Category: Advisories

FEDORA-EPEL-2024-2b876f90b2 Packages in this update: xrdp-0.10.1-1.el8 Update description: Release notes for xrdp v0.10.1 (2024/07/31) General announcements A clipboard bugfix included in this release is sponsored...

FEDORA-2024-8af1780fdf Packages in this update: bind-9.18.28-2.fc40 bind-dyndb-ldap-11.10-29.fc40 Update description: Update to BIND 9.18.28 Security Fixes A malicious DNS client that sent many queries over TCP...

FEDORA-2024-56ae6c2c7a Packages in this update: bind-9.18.28-2.fc41 bind-dyndb-ldap-11.10-30.fc41 Update description: update to 9.18.28 rhbz#2299467 Fixes CVE-2024-4076 Fixes CVE-2024-1975 Fixes CVE-2024-1737 Fixes CVE-2024-0760 Automatic update for bind-9.18.28-1.fc41....

Phillip Szelat discovered that Exim misparses multiline MIME header filenames. A remote attacker could use this issue to bypass a MIME filename extension-blocking protection mechanism...

It was discovered that Apache Commons Collections allowed serialization support for unsafe classes by default. A remote attacker could possibly use this issue to execute...

USN-6913-1 fixed CVE-2022-39369 for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. This update provides the corresponding fix for Ubuntu 16.04 LTS. Original advisory details: Filip...

FEDORA-2024-47dbf2a4de Packages in this update: obs-cef-5060^cr103.0.5060.134~git20231010.17f8588-6.fc40 Update description: Security fix for CVE-2023-6349 & FTBFS fixes Read More

It was discovered that the device input subsystem in the Linux kernel did not properly handle the case when an event code falls outside of...

It was discovered that OpenSSL incorrectly handled TLSv1.3 sessions when certain non-default TLS server configurations were in use. A remote attacker could possibly use this...

It was discovered that prometheus-alertmanager didn't properly sanitize input it received through an API endpoint. An attacker with permission to send requests to this endpoint...