[SECURITY] Fedora 36 Update: golang-github-cpu-goacmedns-0.1.1-5.fc36

A Go library to handle acme-dns client communication and persistent account storage...

Fedora: Security Advisory for golang-github-acme-lego (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-acme-lego-4.4.0-4.fc36

Let's Encrypt client and ACME library written in Go...

SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts

A server-side request forgery SSRF flaw in an API of a large financial technology fintech platform potentially could have compromised millions of bank customers, allowing attackers to defraud clients by controlling their bank accounts and funds, researchers have found. A team at Salt Security’s...

httpd:2.4 security update

httpd 2.4.37-43.0.1 - Set vstring per ORACLESUPPORTPRODUCT Orabug: 29892262 - Replace index.html with Oracle's index page oracleindex.html. 2.4.37-43 - Related: 2007235 - CVE-2021-40438 httpd:2.4/httpd: modproxy: SSRF via a crafted request uri-path 2.4.37-42 - Resolves: 2007235 - CVE-2021-40438...

httpd:2.4 security, bug fix, and enhancement update

httpd 2.4.37-41.0.1 - Add checks on the configured UDS path Orabug: 33412270CVE-2021-40438 - Set vstring per ORACLESUPPORTPRODUCT Orabug: 29892262 - Replace index.html with Oracles index page oracleindex.html 2.4.37-41 - Resolves: 1680111 - httpd sends reply to HTTPS GET using two TLS records -...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +675 more potentially affected by CVE-2016-10931 via openssl (>=0.2.18, <=0.8.3)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0, =0.2.1 and more Source cves: CVE-2016-10931 Source advisory: OSV:GHSA-34P9-F4Q3-C4R7...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +700 more potentially affected by CVE-2017-18589 via cookie (>=0.1.21, <=0.6.2)

cookie CARGO version =0.1.21, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.5.0, =0.6.5 and more Source cves: CVE-2017-18589 Source advisory: OSV:GHSA-VJRQ-CG9X-RFJP...

DL1 bug fix update

An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, slapi-nis, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

ALBA-2021:2592 idm:DL1 bug fix update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Bug Fixes: ipa: ipa-server-upgrade is failing while upgrading 8.3 to 8.4: Only attempt to upgrade ACME configuration fil...

PT-2021-1168

Name of the Vulnerable Software and Affected Versions: AlmaLinux Identity Management IdM versions 8.3 through 8.4 Description: The issue concerns the upgrade process of AlmaLinux Identity Management IdM from version 8.3 to 8.4, where the ipa-server-upgrade is failing due to an attempt to upgrade...

Fedora: Security Advisory for dogtag-pki (FEDORA-2021-54a73a7112)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pki-core (FEDORA-2021-54a73a7112)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for dogtag-pki (FEDORA-2021-99ca984f32)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: pki-core-10.10.6-1.fc33

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...

[SECURITY] Fedora 34 Update: dogtag-pki-10.10.6-1.fc34

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...

[SECURITY] Fedora 34 Update: pki-core-10.10.6-1.fc34

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...

httpd:2.4 security, bug fix, and enhancement update

httpd 2.4.37-39.0.1 - Set vstring per ORACLESUPPORTPRODUCT Orabug: 29892262 - Replace index.html with Oracles index page oracleindex.html 2.4.37-39 - prevent htcacheclean from while break when first file processed 2.4.37-38 - Resolves: 1918741 - Thousands of /tmp/modproxy.tmp. files created by...

[SECURITY] Fedora 32 Update: pki-core-10.10.5-5.fc32

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...

[SECURITY] Fedora 33 Update: pki-core-10.10.5-5.fc33

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...