FEDORA-2023-3c4a525dcc
Packages in this update:
mbedtls-2.28.2-1.fc36
Update description:
Update to 2.28.2
Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2
mbedtls-2.28.2-1.fc36
Update to 2.28.2
Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2
cacti-1.2.23-1.el9
cacti-spine-1.2.23-1.el9
Update to 1.2.23
CVE-46169
Release notes: https://www.cacti.net/info/changelog/1.2.23
cacti-1.2.23-1.el8
cacti-spine-1.2.23-1.el8
Update to 1.2.23
CVE-46169
Release notes: https://www.cacti.net/info/changelog/1.2.23
cacti-1.2.23-1.el7
cacti-spine-1.2.23-1.el7
Update to 1.2.23
CVE-46169
Release notes: https://www.cacti.net/info/changelog/1.2.23
cacti-1.2.23-1.fc37
cacti-spine-1.2.23-1.fc37
Update to 1.2.23
CVE-46169
Release notes: https://www.cacti.net/info/changelog/1.2.23
cacti-1.2.23-1.fc36
cacti-spine-1.2.23-1.fc36
Update to 1.2.23
CVE-46169
Release notes: https://www.cacti.net/info/changelog/1.2.23
It was discovered that FreeRADIUS incorrectly handled multiple EAP-pwd
handshakes. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-17185)
Shane Guan discovered that FreeRADIUS incorrectly handled memory when
checking unknown SIM option sent by EAP-SIM supplicant. An attacker could
possibly use this issue to cause a denial of service on the server. This
issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04
LTS. (CVE-2022-41860)
It was discovered that FreeRADIUS incorrectly handled memory when
processing certain abinary attributes. An attacker could possibly use this
issue to cause a denial of service on the server. (CVE-2022-41861)
A vulnerability, which was classified as problematic, has been found in kkokko NeoXplora. Affected by this issue is some unknown functionality of the component Trainer Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dce1aecd6ee050a29f953ffd8f02f21c7c13f1e6. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217352.
A vulnerability classified as critical was found in gesellix titlelink. Affected by this vulnerability is an unknown functionality of the file plugin_content_title.php. The manipulation of the argument phrase leads to sql injection. The name of the patch is b4604e523853965fa981a4e79aef4b554a535db0. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217351.
postgresql-jdbc-42.4.3-1.fc37
Rebase to 42.4.3 with fix of CVE-2022-41946.