Read Time:6 Second
FEDORA-2024-527052ab76
Packages in this update:
expat-2.6.3-1.fc39
Update description:
Rebase to version 2.6.3
Category Archives: Advisories
expat-2.6.3-1.fc40
Read Time:6 Second
FEDORA-2024-f27c29c09c
Packages in this update:
expat-2.6.3-1.fc40
Update description:
Rebase to version 2.6.3
expat-2.6.3-1.fc41
Read Time:6 Second
FEDORA-2024-671549e74c
Packages in this update:
expat-2.6.3-1.fc41
Update description:
Rebase to version 2.6.3
ZDI-24-1195: Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability
Read Time:16 Second
This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Antimalware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2024-6260.
ZDI-24-1194: Linux Kernel Plan 9 File System Race Condition Local Privilege Escalation Vulnerability
Read Time:16 Second
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-39463.
ZDI-24-1193: Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Read Time:17 Second
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-7502.
python-django-4.2.16-1.fc41
Read Time:12 Second
FEDORA-2024-396c94f0a3
Packages in this update:
python-django-4.2.16-1.fc41
Update description:
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
python-django-4.2.16-1.fc39
Read Time:12 Second
FEDORA-2024-e2bde0853b
Packages in this update:
python-django-4.2.16-1.fc39
Update description:
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
python-django-4.2.16-1.fc40
Read Time:12 Second
FEDORA-2024-4a08381122
Packages in this update:
python-django-4.2.16-1.fc40
Update description:
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
USN-6993-1: Vim vulnerabilities
Read Time:30 Second
It was discovered that Vim incorrectly handled memory when closing a
window, leading to a double-free vulnerability. If a user was tricked
into opening a specially crafted file, an attacker could crash the
application, leading to a denial of service, or possibly achieve code
execution with user privileges. (CVE-2024-41957)
It was discovered that Vim incorrectly handled memory when adding a new
file to an argument list, leading to a use-after-free. If a user was
tricked into opening a specially crafted file, an attacker could crash
the application, leading to a denial of service. (CVE-2024-43374)