Collected every two hours from specialised publications — each link leads to the original article.
Potential DoS attacks have been fixed by rate limiting HTTP/2 CONTINUATION frames in Apache Traffic Server, an HTTP/1.1 and HTTP/2 compliant caching proxy serv…
Improper form input field validation has been fixed in Zabbix, a network monitoring solution. For Debian 10 buster, this problem has been fixed in version
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to trigger buffer overflows with th…
Release 4.2.0
update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…
Release 4.2.0
CVE-2024-3852: GetBoundName in the JIT returned the wrong object CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement CVE-2024-3857: Incorrec…
update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…
CVE-2024-3852: GetBoundName in the JIT returned the wrong object CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement CVE-2024-3857: Incorrec…
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1220548 * bsc#1222518 Cross-References: * CVE-2024-27913
* bsc#1186060 * bsc#1192145 * bsc#1194516 * bsc#1208995 * bsc#1209635
* bsc#1219217 * jsc#PED-3360 * jsc#PED-3361 Cross-References:
* bsc#1213269 * bsc#1218889 * bsc#1222843 * bsc#1222845
* bsc#1222842 Cross-References: * CVE-2024-3651
* bsc#1222950 Cross-References: * CVE-2024-1135
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756
Due to issues in our build system this package is very outdated, now that the issues are fixed we are publishing the current upstream version. Lot of CVEs are …
x86: Native Branch History Injection [XSA-456, CVE-2024-2201] update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch x86 HVM h…
CryptoJS could be made to expose sensitive information.