Aggregator

foliate-flatpak-3.1.0-2

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-FLATPAK-2024-263720b59d Packages in this update:
  • foliate-flatpak-3.1.0-2
Update description:

Update espeak-ng for CVE-2023-49990, CVE-2023-49991, CVE-2023-49992, CVE-2023-49993, CVE-2023-49994

editorconfig-0.12.7-1.el8

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-EPEL-2024-7a1c939a17 Packages in this update:
  • editorconfig-0.12.7-1.el8
Update description:

Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.

editorconfig-0.12.7-1.el9

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-EPEL-2024-3412a9098b Packages in this update:
  • editorconfig-0.12.7-1.el9
Update description:

Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.

editorconfig-0.12.7-1.fc38

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-2024-0f08e59f25 Packages in this update:
  • editorconfig-0.12.7-1.fc38
Update description:

Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.

editorconfig-0.12.7-1.fc39

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-2024-deddae25dd Packages in this update:
  • editorconfig-0.12.7-1.fc39
Update description:

Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.

editorconfig-0.12.7-1.fc40

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-2024-86d287b270 Packages in this update:
  • editorconfig-0.12.7-1.fc40
Update description:

Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.

emacs-29.3-2.fc40

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-2024-7985b5f326 Packages in this update:
  • emacs-29.3-2.fc40
Update description:

Obsolete the newer emacs-nox now in F39, fixing system upgrades

New upstream release 29.3, fixes rhbz#2271287

chromium-123.0.6312.105-1.fc39

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-2024-39b249a59c Packages in this update:
  • chromium-123.0.6312.105-1.fc39
Update description:

update to 123.0.6312.105

* High CVE-2024-3156: Inappropriate implementation in V8 * High CVE-2024-3158: Use after free in Bookmarks * High CVE-2024-3159: Out of bounds memory access in V8

chromium-123.0.6312.105-1.fc38

Fedora Security Advisories
3 weeks 4 days ago
FEDORA-2024-5e32ce95a3 Packages in this update:
  • chromium-123.0.6312.105-1.fc38
Update description:

update to 123.0.6312.105

* High CVE-2024-3156: Inappropriate implementation in V8 * High CVE-2024-3158: Use after free in Bookmarks * High CVE-2024-3159: Out of bounds memory access in V8

LSN-0102-1: Kernel Live Patch Security Notice

Ubuntu Security Advisories
3 weeks 5 days ago
It was discovered that a race condition existed in the io_uring subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.(CVE-2023-1872) Lonial Con discovered that the netfilter subsystem in the Linux kernel contained a memory leak when handling certain element flush operations. A local attacker could use this to expose sensitive information (kernel memory).(CVE-2023-4569) It was discovered that the TLS subsystem in the Linux kernel did not properly perform cryptographic operations in some situations, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.(CVE-2023-6176) It was discovered that a race condition existed in the AppleTalk networking subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.(CVE-2023-51781) Jann Horn discovered that the TLS subsystem in the Linux kernel did not properly handle spliced messages, leading to an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.(CVE-2024-0646) Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.(CVE-2024-1086)