10917 matches found
USN-6866-1: Linux kernel vulnerabilities
It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of service system crash. CVE-2021-33631 It w...
USN-6862-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2024-5689, CVE-2024-5690,...
Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-6865-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6865-1 advisory. It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An...
OPENSUSE-SU-2024:14092-1 golang-github-prometheus-prometheus-2.53.0-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-2.53.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14091-1 go1.21-1.21.12-1.1 on GA media
These are all security issues fixed in the go1.21-1.21.12-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14094-1 python310-yt-dlp-2024.07.01-1.1 on GA media
These are all security issues fixed in the python310-yt-dlp-2024.07.01-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14093-1 libpoppler-cpp1-24.07.0-1.1 on GA media
These are all security issues fixed in the libpoppler-cpp1-24.07.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14084-1 nodejs-electron-29.4.3-1.1 on GA media
These are all security issues fixed in the nodejs-electron-29.4.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14085-1 fiona-fio-1.9.6-1.1 on GA media
These are all security issues fixed in the fiona-fio-1.9.6-1.1 package on the GA media of openSUSE Tumbleweed...
Google to Block Entrust Certificates in Chrome Starting November 2024
Google has announced that it's going to start blocking websites that use certificates from Entrust starting around November 1, 2024, in its Chrome browser, citing compliance failures and the certificate authority's inability to address security issues in a timely manner. "Over the past several...
OPENSUSE-SU-2024:14081-1 containerd-1.7.17-2.1 on GA media
These are all security issues fixed in the containerd-1.7.17-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-5755
In lunary-ai/lunary versions =v1.2.11, an attacker can bypass email validation by using a dot character '.' in the email address. This allows the creation of multiple accounts with essentially the same email address e.g., '[email protected]' and '[email protected]', leading to incorrect...
CVE-2024-5755 Email Validation Bypass in lunary-ai/lunary
In lunary-ai/lunary versions =v1.2.11, an attacker can bypass email validation by using a dot character '.' in the email address. This allows the creation of multiple accounts with essentially the same email address e.g., '[email protected]' and '[email protected]', leading to incorrect...
CVE-2024-5755
Summary: Lunary-ai/lunary versions ≤ v1.2.11 contain an input validation bypass where a dot in the email address can create multiple accounts that map to the same mailbox, causing synchronization and security concerns. Affected software: lunary-ai/lunary (≤ v1.2.11). Root cause (as described): em...
OPENSUSE-SU-2024:14078-1 python38-3.8.19-4.1 on GA media
These are all security issues fixed in the python38-3.8.19-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14079-1 python39-3.9.19-3.1 on GA media
These are all security issues fixed in the python39-3.9.19-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-6290 vulnerabilities
Vulnerabilities for packages: chromium...
OPENSUSE-SU-2024:14067-1 ruby3.3-rubygem-actionpack-7.0-7.0.8.4-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-actionpack-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14071-1 ruby3.3-rubygem-activesupport-7.0-7.0.8.4-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-activesupport-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed...