Fedora: Security Advisory (FEDORA-2024-c8549a8c75)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Twenty 安全漏洞

Twenty is an open source CRM platform from Twenty. A security vulnerability exists in Twenty version 0.3.0, which stems from an easy server-side request forgery attack via file uploads...

编号撤回

ROS2 Humble Hawksbill is an open source set of software libraries and tools for ROS2. It can help build robotics applications. This CVE number has been withdrawn...

Fedora: Security Advisory (FEDORA-2024-8b5bd4ad5f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-db558f6fb2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for chromium (FEDORA-2024-01f4c93547)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Anope 安全漏洞

Anope is a set of open source IRC services open sourced by Anope IRC Services. A security vulnerability exists in Anope versions prior to 2.0.15, which stems from a vulnerability that does not prevent an attacker from resetting the password of a suspended account...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-115.9.1esr-i686-1slack15.0.txz: Upgraded. This update fixes a critical security issue: An attacker was able ...

[SECURITY] Fedora 40 Update: firefox-124.0-1.fc40

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 40 Update: libreoffice-24.2.1.2-5.fc40

LibreOffice is an Open Source, community-developed, office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...

[SECURITY] Fedora 38 Update: chromium-123.0.6312.58-1.fc38

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 40 Update: pgadmin4-8.4-2.fc40

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

[SECURITY] Fedora 40 Update: pgadmin4-8.4-1.fc40

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

[SECURITY] Fedora 40 Update: ceph-18.2.2-1.fc40

Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...

[SECURITY] Fedora 40 Update: dav1d-1.4.0-1.fc40

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness...

CVE-2024-29186

Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP. When Bref prior to version 2.1.17 is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion...

CVE-2024-29186

CVE-2024-29186 affects Bref prior to 2.1.17. During Event-Driven Function runtime handling with a RequestHandlerInterface, Bref converts Lambda events to PSR-7 objects and parses multipart headers. The Riverline/multipart-parser’s StreamedPart::parseHeaderContent performs slow multi-byte header s...

[SECURITY] Fedora 39 Update: chromium-123.0.6312.58-1.fc39

Chromium is an open-source web browser, powered by WebKit Blink...

Lychee 安全漏洞

Lychee is a beautiful and easy to use photo management system from The Lychee Organisation open source. It is used to manage and share photos. A security vulnerability exists in Lychee version 3.1.6, which stems from a cross-site request forgery CSRF vulnerability. The vulnerability can be...

FreeScout 安全漏洞

FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework. A security vulnerability exists in FreeScout versions prior to 1.8.128, which stems from vulnerability to operating system command injection attacks...