Read Time:7 Second
FEDORA-2022-7ca361a226
Packages in this update:
pypy3.9-7.3.9-4.3.9.fc37
Update description:
Backport fix for CVE-2021-28861
Category Archives: Advisories
pypy3.8-7.3.9-5.3.8.fc35
Read Time:7 Second
FEDORA-2022-fde69532df
Packages in this update:
pypy3.8-7.3.9-5.3.8.fc35
Update description:
Backport fix for CVE-2021-28861
pypy3.8-7.3.9-5.3.8.fc36
Read Time:7 Second
FEDORA-2022-15f1aa7dc7
Packages in this update:
pypy3.8-7.3.9-5.3.8.fc36
Update description:
Backport fix for CVE-2021-28861
DSA-5253 chromium – security update
Read Time:7 Second
Multiple security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.
pypy3.9-7.3.9-4.3.9.fc38
Read Time:17 Second
FEDORA-2022-7936d4cf83
Packages in this update:
pypy3.9-7.3.9-4.3.9.fc38
Update description:
Automatic update for pypy3.9-7.3.9-4.3.9.fc38.
Changelog
* Mon Oct 10 2022 Lumír Balhar <lbalhar@redhat.com> – 7.3.9-4.3.9
– Backport fix for CVE-2021-28861
Resolves: rhbz#2120789
pypy3.8-7.3.9-5.3.8.fc37
Read Time:7 Second
FEDORA-2022-20116fb6aa
Packages in this update:
pypy3.8-7.3.9-5.3.8.fc37
Update description:
Backport fix for CVE-2021-28861
pypy3.8-7.3.9-5.3.8.fc38
Read Time:17 Second
FEDORA-2022-8072014f7b
Packages in this update:
pypy3.8-7.3.9-5.3.8.fc38
Update description:
Automatic update for pypy3.8-7.3.9-5.3.8.fc38.
Changelog
* Mon Oct 10 2022 Lumír Balhar <lbalhar@redhat.com> – 7.3.9-5.3.8
– Backport fix for CVE-2021-28861
Resolves: rhbz#2120788
CVE-2018-18446
Read Time:5 Second
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).
CVE-2018-18447
Read Time:5 Second
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).
CVE-2021-36369
Read Time:22 Second
An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokens or SSH-Askpass. Thus, it allows an attacker to abuse a forwarded agent for logging on to another server unnoticed.