Category: Advisories

stb_image.h 2.27 has a heap-based buffer over in stbi__jpeg_load, leading to Information Disclosure or Denial of Service. Read More

Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local attacker could possibly use this issue to gain privileges. Read...

FEDORA-EPEL-2022-dc59f2cf3b Packages in this update: java-latest-openjdk-19.0.1.0.10-1.rolling.el9 Update description: October CPU Read More

FEDORA-FLATPAK-2022-8109f715d7 Packages in this update: flatpak-runtime-f36-3620221025180145.2 flatpak-sdk-f36-3620221025180145.2 Update description: Security fixes for openssl CVE-2022-3602 and CVE-2022-3786 Add google-noto-sans-mono-vf-fonts to runtime See https://github.com/fedora-silverblue/issue-tracker/issues/299 As with the...

FEDORA-FLATPAK-2022-cdc846885c Packages in this update: flatpak-runtime-f37-3720221025175532.2 flatpak-sdk-f37-3720221025175532.2 Update description: Security fixes for openssl CVE-2022-3602 and CVE-2022-3786 Read More

FEDORA-EPEL-2022-166223b21a Packages in this update: python-yara-4.2.3-1.el8 yara-4.2.3-1.el8 Update description: Fix CVE-2021-45429 Read More

FEDORA-2022-cba606724f Packages in this update: firefox-106.0.3-1.fc35 Update description: Updated to 106.0.3 New upstream version (106.0.1) Read More

Today, the OpenSSL Project released a new version of OpenSSL (v3.0.7). Last week's early announcement indicated at first this was a CRITICAL vulnerability and included...

Nicky Mouha discovered a buffer overflow in the sha3 module of PyPy, a fast, compliant alternative implementation of the Python language. Read More

FEDORA-2022-99af00f60e Packages in this update: xen-4.15.3-7.fc35 Update description: Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309] Xenstore: Guests can create orphaned Xenstore nodes [XSA-415, CVE-2022-42310] Xenstore:...