Collected every two hours from specialised publications — each link leads to the original article.
Privileged XSS in the user rights log has been fixed in the MediaWiki wiki engine. For Debian 11 bullseye, this problem has been fixed in version
The CA certificates in the ca-certificates package were updated.
OpenJPEG could be made to crash if it opened a specially crafted file.
The system could be made to expose sensitive information.
* bsc#1230227 Cross-References: * CVE-2024-6232
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6
Update to new upstream version (closes rhbz#2303131)
Update to new upstream version (closes rhbz#2303131)
Update to new upstream version (closes rhbz#2303131)
AppArmor restrictions could be bypassed for rules allowing mount operations
The realtime computer music and graphics system puredata does now terminate when dropping setuid privileges failed. For Debian 11 bullseye, this problem has be…
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` functio…
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working dire…
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system…
The CA certificates in the ca-certificates package were updated.
Tomcat could allow unintended access to network services.
* bsc#1230366 Cross-References: * CVE-2024-45817