Read Time:6 Second
FEDORA-2022-3cbf2184bd
Packages in this update:
freeciv-2.6.7-1.fc35
Update description:
2.6.7
Category Archives: Advisories
wpebackend-fdo-1.12.1-1.fc36
Read Time:9 Second
FEDORA-2022-f98ab9f311
Packages in this update:
wpebackend-fdo-1.12.1-1.fc36
Update description:
Fixed a crash caused by trying to deallocate already freed graphics buffers in certain situations.
unbound-1.16.2-2.fc35
Read Time:11 Second
FEDORA-2022-28fbfb87ef
Packages in this update:
unbound-1.16.2-2.fc35
Update description:
Fixes CVE-2022-30698 and CVE-2022-30699
Start unbound-keygen.service each time unbound starts if files are not already present.
unbound-1.16.2-2.fc36
Read Time:7 Second
FEDORA-2022-e021f05d21
Packages in this update:
unbound-1.16.2-2.fc36
Update description:
Fixes CVE-2022-30698 and CVE-2022-30699
python-yara-4.2.0-5.fc36 yara-4.2.3-1.fc36
Read Time:12 Second
FEDORA-2022-21cf5402fc
Packages in this update:
python-yara-4.2.0-5.fc36
yara-4.2.3-1.fc36
Update description:
Update to yara-4.2.3
Update to 4.2.0
Update to 4.2.2
Multiple Vulnerabilities in Exim Could Allow for Remote Code Execution
Read Time:24 Second
Multiple vulnerabilities have been discovered in Exim, the most severe of which could allow for remote code execution. Exim is a mail transfer agent used to deploy mail servers on Unix-like systems. Successful exploitation of the most severe of these vulnerabilities will enable the attacker to perform command execution as root in the context of the mail server. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Multiple Vulnerabilities in Exim Could Allow for Remote Code Execution
Read Time:24 Second
Multiple vulnerabilities have been discovered in Exim, the most severe of which could allow for remote code execution. Exim is a mail transfer agent used to deploy mail servers on Unix-like systems. Successful exploitation of the most severe of these vulnerabilities will enable the attacker to perform command execution as root in the context of the mail server. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Backdoor.Win32.Guptachar.20 / Insecure Credential Storage
Read Time:19 Second
Posted by malvuln on Aug 08
Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2022
Original source:
https://malvuln.com/advisory/857999d2306f257b80d1b8f6a51ae8b0.txt
Contact: malvuln13 () gmail com
Media: twitter.com/malvuln
Threat: Backdoor.Win32.Guptachar.20
Vulnerability: Insecure Credential Storage
Description: The malware runs a web server on TCP port 2015 (default) and
uses BASIC authentication. The credentials “hacker01:imchampgr8” get stored
in a…