Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: lemonldap-ng 2024-7bc1df53fc Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…
Fedora 39: lemonldap-ng 2024-d0a6c4ac13 Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…
Fedora 40: lemonldap-ng 2024-e457192aa2 Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…
Debian LTS: DLA-3951-1: curl Security Advisory Updates
curl a command line tool for transferring data with URL syntax was affected by CVE-2024-8096. When the TLS backend is GnuTLS, curl may incorrectly handle OCSP …
Mageia 2024-0351: python-werkzeug Security Advisory Updates
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werk…
Fedora 40: php-tcpdf 2024-afeeca72ce Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Fedora 41: php-tcpdf 2024-b00678c08a Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Fedora 39: php-tcpdf 2024-0b2854c95b Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System
Google has warned that a security flaw impacting its Android operating system has come under active exploitation in the wild.The vulnerability, tracked as CVE-…
Fedora 40: python-platformio 2024-f1615b58e6 Security Advisory Updates
Security fix for CVE-2024-47874. Starlette 0.40.0 (October 15, 2024) This release fixes a Denial of service (DoS) via multipart/form-data requests. You can vie…
Fedora 40: python-openapi-core 2024-f1615b58e6 Security Advisory Updates
Security fix for CVE-2024-47874. Starlette 0.40.0 (October 15, 2024) This release fixes a Denial of service (DoS) via multipart/form-data requests. You can vie…
Ubuntu 7082-1: libheif Security Advisory Updates
libheif could be made to crash or read sensitive data if it opened a specially crafted file
Fedora 39: chromium 2024-7aba3c1531 Security Advisory Updates
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Fedora 40: chromium 2024-452b60addf Security Advisory Updates
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Debian: DSA-5780-1: php8.2 Security Advisory Updates
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in incorrect parsing of multipart/f…
Debian LTS: DLA-3907-1: sqlite3 Security Advisory Updates
Two vulnerabilities have been fixed in the SQLite database. CVE-2021-36690
Debian LTS: DLA-3900-1: ruby-httparty Security Advisory Updates
multipart/form-data request tampering has been fixed in ruby-httparty, a Ruby library for using Web-based APIs and related services. For Debian 11 bullseye, th…
Fedora 41: chromium 2024-b85d941d78 Security Advisory Updates
update to 129.0.6668.58 High CVE-2024-8904: Type Confusion in V8 Medium CVE-2024-8905: Inappropriate implementation in V8 Medium CVE-2024-8906: Incorrect secur…
Fedora 39: chromium 2024-3d29b1647b Security Advisory Updates
update to 129.0.6668.58 * High CVE-2024-8904: Type Confusion in V8 * Medium CVE-2024-8905: Inappropriate implementation in V8 * Medium CVE-2024-8906: Incorrect…
Fedora 40: chromium 2024-d273b23c67 Security Advisory Updates
update to 129.0.6668.58 * High CVE-2024-8904: Type Confusion in V8 * Medium CVE-2024-8905: Inappropriate implementation in V8 * Medium CVE-2024-8906: Incorrect…
Debian LTS: DLA-3891-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
Binance Warns of Rising Clipper Malware Attacks Targeting Cryptocurrency Users
Cryptocurrency exchange Binance is warning of an "ongoing" global threat that's targeting cryptocurrency users with clipper malware with the goal of facilitati…
Debian LTS: DLA-3889-1: pymongo Security Advisory Updates
pymongo a python interface to the MongoDB document-oriented database was vulnerable. An out-of-bounds read in the 'bson' module allowed deserialization of
Mageia 2024-0292: apr Security Advisory Updates
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially r…