Cybersecurity News

SUSE: 2024:2209-1 important: the Linux Kernel (Live Patch 12 for SLE 15 SP5) Security Advisory Updates

* bsc#1221302 * bsc#1223059 * bsc#1223514 Cross-References:

Linux

SUSE: 2024:2195-1 important: hdf5 Security Advisory Updates

* bsc#1224158 Cross-References: * CVE-2017-17507 * CVE-2018-11205

Linux

SUSE: 2024:2197-1 important: openssl-1_1-livepatches Security Advisory Updates

* bsc#1224458 * bsc#1225552 Cross-References: * CVE-2024-4741

Linux OpenSSL

SUSE: 2024:2198-1 important: ghostscript Security Advisory Updates

* bsc#1225491 Cross-References: * CVE-2024-33871

Linux

SUSE: 2024:2199-1 important: ghostscript Security Advisory Updates

* bsc#1225491 Cross-References: * CVE-2024-33871

Linux

Mageia 2024-0235: python-aiohttp Security Advisory Updates

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulner…

Nginx

Mageia 2024-0233: chromium-browser-stable Security Advisory Updates

High CVE-2024-6100: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n) participating in SSD Secure Disclosure's TyphoonPWN 2024 on 2024-06-04 High CVE-20…

Chrome

Mageia 2024-0232: virtualbox & kmod-virtualbox Security Advisory Updates

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily …

SUSE: 2024:2182-1 moderate: python-docker Security Advisory Updates

* bsc#1224788 Cross-References: * CVE-2024-35195

Linux Docker

Critical RCE Vulnerability Discovered in Ollama AI Infrastructure Tool

Cybersecurity researchers have detailed a now-patched security flaw affecting the Ollama open-source artificial intelligence (AI) infrastructure platform that …

SUSE: 2024:2180-1 important: vte Security Advisory Updates

* bsc#1226134 Cross-References: * CVE-2024-37535

Linux

SUSE: 2024:2168-1 important: gnome-settings-daemon Security Advisory Updates

* bsc#1226423 Cross-References: * CVE-2024-38394

Linux

SUSE: 2024:2170-1 important: gnome-settings-daemon Security Advisory Updates

* bsc#1226423 Cross-References: * CVE-2024-38394

Linux

SUSE: 2024:2171-1 important: libarchive Security Advisory Updates

* bsc#1225971 Cross-References: * CVE-2024-20696

Linux

SUSE: 2024:2173-1 low: qpdf Security Advisory Updates

* bsc#1089090 Cross-References: * CVE-2018-9918

Linux

SUSE: 2024:2174-1 moderate: wget Security Advisory Updates

* bsc#1226419 Cross-References: * CVE-2024-38428

Linux

Fedora 40: python-PyMySQL 2024-b26f07d27b Security Advisory Updates

Update to 1.1.1 to fix CVE CVE-2024-36039

Linux Databases

Fedora 39: python-PyMySQL 2024-e7141ab284 Security Advisory Updates

Update to 1.1.1 to fix CVE CVE-2024-36039

Linux Databases

Fedora 40: tomcat 2024-c404b99f19 Security Advisory Updates

This update includes a rebase from 9.0.83 to 9.0.89. #2269611 CVE-2024-24549 tomcat: CVE-2024-24549: Apache Tomcat: HTTP/2 header handling DoS #2269612 CVE-202…

Linux Apache

Mageia 2024-0231: thunderbird Security Advisory Updates

Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attac…

Gentoo: GLSA-202406-05: JHead: Security Advisory Updates

Multiple vulnerabilities have been discovered in JHead, the worst of which may lead to arbitrary code execution.

Gentoo: GLSA-202406-04: LZ4: Memory CorruptionSecurity Advisory Updates

A vulnerability has been discovered in LZ4, which can lead to memory corruption.

Gentoo: GLSA-202406-03: RDoc: Remote Code CxecutionSecurity Advisory Updates

A vulnerability has been discovered in RDoc, which can lead to execution of arbitrary code.

Gentoo: GLSA-202406-02: Flatpak: Sandbox EscapeSecurity Advisory Updates

A vulnerability has been discovered in Flatpak, which can lead to a sandbox escape.