Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 39: glibc 2024-9be1b94714 Security Advisory Updates
This update includes several bug fixes from the upstream glibc release branch, including a fix for CVE-2024-2961.
Fedora 39: python-aiohttp 2024-f83b123d63 Security Advisory Updates
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Fedora 40: firefox 2024-c6a1d4e0ec Security Advisory Updates
New upstream release (125.0) New upstream release (124.0.2)
Fedora 40: chromium 2024-4d2d73ab31 Security Advisory Updates
update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use…
Fedora 40: python-aiohttp 2024-2f15e6e876 Security Advisory Updates
Update llhttp to 9.2.1, fixing CVE-2024-27982. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
Fedora 40: perl-Clipboard 2024-2843f37353 Security Advisory Updates
Update to 0.29 - Fixes 'clipbrowse command execution with multi-line clipboard text including "| sh"'
Debian: DSA-5666-1: flatpak Security Advisory Updates
Gergo Koteles discovered that sandbox restrictions in Flatpak, an application deployment framework for desktop apps, could by bypassed in combination with xdg-…
SUSE: 2024:1354-1 important: wireshark Security Advisory Updates
* bsc#1220181 Cross-References: * CVE-2024-24476
SUSE: 2024:1355-1 important: nodejs14 Security Advisory Updates
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
openSUSE: 2024:0111-1 important: putty Advisory Security Update
An update that fixes one vulnerability is now available.
SUSE: 2024:1346-1 important: nodejs12 Security Advisory Updates
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
SUSE: 2024:1347-1 important: wireshark Security Advisory Updates
* bsc#1220181 Cross-References: * CVE-2024-24476
SUSE: 2024:1350-1 important: MozillaFirefox Security Advisory Updates
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
SUSE: 2024:1351-1 low: graphviz Security Advisory Updates
* bsc#1219491 Cross-References: * CVE-2023-46045
Fedora 38: php 2024-39d50cc975 Security Advisory Updates
PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATT…
Fedora 38: editorconfig 2024-0f08e59f25 Security Advisory Updates
Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.
Fedora 39: perl-Clipboard 2024-43a0920f12 Security Advisory Updates
Update to 0.29 - Fixes 'clipbrowse command execution with multi-line clipboard text including "| sh"'
Fedora 39: php 2024-b46619f761 Security Advisory Updates
PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATT…
SUSE: 2024:1345-1 important: tomcat Security Advisory Updates
* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672
Mageia 2024-0136: puppet Security Advisory Updates
The updated packages fix missing requires for puppet and fix commands in systemd units. References: - https://bugs.mageia.org/show_bug.cgi?id=29710
SUSE: 2024:1340-1 important: pgadmin4 Security Advisory Updates
* bsc#1221172 Cross-References: * CVE-2024-2044
SUSE: 2024:1332-2 important: the Linux Kernel Security Advisory Updates
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
SUSE: 2024:1322-2 important: the Linux Kernel Security Advisory Updates
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
Ubuntu 6737-1: GNU C Library Security Advisory Updates
GNU C Library could be made to crash or run programs if it processed specially crafted data.