Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0306: suricata Security Advisory Updates
CVE-2024-37151 Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. CV…
Fedora 39: python3.13 2024-f2fc325c40 Security Advisory Updates
Python 3.13.0rc2
Debian LTS: DLA-3889-1: pymongo Security Advisory Updates
pymongo a python interface to the MongoDB document-oriented database was vulnerable. An out-of-bounds read in the 'bson' module allowed deserialization of
openSUSE: 2024:0303-1 moderate: htmldoc Advisory Security Update
An update that fixes one vulnerability is now available.
openSUSE: 2024:0304-1 moderate: htmldoc Advisory Security Update
An update that fixes one vulnerability is now available.
Mageia 2024-0304: tgt Security Advisory Updates
tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of c…
Mageia 2024-0303: wireshark Security Advisory Updates
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.2.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file. (CVE-2024-8250) …
Mageia 2024-0302: microcode Security Advisory Updates
Observable discrepancy in RAPL interface for some Intel® Processors may allow a privileged user to potentially enable information disclosure via local access. …
Mageia 2024-0301: postgresql15 & postgresql13 Security Advisory Updates
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_d…
Ubuntu 7014-1: nginx Security Advisory Updates
nginx could be made to crash if it received specially crafted network traffic.
Ubuntu 7012-1: curl Security Advisory Updates
curl could incorrectly check bad certificates when OCSP stapling is in use.
openSUSE: 2024:0302-1 important: chromium Advisory Security Update
An update that fixes four vulnerabilities is now available.
Ubuntu 6560-3: OpenSSH Security Advisory Updates
OpenSSH could be made to crash or run programs as your login if it received a specially crafted input.
Debian LTS: DLA-3888-1: php-twig Security Advisory Updates
A possible sandbox bypass has been fixed in php-twig, a template engine for PHP For Debian 11 bullseye, this problem has been fixed in version
Fedora 39: clamav 2024-05d7ee197e Security Advisory Updates
Update to 1.0.7 CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing a…
Fedora 39: flatpak 2024-03fd821ae2 Security Advisory Updates
flatpak 1.15.10 and bubblewrap 0.10.0 updates, which together fix CVE-2024-42472 in Flatpak.
Fedora 39: bubblewrap 2024-03fd821ae2 Security Advisory Updates
flatpak 1.15.10 and bubblewrap 0.10.0 updates, which together fix CVE-2024-42472 in Flatpak.
Fedora 41: flatpak 2024-0c6db96fc3 Security Advisory Updates
Update to 1.15.10 (CVE-2024-42472)
Debian LTS: DLA-3886-1: nodejs Security Advisory Updates
Node.js a JavaScript runtime environment that executes JavaScript code outside a web browser (server side) was vulnerable. CVE-2023-30589
Fedora 40: chromium 2024-0a4a65f805 Security Advisory Updates
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Fedora 40: mingw-expat 2024-c7b547bec5 Security Advisory Updates
Update to expat-2.6.3.
Fedora 40: clamav 2024-e8f7a74693 Security Advisory Updates
Update to 1.0.7 CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing a…
Fedora 39: thunderbird 2024-e77ad5f585 Security Advisory Updates
Update to 115.15.0 https://www.thunderbird.net/en-US/thunderbird/115.15.0esr/releasenotes/
Fedora 39: mingw-expat 2024-e86a48cd72 Security Advisory Updates
Update to expat-2.6.3.