ALSA-2024:3959 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: sandbox escape via RequestBackground portal CVE-2024-32462 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relat...

Updated atril packages fix security vulnerability

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

SUSE CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

OPENSUSE-SU-2024:11789-1 element-desktop-1.9.9-1.1 on GA media

These are all security issues fixed in the element-desktop-1.9.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13395-1 element-desktop-1.11.47-1.1 on GA media

These are all security issues fixed in the element-desktop-1.11.47-1.1 package on the GA media of openSUSE Tumbleweed...

Debian dla-3828 : atril - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3828 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3828-1 [email protected]...

OPENSUSE-SU-2024:12294-1 element-desktop-1.11.4-1.1 on GA media

These are all security issues fixed in the element-desktop-1.11.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13265-1 element-desktop-1.11.43-1.1 on GA media

These are all security issues fixed in the element-desktop-1.11.43-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13985-1 xdg-desktop-portal-1.18.4-1.1 on GA media

These are all security issues fixed in the xdg-desktop-portal-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12895-1 element-desktop-1.11.30-1.1 on GA media

These are all security issues fixed in the element-desktop-1.11.30-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12374-1 element-desktop-1.11.8-1.1 on GA media

These are all security issues fixed in the element-desktop-1.11.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10328-1 plasma5-desktop-5.8.4-1.1 on GA media

These are all security issues fixed in the plasma5-desktop-5.8.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14002-1 gnome-remote-desktop-46.2-1.1 on GA media

These are all security issues fixed in the gnome-remote-desktop-46.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13054-1 element-desktop-1.11.36-1.1 on GA media

These are all security issues fixed in the element-desktop-1.11.36-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

CVE-2024-37885

CVE-2024-37885 concerns the Nextcloud Desktop Client for macOS. A code injection vulnerability allows loading arbitrary code when the client is launched with the environment variable DYLD_INSERT_LIBRARIES set, as reported for versions prior to 3.12.0. The issue stems from how the macOS client han...

CVE-2024-37885 Code injection in Nextcloud Desktop Client for macOS

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

CVE-2024-37885 Code injection in Nextcloud Desktop Client for macOS

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...