Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 6991-1: AIOHTTP Security Advisory Updates
python-aiohttp would allow unintended access to files over the network.
Debian LTS: DLA-3865-1: frr Security Advisory Updates
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to potentially trigger those effect…
Debian LTS: DLA-3858-1: ruby2.7 Security Advisory Updates
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in denial-of-service (DoS), information leak, and remot…
Ubuntu 6963-1: GNOME Shell Security Advisory Updates
GNOME Shell could allow unintended access to network services.
Fedora 40: chromium 2024-0462a59d45 Security Advisory Updates
Update to 127.0.6533.99 * Critical CVE-2024-7532: Out of bounds memory access in ANGLE * High CVE-2024-7533: Use after free in Sharing * High CVE-2024-7550: Ty…
Fedora 39: chromium 2024-b60f51180f Security Advisory Updates
Update to 127.0.6533.99 * Critical CVE-2024-7532: Out of bounds memory access in ANGLE * High CVE-2024-7533: Use after free in Sharing * High CVE-2024-7550: Ty…
Gentoo: GLSA-202408-28: rsyslog: Heap Buffer OverflowSecurity Advisory Updates
A vulnerability has been discovered in rsyslog, which could possibly lead to remote code execution.
Gentoo: GLSA-202408-05: Redis: Security Advisory Updates
Multiple vulnerabilities have been discovered in Redis, the worst of which may lead to a denial of service or possible remote code execution.
Gentoo: GLSA-202408-02: Mozilla Firefox: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which could lead to remote code execution.
Fedora 39: chromium 2024-f2e57b108e Security Advisory Updates
update to 127.0.6533.72 * CVE-2024-6988: Use after free in Downloads * CVE-2024-6989: Use after free in Loader * CVE-2024-6991: Use after free in Dawn * CVE-20…
Ubuntu 6911-1: Nova Security Advisory Updates
Nova would allow unintended access to files over the network.
Ubuntu 6901-1: stunnel Security Advisory Updates
stunnel could allow unintended access to network services.
Mageia 2024-0270: sendmail Security Advisory Updates
sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages …
Debian: DSA-5728-1: exim4 Security Advisory Updates
Phillip Szelat discovered that Exim, a mail transport agent, does not properly parse a multiline RFC 2231 header filename, allowing a remote attacker to bypass…
Ubuntu 6880-1: Tomcat Security Advisory Updates
Tomcat could allow unintended access to network services.
Ubuntu 6884-1: Nova Security Advisory Updates
Nova would allow unintended access to files over the network.
Ubuntu 6883-1: OpenStack Glance Security Advisory Updates
OpenStack Glance would allow unintended access to files over the network.
Ubuntu 6882-1: Cinder Security Advisory Updates
Cinder would allow unintended access to files over the network.
Gentoo: GLSA-202407-19: Mozilla Thunderbird: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Mageia 2024-0257: znc Security Advisory Updates
In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. (CVE-2024-39844) References: - https://bugs.mageia.org/show_bug.cgi?id=33364
Gentoo: GLSA-202407-14: TigerVNC: Security Advisory Updates
Multiple vulnerabilities have been discovered in TigerVNC, the worst of which could lead to remote code execution.
Gentoo: GLSA-202407-10: Sofia-SIP: Security Advisory Updates
Multiple vulnerabilities have been discovered in Sofia-SIP, the worst of which can lead to remote code execution.
Debian: DSA-5725-1: znc Security Advisory Updates
Johannes Kuhn discovered that messages and channel names are not properly escaped in the modtcl module in ZNC, a IRC bouncer, which could result in remote code…
Mageia 2024-0246: gdb Security Advisory Updates
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of se…