Category Archives: Advisories

Advisories

python-nbclient-0.6.7-1.fc38 python-nbconvert-6.5.3-3.fc38

August 27, 2022

Read Time:9 Second

FEDORA-2022-b910e3473f

Packages in this update:

python-nbclient-0.6.7-1.fc38
python-nbconvert-6.5.3-3.fc38

Update description:

New versions of nbclient and nbconvert.

Advisories

CVE-2019-15167

August 27, 2022

Read Time:9 Second

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.

Advisories

A Vulnerability in Atlassian Bitbucket Server and Data Center Could Allow For Remote Code Execution

August 27, 2022

Read Time:21 Second

A Vulnerability has been discovered in Atlassian Bitbucket Server and Data Center which could allow for remote code execution. Bitbucket is a Git-based source code repository hosting service owned by Atlassian. Successful exploitation could allow the attacker to execute remote code in context of the application. Depending on the permission associated with the application running the exploit, an attacker could then install programs; view, change, or delete data.

Advisories

A Vulnerability in Atlassian Bitbucket Server and Data Center Could Allow For Remote Code Execution

August 27, 2022

Read Time:21 Second

Advisories

tcpreplay-4.4.2-1.el8

August 27, 2022

Read Time:42 Second

FEDORA-EPEL-2022-00b4829e45

Packages in this update:

tcpreplay-4.4.2-1.el8

Update description:

This is Tcpreplay suite 4.4.2

This release contains bug fixes only. What’s changed:

Bug #716 heap-buffer-overflow in get_l2len_protocol() by @fklassen in #738
Bug #721 fixed typo in tcpliveplay.c by @jonathan-dev in #721
Bug #717 avoid assertion in get_layer4_v6 by @fklassen in #739
Bug #718 improved heap-overflow protection by @fklassen in #740
Bug #719 better overflow protection in parse_mpls by @fklassen in #741
Bug #725 FORCE_ALIGN on arm by @fklassen in #742
Bug #729 tcpreplay_edit: disallow both -K and -l options by @fklassen in #743
Bug #735 heap-overflow in get_l2len_protocol by @fklassen in #744
Bug #745 remove autogen.sh from distribution tarballs by @fklassen in #747