Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: qbittorrent 2024-1c74fc369b Security Advisory Updates
Update to 5.0.2 fix rhbz#2326888
Debian LTS: DLA-3967-1: mpg123 Security Advisory Updates
mpg123 a popular MPEG layer 1/2/3 audio player was afected by a vulnerability. An out-of-bounds write flaw was found in mpg123 when handling crafted
Ubuntu 6988-2: Twisted Security Advisory Updates
Twisted could allow unintended access to information over the network.
Ubuntu 7129-1: TinyGLTF Security Advisory Updates
TinyGLTF could be made to crash or run programs as your login if it received specially crafted input.
Ubuntu 7128-1: Pygments Security Advisory Updates
Pygments could be made to crash if it received specially crafted input.
SUSE: 2024:4063-1 important: postgresql, postgresql16, postgresql17 Security Advisory Updates
* bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326
Ubuntu 7117-2: needrestart Security Advisory Updates
USN-7117-1 caused some regression in needrestart.
Oracle7: ELSA-2024-12845: kernel Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2024-12845: kernel Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Debian LTS: DLA-3966-1: pypy3 Security Advisory Updates
Multiple vulnerabilities have been fixed in pypy3, an alternative implementation of the Python 3.x language. CVE-2020-10735
SUSE: 2024:4053-1 important: ucode-intel Security Advisory Updates
* bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853
SUSE: 2024:4054-1 moderate: javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop Security Advisory Updates
* bsc#1231347 * bsc#1231428 Cross-References: * CVE-2024-28168
Fedora 40: chromium 2024-292aa2c246 Security Advisory Updates
Update to 131.0.6778.85 * High CVE-2024-11395: Type Confusion in V8 * High CVE-2024-11110: Inappropriate implementation in Blink * Medium CVE-2024-11111: Inapp…
Fedora 40: cobbler 2024-76d8603c78 Security Advisory Updates
Update to 3.3.7 - CVE-2024-47533
Fedora 41: chromium 2024-582d2a7648 Security Advisory Updates
Update to 131.0.6778.85 * High CVE-2024-11395: Type Confusion in V8 * High CVE-2024-11110: Inappropriate implementation in Blink * Medium CVE-2024-11111: Inapp…
Fedora 41: cobbler 2024-4f04edd1e7 Security Advisory Updates
Update to 3.3.7 - CVE-2024-47533
Fedora 39: libsoup3 2024-a059ea1dfc Security Advisory Updates
Add patches to fix: CVE-2024-52530 libsoup3: HTTP request smuggling via stripping null bytes from the ends of header names (bug #2325358) CVE-2024-52532 libsou…
SUSE: 2024:4052-1 important: postgresql, postgresql16, postgresql17 Security Advisory Updates
* bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326
SUSE: 2024:4050-1 critical: MozillaThunderbird Security Advisory Updates
* bsc#1231879 * bsc#1233355 Cross-References: * CVE-2024-10458
SUSE: 2024:4051-1 important: glib2 Security Advisory Updates
* bsc#1233282 Cross-References: * CVE-2024-52533
openSUSE: 2024:0378-1 important: chromium Advisory Security Update
An update that fixes one vulnerability is now available.
openSUSE: 2024:0377-1 important: chromium Advisory Security Update
An update that fixes one vulnerability is now available.
Debian LTS: DLA-3965-1: ghostscript Security Advisory Updates
Multiple vulnerabilities have been fixed in the PostScript/PDF interpreter Ghostscript. CVE-2024-46951
Debian: DSA-5818-1: linux Security Advisory Updates
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.