Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:2108-1 important: containerd Security Advisory Updates
* bsc#1221400 * bsc#1224323 Cross-References: * CVE-2023-45288
Debian: DSA-5717-1: php8.2 Security Advisory Updates
It was discovered that user validation was incorrectly implemented for filter_var(FILTER_VALIDATE_URL). For the stable distribution (bookworm), this problem ha…
Debian LTS: DLA-3839-1: putty Security Advisory Updates
A biased ECDSA nonce generation allowed an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words…
SUSE: 2024:2106-1 important: php-composer2 Security Advisory Updates
* bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241
SUSE: 2024:2107-1 important: php-composer2 Security Advisory Updates
* bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241
SUSE: 2024:2105-1 important: hdf5 Security Advisory Updates
* bsc#1133222 * bsc#1224158 Cross-References: * CVE-2017-17507
Ubuntu 6842-1: gdb Security Advisory Updates
gdb could be made to crash if it opened a specially crafted file.
Mageia 2024-0229: flatpak Security Advisory Updates
A malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. References: - https://bugs.mageia.org/show_bug.cgi?id=33119
Mageia 2024-0228: python-scikit-learn Security Advisory Updates
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fi…
Debian LTS: DLA-3838-1: composer Security Advisory Updates
It was discovered that there were a number of command-line injection vulnerabilities in Composer, a popular dependency manager for PHP. The 'install', 'status'…
Debian LTS: DLA-3837-1: libndp Security Advisory Updates
It was discovered that there was a buffer overflow vulnerability in libndp, a library for implementing IPv6's "Neighbor Discovery Protocol" (NDP) and is used b…
Ubuntu 6793-2: Git Security Advisory Updates
Git could be made to run programs as your login if it clones a crafted repository.
Debian: DSA-5714-1: roundcube Security Advisory Updates
Huy Nguy¡»'n Ph¡º¡m Nh¡ºt, and Valentin T. and Lutz Wolf of CrowdStrike, discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, …
SUSE: 2024:2073-1 important: MozillaThunderbird Security Advisory Updates
* bsc#1226027 Cross-References: * CVE-2024-5688 * CVE-2024-5690
SUSE: 2024:2074-1 moderate: ntfs-3g_ntfsprogs Security Advisory Updates
* bsc#1226007 Cross-References: * CVE-2023-52890
SUSE: 2024:1539-2 moderate: bouncycastle Security Advisory Updates
* bsc#1223252 Cross-References: * CVE-2024-30171
SUSE: 2024:1590-2 moderate: ghostscript Security Advisory Updates
* bsc#1223852 Cross-References: * CVE-2023-52722
SUSE: 2024:1591-2 important: python-Werkzeug Security Advisory Updates
* bsc#1223979 Cross-References: * CVE-2024-34069
SUSE: 2024:2056-1 important: libaom Security Advisory Updates
* bsc#1226020 Cross-References: * CVE-2024-5171
SUSE: 2024:2059-1 important: openssl-1_1 Security Advisory Updates
* bsc#1225551 Cross-References: * CVE-2024-4741
SUSE: 2024:2060-1 important: less Security Advisory Updates
* bsc#1222849 Cross-References: * CVE-2024-32487
SUSE: 2024:2050-1 important: podman Security Advisory Updates
* bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786
SUSE: 2024:2051-1 important: openssl-1_1 Security Advisory Updates
* bsc#1225551 Cross-References: * CVE-2024-4741
Fedora 39: mariadb 2024-d61bffd77f Security Advisory Updates
MariaDB 10.5.25 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-5-25-release-notes/