Category Archives: Advisories

curl-7.85.0-8.fc37

March 24, 2023

Read Time:21 Second

FEDORA-2023-2884ba1528

Packages in this update:

curl-7.85.0-8.fc37

Update description:

fix SSH connection too eager reuse still (CVE-2023-27538)
fix HSTS double-free (CVE-2023-27537)
fix GSS delegation too eager connection re-use (CVE-2023-27536)
fix FTP too eager connection reuse (CVE-2023-27535)
fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
fix TELNET option IAC injection (CVE-2023-27533)

Advisories

amanda-3.5.3-1.fc37

March 24, 2023

Read Time:14 Second

FEDORA-2023-e295804b3d

Packages in this update:

amanda-3.5.3-1.fc37

Update description:

Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor bugfixes.

https://github.com/zmanda/amanda/releases/tag/tag-community-3.5.3

Advisories

amanda-3.5.3-1.fc38

March 24, 2023

Read Time:14 Second

FEDORA-2023-3d0619d767

Packages in this update:

amanda-3.5.3-1.fc38

Update description:

Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor bugfixes.

https://github.com/zmanda/amanda/releases/tag/tag-community-3.5.3

Advisories

amanda-3.5.3-1.fc36

March 24, 2023

Read Time:14 Second

FEDORA-2023-1293196f34

Packages in this update:

amanda-3.5.3-1.fc36

Update description:

Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor bugfixes.

https://github.com/zmanda/amanda/releases/tag/tag-community-3.5.3

Advisories

Defense in depth — the Microsoft way (part 84): (no) fun with %COMSPEC%

March 24, 2023

Read Time:23 Second

Posted by Stefan Kanthak on Mar 24

Hi @ll,

the documentation of the builtin START command
<https://technet.microsoft.com/en-us/library/cc770297.aspx>
of Windows NT’s command processor CMD.EXE states:

| When you run a command that contains the string “CMD” as the first
| token without an extension or path qualifier, “CMD” is replaced
| with the value of the COMSPEC variable.
| This prevents users from picking up cmd from the current directory….

Advisories