LinuxSecurity.com

28.11.2024 15:41 * bsc#1233695 Cross-References: * CVE-2024-11691 * CVE-2024-11692

28.11.2024 15:41 * bsc#1225889 Cross-References: * CVE-2024-1298

28.11.2024 15:41 * bsc#1209401 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6

28.11.2024 15:41 * jsc#PED-11092 Cross-References: * CVE-2023-31489 * CVE-2023-31490

28.11.2024 15:41 1.37 - fix parsing of "use if ..." Fixes errors in PAR::Packer test t/90-rt59710.t - add test for _parse_libs 1.36

28.11.2024 15:41 Security fix for CVE-2024-52304

28.11.2024 10:30 Several issues have been found in netatalk, an Apple Filing Protocol service. Three issues are related to off-by-one errorrs and resultant heap-based buffer overflow. One issue is related to primitives offered by

28.11.2024 04:40 The updated package fixes a security vulnerability: CVE-2024-52949. References: - https://bugs.mageia.org/show_bug.cgi?id=33799 - https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/D6UQOVVH4Y5FENNI3EJA5R7V3JBWCKEK/

28.11.2024 04:40 A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. References:

28.11.2024 04:40 Authentication bypass when using Jakarta Authentication API. Incorrect JSP tag recycling leads to XSS. References:

28.11.2024 04:40 Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

28.11.2024 04:40 Improper Finite State Machines in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially enable denial of service via local access. Improper conditions check in some Intel® Xeon® processor memory

28.11.2024 04:40 Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. CVE-2024-34155 Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156

27.11.2024 23:20 * bsc#1209401 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5

27.11.2024 23:20 * bsc#1233447 Cross-References: * CVE-2024-52304