Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:4086-1 important: MozillaFirefox Security Advisory Updates
* bsc#1233695 Cross-References: * CVE-2024-11691 * CVE-2024-11692
SUSE: 2024:4088-1 moderate: ovmf Security Advisory Updates
* bsc#1225889 Cross-References: * CVE-2024-1298
SUSE: 2024:4089-1 low: hplip Security Advisory Updates
* bsc#1209401 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6
Fedora 41: perl-Module-ScanDeps 2024-c05ef21f1f Security Advisory Updates
1.37 - fix parsing of "use if ..." Fixes errors in PAR::Packer test t/90-rt59710.t - add test for _parse_libs() 1.36
Fedora 41: mingw-python3 2024-e6b1e638d1 Security Advisory Updates
Backport fix for CVE-2024-9287 Update to python-3.11.0.
Fedora 41: mingw-glib2 2024-67869f1cb3 Security Advisory Updates
Update to 2.82.2, fixes CVE-2024-52533.
Fedora 40: nss 2024-ea7b2e66a1 Security Advisory Updates
Update NSS to 3.106.0 Update to Firefox 133.0
Fedora 40: firefox 2024-ea7b2e66a1 Security Advisory Updates
Update NSS to 3.106.0 Update to Firefox 133.0
Debian LTS: DLA-3968-1: netatalk Security Advisory Updates
Several issues have been found in netatalk, an Apple Filing Protocol service. Three issues are related to off-by-one errorrs and resultant heap-based buffer ov…
Mageia 2024-0380: dcmtk Security Advisory Updates
A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. (CVE-2024-27628) Referenc…
Mageia 2024-0379: tomcat Security Advisory Updates
Authentication bypass when using Jakarta Authentication API. (CVE-2024-52316) Incorrect JSP tag recycling leads to XSS. (CVE-2024-52318) References:
Mageia 2024-0378: wget Security Advisory Updates
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attac…
Mageia 2024-0377: microcode Security Advisory Updates
Improper Finite State Machines (FSMs) in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially …
Mageia 2024-0376: golang Security Advisory Updates
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. CVE-2024-34155 Calling De…
SUSE: 2024:4076-1 low: hplip Security Advisory Updates
* bsc#1209401 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5
SUSE: 2024:4077-1 moderate: python-aiohttp Security Advisory Updates
* bsc#1233447 Cross-References: * CVE-2024-52304
SUSE: 2024:4078-1 important: glib2 Security Advisory Updates
* bsc#1233282 Cross-References: * CVE-2024-52533
SUSE: 2024:4079-1 important: webkit2gtk3 Security Advisory Updates
* bsc#1231039 * bsc#1232747 Cross-References: * CVE-2024-44296
SUSE: 2024:4081-1 important: the Linux Kernel Security Advisory Updates
* bsc#1195775 * bsc#1204171 * bsc#1205796 * bsc#1209290 * bsc#1216223
SUSE: 2024:4082-1 important: the Linux Kernel Security Advisory Updates
* bsc#1204171 * bsc#1205796 * bsc#1206188 * bsc#1206344 * bsc#1209290
SUSE: 2024:4074-1 important: MozillaFirefox Security Advisory Updates
* bsc#1233695 Cross-References: * CVE-2024-11691 * CVE-2024-11692
SUSE: 2024:4075-1 critical: tomcat Security Advisory Updates
* bsc#1233434 Cross-References: * CVE-2024-52316
Oracle9: ELSA-2024-10244: pam:1.5.1 Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2024-10218: perl-App-cpanminus Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: