FEDORA-2022-e674d52438

Packages in this update:

golang-github-vultr-govultr-2-2.17.2-1.fc36
vultr-cli-2.14.2-1.fc36

Update description:

Update govultr/vultr-cli

Update to latest

Read More

FEDORA-EPEL-2022-3a6675bd1a

Packages in this update:

chromium-102.0.5005.115-1.el8

Update description:

Update to Chromium 102.0.5005.115 (yes, I know there is a newer one, but we need to get something out now).

This also adds the first build of Chromium for EPEL9, many thanks to all the folks who got the many dependencies built.

Fixes:
CVE-2022-1232 CVE-2022-1364 CVE-2022-1633 CVE-2022-1634 CVE-2022-1635 CVE-2022-1636 CVE-2022-1637 CVE-2022-1638 CVE-2022-1639 CVE-2022-1640 CVE-2022-1641 CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861 CVE-2022-1862 CVE-2022-1863 CVE-2022-1864 CVE-2022-1865 CVE-2022-1866 CVE-2022-1867 CVE-2022-1868 CVE-2022-1869 CVE-2022-1870 CVE-2022-1871 CVE-2022-1872 CVE-2022-1873 CVE-2022-1874 CVE-2022-1875 CVE-2022-1876

Read More

FEDORA-EPEL-2022-002f30f00a

Packages in this update:

chromium-102.0.5005.115-2.el9

Update description:

Update to Chromium 102.0.5005.115 (yes, I know there is a newer one, but we need to get something out now).

This also adds the first build of Chromium for EPEL9, many thanks to all the folks who got the many dependencies built.

Fixes:
CVE-2022-1232 CVE-2022-1364 CVE-2022-1633 CVE-2022-1634 CVE-2022-1635 CVE-2022-1636 CVE-2022-1637 CVE-2022-1638 CVE-2022-1639 CVE-2022-1640 CVE-2022-1641 CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861 CVE-2022-1862 CVE-2022-1863 CVE-2022-1864 CVE-2022-1865 CVE-2022-1866 CVE-2022-1867 CVE-2022-1868 CVE-2022-1869 CVE-2022-1870 CVE-2022-1871 CVE-2022-1872 CVE-2022-1873 CVE-2022-1874 CVE-2022-1875 CVE-2022-1876

Read More

FEDORA-EPEL-2022-0dde709329

Packages in this update:

chromium-102.0.5005.115-1.el7

Update description:

Update to Chromium 102.0.5005.115 (yes, I know there is a newer one, but we need to get something out now).

This also adds the first build of Chromium for EPEL9, many thanks to all the folks who got the many dependencies built.

Fixes:
CVE-2022-1232 CVE-2022-1364 CVE-2022-1633 CVE-2022-1634 CVE-2022-1635 CVE-2022-1636 CVE-2022-1637 CVE-2022-1638 CVE-2022-1639 CVE-2022-1640 CVE-2022-1641 CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861 CVE-2022-1862 CVE-2022-1863 CVE-2022-1864 CVE-2022-1865 CVE-2022-1866 CVE-2022-1867 CVE-2022-1868 CVE-2022-1869 CVE-2022-1870 CVE-2022-1871 CVE-2022-1872 CVE-2022-1873 CVE-2022-1874 CVE-2022-1875 CVE-2022-1876

Read More

FEDORA-2022-e46e6e8317

Packages in this update:

golang-1.16.15-2.fc35

Update description:

Contains backports that fix the following CVEs:
– CVE-2022-24675
– CVE-2022-28327

Read More

Joshua Rogers discovered that Squid incorrectly handled the Gopher
protocol. A remote attacker could possibly use this issue to cause Squid to
crash, resulting in a denial of service.

Read More

FEDORA-2022-456b252727

Packages in this update:

tor-0.4.7.8-1.fc36

Update description:

Fix for CVE-2022-33903 (bz#2099227 / bz#2099228 / bz#2099229)

Read More

A vulnerability, which was classified as problematic, has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. This issue affects some unknown processing. The manipulation leads to backdoor. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component.

Read More

A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the component SSH Server. The manipulation leads to backdoor. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component.

Read More

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component.

Read More