It was discovered that libxml2 incorrectly handled certain XML documents. A
remote attacker could possibly use this issue to cause libxml2 to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Category Archives: Advisories
USN-6657-1: Dnsmasq vulnerabilities
Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered
that Dnsmasq icorrectly handled validating DNSSEC messages. A remote
attacker could possibly use this issue to cause Dnsmasq to consume
resources, leading to a denial of service. (CVE-2023-50387)
It was discovered that Dnsmasq incorrectly handled preparing an NSEC3
closest encloser proof. A remote attacker could possibly use this issue to
cause Dnsmasq to consume resources, leading to a denial of service.
(CVE-2023-50868)
It was discovered that Dnsmasq incorrectly set the maximum EDNS.0 UDP
packet size as required by DNS Flag Day 2020. This issue only affected
Ubuntu 23.10. (CVE-2023-28450)
freeipa-4.10.3-2.fc38
FEDORA-2024-bbfef02415
Packages in this update:
freeipa-4.10.3-2.fc38
Update description:
Security release: CVE-2024-1481
Resolves: rhbz#2265129
freeipa-4.11.1-2.fc39
FEDORA-2024-826453ad39
Packages in this update:
freeipa-4.11.1-2.fc39
Update description:
Security release: CVE-2024-1481
Resolves: rhbz#2265129
USN-6656-1: PostgreSQL vulnerability
It was discovered that PostgreSQL incorrectly handled dropping privileges
when handling REFRESH MATERIALIZED VIEW CONCURRENTLY commands. If a user or
automatic system were tricked into running a specially crafted command, a
remote attacker could possibly use this issue to execute arbitrary SQL
functions.
edk2-20240214-2.fc39
FEDORA-2024-a9dead34c5
Packages in this update:
edk2-20240214-2.fc39
Update description:
update to edk2-stable202402
USN-6655-1: GNU binutils vulnerabilities
It was discovered that GNU binutils was not properly handling the logic
behind certain memory management related operations, which could lead to
an invalid memory access. An attacker could possibly use this issue to
cause a denial of service. (CVE-2022-47695)
It was discovered that GNU binutils was not properly performing bounds
checks when dealing with memory allocation operations, which could lead
to excessive memory consumption. An attacker could possibly use this issue
to cause a denial of service. (CVE-2022-48063)
It was discovered that GNU binutils incorrectly handled memory management
operations in several of its functions, which could lead to excessive
memory consumption due to memory leaks. An attacker could possibly use
these issues to cause a denial of service. (CVE-2022-48065)
chromium-122.0.6261.69-1.el8
FEDORA-EPEL-2024-eadadc9b14
Packages in this update:
chromium-122.0.6261.69-1.el8
Update description:
Update to 122.0.6261.69
update to 121.0.6167.184
chromium-122.0.6261.69-1.el9
FEDORA-EPEL-2024-c6bf47a782
Packages in this update:
chromium-122.0.6261.69-1.el9
Update description:
Update to 122.0.6261.69
chromium-122.0.6261.69-1.el7
FEDORA-EPEL-2024-5ef433f7ed
Packages in this update:
chromium-122.0.6261.69-1.el7
Update description:
Update to 122.0.6261.69