USN-8407-1: strongSwan vulnerability
Elliott Childre discovered that strongSwan incorrectly handled the cloning of certain identities. A remote attacker could use this
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Linux Advisories
USN-8408-1: Twig vulnerability
It was discovered that Twig did not properly validate PHP callables when using a source policy. An authenticated
USN-8406-1: Net::CIDR::Lite vulnerabilities
Dave Rolsky discovered that Net::CIDR::Lite did not properly handle extraneous zero characters at the beginning of an IP
2 sources
USN-8405-1: CUPS vulnerabilities
Ariel Silver discovered that CUPS incorrectly handled username comparisons during authorization checks. A local attacker could possibly use
Connected reporting, one intelligence threadubuntu.com
USN-8403-1: Kea DHCP vulnerability
Ali Norouzi discovered that Kea DHCP did not properly handle maliciously crafted messages over configured API sockets and
USN-8404-1: Transmission vulnerability
It was discovered that Transmission had a clickjacking weakness in the browser-facing WebUI and RPC response paths. An
DSA-6329-1 tomcat11 – security update
https://security-tracker.debian.org/tracker/DSA-6329-1
DSA-6328-1 tomcat10 – security update
https://security-tracker.debian.org/tracker/DSA-6328-1
USN-8402-1: systemd vulnerabilities
It was discovered that systemd-nspawn incorrectly handled certain optional configuration files. A local attacker could possibly use this
USN-8399-1: Pillow vulnerabilities
It was discovered that Pillow incorrectly handled large glyph advance values in fonts. An attacker could possibly use
USN-8400-1: poppler vulnerability
It was discovered that poppler incorrectly handled certain malformed PDF tiling patterns in the Splash backend. An attacker
USN-8397-1: libjxl vulnerability
It was discovered that libjxl did not properly handle certain crafted PBM images. An attacker could possibly use