wolfssl-5.7.2-2.fc42
Automatic update for wolfssl-5.7.2-2.fc42.
* Tue Sep 3 2024 Andrew Bauer <zonexpertconsulting@outlook.com> – 5.7.2-2
– RHBZ#2308628 RHBZ#2308629 RHBZ#2308630 RHBZ#2308631 fixed in 5.7.2 release
– fips macro patch no longer needed
nextcloud-29.0.5-3.el9
29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
nextcloud-29.0.5-4.fc39
29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
nextcloud-29.0.5-4.fc40
29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
nextcloud-29.0.5-3.fc41
29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
nextcloud-29.0.5-3.fc42
Automatic update for nextcloud-29.0.5-3.fc42.
* Tue Sep 3 2024 Andrew Bauer <zonexpertconsulting@outlook.com> – 29.0.5-3
– 29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
* Mon Sep 2 2024 Miroslav Suchý <msuchy@redhat.com> – 29.0.5-2
– convert license to SPDX
Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow for arbitrary code execution. Mozilla Firefox is a web browser used to access the Internet. Mozilla Firefox ESR is a version of the web browser intended to be deployed in large organizations. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
It was discovered that Django incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2024-45230)
It was discovered that Django incorrectly handled certain email sending
failures. A remote attacker could possibly use this issue to enumerate
user emails by issuing password reset requests and observing the outcomes.
(CVE-2024-45231)
Civil society and journalists’ organizations in Europe ask the EU to take steps to regulate spyware technologies
The NSA’s “National Cryptographic School Television Catalogue” from 1991 lists about 600 COMSEC and SIGINT training videos.
There are a bunch explaining the operations of various cryptographic equipment, and a few code words I have never heard of before.
