Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 39: nginx-mod-fancyindex 2024-8ba5080dfa Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
Fedora 39: nginx-mod-vts 2024-8ba5080dfa Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
Fedora 39: nginx-mod-modsecurity 2024-8ba5080dfa Security Advisory Updates
Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash (CVE-2024-7347). Thanks to Nils Bars.
SUSE: 2022:4265-1 important: nginx
An update that fixes one vulnerability is now available.
SUSE: 2022:4266-1 important: nginx
An update that fixes one vulnerability is now available.
SUSE: 2022:4201-1 important: nginx
An update that fixes one vulnerability is now available.
Mageia 2022-0398: nginx security update
Two security issues were identified in the ngx_http_mp4_module, which might allow an attacker to cause a worker process crash or worker process memory disclosu…
Oracle8: ELSA-2022-0323: nginx Important Security Upda
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Fedora 33: nginx 2021-b37cffac
Fix log permissions issue ---- Security: 1-byte memory overwrite might occur during DNS server response processing if the "resolver" directive was used, allowi…
openSUSE: 2019:2264-1: moderate: nginx
An update that fixes three vulnerabilities is now available.
SUSE: 2019:2559-1 moderate: nginx
An update that fixes three vulnerabilities is now available.
HTTP/2 Bomb: Why Linux Infrastructure is Vulnerable to a New Low-Bandwidth DoS Attack
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the software that sits at the front of much of the Linux internet…
Mageia 2024-0235: python-aiohttp Security Advisory Updates
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulner…
TeamTNT's Silentbob Botnet Infecting 196 Hosts in Cloud Attack Campaign
As many as 196 hosts have been infected as part of an aggressive cloud campaign mounted by the TeamTNT group calledSilentbob."The botnet run by TeamTNT has set…
Mageia 2022-0234: php security update
CLI -Fixed bug #8575 (CLI closes standard streams too early). Core -Fixed Haiku ZTS builds. Date -Fixed bug #8471 (Segmentation fault when converting immutable…
Debian: DSA-4762-1: lemonldap-ng security upda
It was discovered that the default configuration files for running the Lemonldap::NG Web SSO system on the Nginx web server were susceptible to authorisation b…
Debian LTS: DLA-2367-1: lemonldap-ng security upda
lemonldap-ng community fixed a vulnerability in the Nginx default configuration files (CVE-2020-24660). Debian package does not install any default site, but d…