Read Time:6 Second
FEDORA-2022-a5f51502f0
Packages in this update:
openssl-1.1.1n-1.fc35
Update description:
Security fix for [PUT CVEs HERE]
Category Archives: Advisories
bind-9.16.27-1.fc34 bind-dyndb-ldap-11.9-9.fc34
Read Time:11 Second
FEDORA-2022-042d9c6146
Packages in this update:
bind-9.16.27-1.fc34
bind-dyndb-ldap-11.9-9.fc34
Update description:
Upstream release notes
Fixed issue since bind 9.16.25 with broken bind-dyndb-ldap.
bind-9.16.27-1.fc35 bind-dyndb-ldap-11.9-11.fc35
Read Time:11 Second
FEDORA-2022-427cfc50f8
Packages in this update:
bind-9.16.27-1.fc35
bind-dyndb-ldap-11.9-11.fc35
Update description:
Upstream release notes
Fixed issue since bind 9.16.25 with broken bind-dyndb-ldap.
bind-9.16.27-1.fc36 bind-dyndb-ldap-11.9-14.fc36
Read Time:11 Second
FEDORA-2022-14e36aac0c
Packages in this update:
bind-9.16.27-1.fc36
bind-dyndb-ldap-11.9-14.fc36
Update description:
Upstream release notes
Fixed issue since bind 9.16.25 with broken bind-dyndb-ldap.
libtiff-4.3.0-6.fc36
Read Time:11 Second
FEDORA-2022-c39720a0ed
Packages in this update:
libtiff-4.3.0-6.fc36
Update description:
Security fixes for:
CVE-2022-0865
CVE-2022-0891
CVE-2022-0907
CVE-2022-0908
CVE-2022-0909
CVE-2022-0924
libtiff-4.3.0-6.fc35
Read Time:11 Second
FEDORA-2022-e2996202a0
Packages in this update:
libtiff-4.3.0-6.fc35
Update description:
Security fixes for:
CVE-2022-0865
CVE-2022-0891
CVE-2022-0907
CVE-2022-0908
CVE-2022-0909
CVE-2022-0924
libtiff-4.3.0-5.fc36
Read Time:11 Second
FEDORA-2022-449d7a2368
Packages in this update:
libtiff-4.3.0-5.fc36
Update description:
Security fixes for:
CVE-2022-0865
CVE-2022-0891
CVE-2022-0907
CVE-2022-0908
CVE-2022-0909
CVE-2022-0924
flatpak-runtime-f35-3520220317211532.1 flatpak-sdk-f35-3520220318110037.1
Read Time:12 Second
FEDORA-FLATPAK-2022-09295bb97d
Packages in this update:
flatpak-runtime-f35-3520220317211532.1
flatpak-sdk-f35-3520220318110037.1
Update description:
This updates the Flatpak runtime and SDK for F35 to current packages, including numerous security fixes and bug fixes.
USN-5335-1: ImageMagick vulnerabilities
Read Time:1 Minute, 11 Second
It was discovered that ImageMagick incorrectly handled certain values
when processing XPM image data or large images. If a user or automated
system using ImageMagick were tricked into opening a specially crafted
image, an attacker could exploit this to cause a denial of service or
possibly execute code with the privileges of the user invoking the program.
(CVE-2020-19667, CVE-2017-13144)
Suhwan Song discovered that ImageMagick incorrectly handled memory
when processing PNG,PALM,MIFF image data. If a user or automated system
using ImageMagick were tricked into opening a specially crafted image,
an attacker could exploit this to cause a denial of service or possibly
execute code with the privileges of the user invoking the program.
(CVE-2020-25664, CVE-2020-25665, CVE-2020-25674, CVE-2020-27753)
Suhwan Song discovered that ImageMagick incorrectly handled certain values
when processing image data. If a user or automated system using
ImageMagick were tricked into opening a specially crafted image, an
attacker could exploit this to cause a denial of service.
(CVE-2020-25676, CVE-2020-27750, CVE-2020-27760, CVE-2020-27762,
CVE-2020-27766, CVE-2020-27770)
Zhang Xiaohui discovered that ImageMagick incorrectly handled certain values
when processing image data. If a user or automated system using
ImageMagick were tricked into opening a specially crafted image, an
attacker could exploit this to cause a denial of service.
(CVE-2021-20176, CVE-2021-20241, CVE-2021-20243)
CVE-2021-22571
Read Time:11 Second
A local attacker could read files from some other users’ SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above.