Cybersecurity News

SUSE: 2024:4088-1 moderate: ovmf Security Advisory Updates

* bsc#1225889 Cross-References: * CVE-2024-1298

Linux

Fedora 41: mingw-python3 2024-e6b1e638d1 Security Advisory Updates

Backport fix for CVE-2024-9287 Update to python-3.11.0.

Linux

Fedora 41: mingw-glib2 2024-67869f1cb3 Security Advisory Updates

Update to 2.82.2, fixes CVE-2024-52533.

Linux

Debian LTS: DLA-3968-1: netatalk Security Advisory Updates

Several issues have been found in netatalk, an Apple Filing Protocol service. Three issues are related to off-by-one errorrs and resultant heap-based buffer ov…

Linux Apple

Mageia 2024-0380: dcmtk Security Advisory Updates

A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. (CVE-2024-27628) Referenc…

Mageia 2024-0379: tomcat Security Advisory Updates

Authentication bypass when using Jakarta Authentication API. (CVE-2024-52316) Incorrect JSP tag recycling leads to XSS. (CVE-2024-52318) References:

Mageia 2024-0378: wget Security Advisory Updates

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attac…

Mageia 2024-0377: microcode Security Advisory Updates

Improper Finite State Machines (FSMs) in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially …

Mageia 2024-0376: golang Security Advisory Updates

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. CVE-2024-34155 Calling De…

SUSE: 2024:4077-1 moderate: python-aiohttp Security Advisory Updates

* bsc#1233447 Cross-References: * CVE-2024-52304

Linux

SUSE: 2024:4078-1 important: glib2 Security Advisory Updates

* bsc#1233282 Cross-References: * CVE-2024-52533

Linux

SUSE: 2024:4079-1 important: webkit2gtk3 Security Advisory Updates

* bsc#1231039 * bsc#1232747 Cross-References: * CVE-2024-44296

Linux

SUSE: 2024:4074-1 important: MozillaFirefox Security Advisory Updates

* bsc#1233695 Cross-References: * CVE-2024-11691 * CVE-2024-11692

Linux

SUSE: 2024:4075-1 critical: tomcat Security Advisory Updates

* bsc#1233434 Cross-References: * CVE-2024-52316

Linux

Fedora 40: libsndfile 2024-3ae3a47901 Security Advisory Updates

fix crash in in ogg vorbis (rhbz#2322326) (CVE-2024-50612)

Linux

Fedora 40: mingw-python3 2024-d7e2d109e2 Security Advisory Updates

Backport fix for CVE-2024-9287 Update to python-3.11.0.

Linux

Fedora 40: mingw-glib2 2024-1e29ad7d25 Security Advisory Updates

Update to 2.82.2, fixes CVE-2024-52533.

Linux

Debian LTS: DLA-3967-1: mpg123 Security Advisory Updates

mpg123 a popular MPEG layer 1/2/3 audio player was afected by a vulnerability. An out-of-bounds write flaw was found in mpg123 when handling crafted

Linux

Debian LTS: DLA-3966-1: pypy3 Security Advisory Updates

Multiple vulnerabilities have been fixed in pypy3, an alternative implementation of the Python 3.x language. CVE-2020-10735

Linux

SUSE: 2024:4053-1 important: ucode-intel Security Advisory Updates

* bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853

Linux

SUSE: 2024:4054-1 moderate: javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop Security Advisory Updates

* bsc#1231347 * bsc#1231428 Cross-References: * CVE-2024-28168

Linux

Fedora 40: chromium 2024-292aa2c246 Security Advisory Updates

Update to 131.0.6778.85 * High CVE-2024-11395: Type Confusion in V8 * High CVE-2024-11110: Inappropriate implementation in Blink * Medium CVE-2024-11111: Inapp…

Linux Chrome

Fedora 40: cobbler 2024-76d8603c78 Security Advisory Updates

Update to 3.3.7 - CVE-2024-47533

Linux

Fedora 41: chromium 2024-582d2a7648 Security Advisory Updates

Update to 131.0.6778.85 * High CVE-2024-11395: Type Confusion in V8 * High CVE-2024-11110: Inappropriate implementation in Blink * Medium CVE-2024-11111: Inapp…

Linux Chrome