OPENSUSE-SU-2024:11443-1 texlive-gitfile-info-2021.186.0.0.5svn51928-46.3 on GA media

These are all security issues fixed in the texlive-gitfile-info-2021.186.0.0.5svn51928-46.3 package on the GA media of openSUSE Tumbleweed...

shared-mime-info bug fix and enhancement update

An update is available for shared-mime-info. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

PT-2024-21700 · Toshiba · Toshiba Printers

Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns Toshiba printers that utilize Sendmail to send emails. Sendmail is used in conjunction with several insecure directories, allowing a local attacker to inject a...

CVE-2024-32926

there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32926

Technical details (affected products/versions/root cause/fix) are not publicly provided in the supplied documents; monitor for updates.

PT-2024-24969 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds read in the FillCellInfo function of CellInfoListParserV2 due to a missing bounds check. This could lead to local information disclosure...

PT-2024-37093 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: The issue is related to an authentication bypass vulnerability in the Logsign Unified SecOps Platform. This vulnerability allows remote attackers to bypass...

PT-2024-30716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a bug in the f2fs file system, where the inode.i crypt info is not initialized during the mount process, leading to a kernel NULL pointer dereference. This occurs...

SUSE-SU-2024:1983-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26921: Preserve kabi for skbuff bsc1223138. - CVE-2022-48686: Fix UAF when detecting digest errors bsc1223948. - CVE-2021-47074: Fixed memory leak in...

drm/amd/display: Atom Integrated System Info v2_2 for DCN35

...

PT-2024-26221 · Themeboy · Sportspress

Name of the Vulnerable Software and Affected Versions: SportsPress – Sports Club & League Manager versions 2.7.20 and earlier Description: The issue is related to a Missing Authorization vulnerability in the ThemeBoy SportsPress – Sports Club & League Manager plugin. Recommendations: For versions...

Hackers Leak 270GB of New York Times Data and Source Code on 4Chan

The New York Times suffered a major data breach! Leaked data includes source code, user info, and potentially…...

AZL-42430 CVE-2024-5458 affecting package php for versions less than 8.1.29-1

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, due to a code logic error, filtering functions such as filtervar when validating URLs FILTERVALIDATEURL for certain types of URLs the function will result in invalid user information username + password part of URLs being...

PT-2024-24803 · Olive Themes · Olive One Click Demo Import

Name of the Vulnerable Software and Affected Versions: Olive One Click Demo Import versions 1.1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import. Recommendations: For Olive One Click Demo Import versions 1.1.1 and...

PHP Security Vulnerabilities

PHP is a scripting language that executes on the server side. A security vulnerability exists in PHP, which stems from a code logic error, where a filter function validating URLs incorrectly treats invalid user information containing username and password sections as valid user information for...

PT-2024-24791 · Repute Infosystems · Arforms

Name of the Vulnerable Software and Affected Versions: reputeinfosystems ARForms versions n/a through 6.4 Description: The issue is related to a Missing Authorization vulnerability in reputeinfosystems ARForms. Recommendations: For versions n/a through 6.4, at the moment, there is no information...

UBUNTU-CVE-2024-36966

In the Linux kernel, the following vulnerability has been resolved: erofs: reliably distinguish block based and fscache mode When erofskillsb is called in block dev based mode, sbdev may not have been initialised yet, and if CONFIGEROFSFSONDEMAND is enabled, it will be mistaken for fscache mode,...

SUSE CVE-2024-26889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix possible buffer overflow struct hcidevinfo has a fixed size name8 field so in the event that hdev-name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switchi...

CGA-48C4-6V2C-P63X

Bulletin has no description...

PT-2024-19467 · Dnspod-Sr · Dnspod-Sr

Name of the Vulnerable Software and Affected Versions: dnspod-sr version 0dfbd37 Description: The issue is related to a SEGV in dnspod-sr. No information is available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. Recommendations...