Category Archives: Advisories

A Vulnerability in XZ Utils Could Allow for Remote Code Execution

Read Time:32 Second

A vulnerability has been discovered in XZ Utils that could allow for remote code execution. XZ is a general-purpose data compression format present in nearly every Linux distribution, both community projects and commercial product distributions. Successful exploitation of this vulnerability could allow for remote code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.

Read More

cockpit-314-1.fc40

Read Time:16 Second

FEDORA-2024-4e95f130fc

Packages in this update:

cockpit-314-1.fc40

Update description:

Automatic update for cockpit-314-1.fc40.

Changelog for cockpit

* Thu Mar 28 2024 Packit <hello@packit.dev> – 314-1
– Diagnostic reports: Fix command injection vulnerability with crafted report names
– Storage: Improvements to read-only encrypted filesystems

Read More