Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 39: libppd 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Mageia 2024-0313: python-astropy Security Advisory Updates
Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` functio…
Ubuntu 7032-1: Tomcat Security Advisory Updates
Tomcat could allow unintended access to network services.
CISA Flags Critical Ivanti vTM Vulnerability Amid Active Exploitation Concerns
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager (vTM) to it…
Fedora 41: iwd 2024-5d6c951b0b Security Advisory Updates
iwd 2.22: Fix issue with handling the Affinities property. Fix issue with handling ConnectedAccessPoint signal when roaming.
Mageia 2024-0307: clamav Security Advisory Updates
Fixed a possible out-of-bounds read bug in the PDF file parser that could cause a denial-of-service (DoS) condition. (CVE-2024-20505) Changed the logging modul…
Mageia 2024-0302: microcode Security Advisory Updates
Observable discrepancy in RAPL interface for some Intel® Processors may allow a privileged user to potentially enable information disclosure via local access. …
Fedora 39: clamav 2024-05d7ee197e Security Advisory Updates
Update to 1.0.7 CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing a…
Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability
Ivanti has revealed that a newly patched security flaw in its Cloud Service Appliance (CSA) has come under active exploitation in the wild.The high-severity vu…
Fedora 40: clamav 2024-e8f7a74693 Security Advisory Updates
Update to 1.0.7 CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing a…
Mageia 2024-0295: libpcap Security Advisory Updates
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo…
Mageia 2024-0292: apr Security Advisory Updates
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially r…
Mageia 2024-0283: ffmpeg Security Advisory Updates
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmd…
Ubuntu 6991-1: AIOHTTP Security Advisory Updates
python-aiohttp would allow unintended access to files over the network.
Debian LTS: DLA-3865-1: frr Security Advisory Updates
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to potentially trigger those effect…
Debian LTS: DLA-3858-1: ruby2.7 Security Advisory Updates
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in denial-of-service (DoS), information leak, and remot…
Ubuntu 6963-1: GNOME Shell Security Advisory Updates
GNOME Shell could allow unintended access to network services.
Fedora 40: chromium 2024-0462a59d45 Security Advisory Updates
Update to 127.0.6533.99 * Critical CVE-2024-7532: Out of bounds memory access in ANGLE * High CVE-2024-7533: Use after free in Sharing * High CVE-2024-7550: Ty…
Fedora 39: chromium 2024-b60f51180f Security Advisory Updates
Update to 127.0.6533.99 * Critical CVE-2024-7532: Out of bounds memory access in ANGLE * High CVE-2024-7533: Use after free in Sharing * High CVE-2024-7550: Ty…
Gentoo: GLSA-202408-28: rsyslog: Heap Buffer OverflowSecurity Advisory Updates
A vulnerability has been discovered in rsyslog, which could possibly lead to remote code execution.
Gentoo: GLSA-202408-05: Redis: Security Advisory Updates
Multiple vulnerabilities have been discovered in Redis, the worst of which may lead to a denial of service or possible remote code execution.
Gentoo: GLSA-202408-02: Mozilla Firefox: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which could lead to remote code execution.
Fedora 39: chromium 2024-f2e57b108e Security Advisory Updates
update to 127.0.6533.72 * CVE-2024-6988: Use after free in Downloads * CVE-2024-6989: Use after free in Loader * CVE-2024-6991: Use after free in Dawn * CVE-20…
Ubuntu 6911-1: Nova Security Advisory Updates
Nova would allow unintended access to files over the network.