Category Archives: Advisories

Advisories

python-virtualenv-20.21.1-25.el10_0~bootstrap

Read Time:9 Second

FEDORA-EPEL-2024-34cd7a65de

Packages in this update:

python-virtualenv-20.21.1-25.el10_0~bootstrap

Update description:

Prevent command injection by quoting template strings in activation scripts

Read More

Advisories

USN-7058-1: .NET vulnerabilities

Read Time:45 Second

Brennan Conroy discovered that the .NET Kestrel web server did not
properly handle closing HTTP/3 streams under certain circumstances. An
attacker could possibly use this issue to achieve remote code execution.
This vulnerability only impacted .NET8. (CVE-2024-38229)

It was discovered that .NET components designed to process malicious input
were susceptible to hash flooding attacks. An attacker could possibly use
this issue to cause a denial of service, resulting in a crash.
(CVE-2024-43483)

It was discovered that the .NET System.IO.Packaging namespace did not
properly process SortedList data structures. An attacker could possibly
use this issue to cause a denial of service, resulting in a crash.
(CVE-2024-43484)

It was discovered that .NET did not properly handle the deserialization of
of certain JSON properties. An attacker could possibly use this issue to
cause a denial of service, resulting in a crash. (CVE-2024-43485)

Read More

Advisories

USN-7057-2: WEBrick vulnerability

Read Time:17 Second

USN-7057-1 fixed a vulnerability in WEBrick. This update provides the
corresponding updates for Ubuntu 22.04 LTS.

Original advisory details:

It was discovered that WEBrick incorrectly handled having both a Content-
Length header and a Transfer-Encoding header. A remote attacker could
possibly use this issue to perform a HTTP request smuggling attack.

Read More