Category: Advisories

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote...

FEDORA-2022-8050ab2c35 Packages in this update: krb5-1.20.1-1.fc38 Update description: Automatic update for krb5-1.20.1-1.fc38. Changelog * Wed Nov 23 2022 Julien Rische <jrische@redhat.com> - 1.20.1-1 - New...

FEDORA-2022-142872d895 Packages in this update: mujs-1.3.2-1.fc38 Update description: Automatic update for mujs-1.3.2-1.fc38. Changelog * Thu Dec 1 2022 Alain Vigne <avigne@fedoraproject.org> 1.3.2-1 - upstream release...

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code...

FEDORA-EPEL-2022-058d69433a Packages in this update: snapd-2.57.6-1.el7 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328. Update to 2.56.2 Read More

FEDORA-EPEL-2022-48ffd03f66 Packages in this update: snapd-2.57.6-1.el9 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328. Read More

FEDORA-EPEL-2022-d9f41aade7 Packages in this update: snapd-2.57.6-1.el8 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328. Read More

FEDORA-2022-8268fa6877 Packages in this update: snapd-2.57.6-1.fc36 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328 Read More

FEDORA-2022-a425aea810 Packages in this update: snapd-2.57.6-1.fc37 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328 Read More

The Qualys Research Team discovered that a race condition existed in the snapd snap-confine binary when preparing the private /tmp mount for a snap. A...