Read Time:9 Second
The fixes for CVE-2024-38474 and CVE-2024-39884 introduced two
regressions in mod_rewrite and mod_proxy.
Category Archives: Advisories
Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution
Read Time:35 Second
Multiple vulnerabilities have been discovered in Google Android OS, the most severe of which could allow for remote code execution. Android is an operating system developed by Google for mobile devices, including, but not limited to, smartphones, tablets, and watches. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
valkey-8.0.1-1.fc40
Read Time:18 Second
FEDORA-2024-8a9a692906
Packages in this update:
valkey-8.0.1-1.fc40
Update description:
update to 8.0.1
fixes
(CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE.
(CVE-2024-31227) Potential Denial-of-service due to malformed ACL selectors.
(CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching.
valkey-8.0.1-1.fc41
Read Time:18 Second
FEDORA-2024-e717420659
Packages in this update:
valkey-8.0.1-1.fc41
Update description:
update to 8.0.1
fixes
(CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE.
(CVE-2024-31227) Potential Denial-of-service due to malformed ACL selectors.
(CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching.
valkey-8.0.1-1.el9
Read Time:18 Second
FEDORA-EPEL-2024-845b92ee3f
Packages in this update:
valkey-8.0.1-1.el9
Update description:
update to 8.0.1
fixes
(CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE.
(CVE-2024-31227) Potential Denial-of-service due to malformed ACL selectors.
(CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching.
valkey-8.0.1-1.fc39
Read Time:18 Second
FEDORA-2024-83e96146cf
Packages in this update:
valkey-8.0.1-1.fc39
Update description:
update to 8.0.1
fixes
(CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE.
(CVE-2024-31227) Potential Denial-of-service due to malformed ACL selectors.
(CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching.
pdns-recursor-5.1.2-1.fc41
Read Time:6 Second
FEDORA-2024-aebaa73b1f
Packages in this update:
pdns-recursor-5.1.2-1.fc41
Update description:
Update to latest upstream
pdns-recursor-5.0.9-1.fc40
Read Time:6 Second
FEDORA-2024-af0bf62ac6
Packages in this update:
pdns-recursor-5.0.9-1.fc40
Update description:
Update to latest upstream
pdns-recursor-4.9.9-1.fc39
Read Time:6 Second
FEDORA-2024-08a6626c11
Packages in this update:
pdns-recursor-4.9.9-1.fc39
Update description:
Update to latest upstream
USN-7057-1: WEBrick vulnerability
Read Time:10 Second
It was discovered that WEBrick incorrectly handled having both a Content-
Length header and a Transfer-Encoding header. A remote attacker could
possibly use this issue to perform a HTTP request smuggling attack.