Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:1382-1 important: the Linux Kernel (Live Patch 50 for SLE 12 SP5) Security Advisory Updates
* bsc#1216644 * bsc#1219435 Cross-References: * CVE-2023-5717
SUSE: 2024:1380-1 important: the Linux Kernel (Live Patch 1 for SLE 15 SP5) Security Advisory Updates
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
SUSE: 2024:1386-1 important: the Linux Kernel (Live Patch 22 for SLE 15 SP4) Security Advisory Updates
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
Ubuntu 6744-2: Pillow Security Advisory Updates
Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file.
SUSE: 2024:1375-1 important: glibc Security Advisory Updates
* bsc#1222992 Cross-References: * CVE-2024-2961
SUSE: 2024:1376-1 low: polkit Security Advisory Updates
* bsc#1209282 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5
SUSE: 2024:1377-1 moderate: apache-commons-configuration Security Advisory Updates
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
Debian LTS: DLA-3792-1: samba Security Advisory Updates
Several vulnerabilities were discovered in Samba, SMB/CIFS file, print, and login server for Unix CVE-2020-14318
SUSE: 2024:1365-1 moderate: apache-commons-configuration2 Security Advisory Updates
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
SUSE: 2024:1368-1 important: shim Security Advisory Updates
* bsc#1198101 * bsc#1205588 * bsc#1205855 * bsc#1210382 * bsc#1213945
SUSE: 2024:1373-1 important: the Linux Kernel (Live Patch 51 for SLE 12 SP5) Security Advisory Updates
* bsc#1219435 Cross-References: * CVE-2024-1086
Ubuntu 6738-1: LXD Security Advisory Updates
LXD could be made to bypass integrity checks if it received specially crafted input.
Debian: DSA-5671-1: openjdk-11 Security Advisory Updates
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure. For the oldstable di…
SUSE: 2024:1358-1 important: the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) Security Advisory Updates
* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828
SUSE: 2024:1359-1 important: the Linux Kernel RT (Live Patch 7 for SLE 15 SP5) Security Advisory Updates
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
SUSE: 2024:1362-1 important: the Linux Kernel RT (Live Patch 10 for SLE 15 SP5) Security Advisory Updates
* bsc#1219296 * bsc#1220828 Cross-References: * CVE-2023-52340
SUSE: 2024:1364-1 important: the Linux Kernel RT (Live Patch 9 for SLE 15 SP5) Security Advisory Updates
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
Fedora 38: chromium 2024-5d8f4f86b0 Security Advisory Updates
update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914: Use after free in …
Fedora 38: firefox 2024-966e16bfa3 Security Advisory Updates
New upstream release (125.0)
Fedora 40: flatpak 2024-43ea98691e Security Advisory Updates
Update to 1.15.8 Fixes CVE-2024-32462
openSUSE: 2024:0112-1 moderate: perl-CryptX Advisory Security Update
An update that fixes one vulnerability is now available.
Fedora 38: python-aiohttp 2024-5dc487ee89 Security Advisory Updates
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Fedora 38: uxplay 2024-5dc487ee89 Security Advisory Updates
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Fedora 38: nghttp2 2024-ec22e51ec2 Security Advisory Updates
fix CONTINUATION frames DoS (CVE-2024-28182)