Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 41: python-virtualenv 2024-89014f5794 Security Advisory Updates
Prevent command injection by quoting template strings in activation scripts
Fedora 41: mosquitto 2024-0078a55acf Security Advisory Updates
Update to 2.0.19 Fix FTBFS (closes rhbz#2300978)
Fedora 41: rust-tower-http 2024-2096f5d14c Security Advisory Updates
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Ubuntu 7063-1: Ubuntu Advantage Desktop Daemon Security Advisory Updates
Ubuntu Advantage Desktop Daemon could be made to expose sensitive information.
SUSE: 2024:3603-1 critical: MozillaFirefox Security Advisory Updates
* bsc#1230979 * bsc#1231413 Cross-References: * CVE-2024-8900
SUSE: 2024:3604-1 moderate: OpenIPMI Security Advisory Updates
* bsc#1229910 Cross-References: * CVE-2024-42934
SUSE: 2024:3596-1 moderate: apache-commons-io Security Advisory Updates
* bsc#1231298 Cross-References: * CVE-2024-47554
Mageia 2024-0329: vim Security Advisory Updates
Use-after-free when closing buffers in Vim
Mageia 2024-0328: php Security Advisory Updates
HTTP_REDIRECT_STATUS might be controlled via user request FPM log output might be modified by an attacker HTTP POST can be modified by an attacker For other bu…
Fedora 40: firefox 2024-db72f480e8 Security Advisory Updates
New upstream version (131.0.2)
Fedora 39: firefox 2024-f109ae6fc7 Security Advisory Updates
Updated to latest upstream (131.0.2)
Debian LTS: DLA-3914-1: firefox-esr Security Advisory Updates
Damien Schaeffer discovered a use-after-free in the Mozilla Firefox web browser, which could result in the execution of arbitrary code. For Debian 11 bullseye,…
SUSE: 2024:3592-1 important: the Linux Kernel Security Advisory Updates
* bsc#1199769 * bsc#1216223 * bsc#1220382 * bsc#1221610 * bsc#1221650
SUSE: 2024:3587-1 important: the Linux Kernel Security Advisory Updates
* bsc#1054914 * bsc#1065729 * bsc#1194869 * bsc#1199769 * bsc#1216223
SUSE: 2024:3591-1 important: the Linux Kernel Security Advisory Updates
* bsc#1054914 * bsc#1065729 * bsc#1207341 * bsc#1225316 * bsc#1226846
Debian: DSA-5788-1: firefox-esr Security Advisory Updates
Damien Schaeffer discovered a use-after-free in the Mozilla Firefox web browser, which could result in the execution of arbitrary code. For the stable distribu…
Ubuntu 7062-1: libgsf Security Advisory Updates
libgsf could be made to run programs as your login if it opened a specially crafted file.
SUSE: 2024:3585-1 important: the Linux Kernel Security Advisory Updates
* bsc#1220826 * bsc#1226145 * bsc#1226666 * bsc#1227487 * bsc#1228466
SUSE: 2024:3586-1 important: xen Security Advisory Updates
* bsc#1027519 * bsc#1228574 * bsc#1228575 * bsc#1230366
SUSE: 2024:3576-1 important: libreoffice Security Advisory Updates
* bsc#1047218 * bsc#1202273 * bsc#1226975 * bsc#1229589 * jsc#PED-10362
SUSE: 2024:3577-1 important: libreoffice Security Advisory Updates
* bsc#1047218 * bsc#1225597 * bsc#1226975 * bsc#1229589 * jsc#PED-10362
Fedora 40: koji 2024-7ee01adadc Security Advisory Updates
Update to 1.35.1. Includes fix for CVE-2024-9427
Fedora 40: xen 2024-051cf1553e Security Advisory Updates
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817]
Fedora 39: xen 2024-020dbf247c Security Advisory Updates
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817] update to xen-4.17.5