Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:3303-1 important: python312 Security Advisory Updates
* bsc#1227999 * bsc#1228780 * bsc#1229596 * bsc#1229704 * bsc#1230227
SUSE: 2024:3304-1 important: the Linux Kernel Security Advisory Updates
* bsc#1228002 Cross-References: * CVE-2022-48791
Oracle7: ELSA-2024-4560: java-1.8.0-openjdk Important (aarch64) Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle7: ELSA-2024-4549: ghostscript Important (aarch64) Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle7: ELSA-2024-4560: java-1.8.0-openjdk Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle7: ELSA-2024-4549: ghostscript Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:3297-1 moderate: python-dnspython Security Advisory Updates
* bsc#1230353 Cross-References: * CVE-2023-29483
Debian LTS: DLA-3891-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
SUSE: 2024:3293-1 important: python36 Security Advisory Updates
* bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
SUSE: 2024:3294-1 important: python3 Security Advisory Updates
* bsc#1228780 Cross-References: * CVE-2024-6923
SUSE: 2024:3295-1 important: gstreamer-plugins-bad Security Advisory Updates
* bsc#1218534 * bsc#1219494 * bsc#1223263 * bsc#1226892 * bsc#1226897
Fedora 39: chromium 2024-37f95ce86b Security Advisory Updates
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Fedora 41: chromium 2024-9e85c72624 Security Advisory Updates
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Debian: DSA-5772-1: libreoffice Security Advisory Updates
Yufan You discovered that Libreoffice's handling of documents based on ZIP archives was suspectible to spoofing attacks when the repair mode attempts to addres…
Debian: DSA-5771-1: php-twig Security Advisory Updates
Fabien Potencier discovered that under some conditions the sandbox mechanism of Twig, a template engine for PHP, could by bypassed. For the stable distribution…
Debian: DSA-5770-1: expat Security Advisory Updates
Shang-Hung Wan discovered multiple vulnerabilities in the Expat XML parsing C library, which could result in denial of service or potentially the execution of …
Ubuntu 7017-1: Quagga Security Advisory Updates
Quagga could be made to crash if it received specially crafted network traffic.
Ubuntu 7016-1: FRR Security Advisory Updates
FRR could be made to crash if it received specially crafted network traffic.
SUSE: 2024:3289-1 important: gstreamer-plugins-bad, libvpl Security Advisory Updates
* bsc#1218534 * bsc#1219494 * bsc#1223263 * bsc#1226892 * bsc#1226897
openSUSE: 2024:0305-1 important: gstreamer-plugins-bad Advisory Security Update
An update that solves four vulnerabilities and has one errata is now available.
Oracle9: ELSA-2024-12618: kernel Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:3266-1 important: SUSE Manager Client Tools Security Advisory Updates
* bsc#1220136 * bsc#1224349 * bsc#1225349 * bsc#1226191 * bsc#1226284
Fedora 40: microcode_ctl 2024-e6b5e38ae6 Security Advisory Updates
Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) m…
Mageia 2024-0307: clamav Security Advisory Updates
Fixed a possible out-of-bounds read bug in the PDF file parser that could cause a denial-of-service (DoS) condition. (CVE-2024-20505) Changed the logging modul…