USN-6746-1: Google Guest Agent and Google OS Config Agent vulnerability
It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacker could possibly use this issue to...
USN-6728-3: Squid vulnerability
USN-6728-1 fixed vulnerabilities in Squid. The fix for CVE-2023-5824 caused Squid to crash in certain environments on Ubuntu 20.04 LTS and was disabled in USN-6728-2....
golang-github-git-5-5.12.0-1.fc41
FEDORA-2024-7fecec055b Packages in this update: golang-github-git-5-5.12.0-1.fc41 Update description: Automatic update for golang-github-git-5-5.12.0-1.fc41. Changelog * Tue Apr 23 2024 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.12.0-1 -...
freerdp2-2.11.7-1.fc40
FEDORA-2024-982a7184e0 Packages in this update: freerdp2-2.11.7-1.fc40 Update description: Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460) Read More
freerdp-2.11.7-1.fc38
FEDORA-2024-c702ea0fb1 Packages in this update: freerdp-2.11.7-1.fc38 Update description: Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460) Read More
freerdp-2.11.7-1.fc39
FEDORA-2024-1b11432d52 Packages in this update: freerdp-2.11.7-1.fc39 Update description: Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460) Read More
chromium-124.0.6367.60-2.fc40
FEDORA-2024-8b50ca2e22 Packages in this update: chromium-124.0.6367.60-2.fc40 Update description: update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914:...
php-tcpdf-6.7.5-1.fc40
FEDORA-2024-27eafd0e65 Packages in this update: php-tcpdf-6.7.5-1.fc40 Update description: Version 6.7.5 (2024-04-20) Update GitHub actions fix: CSV-2024-22640 (#712) Read More
ZDI-24-396: Microsoft Azure ODSP nikisos Uncontrolled Search Path Element Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of ODSP for Microsoft Azure. Authentication is not required to exploit this vulnerability....
ZDI-24-395: Ivanti Avalanche WLInfoRailService DELKEY Directory Traversal Arbitrary File Deletion Vulnerability
This vulnerability allows remote attackers to delete arbitrary files on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The ZDI has...