Cybersecurity News

Ubuntu 6913-1: phpCAS Security Advisory Updates

phpCAS was vulnerable to an authentication bypass.

Linux

Fedora 40: xmedcon 2024-f02d23b92b Security Advisory Updates

update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …

Linux

Fedora 39: xmedcon 2024-3dbd2c53ac Security Advisory Updates

update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …

Linux

Gentoo: GLSA-202407-28: Freenet: Deanonymization VulnerabilitySecurity Advisory Updates

A vulnerability has been discovered in Freenet, which can lead to deanonymization due to path folding.

Gentoo: GLSA-202407-27: ExifTool: Multiple vulnerabilitiesSecurity Advisory Updates

Multiple vulnerabilities have been discovered in ExifTool, the worst of which could lead to arbitrary code execution.

Gentoo: GLSA-202407-26: Dmidecode: Privilege EscalationSecurity Advisory Updates

A vulnerability has been discovered in Dmidecode, which can lead to privilege escalation.

CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on ev…

SUSE: 2024:2262-2 moderate: postgresql14 Security Advisory Updates

* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317

Linux Databases

SUSE: 2024:2603-1 important: shadow Security Advisory Updates

* bsc#916845 Cross-References: * CVE-2013-4235

Linux

SUSE: 2024:2598-1 important: libgit2 Security Advisory Updates

* bsc#1219660 Cross-References: * CVE-2024-24577

Linux

SUSE: 2024:2599-1 important: git Security Advisory Updates

* bsc#1219660 Cross-References: * CVE-2024-24577

Linux

SUSE: 2024:2576-1 moderate: gnome-shell Security Advisory Updates

* bsc#1215485 * bsc#1225567 Cross-References: * CVE-2023-43090

Linux

SUSE: 2024:2584-1 important: libgit2 Security Advisory Updates

* bsc#1219660 * bsc#1219664 Cross-References: * CVE-2024-24575

Linux

SUSE: 2024:2589-1 moderate: gnome-shell Security Advisory Updates

* bsc#1225567 Cross-References: * CVE-2024-36472

Linux

SUSE: 2024:2591-1 important: apache2 Security Advisory Updates

* bsc#1227268 * bsc#1227269 Cross-References: * CVE-2024-38475

Linux Apache

SUSE: 2024:2592-1 important: git Security Advisory Updates

* bsc#1219660 Cross-References: * CVE-2024-24577

Linux

openSUSE: 2024:0212-1 important: chromium Advisory Security Update

An update that fixes 8 vulnerabilities is now available.

Linux Chrome

openSUSE: 2024:0211-1 moderate: caddy Advisory Security Update

An update that fixes two vulnerabilities is now available.

Linux

openSUSE: 2024:0210-1 important: global Advisory Security Update

An update that fixes one vulnerability is now available.

Linux

SUSE: 2024:2568-1 important: mockito, snakeyaml, testng Security Advisory Updates

* bsc#1205628 Cross-References: * CVE-2022-4065

Linux

Mageia 2024-0274: thunderbird Security Advisory Updates

Memory corruption in WebGL API. (CVE-2024-6600) Race condition in permission assignment. (CVE-2024-6601) Memory corruption in thread creation. (CVE-2024-6603) …

Fedora 40: ffmpeg 2024-810afc5c2e Security Advisory Updates

Backport fix for CVE-2023-49528 and backport fixes for compatibility with Mesa 24.0.6+ / 24.1.4+ for VA-API

Linux

Fedora 40: chromium 2024-2a56aeb66b Security Advisory Updates

update to 126.0.6478.182 High CVE-2024-6772: Inappropriate implementation in V8 High CVE-2024-6773: Type Confusion in V8 High CVE-2024-6774: Use after free in …

Linux Chrome

openSUSE: 2024:0205-1 important: opera Advisory Security Update

An update that fixes 22 vulnerabilities is now available.

Linux