Collected every two hours from specialised publications — each link leads to the original article.
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…
An problem has been fixed with the handling of the AVRCP protocol in the bluetooth stack that could lead to remote code execution. For Debian 10 buster, this p…
An update that fixes three vulnerabilities is now available.
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in HTTP response splitting, denial of service, or authorization bypas…
crosswords 0.3.13
crosswords 0.3.13
Update to 2.12.7 (RHBZ#2280535, CVE-2024-34459)
crosswords 0.3.13
An update that fixes one vulnerability is now available.
Multiple cross-site scripting vulnerabilities were found in Redmine, a project management web application. For the stable distribution (bookworm), these proble…
* bsc#1219559 * bsc#1220664 * bsc#1221563 * bsc#1221854 * bsc#1222075
* bsc#1171479 Cross-References: * CVE-2020-12762
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1219386 Cross-References: * CVE-2023-5992
7.6.7.2
update to 125.0.6422.76 * High CVE-2024-5157: Use after free in Scheduling * High CVE-2024-5158: Type Confusion in V8 * High CVE-2024-5159: Heap buffer overflo…
* bsc#1224277 Cross-References: * CVE-2023-45733 * CVE-2023-45745
GNOME Remote Desktop would allow unintended access to sensitive information or remote desktop connections.
* bsc#1222535 * bsc#1224056 Cross-References: * CVE-2024-2609
cJSON could be made to crash if it received specially crafted input.
* bsc#1223603 Cross-References: * CVE-2024-4340
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
An update that fixes four vulnerabilities is now available.
Add implicit rejection in PKCS#1 v1.5 in OpenSSL.