Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Gentoo: GLSA-202407-07: cpio: Arbitrary Code ExecutionSecurity Advisory Updates
A vulnerability has been discovered in cpio, which can lead to arbitrary code execution.
Gentoo: GLSA-202407-06: cryptography: Security Advisory Updates
Multiple vulnerabilities have been discovered in cryptography, the worst of which could lead to a denial of service.
Gentoo: GLSA-202407-05: SSSD: Command InjectionSecurity Advisory Updates
A vulnerability has been discovered in SSSD, which can lead to arbitrary code execution.
Gentoo: GLSA-202407-02: SDL_ttf: Arbitrary Memory WriteSecurity Advisory Updates
A vulnerability has been discovered in SDL_ttf, which can lead to arbitrary memory writes.
Ubuntu 6855-1: libcdio Security Advisory Updates
libcdio could be made to crash or run programs as your login if it opened a specially crafted file.
Fedora 39: libreswan 2024-07c9cfd337 Security Advisory Updates
Update to 4.15 for CVE-2024-3652
Fedora 39: mingw-gstreamer1-plugins-base 2024-919bc7e512 Security Advisory Updates
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Fedora 39: mingw-gstreamer1-plugins-good 2024-919bc7e512 Security Advisory Updates
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Fedora 39: mingw-gstreamer1-plugins-bad-free 2024-919bc7e512 Security Advisory Updates
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Fedora 39: mingw-gstreamer1 2024-919bc7e512 Security Advisory Updates
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Debian LTS: DLA-3854-1: tryton-client Security Advisory Updates
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
Debian LTS: DLA-3853-1: tryton-server Security Advisory Updates
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
Debian LTS: DLA-3852-1: edk2 Security Advisory Updates
Mate Kukri discovered the Debian build of EDK2, a UEFI firmware implementation, used an insecure default configuration which could result in Secure Boot bypass…
Debian LTS: DLA-3850-1: glibc Security Advisory Updates
Multiple vulnerabilities have been fixed in the Name Service Cache Daemon that is built by the GNU C library and shipped in the nscd binary package. CVE-2024-3…
Debian LTS: DLA-3846-1: libmojolicious-perl Security Advisory Updates
Mojolicious is a Perl Web Application Framework built around the familiar Model-View-Controller philosophy. It supports a simple single file mode via Mojolicio…
Fedora 40: mingw-poppler 2024-94068499c9 Security Advisory Updates
Backport fix for CVE-2024-6239.
Fedora 40: mingw-python-urllib3 2024-da86a4f061 Security Advisory Updates
Update to 1.26.19, fixes CVE-2024-0444.
Fedora 39: mingw-python-urllib3 2024-73f181db2a Security Advisory Updates
Update to 1.26.19, fixes CVE-2024-0444.
Debian LTS: DLA-3849-1: org-mode Security Advisory Updates
A vulnerability was discovered in GNU Emacs, the extensible, customisable, self-documenting display editor. The org-link-expand-abbrev function expanded a %(..…
Debian LTS: DLA-3848-1: org-mode Security Advisory Updates
A vulnerability was discovered in Org-mode, a GNU Emacs major mode for keeping notes, authoring documents, and maintaining to-do lists. The org-link-expand-abb…
Fedora 39: kitty 2024-c7b79bc227 Security Advisory Updates
rebuild for rhbz#2292712
Fedora 39: freeipa 2024-1d1b485611 Security Advisory Updates
Fix CVE-2024-2698 and CVE-2024-3183
Debian LTS: DLA-3847-1: dcmtk Security Advisory Updates
Multiple vulnerabilities havebenn fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images.
SUSE: 2024:2245-1 important: frr Security Advisory Updates
* bsc#1216896 * bsc#1216897 * bsc#1216899 * bsc#1216900