Category: Advisories

FEDORA-2024-bdc305fe55 Packages in this update: krb5-1.21.3-1.fc41 Update description: Automatic update for krb5-1.21.3-1.fc41. Changelog * Tue Jul 9 2024 Julien Rische <jrische@redhat.com> - 1.21.3-1 - New...

Philippos Giavridis, Jacky Wei En Kung, Daniel Hugenroth, and Alastair Beresford discovered that the OpenSSH ObscureKeystrokeTiming feature did not work as expected. A remote attacker...

It was discovered that the Go net/http module did not properly handle the requests when request's headers exceed MaxHeaderBytes. An attacker could possibly use this...

What is the Vulnerability?Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability, allowing an attacker to bypass authentication and create rogue administrator users....

Sam Shahsavar discovered that Apache Tomcat did not properly reject HTTP requests with an invalid Content-Length header. A remote attacker could possibly use this issue...

Post Content Read More

FEDORA-2024-c07c365ba7 Packages in this update: yt-dlp-2024.07.07-1.fc39 Update description: Update to 2024.07.07 Update to 2024.07.02 Read More

Marc Stern discovered that the Apache HTTP Server incorrectly handled serving WebSocket protocol upgrades over HTTP/2 connections. A remote attacker could possibly use this issue...

FEDORA-2024-36514cd080 Packages in this update: krb5-1.21.2-6.fc41 Update description: Automatic update for krb5-1.21.2-6.fc41. Changelog * Mon Jul 8 2024 Julien Rische <jrische@redhat.com> - 1.21.2-6 - CVE-2024-37370...

Martin Kaesberger discovered that Nova incorrectly handled QCOW2 image processing. An authenticated user could use this issue to access arbitrary files on the server, possibly...