Cybersecurity News

Mageia 2024-0353: htmldoc Security Advisory Updates

HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node…

Mageia 2024-0352: libheif Security Advisory Updates

In Libheif, insufficient checks in ImageOverlay::parse() while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bound…

Mageia 2024-0351: python-werkzeug Security Advisory Updates

Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werk…

Mageia 2024-0350: thunderbird Security Advisory Updates

Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…

Mageia 2024-0349: nspr, nss, firefox & rust Security Advisory Updates

Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…

Fedora 40: radare2 2024-c52c5c8791 Security Advisory Updates

fix CVE-2024-48241

Linux

Fedora 40: iaito 2024-c52c5c8791 Security Advisory Updates

fix CVE-2024-48241

Linux

Fedora 39: iaito 2024-e7c0a0d876 Security Advisory Updates

fix CVE-2024-48241

Linux

Fedora 41: radare2 2024-658aeaa7ea Security Advisory Updates

fix CVE-2024-48241

Linux

Fedora 41: iaito 2024-658aeaa7ea Security Advisory Updates

fix CVE-2024-48241

Linux

Fedora 39: radare2 2024-e7c0a0d876 Security Advisory Updates

fix CVE-2024-48241

Linux

Mageia 2024-0348: ruby-webrick Security Advisory Updates

An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…

openSUSE: 2024:0358-1 moderate: qbittorrent Advisory Security Update

An update that fixes one vulnerability is now available.

Linux

Debian: DSA-5805-1: guix Security Advisory Updates

It was discovered that the daemon of the GNU Guix functional package manager was susceptible to privilege escalation. For additional information please refer t…

Linux

SUSE: 2024:3957-1 moderate: python311 Security Advisory Updates

* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287

Linux

SUSE: 2024:3958-1 moderate: python311 Security Advisory Updates

* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287

Linux

SUSE: 2024:3959-1 moderate: python312 Security Advisory Updates

* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287

Linux

SUSE: 2024:3960-1 important: libheif Security Advisory Updates

* bsc#1231714 Cross-References: * CVE-2024-41311

Linux

openSUSE: 2024:0356-1 important: chromium Advisory Security Update

An update that fixes two vulnerabilities is now available.

Linux Chrome

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition…

Palo Alto

Debian: DSA-5804-1: webkit2gtk Security Advisory Updates

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-44244

Linux

SUSE: 2024:3945-1 moderate: python39 Security Advisory Updates

* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287

Linux

SUSE: 2024:3944-1 moderate: python3 Security Advisory Updates

* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287

Linux

SUSE: 2024:3939-1 important: ruby2.1 Security Advisory Updates

* bsc#1230930 Cross-References: * CVE-2024-47220

Linux