the folks at WALLIX. Thanks to the great team there for their support! In the rapidly evolving landscape of Industry 4.0, marked by rapid innovation and unparalleled connectivity, safeguarding your critical assets is non-negotiable. As industries like Manufacturing, Utilities, Energy, and Transportation undergo profound digital transformations, … Continue reading “Securing the future of Industry 4.0: WALLIX white paper reveals key strategies – get your copy today!”