10.05.2024 09:15 Fossil regression
10.05.2024 09:15 * bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
10.05.2024 09:15 The 6.8.9 stable kernel update contains a number of important fixes across the tree.
10.05.2024 09:15 Security fix for CVE-2023-5752 .
10.05.2024 09:15 Security fix for CVE-2023-5752 .
10.05.2024 09:15 A possible SQL injection vulnerability was found in libpgjava, the PostgreSQL JDBC Driver. It allows an attacker to inject SQL if using PreferQueryMode=SIMPLE which is not the default mode. In the default mode there is no vulnerability.
09.05.2024 22:45 * bsc#1222492 Cross-References: * CVE-2024-21506
09.05.2024 22:45 * bsc#1216853 Cross-References: * CVE-2023-38472
09.05.2024 22:45 * bsc#1223100 Cross-References: * CVE-2023-3758
09.05.2024 22:45 * bsc#1223852 Cross-References: * CVE-2023-52722
09.05.2024 22:45 GLib could be made to accept spoofed D-Bus signals.
09.05.2024 22:45 Nick Galloway discovered an integer overflow in dav1d, a fast and small AV1 video stream decoder which could result in memory corruption. For the oldstable distribution , this problem has been fixed
09.05.2024 12:45 A flaw was found in the tpm2-tss package, where there was no check that the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows an attacker to generate arbitrary quote data, which may not be detected by Fapi_VerifyQuote.
09.05.2024 12:45 freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function.
09.05.2024 12:45 An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.