Read Time:6 Second
FEDORA-2024-0b563ad294
Packages in this update:
wireshark-4.2.9-1.fc40
Update description:
New version 4.2.9
Category Archives: Advisories
wireshark-4.4.2-1.fc41
Read Time:6 Second
FEDORA-2024-f9f740bc60
Packages in this update:
wireshark-4.4.2-1.fc41
Update description:
New version 4.4.2
USN-7015-6: Python regressions
Read Time:1 Minute, 1 Second
USN-7015-5 fixed vulnerabilities in python2.7. The update introduced
several minor regressions. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that the Python email module incorrectly parsed email
addresses that contain special characters. A remote attacker could
possibly use this issue to bypass certain protection mechanisms.
(CVE-2023-27043)
It was discovered that Python allowed excessive backtracking while parsing
certain tarfile headers. A remote attacker could possibly use this issue
to cause Python to consume resources, leading to a denial of service.
(CVE-2024-6232)
It was discovered that the Python email module incorrectly quoted newlines
for email headers. A remote attacker could possibly use this issue to
perform header injection. (CVE-2024-6923)
It was discovered that the Python http.cookies module incorrectly handled
parsing cookies that contained backslashes for quoted characters. A remote
attacker could possibly use this issue to cause Python to consume
resources, leading to a denial of service. (CVE-2024-7592)
It was discovered that the Python zipfile module incorrectly handled
certain malformed zip files. A remote attacker could possibly use this
issue to cause Python to stop responding, resulting in a denial of
service. (CVE-2024-8088)
USN-7120-3: Linux kernel (Low Latency) vulnerabilities
Read Time:12 Second
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
– File systems infrastructure;
– Network traffic control;
(CVE-2024-46800, CVE-2024-43882)
APPLE-SA-11-19-2024-5 macOS Sequoia 15.1.1
Read Time:24 Second
Posted by Apple Product Security via Fulldisclosure on Nov 21
APPLE-SA-11-19-2024-5 macOS Sequoia 15.1.1
macOS Sequoia 15.1.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121753.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
JavaScriptCore
Available for: macOS Sequoia
Impact: Processing maliciously crafted web content may lead to arbitrary…
Local Privilege Escalations in needrestart
Read Time:18 Second
Posted by Qualys Security Advisory via Fulldisclosure on Nov 21
Qualys Security Advisory
LPEs in needrestart (CVE-2024-48990, CVE-2024-48991, CVE-2024-48992,
CVE-2024-10224, and CVE-2024-11003)
========================================================================
Contents
========================================================================
Summary
Background
CVE-2024-48990 (and CVE-2024-48992)
CVE-2024-48991
CVE-2024-10224 (and CVE-2024-11003)
Mitigation
Acknowledgments
Timeline
I got bugs…
APPLE-SA-11-19-2024-4 iOS 17.7.2 and iPadOS 17.7.2
Read Time:27 Second
Posted by Apple Product Security via Fulldisclosure on Nov 21
APPLE-SA-11-19-2024-4 iOS 17.7.2 and iPadOS 17.7.2
iOS 17.7.2 and iPadOS 17.7.2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121754.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
JavaScriptCore
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch
2nd generation…
APPLE-SA-11-19-2024-3 iOS 18.1.1 and iPadOS 18.1.1
Read Time:27 Second
Posted by Apple Product Security via Fulldisclosure on Nov 21
APPLE-SA-11-19-2024-3 iOS 18.1.1 and iPadOS 18.1.1
iOS 18.1.1 and iPadOS 18.1.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121752.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
JavaScriptCore
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch
3rd generation…
APPLE-SA-11-19-2024-2 visionOS 2.1.1
Read Time:24 Second
Posted by Apple Product Security via Fulldisclosure on Nov 21
APPLE-SA-11-19-2024-2 visionOS 2.1.1
visionOS 2.1.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121755.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
JavaScriptCore
Available for: Apple Vision Pro
Impact: Processing maliciously crafted web content may lead to arbitrary
code…
APPLE-SA-11-19-2024-1 Safari 18.1.1
Read Time:24 Second
Posted by Apple Product Security via Fulldisclosure on Nov 21
APPLE-SA-11-19-2024-1 Safari 18.1.1
Safari 18.1.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121756.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
JavaScriptCore
Available for: macOS Ventura and macOS Sonoma
Impact: Processing maliciously crafted web content may lead to…