Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 7025-1: LibreOffice Security Advisory Updates
LibreOffice could accept fraudulent digital signatures.
SUSE: 2024:3332-1 moderate: ucode-intel Security Advisory Updates
* bsc#1230400 Cross-References: * CVE-2024-23984 * CVE-2024-24968
SUSE: 2024:3333-1 moderate: wireshark Security Advisory Updates
* bsc#1229907 Cross-References: * CVE-2024-8250
Fedora 40: frr 2024-1b36a483cc Security Advisory Updates
Fix for CVE-2024-44070
Fedora 39: microcode_ctl 2024-1d4155bd39 Security Advisory Updates
Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) m…
Debian LTS: DLA-3893-1: expat Security Advisory Updates
Multiple vulnerabilities were found in expat, an XML parsing C library, which could lead to Denial of Service, memory corruption or arbitrary code execution.
Fedora 41: microcode_ctl 2024-d6726b5d75 Security Advisory Updates
Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) m…
Debian LTS: DLA-3892-1: tinyproxy Security Advisory Updates
Two issues have been found in tinyproxy, a lightweight, non-caching, optionally anonymizing HTTP proxy. They are related to an use after free in header parsing…
Ubuntu 6885-3: Apache HTTP Server Security Advisory Updates
Several security issues were fixed in Apache HTTP Server.
SUSE: 2024:3301-1 important: ffmpeg-4 Security Advisory Updates
* bsc#1229026 Cross-References: * CVE-2024-7055
SUSE: 2024:3302-1 important: python3 Security Advisory Updates
* bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
SUSE: 2024:3303-1 important: python312 Security Advisory Updates
* bsc#1227999 * bsc#1228780 * bsc#1229596 * bsc#1229704 * bsc#1230227
SUSE: 2024:3304-1 important: the Linux Kernel Security Advisory Updates
* bsc#1228002 Cross-References: * CVE-2022-48791
SUSE: 2024:3297-1 moderate: python-dnspython Security Advisory Updates
* bsc#1230353 Cross-References: * CVE-2023-29483
Debian LTS: DLA-3891-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
SUSE: 2024:3293-1 important: python36 Security Advisory Updates
* bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
SUSE: 2024:3294-1 important: python3 Security Advisory Updates
* bsc#1228780 Cross-References: * CVE-2024-6923
SUSE: 2024:3295-1 important: gstreamer-plugins-bad Security Advisory Updates
* bsc#1218534 * bsc#1219494 * bsc#1223263 * bsc#1226892 * bsc#1226897
AlmaLinux 9 Ruby 3.3 Moderate DoS Advisory ALSA-2024-6785
ruby:3.3 security update
Fedora 39: chromium 2024-37f95ce86b Security Advisory Updates
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Ubuntu 7018-1: OpenSSL Security Advisory Updates
Several security issues were fixed in OpenSSL.
Fedora 41: chromium 2024-9e85c72624 Security Advisory Updates
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Debian: DSA-5772-1: libreoffice Security Advisory Updates
Yufan You discovered that Libreoffice's handling of documents based on ZIP archives was suspectible to spoofing attacks when the repair mode attempts to addres…
Debian: DSA-5771-1: php-twig Security Advisory Updates
Fabien Potencier discovered that under some conditions the sandbox mechanism of Twig, a template engine for PHP, could by bypassed. For the stable distribution…