Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:3433-1 important: quagga Security Advisory Updates
* bsc#1202023 * bsc#1229438 * bsc#1230866 Cross-References:
Gentoo: GLSA-202409-25: Xpdf: Security Advisory Updates
Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service.
CISA Flags Critical Ivanti vTM Vulnerability Amid Active Exploitation Concerns
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager (vTM) to it…
SUSE: 2024:3426-1 important: quagga Security Advisory Updates
* bsc#1069468 * bsc#1079798 * bsc#1079799 * bsc#1079800 * bsc#1079801
SUSE: 2024:3427-1 important: python311 Security Advisory Updates
* bsc#1229596 * bsc#1229704 * bsc#1230227 Cross-References:
SUSE: 2024:3428-1 moderate: apr Security Advisory Updates
* bsc#1229783 Cross-References: * CVE-2023-49582
SUSE: 2024:3429-1 moderate: apr Security Advisory Updates
* bsc#1229783 Cross-References: * CVE-2023-49582
SUSE: 2024:3430-1 important: python36 Security Advisory Updates
* bsc#1230227 Cross-References: * CVE-2024-6232
SUSE: 2024:3425-1 important: the Linux Kernel (Live Patch 18 for SLE 15 SP4) Security Advisory Updates
* bsc#1223521 * bsc#1225099 * bsc#1225313 Cross-References:
SUSE: 2024:3418-1 important: python311 Security Advisory Updates
* bsc#1229596 * bsc#1229704 * bsc#1230227 Cross-References:
SUSE: 2024:3421-1 moderate: xen Security Advisory Updates
* bsc#1230366 Cross-References: * CVE-2024-45817
SUSE: 2024:3422-1 moderate: xen Security Advisory Updates
* bsc#1230366 Cross-References: * CVE-2024-45817
SUSE: 2024:3423-1 important: xen Security Advisory Updates
* bsc#1222453 * bsc#1227355 * bsc#1228574 * bsc#1228575 * bsc#1230366
SUSE: 2024:3424-1 moderate: xen Security Advisory Updates
* bsc#1230366 Cross-References: * CVE-2024-45817
Debian LTS: DLA-3894-1: booth Security Advisory Updates
Invalid HMAC could have been accepted in the Booth Cluster Ticket Manager. For Debian 11 bullseye, this problem has been fixed in version
openSUSE: 2024:0311-1 important: chromium Advisory Security Update
An update that fixes 6 vulnerabilities is now available.
openSUSE: 2024:0312-1 important: chromium Advisory Security Update
An update that fixes 6 vulnerabilities is now available.
SUSE: 2024:3408-1 important: the Linux Kernel Security Advisory Updates
* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261
SUSE: 2024:3411-1 important: python39 Security Advisory Updates
* bsc#1229596 * bsc#1229704 * bsc#1230227 Cross-References:
Ubuntu 7030-1: py7zr Security Advisory Updates
py7zr could be made to create arbitrary files when extracting the contents of a specially crafted 7z archive.
Gentoo: GLSA-202409-24: Tor: Security Advisory Updates
Multiple vulnerabilities have been found in Tor, the worst of which could result in denial of service.
Gentoo: GLSA-202409-23: ZNC: Remote Code ExecutionSecurity Advisory Updates
A vulnerability has been found in ZNC which could result in remote code execution.
Gentoo: GLSA-202409-22: GCC: Flawed Code GenerationSecurity Advisory Updates
A vulnerability has been discovered in GCC, which can lead to flawed code generation.
Gentoo: GLSA-202409-21: Hunspell: Security Advisory Updates
Multiple vulnerabilities have been discovered in Hunspell, the worst of which could lead to arbitrary code execution.