03.12.2024 13:00 The update for needrestart announced as DSA 5815-1 introduced a regression reporting false positives for processes running in chroot or mountns. Updated packages are now available to correct this issue.
03.12.2024 13:00 * bsc#1233593 * bsc#1233594 Cross-References: * CVE-2024-11595
03.12.2024 03:00 Buffer overflow in socks proxy code in glib
03.12.2024 03:00 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
03.12.2024 03:00 Select list elements could be shown over another site. CSP Bypass and XSS Exposure via Web Compatibility Shims. URL Bar Spoofing via Manipulated Punycode and Whitespace Characters.
03.12.2024 03:00 Select list elements could be shown over another site. CSP Bypass and XSS Exposure via Web Compatibility Shims. URL Bar Spoofing via Manipulated Punycode and Whitespace Characters.
03.12.2024 03:00 * bsc#1231795 * bsc#1233307 Cross-References: * CVE-2024-11168
03.12.2024 03:00 * bsc#1233651 * bsc#1233702 * bsc#1233703 Cross-References:
02.12.2024 07:45 An update that fixes two vulnerabilities is now available.
01.12.2024 21:46 Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the HTTP-based remote Web Inspector not loading in Chromium. Fix content filters not working on about:blank iframes.
01.12.2024 21:46 New version 4.4.2
01.12.2024 21:46 Update to 5.0.2 fix rhbz#2326888
01.12.2024 21:46 New version 4.2.9
01.12.2024 11:46 Multiple vulnerabilities were discovered in Lemonldap::NG, an OpenID-Connect, CAS and SAML compatible Web-SSO system, which could lead to injection of arbitrary scripts or authorization bypass.
01.12.2024 01:15 Two issues have been found in editorconfig-core, a coding style indenter for all editors. Both issues are related to buffer overflows in different locations.