Cybersecurity News

SUSE: 2024:2607-1 important: giflib Security Advisory Updates

* bsc#1198880 * bsc#1214678 Cross-References: * CVE-2022-28506

Linux

Fedora 39: tinyproxy 2024-661a8bb3b0 Security Advisory Updates

Backport upstream patch for CVE-2023-49606.

Linux

Fedora 40: kubernetes 2024-30f39c25ae Security Advisory Updates

Update to v1.29.7 for FC40. Resolves CVE-2024-5321: Incorrect permissions on Windows containers logs. Additional bug and regression fixes from upstream.

Linux Windows Docker

Fedora 40: tinyproxy 2024-aa3631a416 Security Advisory Updates

Update to version 1.11.2 to fix CVE-2023-49606.

Linux

Debian: DSA-5734-1: bind9 Security Advisory Updates

Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. To mitigate CVE-2024-1737 two new configur…

Linux

openSUSE: 2024:0218-1 important: exim Advisory Security Update

An update that fixes one vulnerability is now available.

Linux

Ubuntu 6914-1: OCS Inventory Security Advisory Updates

OCS Inventory was vulnerable to an authentication bypass if the selected authentication method was via CAS.

Linux

Ubuntu 6913-1: phpCAS Security Advisory Updates

phpCAS was vulnerable to an authentication bypass.

Linux

Fedora 40: xmedcon 2024-f02d23b92b Security Advisory Updates

update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …

Linux

Fedora 39: xmedcon 2024-3dbd2c53ac Security Advisory Updates

update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …

Linux

Gentoo: GLSA-202407-28: Freenet: Deanonymization VulnerabilitySecurity Advisory Updates

A vulnerability has been discovered in Freenet, which can lead to deanonymization due to path folding.

Gentoo: GLSA-202407-27: ExifTool: Multiple vulnerabilitiesSecurity Advisory Updates

Multiple vulnerabilities have been discovered in ExifTool, the worst of which could lead to arbitrary code execution.

Gentoo: GLSA-202407-26: Dmidecode: Privilege EscalationSecurity Advisory Updates

A vulnerability has been discovered in Dmidecode, which can lead to privilege escalation.

CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on ev…

SUSE: 2024:2262-2 moderate: postgresql14 Security Advisory Updates

* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317

Linux Databases

SUSE: 2024:2603-1 important: shadow Security Advisory Updates

* bsc#916845 Cross-References: * CVE-2013-4235

Linux

SUSE: 2024:2598-1 important: libgit2 Security Advisory Updates

* bsc#1219660 Cross-References: * CVE-2024-24577

Linux

SUSE: 2024:2599-1 important: git Security Advisory Updates

* bsc#1219660 Cross-References: * CVE-2024-24577

Linux

SUSE: 2024:2576-1 moderate: gnome-shell Security Advisory Updates

* bsc#1215485 * bsc#1225567 Cross-References: * CVE-2023-43090

Linux

SUSE: 2024:2584-1 important: libgit2 Security Advisory Updates

* bsc#1219660 * bsc#1219664 Cross-References: * CVE-2024-24575

Linux

SUSE: 2024:2589-1 moderate: gnome-shell Security Advisory Updates

* bsc#1225567 Cross-References: * CVE-2024-36472

Linux

SUSE: 2024:2591-1 important: apache2 Security Advisory Updates

* bsc#1227268 * bsc#1227269 Cross-References: * CVE-2024-38475

Linux Apache

SUSE: 2024:2592-1 important: git Security Advisory Updates

* bsc#1219660 Cross-References: * CVE-2024-24577

Linux

openSUSE: 2024:0212-1 important: chromium Advisory Security Update

An update that fixes 8 vulnerabilities is now available.

Linux Chrome