Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: edk2 2024-9cc95d56ce Security Advisory Updates
Security fix for CVE-2023-6237 (openssl: Excessive time spent checking invalid RSA public keys)
Fedora 41: libgsf 2024-ff08c2b41a Security Advisory Updates
Fixes for memory vulnerabilities.
Fedora 41: rust-tower-http 2024-347164df1c Security Advisory Updates
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Fedora 41: rust-tonic-build 2024-347164df1c Security Advisory Updates
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Fedora 41: rust-tonic 2024-347164df1c Security Advisory Updates
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Fedora 41: rust-tower-http0.5 2024-347164df1c Security Advisory Updates
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Debian: DSA-5792-1: webkit2gtk Security Advisory Updates
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-40866
Debian LTS: DLA-3919-1: libapache-mod-jk Security Advisory Updates
It was discovered that there was a configuration issue in libapache-mod-jk, an Apache web server module used to forward requests from Apache to Tomcat using th…
Ubuntu 7014-3: nginx Security Advisory Updates
nginx could be made to crash if it received specially crafted network traffic.
Ubuntu 7040-2: ConfigObj Security Advisory Updates
ConfigObj could be made to crash if it received specially crafted input.
SUSE: 2024:3617-1 moderate: the Linux Kernel Security Advisory Updates
* bsc#1214298 * bsc#1226606 * bsc#1227764 * bsc#1228487 * bsc#1228654
Ubuntu 6968-3: PostgreSQL Security Advisory Updates
PostgreSQL could execute arbitrary SQL functions as the superuser if it received a specially crafted SQL object.
Ubuntu 7067-1: HAProxy Security Advisory Updates
HAProxy could be made to crash or run programs if it received specially crafted network traffic.
openSUSE: 2024:0335-1 important: chromium Advisory Security Update
An update that fixes two vulnerabilities is now available.
Ubuntu 7015-4: Python Security Advisory Updates
Python could me made to bypass some restrictions if it received specially crafted input.
Ubuntu 7066-1: Thunderbird Security Advisory Updates
Thunderbird could be made to crash or run programs if it opened a specially crafted file.
Ubuntu 7065-1: Firefox Security Advisory Updates
Firefox could be made to run programs as your login if it opened a malicious website.
Fedora 40: libgsf 2024-2ac7273bab Security Advisory Updates
Fixes for memory vulnerabilities.
Fedora 40: webkit2gtk4.0 2024-9694c3eec0 Security Advisory Updates
Update to 2.46.1
Fedora 39: libgsf 2024-7d06f67cf5 Security Advisory Updates
Fixes for memory vulnerabilities.
Debian LTS: DLA-3918-1: docker.io Security Advisory Updates
A vulnerability has been detected in the Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances.
Debian: DSA-5791-1: python-reportlab Security Advisory Updates
Elyas Damej discovered that a sandbox mechanism in ReportLab, a Python library to create PDF documents, could be bypassed which may result in the execution of …
Debian: DSA-5790-1: node-dompurify Security Advisory Updates
It was discovered that DOMPurify, a sanitizer for HTML, MathML and SVG was susceptible to nesting-based mXSS. For the stable distribution (bookworm), this prob…
Fedora 39: chromium 2024-5ee2c7c696 Security Advisory Updates
Update to 129.0.6668.100 * CVE-2024-9602: Type Confusion in V8 * CVE-2024-9603: Type Confusion in V