Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 7114-1: GLib Security Advisory Updates
GLib could be made to crash or other undefined behavior if it received a specially crafted input.
Ubuntu 7104-1: curl Security Advisory Updates
curl could be made to expose sensitive information over the network.
SUSE: 2024:4006-1 critical: Maintenance SUSE Manager 4.3 Security Advisory Updates
* bsc#1146701 * bsc#1211899 * bsc#1212985 * bsc#1217003 * bsc#1217338
SUSE: 2024:4007-1 critical: Maintenance SUSE Manager 4.3 Release Notes Security Advisory Updates
* bsc#1146701 * bsc#1211899 * bsc#1212985 * bsc#1217003 * bsc#1217338
SUSE: 2024:4009-1 critical: Maintenance SUSE Manager 5.0 Security Advisory Updates
* bsc#1228945 * bsc#1229077 * bsc#1229923 * bsc#1230255 * bsc#1230536
SUSE: 2024:4010-1 moderate: SUSE Manager Client Tools Security Advisory Updates
* bsc#1213933 * bsc#1223142 * bsc#1226759 * bsc#1227341 * bsc#1227578
Ubuntu 7108-1: AsyncSSH Security Advisory Updates
Several issues were fixed in AsyncSSH.
Oracle8: ELSA-2024-9689: binutils Low Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2024-9636: webkit2gtk3 Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle7: ELSA-2024-7553: cups-filters Important (aarch64) Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Debian LTS: DLA-3956-1: smarty3 Security Advisory Updates
Multiple vulnerabilties were discovered for smarty3, a widely-used PHP templating engine, which potentially allows an attacker to perform an XSS (e.g JavaScrip…
Gentoo: GLSA-202411-08: X.Org X server, XWayland: Security Advisory Updates
A vulnerability has been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation.
Gentoo: GLSA-202411-07: Pillow: Arbitrary code executionSecurity Advisory Updates
A vulnerability has been discovered in Pillow, which may lead to arbitrary code execution.
Fedora 41: ghostscript 2024-69af78a508 Security Advisory Updates
CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (fedora#2325238) 2325241 - CVE-2024-46952 CVE-2024-46953 CVE-20…
Debian LTS: DLA-3955-1: waitress Security Advisory Updates
DoS due to resource exhaustion has been fixed in waitress, a Python Web Server Gateway Interface. For Debian 11 bullseye, this problem has been fixed in version
Fedora 41: microcode_ctl 2024-28ea86c8aa Security Advisory Updates
Update to upstream 2.1-47. 20241112 Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; Updat…
Fedora 41: php-bartlett-PHP-CompatInfo 2024-16a71b7cf5 Security Advisory Updates
bartlett/php-compatinfo-db 6.12.0 - 2024-10-29 Added db:show command is now able to display deprecations on all components PHP 8.2.25 support PHP 8.3.13 support
Fedora 41: python-waitress 2024-157678aad0 Security Advisory Updates
Update to version 3.0.1, which resolves CVE-2024-49768 and CVE-2024-49769.
Fedora 40: ghostscript 2024-b1877232ce Security Advisory Updates
CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (fedora#2325237) 2325240 - CVE-2024-46952 CVE-2024-46953 CVE-20…
Fedora 40: php-bartlett-PHP-CompatInfo 2024-727ecb90c7 Security Advisory Updates
bartlett/php-compatinfo-db 6.12.0 - 2024-10-29 Added db:show command is now able to display deprecations on all components PHP 8.2.25 support PHP 8.3.13 support
Fedora 40: webkitgtk 2024-4d940908db Security Advisory Updates
Update to WebKitGTK 2.46.3: Flatten layers to a plane when preseve-3d style is set. Fix DuckDuckGo links by adding a user agent quirk. Fix several crashes and …
Debian LTS: DLA-3953-1: icinga2 Security Advisory Updates
Icinga 2 is a general-purpose monitoring application to fit the needs of any size of network. CVE-2021-32739
Debian: DSA-5813-1: symfony Security Advisory Updates
Moritz Rauch discovered that the Symfony PHP framework implemented persisted remember-me cookies incorrectly, which could result in authentication bypass.
SUSE: 2024:3999-1 important: apache2 Security Advisory Updates
* bsc#1233165 Cross-References: * CVE-2023-45802