Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 38: kernel 2024-e513c6594d Security Advisory Updates
The 6.8.9 stable kernel update contains a number of important fixes across the tree.
Debian LTS: DLA-3812-1: libpgjava Security Advisory Updates
A possible SQL injection vulnerability was found in libpgjava, the PostgreSQL JDBC Driver. It allows an attacker to inject SQL if using PreferQueryMode=SIMPLE …
SUSE: 2024:1581-1 important: the Linux Kernel (Live Patch 39 for SLE 15 SP2) Security Advisory Updates
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Ubuntu 6770-1: Fossil Security Advisory Updates
Fossil regression
SUSE: 2024:1578-1 important: sssd Security Advisory Updates
* bsc#1223100 Cross-References: * CVE-2023-3758
SUSE: 2024:1579-1 important: sssd Security Advisory Updates
* bsc#1223100 Cross-References: * CVE-2023-3758
SUSE: 2024:1580-1 important: the Linux Kernel (Live Patch 39 for SLE 15 SP3) Security Advisory Updates
* bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References:
Debian: DSA-5686-1: dav1d Security Advisory Updates
Nick Galloway discovered an integer overflow in dav1d, a fast and small AV1 video stream decoder which could result in memory corruption. For the oldstable dis…
Ubuntu 6768-1: GLib Security Advisory Updates
GLib could be made to accept spoofed D-Bus signals.
SUSE: 2024:1563-1 important: sssd Security Advisory Updates
* bsc#1223100 Cross-References: * CVE-2023-3758
SUSE: 2024:1568-1 moderate: ghostscript Security Advisory Updates
* bsc#1223852 Cross-References: * CVE-2023-52722
SUSE: 2024:1569-1 moderate: avahi Security Advisory Updates
* bsc#1216853 Cross-References: * CVE-2023-38472
SUSE: 2024:1571-1 important: python-pymongo Security Advisory Updates
* bsc#1222492 Cross-References: * CVE-2024-21506
SUSE: 2024:1572-1 important: python-Werkzeug Security Advisory Updates
* bsc#1223979 Cross-References: * CVE-2024-34069
SUSE: 2024:1573-1 moderate: go1.22 Security Advisory Updates
* bsc#1218424 * bsc#1224017 * bsc#1224018 Cross-References:
Debian: DSA-5684-1: webkit2gtk Security Advisory Updates
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-42843
Mageia 2024-0172: libxml2 Security Advisory Updates
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabl…
Mageia 2024-0171: tpm2-tss Security Advisory Updates
A flaw was found in the tpm2-tss package, where there was no check that the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows a…
Mageia 2024-0165: freeglut Security Advisory Updates
freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. (CVE-2024-24258) freeglut through 3.4.0 was d…
Mageia 2024-0160: ruby Security Advisory Updates
Buffer overread vulnerability in StringIO. (CVE-2024-27280) RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Arbitrary memory address read vulner…
Fedora 39: freerdp 2024-1b11432d52 Security Advisory Updates
Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-3266…
Debian LTS: DLA-3811-1: python-idna Security Advisory Updates
Guido Vranken discovered an issue in python3-idna, a library to support the Internationalized Domain Names in Applications (IDNA) protocol. A specially crafted…
SUSE: 2024:1558-1 important: the Linux Kernel (Live Patch 36 for SLE 15 SP3) Security Advisory Updates
* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828
SUSE: 2024:1562-1 important: the Linux Kernel (Live Patch 40 for SLE 15 SP3) Security Advisory Updates
* bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References: