Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0287: libtiff Security Advisory Updates
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certai…
Debian LTS: DLA-3885-1: redis Security Advisory Updates
It was discovered that there were a number of issues in Redis, a popular key-value database: * CVE-2023-45145: On startup, Redis began listening on a Unix
SUSE: 2024:3187-1 important: python-Django Security Advisory Updates
* bsc#1229823 Cross-References: * CVE-2024-45230
SUSE: 2024:3188-1 important: containerd Security Advisory Updates
* bsc#1217070 * bsc#1217952 * bsc#1221400 * bsc#1224323 * bsc#1228553
SUSE: 2024:3189-1 important: the Linux Kernel Security Advisory Updates
* bsc#1082555 * bsc#1190317 * bsc#1196516 * bsc#1205462 * bsc#1210629
SUSE: 2024:3190-1 important: the Linux Kernel Security Advisory Updates
* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261
SUSE: 2024:3191-1 important: postgresql16 Security Advisory Updates
* bsc#1229013 Cross-References: * CVE-2024-7348
SUSE: 2024:3183-1 important: java-1_8_0-ibm Security Advisory Updates
* bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051
SUSE: 2024:3186-1 important: buildah Security Advisory Updates
* bsc#1221243 * bsc#1221677 * bsc#1224117 Cross-References:
Fedora 40: expat 2024-f27c29c09c Security Advisory Updates
Rebase to version 2.6.3
Mageia 2024-0285: vim Security Advisory Updates
Use-after-free in tagstack_clear_entry() in Vim
Mageia 2024-0284: ntfs-3g Security Advisory Updates
NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. (CVE-2023-52890) References: - https://bugs.mageia.org/show_bug.cgi?i…
Mageia 2024-0283: ffmpeg Security Advisory Updates
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmd…
Debian LTS: DLA-3884-1: cacti Security Advisory Updates
Cacti, a web interface for graphing of monitoring systems, was vulnerable. CVE-2022-41444
Oracle7: ELSA-2024-4647: qt5-qtbase Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:3181-1 important: postgresql16 Security Advisory Updates
* bsc#1229013 Cross-References: * CVE-2024-7348
SUSE: 2024:3182-1 moderate: expat Security Advisory Updates
* bsc#1229930 * bsc#1229931 * bsc#1229932 Cross-References:
openSUSE: 2024:0294-1 moderate: kanidm Advisory Security Update
An update that solves three vulnerabilities and has one errata is now available.
Ubuntu 6997-1: LibTIFF Security Advisory Updates
LibTIFF could be made to crash if it received specially crafted input.
Ubuntu 6841-2: PHP Security Advisory Updates
PHP could be made to accept invalid URLs.
SUSE: 2024:3165-1 important: wireshark Security Advisory Updates
* bsc#1207666 * bsc#1211708 * bsc#1211709 * bsc#1213318 * bsc#1215959
SUSE: 2024:3168-1 important: postgresql16 Security Advisory Updates
* bsc#1229013 Cross-References: * CVE-2024-7348
SUSE: 2024:3169-1 important: postgresql16 Security Advisory Updates
* bsc#1229013 Cross-References: * CVE-2024-7348
Debian LTS: DLA-3883-1: python-jwcrypto Security Advisory Updates
It was discovered that there was a potential denial of service (DoS) attack in python-jwcrypto, an implementation of JSON Web Encryption and similar object sig…