Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0349: nspr, nss, firefox & rust Security Advisory Updates
Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…
Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System
Google has warned that a security flaw impacting its Android operating system has come under active exploitation in the wild.The vulnerability, tracked as CVE-…
Mageia 2024-0335: oath-toolkit Security Advisory Updates
pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishand…
CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting Fortinet products to its Known Exploited…
Debian LTS: DLA-3909-1: zabbix Security Advisory Updates
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially among other effects allowing XSS, Code Execution, i…
Ubuntu 7046-1: Flatpak and Bubblewrap Security Advisory Updates
Flatpak could be made to read and write files in locations it would not normally have access to.
Fedora 40: cups-browsed 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 40: libppd 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 40: libcupsfilters 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: cups-browsed 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: libcupsfilters 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: libppd 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Mageia 2024-0313: python-astropy Security Advisory Updates
Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` functio…
Ubuntu 7032-1: Tomcat Security Advisory Updates
Tomcat could allow unintended access to network services.
CISA Flags Critical Ivanti vTM Vulnerability Amid Active Exploitation Concerns
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager (vTM) to it…
Fedora 41: iwd 2024-5d6c951b0b Security Advisory Updates
iwd 2.22: Fix issue with handling the Affinities property. Fix issue with handling ConnectedAccessPoint signal when roaming.
Mageia 2024-0307: clamav Security Advisory Updates
Fixed a possible out-of-bounds read bug in the PDF file parser that could cause a denial-of-service (DoS) condition. (CVE-2024-20505) Changed the logging modul…
Mageia 2024-0302: microcode Security Advisory Updates
Observable discrepancy in RAPL interface for some Intel® Processors may allow a privileged user to potentially enable information disclosure via local access. …
Fedora 39: clamav 2024-05d7ee197e Security Advisory Updates
Update to 1.0.7 CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing a…
Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability
Ivanti has revealed that a newly patched security flaw in its Cloud Service Appliance (CSA) has come under active exploitation in the wild.The high-severity vu…
Fedora 40: clamav 2024-e8f7a74693 Security Advisory Updates
Update to 1.0.7 CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing a…
Mageia 2024-0295: libpcap Security Advisory Updates
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo…
Mageia 2024-0292: apr Security Advisory Updates
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially r…
Mageia 2024-0283: ffmpeg Security Advisory Updates
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmd…