Category: Advisories

FEDORA-EPEL-2022-e187f1231f Packages in this update: rxvt-unicode-9.30-1.el7 Update description: Update to 9.30 Strip package back to just be the -terminfo file. This is due to CVE-2022-4170:...

Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to...

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to...

The improper Input Validation vulnerability in "�Move folder to Trash� feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects...

FEDORA-2022-6beaa3bd0c Packages in this update: mod_auth_openidc-2.4.12.2-1.fc36 Update description: CVE-2022-23527 mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character Read More

FEDORA-2022-e139408490 Packages in this update: mod_auth_openidc-2.4.12.2-1.fc37 Update description: CVE-2022-23527 mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character Read More

FEDORA-2022-105be2997e Packages in this update: mod_auth_openidc-2.4.12.2-1.fc38 Update description: Automatic update for mod_auth_openidc-2.4.12.2-1.fc38. Changelog * Fri Dec 16 2022 Tomas Halman <thalman@redhat.com> - 2.4.12.2-1 Rebase to...

FEDORA-2022-6aa833b95f Packages in this update: fasterxml-oss-parent-49-2.fc38 jackson-annotations-2.14.1-3.fc38 jackson-bom-2.14.1-1.fc38 jackson-core-2.14.1-1.fc38 jackson-databind-2.14.1-1.fc38 jackson-jaxrs-providers-2.14.1-1.fc38 jackson-modules-base-2.14.1-1.fc38 jackson-parent-2.14-1.fc38 Update description: Rebase Jackson packages to the latest upstream version (2.14.1) Read...

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute...

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. Read More