Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:2275-2 important: openssh Security Advisory Updates
* bsc#1226642 Cross-References: * CVE-2024-6387
SUSE: 2024:2297-1 important: emacs Security Advisory Updates
* bsc#1222050 * bsc#1222052 * bsc#1222053 * bsc#1226957
SUSE: 2024:2298-1 moderate: openCryptoki Security Advisory Updates
* bsc#1219217 * bsc#1220266 Cross-References: * CVE-2024-0914
Ubuntu 6863-1: Linux kernel Security Advisory Updates
The system could be made to crash or run programs as an administrator.
Ubuntu 6305-3: PHP Security Advisory Updates
USN-6305-2 caused a regression in parsing XML.
Debian: DSA-5725-1: znc Security Advisory Updates
Johannes Kuhn discovered that messages and channel names are not properly escaped in the modtcl module in ZNC, a IRC bouncer, which could result in remote code…
SUSE: 2024:2294-1 important: go1.21 Security Advisory Updates
* bsc#1212475 * bsc#1227314 Cross-References: * CVE-2024-24791
SUSE: 2024:2295-1 important: go1.22 Security Advisory Updates
* bsc#1218424 * bsc#1227314 Cross-References: * CVE-2024-24791
Mageia 2024-0253: krb5 Security Advisory Updates
Before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to…
Mageia 2024-0252: libcdio Security Advisory Updates
Buffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via a crafted ISO 9660 image file. (CVE-2024-36600) References:
Mageia 2024-0251: dcmtk Security Advisory Updates
Multiple vulnerabilities have benn fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images. C…
Mageia 2024-0250: openssh Security Advisory Updates
regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems. (CVE-2024-6387) References: - https://bugs.mageia.org/show_bug.cgi?id=33346
SUSE: 2024:2293-1 important: emacs Security Advisory Updates
* bsc#1226957 Cross-References: * CVE-2024-39331
SUSE: 2024:2290-1 low: libxml2 Security Advisory Updates
* bsc#1224282 Cross-References: * CVE-2024-34459
SUSE: 2024:2292-1 important: ghostscript Security Advisory Updates
* bsc#1226944 * bsc#1226945 * bsc#1226946 Cross-References:
SUSE: 2024:2283-1 important: libndp Security Advisory Updates
* bsc#1225771 Cross-References: * CVE-2024-5564
SUSE: 2024:2286-1 moderate: podman Security Advisory Updates
* bsc#1227052 Cross-References: * CVE-2024-6104
SUSE: 2024:2287-1 low: podofo Security Advisory Updates
* bsc#1213720 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5
SUSE: 2024:2288-1 low: libxml2 Security Advisory Updates
* bsc#1224282 Cross-References: * CVE-2024-34459
SUSE: 2024:2279-1 low: libxml2 Security Advisory Updates
* bsc#1224282 Cross-References: * CVE-2024-34459
SUSE: 2024:2280-1 moderate: python39 Security Advisory Updates
* bsc#1226447 * bsc#1226448 Cross-References: * CVE-2024-0397
SUSE: 2024:2281-1 low: podofo Security Advisory Updates
* bsc#1213720 Affected Products: * openSUSE Leap 15.3 * openSUSE Leap 15.5
Fedora 40: openssh 2024-dc89a2e1bf Security Advisory Updates
Backport fix for CVE-2024-6387 (rhbz#2294879) Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
Fedora 39: openssh 2024-213f33544e Security Advisory Updates
Backport fix for CVE-2024-6387 (rhbz#2294879)