LinuxSecurity.com

30.11.2024 23:04 Two issues have been found in editorconfig-core, a coding style indenter for all editors. Both issues are related to buffer overflows in different locations.

30.11.2024 23:04 Brief introduction CVE-2022-0934

30.11.2024 23:04 An issue has been found in xfpt, a tool to generate XML from plain tex. The issue is about bad handling of input data, which may result in a stack-based buffer overflow and execution of arbitrary code, when

30.11.2024 23:04 An issue has been found in tgt, Linux SCSI target user-space daemon and tools. The issue was related to using rand without proper seed, resulting in identical sequences of challenges.

30.11.2024 11:52 GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header. GNOME libsoup before 3.6.1 allows a buffer overflow in applications that

30.11.2024 06:40 ProFTPD a popular FTP server was affected by multiple vulnerabilities. CVE-2023-48795

30.11.2024 06:40 * bsc#1232542 * bsc#1232622 * bsc#1232624 Cross-References:

30.11.2024 06:40 * bsc#1232747 * bsc#1233631 * bsc#1233632 Cross-References:

30.11.2024 06:40 * bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327

29.11.2024 19:30 * bsc#1233447 Cross-References: * CVE-2024-52304

29.11.2024 19:30 * bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327

29.11.2024 14:21 Update the rustls crate to version 0.23.17. Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 . This issue had no actual impact in Fedora, because no applications yet use the the zlib-rs feature of rustls and

29.11.2024 14:21 Update the rustls crate to version 0.23.17. Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 . This issue had no actual impact in Fedora, because no applications yet use the the zlib-rs feature of rustls and

29.11.2024 14:21 Deadlock in x86 HVM standard VGA handling libxl leaks data to PVH guests via ACPI tables

29.11.2024 14:21 Update to 128.5.0 https://www.thunderbird.net/en-US/thunderbird/128.5.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-68/