Read Time:7 Second
FEDORA-EPEL-2024-39387970e2
Packages in this update:
stb-0^20240213gitae721c5-5.el9
Update description:
Security fix for CVE-2023-45681 / CVE-2023-47212
Category Archives: Advisories
USN-6757-2: PHP vulnerabilities
Read Time:37 Second
USN-6757-1 fixed vulnerabilities in PHP. Unfortunately these fixes were incomplete for
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.10. This update fixes the problem.
Original advisory details:
It was discovered that PHP incorrectly handled PHP_CLI_SERVER_WORKERS variable.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. This issue only affected Ubuntu 20.04 LTS, and
Ubuntu 22.04 LTS. (CVE-2022-4900)
It was discovered that PHP incorrectly handled certain cookies.
An attacker could possibly use this issue to cookie by pass.
(CVE-2024-2756)
It was discovered that PHP incorrectly handled some passwords.
An attacker could possibly use this issue to cause an account takeover
attack. (CVE-2024-3096)
stb-0^20240213gitae721c5-5.fc38
Read Time:7 Second
FEDORA-2024-5e5d8c2581
Packages in this update:
stb-0^20240213gitae721c5-5.fc38
Update description:
Security fix for CVE-2023-45681 / CVE-2023-47212
stb-0^20240213gitae721c5-6.fc39
Read Time:7 Second
FEDORA-2024-4c8d4cda0d
Packages in this update:
stb-0^20240213gitae721c5-6.fc39
Update description:
Security fix for CVE-2023-45681 / CVE-2023-47212
stb-0^20240213gitae721c5-6.fc40
Read Time:7 Second
FEDORA-2024-8f4d69d2ec
Packages in this update:
stb-0^20240213gitae721c5-6.fc40
Update description:
Security fix for CVE-2023-45681 / CVE-2023-47212
USN-6762-1: GNU C Library vulnerabilities
Read Time:1 Minute, 2 Second
It was discovered that GNU C Library incorrectly handled netgroup requests.
An attacker could possibly use this issue to cause a crash or execute arbitrary code.
This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9984)
It was discovered that GNU C Library might allow context-dependent
attackers to cause a denial of service. This issue only affected Ubuntu 14.04 LTS.
(CVE-2015-20109)
It was discovered that GNU C Library when processing very long pathname arguments to
the realpath function, could encounter an integer overflow on 32-bit
architectures, leading to a stack-based buffer overflow and, potentially,
arbitrary code execution. This issue only affected Ubuntu 14.04 LTS.
(CVE-2018-11236)
It was discovered that the GNU C library getcwd function incorrectly
handled buffers. An attacker could use this issue to cause the GNU C
Library to crash, resulting in a denial of service, or possibly execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2021-3999)
Charles Fol discovered that the GNU C Library iconv feature incorrectly
handled certain input sequences. An attacker could use this issue to cause
the GNU C Library to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2024-2961)
chromium-124.0.6367.118-1.fc38
Read Time:15 Second
FEDORA-2024-191c252b75
Packages in this update:
chromium-124.0.6367.118-1.fc38
Update description:
update to 124.0.6367.118
* High CVE-2024-4331: Use after free in Picture In Picture
* High CVE-2024-4368: Use after free in Dawn
update to 124.0.6367.91
chromium-124.0.6367.118-1.fc40
Read Time:25 Second
FEDORA-2024-5cf9499b62
Packages in this update:
chromium-124.0.6367.118-1.fc40
Update description:
update to 124.0.6367.118
* High CVE-2024-4331: Use after free in Picture In Picture
* High CVE-2024-4368: Use after free in Dawn
update to 124.0.6367.91
update to 124.0.6367.78
* Critical CVE-2024-4058: Type Confusion in ANGLE
* High CVE-2024-4059: Out of bounds read in V8 API
* High CVE-2024-4060: Use after free in Dawn
chromium-124.0.6367.118-1.el9
Read Time:1 Minute, 14 Second
FEDORA-EPEL-2024-808f3961ef
Packages in this update:
chromium-124.0.6367.118-1.el9
Update description:
update to 124.0.6367.118
* High CVE-2024-4331: Use after free in Picture In Picture
* High CVE-2024-4368: Use after free in Dawn
update to 124.0.6367.91
update to 124.0.6367.78
* Critical CVE-2024-4058: Type Confusion in ANGLE
* High CVE-2024-4059: Out of bounds read in V8 API
* High CVE-2024-4060: Use after free in Dawn
update to 124.0.6367.60
High CVE-2024-3832: Object corruption in V8
High CVE-2024-3833: Object corruption in WebAssembly
High CVE-2024-3914: Use after free in V8
High CVE-2024-3834: Use after free in Downloads
Medium CVE-2024-3837: Use after free in QUIC
Medium CVE-2024-3838: Inappropriate implementation in Autofill
Medium CVE-2024-3839: Out of bounds read in Fonts
Medium CVE-2024-3840: Insufficient policy enforcement in Site Isolation
Medium CVE-2024-3841: Insufficient data validation in Browser Switcher
Medium CVE-2024-3843: Insufficient data validation in Downloads
Low CVE-2024-3844: Inappropriate implementation in Extensions
Low CVE-2024-3845: Inappropriate implementation in Network
Low CVE-2024-3846: Inappropriate implementation in Prompts
Low CVE-2024-3847: Insufficient policy enforcement in WebUI
update to 123.0.6312.122
High CVE-2024-3157: Out of bounds write in Compositing
High CVE-2024-3516: Heap buffer overflow in ANGLE
High CVE-2024-3515: Use after free in Dawn
chromium-124.0.6367.118-1.fc39
Read Time:13 Second
FEDORA-2024-5483bc2adb
Packages in this update:
chromium-124.0.6367.118-1.fc39
Update description:
update to 124.0.6367.118
* High CVE-2024-4331: Use after free in Picture In Picture
* High CVE-2024-4368: Use after free in Dawn