Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0383: rootcerts, nss & firefox Security Advisory Updates
Select list elements could be shown over another site. (CVE-2024-11692) CSP Bypass and XSS Exposure via Web Compatibility Shims. (CVE-2024-11694) URL Bar Spoof…
SUSE: 2024:4135-1 moderate: python39 Security Advisory Updates
* bsc#1231795 * bsc#1233307 Cross-References: * CVE-2024-11168
SUSE: 2024:4136-1 moderate: php8 Security Advisory Updates
* bsc#1233651 * bsc#1233702 * bsc#1233703 Cross-References:
SUSE: 2024:4137-1 moderate: python-tornado6 Security Advisory Updates
* bsc#1233668 Cross-References: * CVE-2024-52804
Debian LTS: DLA-3981-1: simplesamlphp Security Advisory Updates
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, is prone to an XXE vulnerability when loading an (untrusted) XML document.
Debian: DSA-5822-1: simplesamlphp Security Advisory Updates
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, is prone to a XXE vulnerability when loading an (untrusted) XML document.
SUSE: 2024:4131-1 important: the Linux Kernel Security Advisory Updates
* bsc#1204171 * bsc#1205796 * bsc#1206188 * bsc#1206344 * bsc#1209290
SUSE: 2024:4120-1 important: the Linux Kernel RT (Live Patch 9 for SLE 15 SP5) Security Advisory Updates
* bsc#1225429 * bsc#1225733 * bsc#1229273 * bsc#1229553
SUSE: 2024:4122-1 important: the Linux Kernel RT (Live Patch 10 for SLE 15 SP5) Security Advisory Updates
* bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832
SUSE: 2024:4123-1 important: the Linux Kernel RT (Live Patch 11 for SLE 15 SP5) Security Advisory Updates
* bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059
SUSE: 2024:4124-1 important: the Linux Kernel RT (Live Patch 13 for SLE 15 SP5) Security Advisory Updates
* bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521
SUSE: 2024:4125-1 important: the Linux Kernel RT (Live Patch 15 for SLE 15 SP5) Security Advisory Updates
* bsc#1223363 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013
openSUSE: 2024:0384-1 moderate: zabbix Advisory Security Update
An update that fixes two vulnerabilities is now available.
Fedora 41: webkitgtk 2024-472d01833c Security Advisory Updates
Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the…
Fedora 41: wireshark 2024-f9f740bc60 Security Advisory Updates
New version 4.4.2
Fedora 40: qbittorrent 2024-ab5ad835c1 Security Advisory Updates
Update to 5.0.2 fix rhbz#2326888
Fedora 40: wireshark 2024-0b563ad294 Security Advisory Updates
New version 4.2.9
Debian LTS: DLA-3979-1: lemonldap-ng Security Advisory Updates
Multiple vulnerabilities were discovered in Lemonldap::NG, an OpenID-Connect, CAS and SAML compatible Web-SSO system, which could lead to injection of arbitrar…
Debian LTS: DLA-3978-1: editorconfig-core Security Advisory Updates
Two issues have been found in editorconfig-core, a coding style indenter for all editors. Both issues are related to buffer overflows in different locations.
Debian LTS: DLA-3974-1: dnsmasq Security Advisory Updates
Brief introduction CVE-2022-0934
Debian LTS: DLA-3977-1: xfpt Security Advisory Updates
An issue has been found in xfpt, a tool to generate XML from plain tex. The issue is about bad handling of input data, which may result in a stack-based buffer…
Debian LTS: DLA-3976-1: tgt Security Advisory Updates
An issue has been found in tgt, Linux SCSI target user-space daemon and tools. The issue was related to using rand() without proper seed, resulting in identica…
Mageia 2024-0382: libsoup3 & libsoup Security Advisory Updates
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '' characters at the end of header names are ignored, i.e., a "Transfer…
Debian LTS: DLA-3975-1: proftpd-dfsg Security Advisory Updates
ProFTPD a popular FTP server was affected by multiple vulnerabilities. CVE-2023-48795