02.02.2024 07:30 ImageMagick could be made to crash if it opened a specially crafted file.
02.02.2024 07:30 Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
02.02.2024 07:30 The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
01.02.2024 21:45 A regression was fixed in X.Org X Server.
01.02.2024 21:45 GNU C Library could be made to crash or run programs as an administrator if it handled a specially crafted request.
01.02.2024 21:45 * bsc#1217654 * bsc#1219131 Cross-References: * CVE-2023-50269
01.02.2024 21:45 * bsc#1218894 Cross-References: * CVE-2024-21626
01.02.2024 21:45 * bsc#1218894 Cross-References: * CVE-2024-21626
01.02.2024 11:45 Security fix for CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780. CVE-2023-6246: __vsyslog_internal did not handle a case where printing a SYSLOG_HEADER containing a long program name failed to update the required buffer size, leading to the allocation and overflow of a too-small buffer on the heap. CVE-2023-6779: __vsyslog_internal used the return value of
01.02.2024 11:45 Update to 115.7.0 * https://www.mozilla.org/en- US/security/advisories/mfsa2024-04/ * https://www.thunderbird.net/en- US/thunderbird/115.7.0/releasenotes/
01.02.2024 11:45 Security fix for CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780. CVE-2023-6246: __vsyslog_internal did not handle a case where printing a SYSLOG_HEADER containing a long program name failed to update the required buffer size, leading to the allocation and overflow of a too-small buffer on the heap. CVE-2023-6779: __vsyslog_internal used the return value of
01.02.2024 11:45 Fixing CVE-2023-6395
01.02.2024 11:45 CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408, CVE-2024-0409
01.02.2024 11:45 An update that fixes one vulnerability is now available.
01.02.2024 01:31 Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.