The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in eSpeak NG.
libcdio could be made to crash or run programs as your login if it opened a specially crafted file.
Update to 4.15 for CVE-2024-3652
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
Gunicorn, an event-based HTTP/WSGI server, fails to properly validate Transfer- Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By c…
Multiple vulnerabilities have been fixed in the Name Service Cache Daemon that is built by the GNU C library and shipped in the nscd binary package. CVE-2024-3…
Mojolicious is a Perl Web Application Framework built around the familiar Model-View-Controller philosophy. It supports a simple single file mode via Mojolicio…
Backport fix for CVE-2024-6239.
Update to 1.26.19, fixes CVE-2024-0444.
Update to 1.26.19, fixes CVE-2024-0444.
The US government reported the OPM Breach, one of the country's greatest hacks, in 2015. Over 22 million past and present employees' personnel records were com…
A vulnerability was discovered in GNU Emacs, the extensible, customisable, self-documenting display editor. The org-link-expand-abbrev function expanded a %(..…
A vulnerability was discovered in Org-mode, a GNU Emacs major mode for keeping notes, authoring documents, and maintaining to-do lists. The org-link-expand-abb…
rebuild for rhbz#2292712
Fix CVE-2024-2698 and CVE-2024-3183
Multiple vulnerabilities havebenn fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images.
* bsc#1216896 * bsc#1216897 * bsc#1216899 * bsc#1216900
Update to Emacs 29.4, fixing CVE-2024-39331.
The 6.9.6 stable kernel update contains a number of important fixes across the tree.