Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Gentoo: GLSA-202406-06: GStreamer, GStreamer Plugins: Security Advisory Updates
Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.
Mageia 2024-0243: libheif Security Advisory Updates
It was discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of…
Mageia 2024-0242: libopenmpt Security Advisory Updates
Possible out-of-bounds read or write when reading malformed MED files. (r19389). [Null-pointer write (32bit platforms) or excessive memory allocation (64bit pl…
Mageia 2024-0241: erofs-utils Security Advisory Updates
Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted e…
Fedora 40: emacs 2024-a3fecfab32 Security Advisory Updates
Update to Emacs 29.4, fixing CVE-2024-39331.
Fedora 40: kernel 2024-aca908f73b Security Advisory Updates
The 6.9.6 stable kernel update contains a number of important fixes across the tree.
Debian: DSA-5723-1: plasma-workspace Security Advisory Updates
Fabian Vogt discovered that the KDE session management server insufficiently restricted ICE connections from localhost, which could allow a local attacker to e…
Mageia 2024-0240: wget Security Advisory Updates
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was su…
Ubuntu 5615-3: SQLite Security Advisory Updates
SQLite could be made to crash or execute arbitrary code.
Debian LTS: DLA-3845-1: dlt-daemon Security Advisory Updates
Several flaws were discovered in dlt-daemon, a Diagnostic Log and Trace logging daemon. Buffer overflows and memory leaks may lead to a denial of service or ot…
Ubuntu 6852-2: Wget Security Advisory Updates
Wget could be made to connect to a different host than expected.
Debian LTS: DLA-3840-1: linux Security Advisory Updates
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Debian LTS: DLA-3843-1: linux-5.10 Security Advisory Updates
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Ubuntu 6854-1: OpenSSL Security Advisory Updates
OpenSSL could be made to consume resources and cause long delays if it processed certain input.
Fedora 40: chromium 2024-0c02698648 Security Advisory Updates
update to 126.0.6478.126 High CVE-2024-6290: Use after free in Dawn High CVE-2024-6291: Use after free in Swiftshader High CVE-2024-6292: Use after free in Daw…
Fedora 40: openvpn 2024-b611e122fb Security Advisory Updates
Update to upstream OpenVPN 2.6.11 CVE-2024-5594: control channel: refuse control channel messages with nonprintable characters in them CVE-2024-28882: only cal…
Fedora 40: moodle 2024-020937763e Security Advisory Updates
Fix for multiple CVEs
Fedora 40: freeipa 2024-2a466c6514 Security Advisory Updates
Fix CVE-2024-2698 and CVE-2024-3183
Fedora 39: chromium 2024-508d03d0c7 Security Advisory Updates
update to 126.0.6478.126 High CVE-2024-6290: Use after free in Dawn High CVE-2024-6291: Use after free in Swiftshader High CVE-2024-6292: Use after free in Daw…
Ubuntu 6566-2: SQLite Security Advisory Updates
SQLite could be made to crash if it received specially crafted input.
Debian: DSA-5722-1: libvpx Security Advisory Updates
It was discovered that multiple integer overflows in libvpx, a multimedia library for the VP8 and VP9 video codecs, may result in denial of service and potenti…
Debian: DSA-5721-1: ffmpeg Security Advisory Updates
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Ubuntu 6851-1: Netplan Security Advisory Updates
Netplan could reveal secrets or execute commands with specially crafted configuration file.
Ubuntu 6853-1: Ruby Security Advisory Updates
Ruby could be made to crash or expose sensitive information login if it processed certain strings.