vulnerability

Fedora and RHEL Users Alerted to OpenSSH Vulnerability

A new vulnerability, CVE-2024-6409, in OpenSSH versions 8.7 and 8.8 risks remote code execution; Fedora 36/37 and RHEL 9 are affected.

Critical CVE-2024-32462 exposed in Flatpak, allowing unauthorized code execution. Update urgently to fixed versions 1.14.6 and above.

PuTTY's security flaw (CVE2024-31497) in ECDSA P521 keys risks private data exposure. Urgent update is needed.

A week after finding a malicious backdoor, GitHub has safely restored access to the XZ Utils repo for developers worldwide.

Canonical rebuilds Ubuntu 24.04 LTS packages for Noble Numbat Beta, ensuring safety from CVE-2024-3094 threat.

openSUSE rebuilds the entire codebase of Tumbleweed after a backdoor discovery in the xz library. Immediate update required!

After Linux XZ Tarball's backdoor discovery, Debian's devs decided to pause the 12.6 release for an in-depth analysis of CVE effects.

The Dirty Pipe vulnerability allows attackers to overwrite data in read-only files and to privilege themselves with code injection.

Security vendor Qualys found the flaw and published details in a coordinated disclosure.

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device.