Read Time:6 Second
FEDORA-2022-b54a8dee29
Packages in this update:
httpd-2.4.54-1.fc35
Update description:
new version 2.4.54
Category Archives: Advisories
ZDI-22-873: (Pwn2Own) Prosys OPC UA SDK for Java OPC UA Messages Resource Exhaustion Denial-of-Service Vulnerability
Read Time:9 Second
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Prosys OPC UA SDK for Java. Authentication is not required to exploit this vulnerability.
USN-5493-1: Linux kernel vulnerability
Read Time:12 Second
It was discovered that the 8 Devices USB2CAN interface implementation in
the Linux kernel did not properly handle certain error conditions, leading
to a double-free. A local attacker could possibly use this to cause a
denial of service (system crash).
DSA-5171 squid – security update
Read Time:3 Second
Multiple security issues were discovered in the Squid proxy caching
server:
DSA-5170 nodejs – security update
Read Time:7 Second
Multiple vulnerabilities were discovered in Node.js, which could result in
HTTP request smuggling, a bypass of certificate verification or prototype
pollution.
mingw-wavpack-5.4.0-5.fc35
Read Time:7 Second
FEDORA-2022-cece705cbf
Packages in this update:
mingw-wavpack-5.4.0-5.fc35
Update description:
Security fix for CVE-2021-44269
mingw-wavpack-5.4.0-5.fc36
Read Time:7 Second
FEDORA-2022-8e94ec2244
Packages in this update:
mingw-wavpack-5.4.0-5.fc36
Update description:
Security fix for CVE-2021-44269
DSA-5169 openssl – security update
Read Time:8 Second
It was discovered that the c_rehash script included in OpenSSL did not
sanitise shell meta characters which could result in the execution of
arbitrary commands.
Multiple Vulnerabilities in WatchGuard Firebox and XTM appliances Could Allow for Remote Code Execution
Read Time:18 Second
Multiple vulnerabilities have been discovered in WatchGuard Firebox and XTM appliances, the most severe of which could allow for Remote code execution. WatchGuard Firebox is a unified security platform that gives IT professionals the network visibility tools to ensure enterprise-grade security. Depending on the privileges associated with the applications, an attacker could view, change, or delete data.
golang-x-net-0-0.60.20200807gitab34263.el8 golang-x-text-0.3.7-1.el8
Read Time:16 Second
FEDORA-EPEL-2022-46b9d78e30
Packages in this update:
golang-x-net-0-0.60.20200807gitab34263.el8
golang-x-text-0.3.7-1.el8
Update description:
golang-x-text
Update to 0.3.7. Fixes rhbz#1945761.
Mitigate CVE-2021-38561 (rhbz#2100495).
golang-x-net
Rebuild to mitigate CVE-2021-38561 (rhbz#2100495).