Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3899-1: python-asyncssh Security Advisory Updates
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python 3.4+ asyncio framework.…
openSUSE: 2024:0319-1 moderate: coredns Advisory Security Update
An update that fixes 6 vulnerabilities is now available.
Mageia 2024-0319: java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, & java-latest-openjdk Security Advisory Updates
Potential UTF8 size overflow. (CVE-2024-21131) Excessive symbol length can lead to infinite loop. (CVE-2024-21138) Range Check Elimination (RCE) pre-loop limit…
SUSE: 2024:3470-1 important: python3 Security Advisory Updates
* bsc#1227233 * bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
SUSE: 2024:3478-1 important: quagga Security Advisory Updates
* bsc#1202023 * bsc#1229438 * bsc#1230866 Cross-References:
SUSE: 2024:3483-1 important: the Linux Kernel Security Advisory Updates
* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261
Debian: DSA-5777-1: booth Security Advisory Updates
It was discovered that the Booth cluster ticket manager failed to correctly validate some authentication hashes. For the stable distribution (bookworm), this p…
Debian: DSA-5776-1: tryton-server Security Advisory Updates
Albert Cervera discovered two missing authorisation checks in the Tryton application platform. For the stable distribution (bookworm), this problem has been fi…
Debian LTS: DLA-3898-1: nghttp2 Security Advisory Updates
Unbounded number of HTTP/2 CONTINUATION frames that could cause DoS was fixed in nghttp2, an implementation of HTTP/2. For Debian 11 bullseye, this problem has…
openSUSE: 2024:0314-1 important: chromium Advisory Security Update
An update that fixes four vulnerabilities is now available.
SUSE: 2024:3467-1 important: the Linux Kernel Security Advisory Updates
* bsc#1202346 * bsc#1227985 * bsc#1228002 * bsc#1228938 * bsc#1228959
SUSE: 2024:3468-1 important: the Linux Kernel (Live Patch 1 for SLE 15 SP6) Security Advisory Updates
* bsc#1225099 * bsc#1228349 Cross-References: * CVE-2023-52846
Oracle8: ELSA-2024-6986: nano Low Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Fedora 39: chromium 2024-e60359f212 Security Advisory Updates
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Mageia 2024-0317: python3 Security Advisory Updates
A defect was discovered in the Python ¢''ssl¢'' module where there is a memory race condition with the ssl.SSLContext methods ¢''cert_store_stats()¢'' and ¢''g…
Mageia 2024-0316: kernel, kmod-xtables-addons & kmod-virtualbox Security Advisory Updates
Upstream kernel version 6.6.52 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Mageia 2024-0315: apache-mod_jk Security Advisory Updates
Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration whi…
Mageia 2024-0314: gnome-shell Security Advisory Updates
In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g…
Fedora 40: chromium 2024-aaff7345b8 Security Advisory Updates
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Debian LTS: DLA-3897-1: trafficserver Security Advisory Updates
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2023-38522
Ubuntu 7045-1: libppd Security Advisory Updates
libppd could be made to run programs if it received specially crafted network traffic.
Ubuntu 7044-1: libcupsfilters Security Advisory Updates
libcupsfilters could be made to run programs if it received specially crafted network traffic.
Ubuntu 7043-1: cups-filters Security Advisory Updates
cups-filters could be made to run programs if it received specially crafted network traffic.
Ubuntu 7040-1: ConfigObj Security Advisory Updates
ConfigObj could be made to crash if it received specially crafted input.