Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 39: galera 2024-d61bffd77f Security Advisory Updates
MariaDB 10.5.25 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-5-25-release-notes/
Mageia 2024-0227: cups Security Advisory Updates
When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of t…
Mageia 2024-0226: iperf Security Advisory Updates
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This si…
Mageia 2024-0225: libndp Security Advisory Updates
A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv…
Ubuntu 6836-1: SSSD Security Advisory Updates
SSSD did not always correctly apply the GPO policy.
Debian LTS: DLA-3835-1: roundcube Security Advisory Updates
Cross-site scripting (XSS) vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could allow a remote a…
Debian LTS: DLA-3832-1: pymongo Security Advisory Updates
An out-of-bounds read in the 'bson' module allowed deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary app…
Debian LTS: DLA-3831-1: nano Security Advisory Updates
A symlink attack with emergency file saving has been fixed in the text editor nano. For Debian 10 buster, this problem has been fixed in version
SUSE: 2024:2033-1 important: bind Security Advisory Updates
* bsc#1219823 * bsc#1219826 * bsc#1219851 * bsc#1219852 * bsc#1219854
SUSE: 2024:2035-1 important: openssl-1_1 Security Advisory Updates
* bsc#1225551 Cross-References: * CVE-2024-4741
SUSE: 2024:2036-1 important: openssl-1_1 Security Advisory Updates
* bsc#1225551 Cross-References: * CVE-2024-4741
SUSE: 2024:2037-1 important: php7 Security Advisory Updates
* bsc#1222857 * bsc#1222858 * bsc#1226073 Cross-References:
SUSE: 2024:2038-1 important: php8 Security Advisory Updates
* bsc#1226073 Cross-References: * CVE-2024-5458
SUSE: 2024:2039-1 important: php8 Security Advisory Updates
* bsc#1226073 Cross-References: * CVE-2024-5458
Debian LTS: DLA-3830-1: libvpx Security Advisory Updates
Integer overflows have been fixed in libvpx, a library for decoding and encoding VP8 and VP9 videos. For Debian 10 buster, this problem has been fixed in versi…
Debian: DSA-5713-1: libndp Security Advisory Updates
A buffer overflow was discovered in libndp, a library implementing the IPv6 Neighbor Discovery Protocol (NDP), which could result in denial of service or poten…
Mageia 2024-0224: atril Security Advisory Updates
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists …
Mageia 2024-0223: nano Security Advisory Updates
A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file i…
Mageia 2024-0222: nss & firefox Security Advisory Updates
Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attac…
Debian: DSA-5712-1: ffmpeg Security Advisory Updates
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Debian LTS: DLA-3829-1: sendmail Security Advisory Updates
sendmail allowed SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed…
Debian LTS: DLA-3828-1: atril Security Advisory Updates
A vulnerability was discovered in Atril, a simple document viewer designed for the MATE desktop environment. CVE-2023-52076
Debian LTS: DLA-3827-1: plasma-workspace Security Advisory Updates
Unauthorized local user access to the session manager has been fixed in the Plasma Workspace component of the KDE Plasma desktop environment. For Debian 10 bus…
Mageia 2024-0221: libvpx Security Advisory Updates
There exists integer overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result…