Category: Advisories

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code...

FEDORA-EPEL-2022-058d69433a Packages in this update: snapd-2.57.6-1.el7 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328. Update to 2.56.2 Read More

FEDORA-EPEL-2022-48ffd03f66 Packages in this update: snapd-2.57.6-1.el9 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328. Read More

FEDORA-EPEL-2022-d9f41aade7 Packages in this update: snapd-2.57.6-1.el8 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328. Read More

FEDORA-2022-8268fa6877 Packages in this update: snapd-2.57.6-1.fc36 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328 Read More

FEDORA-2022-a425aea810 Packages in this update: snapd-2.57.6-1.fc37 Update description: Update to the latest upstream release 2.57.6. Includes fixes for CVE 2022-3328 Read More

The Qualys Research Team discovered that a race condition existed in the snapd snap-confine binary when preparing the private /tmp mount for a snap. A...

FortiGuard Labs is aware of a report that a new ransomware strain named "RansomBoggs" was deployed to multiple unnamed organizations in Ukraine. The ransomware encrypts...

FortiGuard Labs is aware of a report that a new infostealer named "Aurora" is being offered for sale on the darkweb and Telegram. The infostealer...

The Qualys Research Team discovered a race condition in the snapd-confine binary which could result in local privilege escalation. Read More