Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DSA-5785-1: mediawiki Security Advisory Updates
Dom Walden discovered that the AbuseFilter extension in MediaWiki, a website engine for collaborative work, performed incomplete authorisation checks.
Fedora 40: chromium 2024-452b60addf Security Advisory Updates
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Fedora 41: python-gcsfs 2024-9e55564ca7 Security Advisory Updates
Update to new upstream version (closes rhbz#2237124)
Fedora 41: znc-push 2024-1c078a4771 Security Advisory Updates
Fix CVE-2024-39844 https://wiki.znc.in/ChangeLog/1.9.0
Debian: DSA-5784-1: oath-toolkit Security Advisory Updates
Fabian Vogt reported that the PAM module in oath-toolkit, a collection of components to build one-time password authentication systems, does not safely perform…
Debian: DSA-5783-1: firefox-esr Security Advisory Updates
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
SUSE: 2024:3523-1 critical: cups-filters Security Advisory Updates
* bsc#1230939 Cross-References: * CVE-2024-47176
SUSE: 2024:3524-1 important: frr Security Advisory Updates
* bsc#1230866 Cross-References: * CVE-2017-15865
SUSE: 2024:3525-1 important: openssl-3 Security Advisory Updates
* bsc#1230698 Cross-References: * CVE-2024-41996
SUSE: 2024:3526-1 moderate: Mesa Security Advisory Updates
* bsc#1222040 * bsc#1222041 * bsc#1222042 Cross-References:
Fedora 39: php 2024-7c800c4df7 Security Advisory Updates
PHP version 8.2.24 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Fedora 40: pgadmin4 2024-126d22c121 Security Advisory Updates
Fix CVE-2024-9014.
Fedora 41: firefox 2024-1d8785c391 Security Advisory Updates
New upstream builds (131.0)
Debian LTS: DLA-3909-1: zabbix Security Advisory Updates
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially among other effects allowing XSS, Code Execution, i…
SUSE: 2024:3517-1 low: opensc Security Advisory Updates
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
SUSE: 2024:3519-1 important: MozillaFirefox Security Advisory Updates
* bsc#1230979 Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6
Ubuntu 7053-1: ImageMagick Security Advisory Updates
Several security issues were fixed in ImageMagick.
Ubuntu 7055-1: FreeRADIUS Security Advisory Updates
A system authentication measure could be bypassed.
Ubuntu 7054-1: unzip Security Advisory Updates
unzip could be made to crash or run programs as your login if it opened a specially crafted file.
SUSE: 2024:3515-1 moderate: expat Security Advisory Updates
* bsc#1229930 * bsc#1229931 * bsc#1229932 Cross-References:
SUSE: 2024:3516-1 moderate: libpcap Security Advisory Updates
* bsc#1230020 * bsc#1230034 Cross-References: * CVE-2023-7256
Debian: DSA-5781-1: chromium Security Advisory Updates
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Ubuntu 7052-1: GNOME Shell Security Advisory Updates
Several security issues were fixed in GNOME Shell.
Fedora 40: firefox 2024-5f39927e90 Security Advisory Updates
New upstream builds (131.0)