Read Time:9 Second
FEDORA-2024-3697e3b459
Packages in this update:
kernel-6.8.9-200.fc39
Update description:
The 6.8.9 stable kernel update contains a number of important fixes across the tree.
Category Archives: Advisories
kernel-6.8.9-300.fc40
Read Time:9 Second
FEDORA-2024-c90afc5c01
Packages in this update:
kernel-6.8.9-300.fc40
Update description:
The 6.8.9 stable kernel update contains a number of important fixes across the tree.
kernel-6.8.9-100.fc38
Read Time:9 Second
FEDORA-2024-e513c6594d
Packages in this update:
kernel-6.8.9-100.fc38
Update description:
The 6.8.9 stable kernel update contains a number of important fixes across the tree.
DSA-5679-1 less – security update
Read Time:12 Second
Several vulnerabilities were discovered in less, a file pager, which may
result in the execution of arbitrary commands if a file with a specially
crafted file name is processed.
DSA-5678-1 glibc – security update
Read Time:12 Second
Several vulnerabilities were discovered in nscd, the Name Service Cache
Daemon in the GNU C library which may lead to denial of service or the
execution of arbitrary code.
DSA-5677-1 ruby3.1 – security update
Read Time:11 Second
Several vulnerabilities have been discovered in the interpreter for
the Ruby language, which may result in information disclosure, denial
of service or the execution of arbitrary code.
GitLab Password Reset Vulnerability (CVE-2023-7028)
Read Time:46 Second
What is the vulnerability?A critical vulnerability has been discovered in GitLab, a DevOps platform for managing software development lifecycle. A successful exploitation of the vulnerability may allow an attacker to take control of the GitLab administrator account without user interaction. CVE-2023-7028 has been given a maximum CVSS score of 10. CISA added the vulnerability on May 1st to its Known Exploited Vulnerabilities (KEV) Catalog.What is the recommended Mitigation?GitLab users are advised to update their instances to a patched version and enable two factor authentication (2FA) which will deny malicious actors access to compromised accounts.What FortiGuard Coverage is available?FortiGuard Labs has an existing Web Application Security signature “GitLab.Password.Reset.Account.Takeover” released on Jan 16 to detect and block any attack attempts targeting the Authentication Bypass Vulnerability in GitLab (CVE-2023-7028) and has Endpoint Vulnerability signature ID “5551” to detect vulnerable versions of installed GitLab software.
stb-0-0.45.20240213gitae721c5.el7
Read Time:8 Second
FEDORA-EPEL-2024-c66806f4ad
Packages in this update:
stb-0-0.45.20240213gitae721c5.el7
Update description:
Security fix for CVE-2023-45681 / CVE-2023-47212
stb-0-0.45.20240213gitae721c5.el8
Read Time:8 Second
FEDORA-EPEL-2024-6327fb701b
Packages in this update:
stb-0-0.45.20240213gitae721c5.el8
Update description:
Security fix for CVE-2023-45681 / CVE-2023-47212
stb-0^20240213gitae721c5-5.el9
Read Time:7 Second
FEDORA-EPEL-2024-39387970e2
Packages in this update:
stb-0^20240213gitae721c5-5.el9
Update description:
Security fix for CVE-2023-45681 / CVE-2023-47212