RHSA-2022:8291 Red Hat Security Advisory: rsync security and bug fix update

Bulletin has no description...

RHSA-2022:7793 Red Hat Security Advisory: rsync security and enhancement update

Bulletin has no description...

RHSA-2011:0999 Red Hat Security Advisory: rsync security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2011:0390 Red Hat Security Advisory: rsync security update

Bulletin has no description...

RHSA-2004:436 Red Hat Security Advisory: rsync security update

Bulletin has no description...

RHSA-2004:192 Red Hat Security Advisory: rsync security update

Bulletin has no description...

RHSA-2022:2198 Red Hat Security Advisory: rsync security update

Bulletin has no description...

RHSA-2022:2201 Red Hat Security Advisory: rsync security update

Bulletin has no description...

RHSA-2022:2197 Red Hat Security Advisory: rsync security update

Bulletin has no description...

RHSA-2022:2192 Red Hat Security Advisory: rsync security update

Bulletin has no description...

RHSA-2022:4592 Red Hat Security Advisory: rsync security update

Bulletin has no description...

RHSA-2003:399 Red Hat Security Advisory: rsync security update

Bulletin has no description...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-115.15.0-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For mo...

[slackware-security] expat

New expat packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.6.3-i586-1slack15.0.txz: Upgraded. This update addresses security issues with impact ranging from denial of service to...

PT-2024-10103

Name of the Vulnerable Software and Affected Versions rsync affected versions not specified Description The issue is related to an uncontrolled resource consumption in the rsync repository validator FORT. It can be exploited by a remote attacker to elevate their privileges. A malicious RPKI rsync...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.15.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

NULL Pointer Dereference

Fort is vulnerable to NULL Pointer Dereference. The vulnerability is caused due to a malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field which For...

CVE-2024-45235

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizi...

UBUNTU-CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

CVE-2024-45236

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a signed object containing an empty signedAttributes field. Fort accesses the set's elements without sanitizing it first. Because Fort is an RPKI Relying...