dnsx-1.1.5-1.fc40
Automatic update for dnsx-1.1.5-1.fc40.
* Fri Oct 27 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> – 1.1.5-1
– Update to 1.1.5 – Closes rhbz#2169567 rhbz#2178430 rhbz#2163084
Experts highlighted the ways generative AI tools can help security teams, and how to mitigate the risks they pose
Fascinating story of a covert wiretap that was discovered because of an expired TLS certificate:
The suspected man-in-the-middle attack was identified when the administrator of jabber.ru, the largest Russian XMPP service, received a notification that one of the servers’ certificates had expired.
However, jabber.ru found no expired certificates on the server, as explained in a blog post by ValdikSS, a pseudonymous anti-censorship researcher based in Russia who collaborated on the investigation.
The expired certificate was instead discovered on a single port being used by the service to establish an encrypted Transport Layer Security (TLS) connection with users. Before it had expired, it would have allowed someone to decrypt the traffic being exchanged over the service.
Posted by Egidio Romano on Oct 27
————————————————————–
phpFox <= 4.8.13 (redirect) PHP Object Injection Vulnerability
————————————————————–
[-] Software Link:
[-] Affected Versions:
Version 4.8.13 and prior versions.
[-] Vulnerability Description:
User input passed through the “url” request parameter to the
/core/redirect route is not properly sanitized…
chromium-118.0.5993.117-1.fc39
update to 118.0.5993.117. Security release for CVE-2023-5472
Update to 118.0.5993.88
Update to 118.0.5993.70. Include following security fixes:
– CVE-2023-5218: Use after free in Site Isolation.
– CVE-2023-5487: Inappropriate implementation in Fullscreen.
– CVE-2023-5484: Inappropriate implementation in Navigation.
– CVE-2023-5475: Inappropriate implementation in DevTools.
– CVE-2023-5483: Inappropriate implementation in Intents.
– CVE-2023-5481: Inappropriate implementation in Downloads.
– CVE-2023-5476: Use after free in Blink History.
– CVE-2023-5474: Heap buffer overflow in PDF.
– CVE-2023-5479: Inappropriate implementation in Extensions API.
– CVE-2023-5485: Inappropriate implementation in Autofill.
– CVE-2023-5478: Inappropriate implementation in Autofill.
– CVE-2023-5477: Inappropriate implementation in Installer.
– CVE-2023-5486: Inappropriate implementation in Input.
– CVE-2023-5473: Use after free in Cast.
update to 117.0.5938.149.
chromium-118.0.5993.117-1.el9
update to 118.0.5993.117. Security release for CVE-2023-5472
Update to 118.0.5993.88
chromium-118.0.5993.117-1.el7
update to 118.0.5993.117. Security release for CVE-2023-5472
Update to 118.0.5993.88
