Read Time:8 Second
FEDORA-EPEL-2024-375a09fd04
Packages in this update:
cobbler3.2-3.2.3-1.el8
Update description:
Update to 3.2.3 – CVE-2024-47533
Category Archives: Advisories
cobbler3.2-3.2.3-1.el9
Read Time:8 Second
FEDORA-EPEL-2024-1fa5fbde17
Packages in this update:
cobbler3.2-3.2.3-1.el9
Update description:
Update to 3.2.3 – CVE-2024-47533
cobbler-3.3.7-1.el9
Read Time:7 Second
FEDORA-EPEL-2024-97fdc539e2
Packages in this update:
cobbler-3.3.7-1.el9
Update description:
Update to 3.3.7 – CVE-2024-47533
cobbler-3.3.7-1.fc40
Read Time:7 Second
FEDORA-2024-76d8603c78
Packages in this update:
cobbler-3.3.7-1.fc40
Update description:
Update to 3.3.7 – CVE-2024-47533
cobbler-3.3.7-1.fc39
Read Time:7 Second
FEDORA-2024-a6f0ade1d3
Packages in this update:
cobbler-3.3.7-1.fc39
Update description:
Update to 3.3.7 – CVE-2024-47533
cobbler-3.3.7-1.fc41
Read Time:7 Second
FEDORA-2024-4f04edd1e7
Packages in this update:
cobbler-3.3.7-1.fc41
Update description:
Update to 3.3.7 – CVE-2024-47533
GLSA 202411-09: Perl: Multiple Vulnerabilities
GLSA 202411-08: X.Org X server, XWayland: Multiple Vulnerabilities
GLSA 202411-07: Pillow: Arbitrary code execution
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Read Time:43 Second
What is the Vulnerability?Microsoft Windows contains an NTLMv2 hash spoofing vulnerability (CVE-2024-43451) that could result in disclosing a user’s NTLMv2 hash to an attacker via a file open operation. The attacker can leverage this hash to impersonate that user with minimal interaction from the victim. This vulnerability (CVE-2024-43451) has been added to CISA’s Known Exploited Vulnerabilities Catalog (KEV) list on November 12, 2024.What is the recommended Mitigation?Microsoft has released a security update to fix the vulnerability on November 12, 2024. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43451 What FortiGuard Coverage is available?FortiGuard recommends users to apply the fix provided by the vendor as soon as possible.FortiGuard IPS protection is available, and Fortinet customers remain protected through it.The FortiGuard Incident Response team can be engaged to help with any suspected compromise.