Category: Advisories

FEDORA-2024-f433c5c4da Packages in this update: ghostscript-10.02.1-10.fc40 Update description: Security fixes for CVE-2024-33870, CVE-2024-29510 Read More

Joshua Rogers discovered that Squid incorrectly handled requests with the urn: scheme. A remote attacker could possibly use this issue to cause Squid to consume...

USN-6852-1 fixed a vulnerability in Wget. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was...

It was discovered that FontForge incorrectly handled filenames. If a user or an automated system were tricked into opening a specially crafted input file, a...

What is the attack?Over 100,000+ sites have been impacted by a supply chain attack involving the Polyfill.io service. Polyfill is a popular tool used for...

It was discovered that OpenSSL failed to choose an appropriately short private key size when computing shared-secrets in the Diffie-Hellman Key Agreement Protocol. A remote...

Fabian Vogt discovered that the KDE session management server insufficiently restricted ICE connections from localhost, which could allow a local attacker to execute arbitrary code...

FEDORA-EPEL-2024-1682369c61 Packages in this update: python-waitress-1.4.3-2.el7 Update description: Backport upstream fix for CVE-2022-24761. https://github.com/advisories/GHSA-4f7p-27jc-3c36 Read More

USN-6566-1 fixed several vulnerabilities in SQLite. This update provides the corresponding fix for CVE-2023-7104 for Ubuntu 18.04 LTS. Original advisory details: It was discovered that...

FEDORA-EPEL-2024-5292ca934e Packages in this update: rust-blowfish-0.9.1-2.el9 rust-dsa-0.6.3-1.el9 rust-num-bigint-dig-0.8.4-1.el9 rust-rand_isaac-0.3.0-6.el9 rust-rsa-0.9.6-2.el9 rust-sequoia-gpg-agent-0.4.2-1.el9 rust-sequoia-keystore-0.5.1-1.el9 rust-sequoia-openpgp-1.21.1-1.el9 rust-sequoia-sq-0.37.0-3.el9 Update description: Update the sequoia-openpgp crate to version 1.21.1. Addresses RUSTSEC-2024-0345....