Aggregator

libsndfile-1.2.2-5.fc42

Fedora Security Advisories
3 days 19 hours ago
FEDORA-2024-bb1826234a Packages in this update:
  • libsndfile-1.2.2-5.fc42
Update description:

Automatic update for libsndfile-1.2.2-5.fc42.

Changelog * Mon Nov 18 2024 Michal Hlavinka <mhlavink@redhat.com> - 1.2.2-5 - fix crash in in ogg vorbis (rhbz#2322326) (CVE-2024-50612)

USN-7104-1: curl vulnerability

Ubuntu Security Advisories
4 days 2 hours ago
It was discovered that curl could overwrite the HSTS expiry of the parent domain with the subdomain's HSTS entry. This could lead to curl switching back to insecure HTTP earlier than otherwise intended, resulting in information exposure.

USN-7113-1: WebKitGTK vulnerabilities

Ubuntu Security Advisories
4 days 4 hours ago
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

USN-7108-1: AsyncSSH vulnerabilities

Ubuntu Security Advisories
4 days 12 hours ago
Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH did not properly handle the extension info message. An attacker able to intercept communications could possibly use this issue to downgrade the algorithm used for client authentication. (CVE-2023-46445) Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH did not properly handle the user authentication request message. An attacker could possibly use this issue to control the remote end of an SSH client session via packet injection/removal and shell emulation. (CVE-2023-46446)