Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:3922-1 important: libgsf Security Advisory Updates
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
SUSE: 2024:3929-1 moderate: python36 Security Advisory Updates
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
Debian LTS: DLA-3947-1: puma Security Advisory Updates
Two vulnerabilities have been fixed in puma, a threaded HTTP server for Ruby/Rack applications.
Gentoo: GLSA-202411-05: libgit2: Security Advisory Updates
Multiple vulnerabilities have been discovered in libgit2, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202411-04: EditorConfig core C library: arbitrary stack writeSecurity Advisory Updates
A vulnerability has been discovered in EditorConfig Core C library, which may lead to arbitrary code execution.
Gentoo: GLSA-202411-03: Ubiquiti UniFi: Privilege EscalationSecurity Advisory Updates
A vulnerability has been discovered in Ubiquiti UniFi, which can lead to local privilege escalation.
SUSE: 2024:3920-1 important: libgsf Security Advisory Updates
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
SUSE: 2024:3921-1 important: libgsf Security Advisory Updates
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
SUSE: 2024:3923-1 important: gradle Security Advisory Updates
* bsc#1212931 Cross-References: * CVE-2023-35947
SUSE: 2024:3924-1 moderate: python310 Security Advisory Updates
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
SUSE: 2024:3925-1 moderate: curl Security Advisory Updates
* bsc#1232528 Cross-References: * CVE-2024-9681
Fedora 40: syncthing 2024-4d24786142 Security Advisory Updates
Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0
Fedora 40: php-tcpdf 2024-afeeca72ce Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Fedora 41: syncthing 2024-aa6e72c713 Security Advisory Updates
Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0
Fedora 41: php-tcpdf 2024-b00678c08a Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Fedora 39: syncthing 2024-4fc7cdc194 Security Advisory Updates
Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0
Fedora 39: php-tcpdf 2024-0b2854c95b Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Debian LTS: DLA-3945-1: libheif Security Advisory Updates
It was discovered that there were two issues in libheif, a decoder and encoder for the HEIF and AVIF image formats that could have been exploited by specially-…
Ubuntu 7093-1: Werkzeug Security Advisory Updates
Werkzeug could be made to consume resources if it received specially crafted network traffic.
openSUSE: 2024:0350-1 important: govulncheck-vulndb Advisory Security Update
An update that fixes 56 vulnerabilities, contains one feature is now available.
openSUSE: 2024:0349-1 important: htmldoc Security Advisory Update
An update that fixes one vulnerability is now available.
openSUSE: 2024:0349-1 important: htmldoc Advisory Security Update
An update that fixes one vulnerability is now available.
openSUSE: 2024:0347-1 important: chromium Security Advisory Update
An update that fixes two vulnerabilities is now available.
openSUSE: 2024:0348-1 important: chromium Security Advisory Update
An update that fixes two vulnerabilities is now available.