wolfssl-5.7.2-2.fc42
Automatic update for wolfssl-5.7.2-2.fc42.
* Tue Sep 3 2024 Andrew Bauer <zonexpertconsulting@outlook.com> – 5.7.2-2
– RHBZ#2308628 RHBZ#2308629 RHBZ#2308630 RHBZ#2308631 fixed in 5.7.2 release
– fips macro patch no longer needed
nextcloud-29.0.5-3.el9
29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
nextcloud-29.0.5-4.fc39
29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
nextcloud-29.0.5-4.fc40
29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
nextcloud-29.0.5-3.fc41
29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
nextcloud-29.0.5-3.fc42
Automatic update for nextcloud-29.0.5-3.fc42.
* Tue Sep 3 2024 Andrew Bauer <zonexpertconsulting@outlook.com> – 29.0.5-3
– 29.0.6 release RHBZ#2305125 RHBZ# 2309499 fixes CVE-2024-39338
* Mon Sep 2 2024 Miroslav Suchý <msuchy@redhat.com> – 29.0.5-2
– convert license to SPDX
Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow for arbitrary code execution. Mozilla Firefox is a web browser used to access the Internet. Mozilla Firefox ESR is a version of the web browser intended to be deployed in large organizations. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
It was discovered that Django incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2024-45230)
It was discovered that Django incorrectly handled certain email sending
failures. A remote attacker could possibly use this issue to enumerate
user emails by issuing password reset requests and observing the outcomes.
(CVE-2024-45231)
USN-6981-1 fixed vulnerabilities in Drupal. This update provides the
corresponding updates for Ubuntu 14.04 LTS.
Original advisory details:
It was discovered that Drupal incorrectly sanitized uploaded filenames. A
remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2020-13671)
It was discovered that Drupal incorrectly sanitized archived filenames. A
remote attacker could possibly use this issue to overwrite arbitrary
files, or execute arbitrary code. (CVE-2020-28948, CVE-2020-28949)
David Benjamin discovered that OpenSSL incorrectly handled certain
X.509 certificates. An attacker could possible use this issue to
cause a denial of service or expose sensitive information.
