Posted by Egidio Romano on Jul 16
——————————————————————————-
XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability
——————————————————————————-
[-] Software Link:
[-] Affected Versions:
Version 2.2.15 and prior versions.
[-] Vulnerability Description:
The XFAdminControllerWidget::actionSave() method, defined into the…
ghostscript-10.02.1-6.fc39
Security fixes for CVE-2024-29509, CVE-2024-29508, CVE-2024-29507, CVE-2024-29506
exim-4.98-1.el8
This is new version of exim fixing CVE-2024-39929.
ghostscript-10.02.1-11.fc40
Security fixes for CVE-2024-29509, CVE-2024-29508, CVE-2024-29507, CVE-2024-29506
exim-4.98-1.el9
This is new version of exim fixing CVE-2024-39929.
exim-4.98-1.fc39
This is new version of exim fixing CVE-2024-39929.
exim-4.98-1.fc40
This is new version of exim fixing CVE-2024-39929.
gtk3-3.24.43-1.fc40
Update to 3.24.43
It was discovered that GTK would attempt to load modules from the current
directory, contrary to expectations. If users started GTK applications from
shared directories, a local attacker could use this issue to execute
arbitrary code, and possibly escalate privileges.
