Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-4002-1: intel-microcode Security Advisory Updates
A microcode update has been released for Intel processors, addressing multiple vulnerabilties which potentially could cause local privileged escalation or loca…
SUSE: 2024:4411-1 moderate: mozjs115 Security Advisory Updates
* bsc#1232599 * bsc#1232602 * bsc#1233766 * bsc#1233786
SUSE: 2024:4412-1 moderate: mozjs78 Security Advisory Updates
* bsc#1232599 Cross-References: * CVE-2024-50602
SUSE: 2024:4407-1 moderate: aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative Security Advisory Updates
* bsc#1047218 * bsc#1233297 Cross-References: * CVE-2024-47535
SUSE: 2024:4409-1 low: Recommended vim Security Advisory Updates
* bsc#1220618 * bsc#1229238 * bsc#1231373 Cross-References:
Fedora 41: prometheus-podman-exporter 2024-8d1b3f4466 Security Advisory Updates
release v1.14.0
Fedora 40: prometheus-podman-exporter 2024-f2a4ffc1ff Security Advisory Updates
release v1.14.0
Fedora 40: chromium 2024-4808dce926 Security Advisory Updates
Update to 131.0.6778.204 High CVE-2024-12692: Type Confusion in V8 High CVE-2024-12693: Out of bounds memory access in V8 High CVE-2024-12694: Use after free i…
Fedora 40: mingw-gstreamer1-plugins-base 2024-2284729772 Security Advisory Updates
Update to 1.24.10, fixes multiple CVEs.
Fedora 40: mingw-gstreamer1-plugins-good 2024-2284729772 Security Advisory Updates
Update to 1.24.10, fixes multiple CVEs.
Fedora 40: mingw-orc 2024-2284729772 Security Advisory Updates
Update to 1.24.10, fixes multiple CVEs.
Fedora 40: mingw-gstreamer1-plugins-bad-free 2024-2284729772 Security Advisory Updates
Update to 1.24.10, fixes multiple CVEs.
Fedora 40: mingw-gstreamer1 2024-2284729772 Security Advisory Updates
Update to 1.24.10, fixes multiple CVEs.
Debian LTS: DLA-4001-1: libxstream-java Security Advisory Updates
XStream is a simple java library to serialize objects to XML and back again. Two vulnerabilities were fixed: CVE-2021-43859:
Mageia 2024-0396: mozjs78 Security Advisory Updates
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted pa…
Mageia 2024-0395: thunderbird Security Advisory Updates
Matrix-js-sdk has insufficient MXC URI validation which could allow client-side path traversal. (CVE-2024-50336) References: - https://bugs.mageia.org/show_bug…
Mageia 2024-0394: tomcat tomcat Security Advisory Updates
RCE due to TOCTOU issue in JSP compilation. (CVE-2024-50379) DoS in examples web application. (CVE-2024-54677) References: - https://bugs.mageia.org/show_bug.c…
Debian LTS: DLA-4000-1: sqlparse Security Advisory Updates
Multiple vulnerabilities were found in sqlparse, a non-validating SQL parser for Python, which can lead to Denial of Service. CVE-2021-32839
Debian LTS: DLA-3999-1: gst-plugins-base1.0 Security Advisory Updates
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of servi…
openSUSE: 2024:0412-1 moderate: python-python-sql Advisory Security Update
An update that fixes one vulnerability is now available.
openSUSE: 2024:0413-1 moderate: python-python-sql Advisory Security Update
An update that fixes one vulnerability is now available.
Debian LTS: DLA-3998-1: python-urllib3 Security Advisory Updates
Multiple vulnerabilities were found in python-urllib3, an HTTP library with thread-safe connection pooling for Python, which could lead to information disclosu…
Debian LTS: DLA-3997-1: php-laravel-framework Security Advisory Updates
It was discovered that there was a remotely exploitable vulnerability in php-laravel-framework, a popular web application framework written in PHP.
Fedora 41: webkitgtk 2024-32bc143584 Security Advisory Updates
Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505