Aggregator

libtiff-4.6.0-6.fc41.2

Fedora Security Advisories
3 weeks ago
FEDORA-2025-5869edf3de Packages in this update:
  • libtiff-4.6.0-6.fc41.2
Update description:
  • fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)
  • fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)

jpegxl-0.7.2-1.el8

Fedora Security Advisories
3 weeks ago
FEDORA-EPEL-2025-6117766f4b Packages in this update:
  • jpegxl-0.7.2-1.el8
Update description:

Security bugfix from 0.7.x branch. Fixes CVE-2024-11403 and CVE-2024-11498.

USN-7690-1: OpenJDK 17 vulnerabilities

Ubuntu Security Advisories
3 weeks 1 day ago
It was discovered that the 2D component of OpenJDK 17 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) VMashroor Hasan Bhuiyan discovered that the JSSE component of OpenJDK 17 did not properly manage TLS 1.3 handshakes under certain circumstances. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-30754) Martin van Wingerden and Violeta Georgieva of Broadcom discovered that the Networking component of OpenJDK 17 did not properly manage network connections under certain circumstances. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-50059) In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: https://openjdk.org/groups/vulnerability/advisories/2025-07-15

glib2-2.84.4-1.fc42

Fedora Security Advisories
3 weeks 1 day ago
FEDORA-2025-16acfe9927 Packages in this update:
  • glib2-2.84.4-1.fc42
Update description:

Resolve CVE-2025-7039 (Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()) with several other bug fixes.