Category: Advisories

FEDORA-EPEL-2022-c57a51c195 Packages in this update: rxvt-unicode-9.30-2.el7 Update description: Update to 9.30 Strip package back to just be the -terminfo file. This is due to CVE-2022-4170:...

FEDORA-EPEL-2022-e187f1231f Packages in this update: rxvt-unicode-9.30-1.el7 Update description: Update to 9.30 Strip package back to just be the -terminfo file. This is due to CVE-2022-4170:...

Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to...

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to...

The improper Input Validation vulnerability in "�Move folder to Trash� feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects...

FEDORA-2022-6beaa3bd0c Packages in this update: mod_auth_openidc-2.4.12.2-1.fc36 Update description: CVE-2022-23527 mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character Read More

FEDORA-2022-e139408490 Packages in this update: mod_auth_openidc-2.4.12.2-1.fc37 Update description: CVE-2022-23527 mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character Read More

FEDORA-2022-105be2997e Packages in this update: mod_auth_openidc-2.4.12.2-1.fc38 Update description: Automatic update for mod_auth_openidc-2.4.12.2-1.fc38. Changelog * Fri Dec 16 2022 Tomas Halman <thalman@redhat.com> - 2.4.12.2-1 Rebase to...

FEDORA-2022-6aa833b95f Packages in this update: fasterxml-oss-parent-49-2.fc38 jackson-annotations-2.14.1-3.fc38 jackson-bom-2.14.1-1.fc38 jackson-core-2.14.1-1.fc38 jackson-databind-2.14.1-1.fc38 jackson-jaxrs-providers-2.14.1-1.fc38 jackson-modules-base-2.14.1-1.fc38 jackson-parent-2.14-1.fc38 Update description: Rebase Jackson packages to the latest upstream version (2.14.1) Read...

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute...