Category Archives: Advisories

DSA-5253 chromium – security update

October 13, 2022

Read Time:7 Second

Multiple security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.

Advisories

pypy3.9-7.3.9-4.3.9.fc38

October 12, 2022

Read Time:17 Second

FEDORA-2022-7936d4cf83

Packages in this update:

pypy3.9-7.3.9-4.3.9.fc38

Update description:

Automatic update for pypy3.9-7.3.9-4.3.9.fc38.

Changelog

* Mon Oct 10 2022 Lumír Balhar <lbalhar@redhat.com> – 7.3.9-4.3.9
– Backport fix for CVE-2021-28861
Resolves: rhbz#2120789

Advisories

pypy3.8-7.3.9-5.3.8.fc37

October 12, 2022

Read Time:7 Second

FEDORA-2022-20116fb6aa

Packages in this update:

pypy3.8-7.3.9-5.3.8.fc37

Update description:

Backport fix for CVE-2021-28861

Advisories

pypy3.8-7.3.9-5.3.8.fc38

October 12, 2022

Read Time:17 Second

FEDORA-2022-8072014f7b

Packages in this update:

pypy3.8-7.3.9-5.3.8.fc38

Update description:

Automatic update for pypy3.8-7.3.9-5.3.8.fc38.

Changelog

* Mon Oct 10 2022 Lumír Balhar <lbalhar@redhat.com> – 7.3.9-5.3.8
– Backport fix for CVE-2021-28861
Resolves: rhbz#2120788

Advisories

CVE-2018-18446

October 12, 2022

Read Time:5 Second

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).

Advisories

CVE-2018-18447

October 12, 2022

Read Time:5 Second

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).

Advisories

CVE-2021-36369

October 12, 2022

Read Time:22 Second

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokens or SSH-Askpass. Thus, it allows an attacker to abuse a forwarded agent for logging on to another server unnoticed.

Advisories