Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3857-1: libtommath Security Advisory Updates
It was discovered that there was a series of integer overflow vulnerabilities in LibTomMath, a multiple-precision mathematics library.
Debian LTS: DLA-3868-1: ruby-nokogiri Security Advisory Updates
A vulnerability was discovered in Nokogiri, an open source XML and HTML library for Ruby. An inefficient regular expression was susceptible to excessive backtr…
Debian LTS: DLA-3867-1: git Security Advisory Updates
Multiple vulnerabilities were discovered in git, a fast, scalable and distributed revision control system. CVE-2019-1387
SUSE: 2024:3086-1 low: glib2 Security Advisory Updates
* bsc#1224044 Cross-References: * CVE-2024-34397
Debian LTS: DLA-3866-1: ruby-tzinfo Security Advisory Updates
Path traversal that allowed TZInfo::Timezone.get to load arbitrary files has been fixed in ruby-tzinfo, a Ruby library for working with time zone information.
Fedora 41: lua-mpack 2024-c83b7dcae0 Security Advisory Updates
Fix buffer overrun when giving an offset to Session:receive
Fedora 40: flatpak 2024-7b8a05a5d1 Security Advisory Updates
Update to 1.15.10 (CVE-2024-42472)
Fedora 40: python3.12 2024-afba3b5902 Security Advisory Updates
Security fix for CVE-2024-8088
Debian LTS: DLA-3865-1: frr Security Advisory Updates
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to potentially trigger those effect…
openSUSE: 2024:0275-1 important: opera Advisory Security Update
An update that fixes one vulnerability is now available.
openSUSE: 2024:0276-1 important: cacti, cacti-spine Advisory Security Update
An update that fixes 10 vulnerabilities is now available.
Debian LTS: DLA-3864-1: webkit2gtk Security Advisory Updates
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-4558
Debian LTS: DLA-3862-1: calibre Security Advisory Updates
Two vulnerabilities have been fixed in the e-book manager Calibre. CVE-2021-44686
Debian LTS: DLA-3863-1: nbconvert Security Advisory Updates
Alvaro Mu'±oz from the GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert, a tool and library used to con…
SUSE: 2024:3073-1 important: bubblewrap and flatpak Security Advisory Updates
* bsc#1229157 Cross-References: * CVE-2024-42472
SUSE: 2024:3074-1 low: unbound Security Advisory Updates
* bsc#1229068 Cross-References: * CVE-2024-43167
SUSE: 2024:3075-1 important: xen Security Advisory Updates
* bsc#1027519 * bsc#1228574 * bsc#1228575 Cross-References:
SUSE: 2024:3076-1 important: python39 Security Advisory Updates
* bsc#1227233 * bsc#1227378 * bsc#1227999 * bsc#1228780
SUSE: 2024:3077-1 important: qemu Security Advisory Updates
* bsc#1227322 Cross-References: * CVE-2024-4467
SUSE: 2024:3078-1 important: libqt5-qtquick3d Security Advisory Updates
* bsc#1228199 Cross-References: * CVE-2024-40724
openSUSE: 2024:0274-1 important: cacti, cacti-spine Advisory Security Update
An update that fixes 10 vulnerabilities is now available.
Debian LTS: DLA-3858-1: ruby2.7 Security Advisory Updates
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in denial-of-service (DoS), information leak, and remot…
Ubuntu 6982-1: Dovecot Security Advisory Updates
Several security issues were fixed in Dovecot.
Fedora 40: vim 2024-bb4b6da0b6 Security Advisory Updates
patchlevel 703 Security fixes for CVE-2024-43374, CVE-2024-43802