Category: Advisories

In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes. Read More

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities...

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities...

FEDORA-2022-41890e9e44 Packages in this update: openssl-1.1.1q-1.fc35 Update description: Changelog * Thu Jul 07 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1q-1 - Upgrade to 1.1.1q Resolves: CVE-2022-2097...

FEDORA-2022-3fdc2d3047 Packages in this update: openssl-3.0.5-1.fc36 Update description: Changelog * Tue Jul 05 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.5-1 - Rebase to upstream version 3.0.5...

FEDORA-2022-1c20b4dde2 Packages in this update: openssl-3.0.5-1.fc37 Update description: Automatic update for openssl-3.0.5-1.fc37. Changelog * Tue Jul 5 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.5-1 - Rebase...

FEDORA-2022-89a17be281 Packages in this update: openssl1.1-1.1.1q-1.fc36 Update description: Changelog * Thu Jul 07 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1q-1 - Upgrade to 1.1.1q Resolves: CVE-2022-2097...

Tavis Ormandy discovered that NSS incorrectly handled an empty pkcs7 sequence. A remote attacker could possibly use this issue to cause NSS to crash, resulting...

FEDORA-2022-2c9f8224f8 Packages in this update: xen-4.15.3-2.fc35 Update description: Linux disk/nic frontends data leaks [XSA-403, CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742] (#2104747) update to xen-4.15.3 x86: MMIO Stale...

Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could...