Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:3097-1 important: kubernetes1.28 Security Advisory Updates
* bsc#1229858 * bsc#1229867 * bsc#1229869 Cross-References:
Debian LTS: DLA-3857-1: libtommath Security Advisory Updates
It was discovered that there was a series of integer overflow vulnerabilities in LibTomMath, a multiple-precision mathematics library.
Debian LTS: DLA-3868-1: ruby-nokogiri Security Advisory Updates
A vulnerability was discovered in Nokogiri, an open source XML and HTML library for Ruby. An inefficient regular expression was susceptible to excessive backtr…
Debian LTS: DLA-3867-1: git Security Advisory Updates
Multiple vulnerabilities were discovered in git, a fast, scalable and distributed revision control system. CVE-2019-1387
SUSE: 2024:3086-1 low: glib2 Security Advisory Updates
* bsc#1224044 Cross-References: * CVE-2024-34397
Debian LTS: DLA-3866-1: ruby-tzinfo Security Advisory Updates
Path traversal that allowed TZInfo::Timezone.get to load arbitrary files has been fixed in ruby-tzinfo, a Ruby library for working with time zone information.
Fedora 41: lua-mpack 2024-c83b7dcae0 Security Advisory Updates
Fix buffer overrun when giving an offset to Session:receive
Fedora 40: flatpak 2024-7b8a05a5d1 Security Advisory Updates
Update to 1.15.10 (CVE-2024-42472)
Debian LTS: DLA-3865-1: frr Security Advisory Updates
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to potentially trigger those effect…
openSUSE: 2024:0275-1 important: opera Advisory Security Update
An update that fixes one vulnerability is now available.
openSUSE: 2024:0276-1 important: cacti, cacti-spine Advisory Security Update
An update that fixes 10 vulnerabilities is now available.
Debian LTS: DLA-3864-1: webkit2gtk Security Advisory Updates
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-4558
Debian LTS: DLA-3862-1: calibre Security Advisory Updates
Two vulnerabilities have been fixed in the e-book manager Calibre. CVE-2021-44686
SUSE: 2024:3073-1 important: bubblewrap and flatpak Security Advisory Updates
* bsc#1229157 Cross-References: * CVE-2024-42472
SUSE: 2024:3074-1 low: unbound Security Advisory Updates
* bsc#1229068 Cross-References: * CVE-2024-43167
SUSE: 2024:3075-1 important: xen Security Advisory Updates
* bsc#1027519 * bsc#1228574 * bsc#1228575 Cross-References:
SUSE: 2024:3076-1 important: python39 Security Advisory Updates
* bsc#1227233 * bsc#1227378 * bsc#1227999 * bsc#1228780
SUSE: 2024:3077-1 important: qemu Security Advisory Updates
* bsc#1227322 Cross-References: * CVE-2024-4467
SUSE: 2024:3078-1 important: libqt5-qtquick3d Security Advisory Updates
* bsc#1228199 Cross-References: * CVE-2024-40724
openSUSE: 2024:0274-1 important: cacti, cacti-spine Advisory Security Update
An update that fixes 10 vulnerabilities is now available.
Debian LTS: DLA-3858-1: ruby2.7 Security Advisory Updates
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in denial-of-service (DoS), information leak, and remot…
Oracle9: ELSA-2024-6020: postgresql:15 Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2024-6018: postgresql:13 Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2024-6001: postgresql:15 Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: