LinuxSecurity.com

02.07.2024 01:30 An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599. A potential heap based buffer overflow was found in

02.07.2024 01:30 mingw-python-idna: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode References: - https://bugs.mageia.org/show_bug.cgi?id=33132

02.07.2024 01:30 imageio can attempt to download shared freeimage libraries from https://github.com/imageio/imageio-binaries/tree/master/freeimage. The code fetches straight from master and provides no way of verifying whether the correct file was fetched. As a result, if the repository is attacked in the future, all prior versions of imageio would be silently

01.07.2024 19:40 * bsc#1223965 Cross-References: * CVE-2024-33394

01.07.2024 19:40 The Qualys Threat Research Unit discovered that OpenSSH, an implementation of the SSH protocol suite, is prone to a signal handler race condition. If a client does not authenticate within LoginGraceTime seconds , then sshd's SIGALRM handler is called

01.07.2024 19:40 * bsc#1224044 Cross-References: * CVE-2024-34397

01.07.2024 14:32 Several security issues were fixed in eSpeak NG.

01.07.2024 14:32 Multiple vulnerabilities have been discovered in GNU Emacs and Org Mode, the worst of which could lead to arbitrary code execution.

01.07.2024 14:32 A vulnerability has been discovered in cpio, which can lead to arbitrary code execution.

01.07.2024 14:32 Multiple vulnerabilities have been discovered in cryptography, the worst of which could lead to a denial of service.

01.07.2024 14:32 A vulnerability has been discovered in SSSD, which can lead to arbitrary code execution.

01.07.2024 14:32 A vulnerability has been discovered in SDL_ttf, which can lead to arbitrary memory writes.

01.07.2024 08:33 libcdio could be made to crash or run programs as your login if it opened a specially crafted file.

01.07.2024 08:33 Update to 4.15 for CVE-2024-3652

01.07.2024 08:33 Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.