LinuxSecurity.com

28.03.2024 14:00 An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code execution and secure boot

28.03.2024 08:20 Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/

28.03.2024 08:20 Security fix for CVE-2022-40896

28.03.2024 08:20 This update fixes CVE-2013-4184 . The module no longer saves state in temporary files at all.

28.03.2024 08:20 This update fixes CVE-2013-4184 . The module no longer saves state in temporary files at all.

28.03.2024 08:20 unixODBC could be made to crash or execute arbitrary code.

28.03.2024 08:20 Update to v2.5

28.03.2024 03:10 * bsc#1216594 * bsc#1216598 Cross-References: * CVE-2023-38469

28.03.2024 03:10 Crash in NSS TLS method. JIT code failed to save return registers on Armv7-A. Integer overflow could have led to out of bounds write. Improve handling of out-of-memory conditions in ICU. NSS susceptible to timing attack against RSA decryption.

28.03.2024 03:10 Crash in NSS TLS method. JIT code failed to save return registers on Armv7-A. Integer overflow could have led to out of bounds write. Improve handling of out-of-memory conditions in ICU. NSS susceptible to timing attack against RSA decryption.

28.03.2024 03:10 util-linux could be made to expose sensitive information.

28.03.2024 03:10 * bsc#1216594 * bsc#1216598 Cross-References: * CVE-2023-38469

28.03.2024 03:10 * bsc#1211301 * bsc#1219559 * bsc#1219666 * bsc#1221854

27.03.2024 21:23 Several security issues were fixed in curl.

27.03.2024 21:23 * bsc#1221237 * bsc#1221468 Cross-References: * CVE-2024-1441