Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DSA-5778-1: cups-filters Security Advisory Updates
Simone Margaritelli reported several vulnerabilities in cups-filters. Missing validation of IPP attributes returned from an IPP server and multiple bugs in the…
Debian LTS: DLA-3903-1: unbound Security Advisory Updates
Two vulnerabilities were discovered in unbound, a validating, recursive, caching DNS resolver. Specially crafted input could cause a heap-buffer-overflow leadi…
Fedora 40: cjson 2024-5db248f2a0 Security Advisory Updates
Update to new upstream version (closes rhbz#2237124)
Debian LTS: DLA-3902-1: ruby-rails-html-sanitizer Security Advisory Updates
Multiple vulnerabilities have been fixed in ruby-rails-html-sanitizer, a Ruby library for sanitizing HTML fragments in Rails applications. CVE-2022-23517
Debian LTS: DLA-3901-1: ruby-loofah Security Advisory Updates
Multiple vulnerabilities have been fixed in ruby-loofah, a Ruby library for manipulating and transforming HTML/XML documents and fragments. CVE-2022-23514
Fedora 40: cups-browsed 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 40: libppd 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 40: libcupsfilters 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: cups-browsed 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: libcupsfilters 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: libppd 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Debian LTS: DLA-3899-1: python-asyncssh Security Advisory Updates
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python 3.4+ asyncio framework.…
openSUSE: 2024:0319-1 moderate: coredns Advisory Security Update
An update that fixes 6 vulnerabilities is now available.
SUSE: 2024:3470-1 important: python3 Security Advisory Updates
* bsc#1227233 * bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
SUSE: 2024:3478-1 important: quagga Security Advisory Updates
* bsc#1202023 * bsc#1229438 * bsc#1230866 Cross-References:
SUSE: 2024:3483-1 important: the Linux Kernel Security Advisory Updates
* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261
Debian: DSA-5777-1: booth Security Advisory Updates
It was discovered that the Booth cluster ticket manager failed to correctly validate some authentication hashes. For the stable distribution (bookworm), this p…
Debian: DSA-5776-1: tryton-server Security Advisory Updates
Albert Cervera discovered two missing authorisation checks in the Tryton application platform. For the stable distribution (bookworm), this problem has been fi…
openSUSE: 2024:0314-1 important: chromium Advisory Security Update
An update that fixes four vulnerabilities is now available.
SUSE: 2024:3467-1 important: the Linux Kernel Security Advisory Updates
* bsc#1202346 * bsc#1227985 * bsc#1228002 * bsc#1228938 * bsc#1228959
SUSE: 2024:3468-1 important: the Linux Kernel (Live Patch 1 for SLE 15 SP6) Security Advisory Updates
* bsc#1225099 * bsc#1228349 Cross-References: * CVE-2023-52846
Fedora 39: chromium 2024-e60359f212 Security Advisory Updates
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Fedora 40: chromium 2024-aaff7345b8 Security Advisory Updates
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Debian LTS: DLA-3897-1: trafficserver Security Advisory Updates
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2023-38522