Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: expat 2024-ccc5045ab9 Security Advisory Updates
Rebase to version 2.6.4
Fedora 41: opendmarc 2024-513cf04db3 Security Advisory Updates
Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 Convert to %autorelease and %autochangelog Simplify spec Remove checks on if systemd is present Remov…
Debian: DSA-5807-1: nss Security Advisory Updates
Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in denial of service or potentially the execution of arbitar…
openSUSE: 2024:0364-1 important: virtualbox Advisory Security Update
An update that solves four vulnerabilities and has one errata is now available.
Debian: DSA-5806-1: libarchive Security Advisory Updates
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution …
Mageia 2024-0354: quictls Security Advisory Updates
Invalid low-level GF(2^m) parameters can lead to an OOB memory access. (CVE-2024-9143) References: - https://bugs.mageia.org/show_bug.cgi?id=33736
Mageia 2024-0353: htmldoc Security Advisory Updates
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node…
Mageia 2024-0352: libheif Security Advisory Updates
In Libheif, insufficient checks in ImageOverlay::parse() while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bound…
Mageia 2024-0351: python-werkzeug Security Advisory Updates
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werk…
Mageia 2024-0350: thunderbird Security Advisory Updates
Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…
Mageia 2024-0349: nspr, nss, firefox & rust Security Advisory Updates
Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…
Fedora 40: radare2 2024-c52c5c8791 Security Advisory Updates
fix CVE-2024-48241
Fedora 40: iaito 2024-c52c5c8791 Security Advisory Updates
fix CVE-2024-48241
Fedora 39: iaito 2024-e7c0a0d876 Security Advisory Updates
fix CVE-2024-48241
Fedora 41: radare2 2024-658aeaa7ea Security Advisory Updates
fix CVE-2024-48241
Fedora 41: iaito 2024-658aeaa7ea Security Advisory Updates
fix CVE-2024-48241
Fedora 39: radare2 2024-e7c0a0d876 Security Advisory Updates
fix CVE-2024-48241
Mageia 2024-0348: ruby-webrick Security Advisory Updates
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…
Mageia 2024-0347: python-urllib3 Security Advisory Updates
When using urllib3's proxy support with ProxyManager, the Proxy-Authorization header is only sent to the configured proxy, as expected. However, when sending H…
openSUSE: 2024:0358-1 moderate: qbittorrent Advisory Security Update
An update that fixes one vulnerability is now available.
Debian: DSA-5805-1: guix Security Advisory Updates
It was discovered that the daemon of the GNU Guix functional package manager was susceptible to privilege escalation. For additional information please refer t…
SUSE: 2024:3954-1 moderate: java-21-openjdk Security Advisory Updates
* bsc#1231702 * bsc#1231711 * bsc#1231716 * bsc#1231719
SUSE: 2024:3957-1 moderate: python311 Security Advisory Updates
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
SUSE: 2024:3958-1 moderate: python311 Security Advisory Updates
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287