Read Time:7 Second
FEDORA-EPEL-2022-2fe63c65d3
Packages in this update:
python-bottle-0.12.21-1.el8
Update description:
Security fix for CVE-2022-31799
Category Archives: Advisories
python-bottle-0.12.21-1.el9
Read Time:7 Second
FEDORA-EPEL-2022-4f458ed801
Packages in this update:
python-bottle-0.12.21-1.el9
Update description:
Security fix for CVE-2022-31799
DSA-5159 python-bottle – security update
Read Time:7 Second
Elton Nokaj discovered that incorrect error handling in Bottle, a WSGI
framework for Python, could result in the disclosure of sensitive
information.
rubygem-jmespath-1.3.1-1.el7
Read Time:9 Second
FEDORA-EPEL-2022-aaaeae50ce
Packages in this update:
rubygem-jmespath-1.3.1-1.el7
Update description:
Security fix for for CVE-2022-32511 and update to 1.3.1
rubygem-jmespath-1.6.1-1.fc35
Read Time:8 Second
FEDORA-2022-779e050244
Packages in this update:
rubygem-jmespath-1.6.1-1.fc35
Update description:
Security fix for CVE-2022-32511 (update to 1.6.1)
rubygem-jmespath-1.6.1-1.fc36
Read Time:8 Second
FEDORA-2022-13d49faee0
Packages in this update:
rubygem-jmespath-1.6.1-1.fc36
Update description:
Security fix for CVE-2022-32511 (update to 1.6.1)
USN-5396-2: Ghostscript vulnerability
Read Time:20 Second
USN-5396-1 addressed a vulnerability in Ghostscript. This update
provides the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that Ghostscript incorrectly handled certain PostScript
files. If a user or automated system were tricked into processing a
specially crafted file, a remote attacker could possibly use this issue to
access arbitrary files, execute arbitrary code, or cause a denial of
service.
USN-5474-1: Varnish Cache vulnerabilities
Read Time:44 Second
It was dicovered that Varnish Cache did not clear a pointer between the
handling of one client request and the next request within the same connection.
A remote attacker could possibly use this issue to obtain sensitive
information. (CVE-2019-20637)
It was discovered that Varnish Cache could have an assertion failure when a
TLS termination proxy uses PROXY version 2. A remote attacker could possibly
use this issue to restart the daemon and cause a performance loss.
(CVE-2020-11653)
It was discovered that Varnish Cache allowed request smuggling and VCL
authorization bypass via a large Content-Length header for a POST
request. A remote attacker could possibly use this issue to obtain sensitive
information. (CVE-2021-36740)
It was discovered that Varnish Cache allowed request smuggling for HTTP/1
connections. A remote attacker could possibly use this issue to obtain
sensitive information. (CVE-2022-23959)
CVE-2020-14125
Read Time:10 Second
A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.
golang-1.18.3-1.fc36
Read Time:16 Second
FEDORA-2022-c73d08129f
Packages in this update:
golang-1.18.3-1.fc36
Update description:
go1.18.3 includes security fixes to the crypto/rand, crypto/tls, os/exec, and path/filepath packages, as well as bug fixes to the compiler, and the crypto/tls and text/template/parse packages.