The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with …
libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with …
New version 4.2.7, fix for CVE-2024-8250
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially r…
Possible denial of service in X.509 name checks. (CVE-2024-6119) References: - https://bugs.mageia.org/show_bug.cgi?id=33520 - https://openssl-library.org/news…
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/z…
Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file w…
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certai…
It was discovered that there were a number of issues in Redis, a popular key-value database: * CVE-2023-45145: On startup, Redis began listening on a Unix
* bsc#1229823 Cross-References: * CVE-2024-45230
* bsc#1217070 * bsc#1217952 * bsc#1221400 * bsc#1224323 * bsc#1228553
* bsc#1082555 * bsc#1190317 * bsc#1196516 * bsc#1205462 * bsc#1210629
* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051
* bsc#1221243 * bsc#1221677 * bsc#1224117 Cross-References:
Rebase to version 2.6.3
Use-after-free in tagstack_clear_entry() in Vim
NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. (CVE-2023-52890) References: - https://bugs.mageia.org/show_bug.cgi?i…
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmd…
Cacti, a web interface for graphing of monitoring systems, was vulnerable. CVE-2022-41444
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1229930 * bsc#1229931 * bsc#1229932 Cross-References: