Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:2189-1 important: the Linux Kernel Security Advisory Updates
* bsc#1065729 * bsc#1174585 * bsc#1190569 * bsc#1191949 * bsc#1192107
SUSE: 2024:1530-2 moderate: grafana and mybatis Security Advisory Updates
* bsc#1219912 * bsc#1222155 * jsc#MSQA-760 Cross-References:
SUSE: 2024:2185-1 important: the Linux Kernel Security Advisory Updates
* bsc#1065729 * bsc#1151927 * bsc#1152472 * bsc#1154353 * bsc#1156395
SUSE: 2024:2183-1 important: the Linux Kernel Security Advisory Updates
* bsc#1065729 * bsc#1151927 * bsc#1154353 * bsc#1156395 * bsc#1174585
SUSE: 2024:2184-1 important: the Linux Kernel Security Advisory Updates
* bsc#1065729 * bsc#1101816 * bsc#1141539 * bsc#1181674 * bsc#1185902
Mageia 2024-0235: python-aiohttp Security Advisory Updates
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulner…
Mageia 2024-0234: python-werkzeug Security Advisory Updates
Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's …
Mageia 2024-0233: chromium-browser-stable Security Advisory Updates
High CVE-2024-6100: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n) participating in SSD Secure Disclosure's TyphoonPWN 2024 on 2024-06-04 High CVE-20…
Mageia 2024-0232: virtualbox & kmod-virtualbox Security Advisory Updates
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily …
SUSE: 2024:2182-1 moderate: python-docker Security Advisory Updates
* bsc#1224788 Cross-References: * CVE-2024-35195
Ubuntu 6845-1: Hibernate Security Advisory Updates
Hibernate could be made to expose sensitive information.
SUSE: 2024:2180-1 important: vte Security Advisory Updates
* bsc#1226134 Cross-References: * CVE-2024-37535
SUSE: 2024:2168-1 important: gnome-settings-daemon Security Advisory Updates
* bsc#1226423 Cross-References: * CVE-2024-38394
SUSE: 2024:2170-1 important: gnome-settings-daemon Security Advisory Updates
* bsc#1226423 Cross-References: * CVE-2024-38394
SUSE: 2024:2171-1 important: libarchive Security Advisory Updates
* bsc#1225971 Cross-References: * CVE-2024-20696
SUSE: 2024:2173-1 low: qpdf Security Advisory Updates
* bsc#1089090 Cross-References: * CVE-2018-9918
SUSE: 2024:2174-1 moderate: wget Security Advisory Updates
* bsc#1226419 Cross-References: * CVE-2024-38428
Fedora 40: python-PyMySQL 2024-b26f07d27b Security Advisory Updates
Update to 1.1.1 to fix CVE CVE-2024-36039
Fedora 39: python-PyMySQL 2024-e7141ab284 Security Advisory Updates
Update to 1.1.1 to fix CVE CVE-2024-36039
Fedora 40: tomcat 2024-c404b99f19 Security Advisory Updates
This update includes a rebase from 9.0.83 to 9.0.89. #2269611 CVE-2024-24549 tomcat: CVE-2024-24549: Apache Tomcat: HTTP/2 header handling DoS #2269612 CVE-202…
Mageia 2024-0231: thunderbird Security Advisory Updates
Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attac…
Gentoo: GLSA-202406-05: JHead: Security Advisory Updates
Multiple vulnerabilities have been discovered in JHead, the worst of which may lead to arbitrary code execution.
Gentoo: GLSA-202406-04: LZ4: Memory CorruptionSecurity Advisory Updates
A vulnerability has been discovered in LZ4, which can lead to memory corruption.
Gentoo: GLSA-202406-03: RDoc: Remote Code CxecutionSecurity Advisory Updates
A vulnerability has been discovered in RDoc, which can lead to execution of arbitrary code.