Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: chromium 2024-bb52629e6c Security Advisory Updates
update to 125.0.6422.141 High CVE-2024-5493: Heap buffer overflow in WebRTC High CVE-2024-5494: Use after free in Dawn High CVE-2024-5495: Use after free in Da…
Fedora 40: plasma-workspace 2024-83fc86a0bc Security Advisory Updates
CVE-2024-36041
Fedora 40: libarchive 2024-cbb72aad83 Security Advisory Updates
Automatic update for libarchive-3.7.2-4.fc40.
Debian: DSA-5702-1: gst-plugins-base1.0 Security Advisory Updates
An integer overflow in the EXIF metadata parsing was discovered in the GStreamer media framework, which may result in denial of service or potentially the exec…
Mageia 2024-0199: python-jinja2 Security Advisory Updates
It was discovered that Jinja2 incorrectly handled certain HTML attributes that were accepted by the xmlattr filter. An attacker could use this issue to inject …
SUSE: 2024:1886-1 important: gstreamer-plugins-base Security Advisory Updates
* bsc#1224806 Cross-References: * CVE-2024-4453
SUSE: 2024:1874-1 important: Java Security Advisory Updates
* bsc#1187446 * bsc#1224410 Cross-References: * CVE-2021-33813
SUSE: 2024:1880-1 moderate: python-requests Security Advisory Updates
* bsc#1224788 Cross-References: * CVE-2024-35195
SUSE: 2024:1882-1 important: gstreamer-plugins-base Security Advisory Updates
* bsc#1224806 Cross-References: * CVE-2024-4453
Fedora 39: wireshark 2024-ed93e6d44f Security Advisory Updates
New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854, CVE-2024-4855.
Fedora 39: cacti-spine 2024-27a594f71d Security Advisory Updates
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
Fedora 39: cacti 2024-27a594f71d Security Advisory Updates
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
Fedora 40: wireshark 2024-cd1f01e5d9 Security Advisory Updates
New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854, CVE-2024-4855.
Debian LTS: DLA-3824-1: gst-plugins-base1.0 Security Advisory Updates
An integer overflow in the EXIF metadata parser has been fixed in the GStreamer media framework. For Debian 10 buster, this problem has been fixed in version
Oracle8: ELSA-2024-3343: xorg-x11-server-Xwayland Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Ubuntu 6803-1: FFmpeg Security Advisory Updates
FFmpeg could be made to crash or run programs as your login if it opened a specially crafted file.
SUSE: 2024:1870-1 important: the Linux Kernel Security Advisory Updates
* bsc#1084332 * bsc#1141539 * bsc#1184509 * bsc#1186060 * bsc#1190317
Ubuntu 6802-1: PostgreSQL Security Advisory Updates
PostgreSQL could be made to expose sensitive information.
Ubuntu 6801-1: PyMySQL Security Advisory Updates
PyMySQL could be vulnerable to SQL injection attacks.
Ubuntu 6800-1: browserify-sign Security Advisory Updates
browserify-sign could allow unintended access if it opened a specially crafted file.
SUSE: 2024:1557-2 moderate: rpm Security Advisory Updates
* bsc#1189495 * bsc#1191175 * bsc#1218686 Cross-References:
Fedora 40: mingw-python-requests 2024-efc4802051 Security Advisory Updates
Update to requests-2.32.0, fixes CVE-2024-35195.
Fedora 39: chromium 2024-151b368efb Security Advisory Updates
update to 125.0.6422.112 High CVE-2024-5274: Type Confusion in V8
Fedora 39: mingw-python-requests 2024-7e4f058c2f Security Advisory Updates
Update to requests-2.32.0, fixes CVE-2024-35195.