https://security-tracker.debian.org/tracker/DSA-5847-1
OpenJPEG could be made to crash or run programs if it opened a specially crafted file.
Django could be made to cause a denial of service if it received a specially crafted IPv6 string.
In FRR, the internet routing protocol suite software, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket’s buffer size, default 4K on most OSes.
Multiple vulnerabilities have been discovered in PHP, the worst of which could lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.
https://security-tracker.debian.org/tracker/DSA-5848-1
Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
* bsc#1232762 * jsc#PED-10545 Affected Products: * Containers Module 15-SP6
Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
Cybercriminals are becoming increasingly sophisticated, agile, and fast. For managed service providers (MSPs) supporting small and medium-sized businesses (SMBs) with cybersecurity services, staying ahead of these adversaries is crucial. One of the most effective ways to do so is through round-the-clock threat hunting. In this blog, we’ll explore why constant threat hunting is essential, the […]
https://security-tracker.debian.org/tracker/DSA-5846-1
Important: thunderbird security update
Important: raptor2 security update
Important: rsync security update
https://security-tracker.debian.org/tracker/DSA-5843-2
https://security-tracker.debian.org/tracker/DSA-5845-1
The update for rsync announced in DSA 5843-1 introduced a regression when using the -H option to preserve hard links. Updated packages are now available to correct this issue.
* bsc#1235856 Cross-References: * CVE-2024-56374
* bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363
USN-7206-1 caused some regression in rsync.
