Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:3524-1 important: frr Security Advisory Updates
* bsc#1230866 Cross-References: * CVE-2017-15865
SUSE: 2024:3525-1 important: openssl-3 Security Advisory Updates
* bsc#1230698 Cross-References: * CVE-2024-41996
SUSE: 2024:3526-1 moderate: Mesa Security Advisory Updates
* bsc#1222040 * bsc#1222041 * bsc#1222042 Cross-References:
Oracle8: ELSA-2024-12701: oVirt 4.4 ovirt-engine Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 8 oVirt 4.4 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2024-7552: thunderbird Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Debian LTS: DLA-3910-1: e2fsprogs Security Advisory Updates
An out-of-bounds read/write vulnerability has been fixed in the e2fsck tool of the ext2/ext3/ext4 file system utilities e2fsprogs. For Debian 11 bullseye, this…
Mageia 2024-0324: cjson Security Advisory Updates
cJSON was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c. (CVE-2024…
Mageia 2024-0323: openjpeg2 Security Advisory Updates
Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal. (CVE-2023-39327) Referenc…
Mageia 2024-0322: hostapd & wpa_supplicant Security Advisory Updates
The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-lo…
Mageia 2024-0321: chromium-browser-stable Security Advisory Updates
Use after free in Downloads. (CVE-2024-6988) Use after free in Loader. (CVE-2024-6989) Use after free in Dawn. (CVE-2024-6991) Heap buffer overflow in Layout. …
Fedora 39: php 2024-7c800c4df7 Security Advisory Updates
PHP version 8.2.24 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Fedora 40: pgadmin4 2024-126d22c121 Security Advisory Updates
Fix CVE-2024-9014.
Fedora 41: firefox 2024-1d8785c391 Security Advisory Updates
New upstream builds (131.0)
Debian: DSA-5782-1: linux Security Advisory Updates
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
SUSE: 2024:3517-1 low: opensc Security Advisory Updates
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
SUSE: 2024:3518-1 important: MozillaFirefox Security Advisory Updates
* bsc#1230979 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5
SUSE: 2024:3519-1 important: MozillaFirefox Security Advisory Updates
* bsc#1230979 Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6
Ubuntu 7055-1: FreeRADIUS Security Advisory Updates
A system authentication measure could be bypassed.
Ubuntu 7054-1: unzip Security Advisory Updates
unzip could be made to crash or run programs as your login if it opened a specially crafted file.
Oracle8: ELSA-2024-7502: go-toolset:ol8 Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:3515-1 moderate: expat Security Advisory Updates
* bsc#1229930 * bsc#1229931 * bsc#1229932 Cross-References:
SUSE: 2024:3516-1 moderate: libpcap Security Advisory Updates
* bsc#1230020 * bsc#1230034 Cross-References: * CVE-2023-7256
Fedora 40: firefox 2024-5f39927e90 Security Advisory Updates
New upstream builds (131.0)
Oracle7: ELSA-2024-12709: python-urllib3 Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: