Collected every two hours from specialised publications — each link leads to the original article.
GNU cpio could be made to write files outside the target directory.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities were fixed in ruby-rack, an interface for developing web applications in Ruby. CVE-2024-25126
Potential DoS attacks have been fixed by rate limiting HTTP/2 CONTINUATION frames in Apache Traffic Server, an HTTP/1.1 and HTTP/2 compliant caching proxy serv…
Improper form input field validation has been fixed in Zabbix, a network monitoring solution. For Debian 10 buster, this problem has been fixed in version
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to trigger buffer overflows with th…
Release 4.2.0
update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…
Release 4.2.0
CVE-2024-3852: GetBoundName in the JIT returned the wrong object CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement CVE-2024-3857: Incorrec…
update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…
CVE-2024-3852: GetBoundName in the JIT returned the wrong object CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement CVE-2024-3857: Incorrec…
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1220548 * bsc#1222518 Cross-References: * CVE-2024-27913
* bsc#1186060 * bsc#1192145 * bsc#1194516 * bsc#1208995 * bsc#1209635
* bsc#1219217 * jsc#PED-3360 * jsc#PED-3361 Cross-References:
* bsc#1213269 * bsc#1218889 * bsc#1222843 * bsc#1222845
* bsc#1222842 Cross-References: * CVE-2024-3651
* bsc#1222950 Cross-References: * CVE-2024-1135
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756