Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3977-1: xfpt Security Advisory Updates
An issue has been found in xfpt, a tool to generate XML from plain tex. The issue is about bad handling of input data, which may result in a stack-based buffer…
Debian LTS: DLA-3976-1: tgt Security Advisory Updates
An issue has been found in tgt, Linux SCSI target user-space daemon and tools. The issue was related to using rand() without proper seed, resulting in identica…
Mageia 2024-0382: libsoup3 & libsoup Security Advisory Updates
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '' characters at the end of header names are ignored, i.e., a "Transfer…
Debian LTS: DLA-3975-1: proftpd-dfsg Security Advisory Updates
ProFTPD a popular FTP server was affected by multiple vulnerabilities. CVE-2023-48795
SUSE: 2024:4116-1 important: xen Security Advisory Updates
* bsc#1232542 * bsc#1232622 * bsc#1232624 Cross-References:
SUSE: 2024:4117-1 important: webkit2gtk3 Security Advisory Updates
* bsc#1232747 * bsc#1233631 * bsc#1233632 Cross-References:
SUSE: 2024:4118-1 important: postgresql14 Security Advisory Updates
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
SUSE: 2024:4110-1 moderate: python-aiohttp Security Advisory Updates
* bsc#1233447 Cross-References: * CVE-2024-52304
SUSE: 2024:4114-1 important: postgresql13 Security Advisory Updates
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
Fedora 40: rust-rustls 2024-632b468c59 Security Advisory Updates
Update the rustls crate to version 0.23.17. Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 (stack overfl…
Fedora 40: rust-zlib-rs 2024-632b468c59 Security Advisory Updates
Update the rustls crate to version 0.23.17. Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 (stack overfl…
Fedora 40: xen 2024-7c2cfa2fe5 Security Advisory Updates
Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818] libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]
Fedora 41: nss 2024-b266d38c44 Security Advisory Updates
Update NSS to 3.106.0 Update to Firefox 133.0
Fedora 41: firefox 2024-b266d38c44 Security Advisory Updates
Update NSS to 3.106.0 Update to Firefox 133.0
openSUSE: 2024:0382-1 important: cobbler Advisory Security Update
An update that solves one vulnerability and has 10 fixes is now available.
Debian LTS: DLA-3973-1: redis Security Advisory Updates
Multiple vulnerabilities have been fixed in the key¢''value database Redis. CVE-2022-35977
SUSE: 2024:4109-1 moderate: libuv Security Advisory Updates
* bsc#1219724 Cross-References: * CVE-2024-24806
SUSE: 2024:4095-1 important: postgresql15 Security Advisory Updates
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
SUSE: 2024:4096-1 important: postgresql14 Security Advisory Updates
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
SUSE: 2024:4097-1 important: postgresql12 Security Advisory Updates
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
SUSE: 2024:4098-1 important: postgresql15 Security Advisory Updates
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
SUSE: 2024:4099-1 important: postgresql12 Security Advisory Updates
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
SUSE: 2024:4093-1 important: python-virtualenv Security Advisory Updates
* bsc#1233706 Cross-References: * CVE-2024-53899
SUSE: 2024:4094-1 important: qemu Security Advisory Updates
* bsc#1224132 * bsc#1229007 * bsc#1229929 * bsc#1230140 * bsc#1230834