Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 6912-1: provd Security Advisory Updates
provd could be made to run programs as an administrator.
Gentoo: GLSA-202407-28: Freenet: Deanonymization VulnerabilitySecurity Advisory Updates
A vulnerability has been discovered in Freenet, which can lead to deanonymization due to path folding.
Gentoo: GLSA-202407-27: ExifTool: Multiple vulnerabilitiesSecurity Advisory Updates
Multiple vulnerabilities have been discovered in ExifTool, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202407-26: Dmidecode: Privilege EscalationSecurity Advisory Updates
A vulnerability has been discovered in Dmidecode, which can lead to privilege escalation.
CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on ev…
Ubuntu 6906-1: python-zipp Security Advisory Updates
python-zipp could be made to crash if certain zip files are used.
SUSE: 2024:2262-2 moderate: postgresql14 Security Advisory Updates
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
Ubuntu 6530-2: HAProxy Security Advisory Updates
HAProxy could be made to expose sensitive information.
Ubuntu 6907-1: Squid Security Advisory Updates
Squid could be made to crash if it processed specially crafted characters.
Ubuntu 6911-1: Nova Security Advisory Updates
Nova would allow unintended access to files over the network.
SUSE: 2024:2603-1 important: shadow Security Advisory Updates
* bsc#916845 Cross-References: * CVE-2013-4235
SUSE: 2024:2597-1 important: apache2 Security Advisory Updates
* bsc#1227268 * bsc#1227269 * bsc#1227272 Cross-References:
SUSE: 2024:2598-1 important: libgit2 Security Advisory Updates
* bsc#1219660 Cross-References: * CVE-2024-24577
SUSE: 2024:2599-1 important: git Security Advisory Updates
* bsc#1219660 Cross-References: * CVE-2024-24577
SUSE: 2024:2600-1 moderate: mozilla-nss Security Advisory Updates
* bsc#1214980 * bsc#1222804 * bsc#1222807 * bsc#1222811 * bsc#1222813
Ubuntu 6905-1: Rack Security Advisory Updates
Rack could be made to consume resources and cause long delays if it processed certain input.
Fedora 39: gtk3 2024-3d60f496f9 Security Advisory Updates
Update to 3.24.43
SUSE: 2024:2571-1 important: the Linux Kernel Security Advisory Updates
* bsc#1186716 * bsc#1195775 * bsc#1204562 * bsc#1209834 * bsc#1217481
SUSE: 2024:2572-1 moderate: python312 Security Advisory Updates
* bsc#1225660 * bsc#1226447 * bsc#1226448 * bsc#1227152 * bsc#1227378
SUSE: 2024:2574-1 moderate: nodejs20 Security Advisory Updates
* bsc#1227554 * bsc#1227560 * bsc#1227561 * bsc#1227562 * bsc#1227563
SUSE: 2024:2575-1 moderate: kernel-firmware Security Advisory Updates
* bsc#1219458 * bsc#1222319 * bsc#1225600 * bsc#1225601
SUSE: 2024:2576-1 moderate: gnome-shell Security Advisory Updates
* bsc#1215485 * bsc#1225567 Cross-References: * CVE-2023-43090
SUSE: 2024:2577-1 important: python-Django Security Advisory Updates
* bsc#1227590 * bsc#1227593 * bsc#1227594 * bsc#1227595
Ubuntu 6904-1: PyMongo Security Advisory Updates
PyMongo could be made to crash or expose sensitive information if it received a crafted BSON.