Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: php-tcpdf 2024-27eafd0e65 Security Advisory Updates
Version 6.7.5 (2024-04-20) Update GitHub actions fix: CSV-2024-22640 (#712)
Ubuntu 6760-1: Gerbv Security Advisory Updates
Gerbv could be made to crash if it opened a specially crafted input file.
Debian LTS: DLA-3805-1: qtbase-opensource-src Security Advisory Updates
Several issues have been found in qtbase-opensource-src, a collection of several Qt modules/libraries. The issues are related to buffer overflows, infinite loo…
Mageia 2024-0159: guava Security Advisory Updates
A bug that could allow an attacker with access to the machine to potentially access data in a temporary directory created by the Guava. (CVE-2020-8908) Predict…
Mageia 2024-0158: krb5 Security Advisory Updates
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. (CVE-2024-26458) Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulne…
Mageia 2024-0156: cjson Security Advisory Updates
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c. (CVE-2023-50471) cJSON v1.7.16 was discov…
SUSE: 2024:1480-1 important: the Linux Kernel Security Advisory Updates
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
SUSE: 2024:0782-2 important: python311 Security Advisory Updates
* bsc#1196025 * bsc#1210638 * bsc#1219666 Cross-References:
Oracle8: ELSA-2024-2098: container-tools:ol8 Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2024-2084: container-tools:4.0 Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:1475-1 important: frr Security Advisory Updates
* bsc#1222518 Cross-References: * CVE-2024-31948
Ubuntu 6758-1: JSON5 Security Advisory Updates
JSON5 could allow unintended access to network services or have other unspecified impact.
Debian LTS: DLA-3802-1: org-mode Security Advisory Updates
Multiple problems were discovered in Org-mode, a GNU Emacs major mode for keeping notes, authoring documents, and maintaining to-do lists. CVE-2024-30203 & CVE…
Ubuntu 6761-1: Anope Security Advisory Updates
Anope could be made to bypass authentication checks for suspended accounts.
SUSE: 2024:1468-1 important: ffmpeg Security Advisory Updates
* bsc#1190721 * bsc#1190724 * bsc#1190727 * bsc#1190728 * bsc#1190731
SUSE: 2024:1470-1 important: ffmpeg-4 Security Advisory Updates
* bsc#1223070 * bsc#1223235 * bsc#1223272 Cross-References:
SUSE: 2024:1469-1 important: docker Security Advisory Updates
* bsc#1219267 * bsc#1219268 * bsc#1219438 * bsc#1223409
SUSE: 2024:1466-1 important: the Linux Kernel Security Advisory Updates
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
Debian LTS: DLA-3801-1: emacs Security Advisory Updates
Multiple problems were discovered in GNU Emacs, the extensible, customisable, self-documenting display editor. CVE-2024-30203 & CVE-2024-30204
Ubuntu 6744-3: Pillow Security Advisory Updates
Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file.
Ubuntu 6756-1: less Security Advisory Updates
less could be made run programs as your login if it opened a specially crafted file.
Ubuntu 6755-1: GNU cpio Security Advisory Updates
GNU cpio could be made to write files outside the target directory.
openSUSE: 2024:0114-1 important: pdns-recursor Advisory Security Update
An update that fixes one vulnerability is now available.
Debian LTS: DLA-3800-1: ruby-rack Security Advisory Updates
Multiple vulnerabilities were fixed in ruby-rack, an interface for developing web applications in Ruby. CVE-2024-25126