Category: Advisories

FEDORA-2024-050266dc33 Packages in this update: freerdp-3.5.0-1.fc40 Update description: Update to 3.5.0 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460) Read More

FEDORA-2024-bd8c6c6926 Packages in this update: squid-6.9-1.fc39 Update description: New squid 6.9 security update Read More

FEDORA-2024-a414a81d47 Packages in this update: squid-6.9-1.fc38 Update description: New squid 6.9 security update Read More

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking. https://security-tracker.debian.org/tracker/DSA-5663-1...

Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2023-46589 Tomcat 10 did not correctly parse HTTP trailer headers. A trailer...

Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state...

FEDORA-2024-ce2eefc399 Packages in this update: kubernetes-1.29.4-1.fc40 Update description: Update Kubernetes to v1.29.4 for Fedora 40. Resolves CVE-2024-3177: Bypassing mountable secrets policy imposed by the ServiceAccount...

Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null...

FEDORA-2024-662a8b6005 Packages in this update: kubernetes-1.27.13-1.fc39 Update description: Updates Fedora 30 to Kubernetes 1.27.13. Resolves CVE-2024-3177: Bypassing mountable secrets policy imposed by the ServiceAccount admission...

Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel did not properly validate certain data structure fields when parsing lease contexts, leading to...