[SECURITY] Fedora 42 Update: gnupg2-2.4.9-1.fc42

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

PT-2026-22016

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description A missing bounds check in the smartcard unpack read size align function within libfreerdp/utils/smartcard pack.c can cause the FreeRDP client to crash when connecting to a malicious RDP server. This...

PT-2026-2935

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A heap out-of-bounds read occurs in the smartcard SetAttrib path when the cbAttrLen variable does not match the actual NDR buffer...

EUVD-2018-8237

Malware in sbrugna...

EUVD-2018-15965

Malware in sbrugna...

EUVD-2018-6663

Malware in sbrugna...

EUVD-2017-14973

Malware in sbrugna...

EUVD-2018-8263

Malware in sbrugna...

EUVD-2018-8265

Malware in sbrugna...

EUVD-2004-0700

Malware in sbrugna...

EUVD-2006-3890

Malware in sbrugna...

EUVD-2002-2015

Malware in sbrugna...

EUVD-2017-12671

Malware in sbrugna...

EUVD-2018-6664

Malware in sbrugna...

EUVD-2023-58902

Malicious code in bioql PyPI...

EUVD-2021-8870

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-6680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16...

Linux Distros Unpatched Vulnerability : CVE-2018-16423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free when handling responses from a smartcard in scfilesetsecattr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supp...

FIDO2 Authentication Does Not Work With Webpages Opened Using Microsoft Edge

Users are not able to Authenticate to a website that requires FIDO2 Authentication using a Yubikey when using Edge on VDA Devices. The users are constantly prompted to select a Smartcard device. The same users are able to Authenticate onto the same website using Chrome or Firefox inside the same...

CVE-2023-6680

An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication...