Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3905-1: cups-filters Security Advisory Updates
Simone Margaritelli reported several vulnerabilities in cups-filters. Missing validation of IPP attributes returned from an IPP server and multiple bugs in the…
Debian LTS: DLA-3904-1: cups Security Advisory Updates
Simone Margaritelli reported that cups, the Common UNIX Printing System, does not properly sanitize IPP attributes when creating PPD files, which may result in…
Debian: DSA-5779-1: cups Security Advisory Updates
Simone Margaritelli reported that cups, the Common UNIX Printing System, does not properly sanitize IPP attributes when creating PPD files, which may result in…
Debian: DSA-5778-1: cups-filters Security Advisory Updates
Simone Margaritelli reported several vulnerabilities in cups-filters. Missing validation of IPP attributes returned from an IPP server and multiple bugs in the…
Debian LTS: DLA-3903-1: unbound Security Advisory Updates
Two vulnerabilities were discovered in unbound, a validating, recursive, caching DNS resolver. Specially crafted input could cause a heap-buffer-overflow leadi…
Fedora 40: cjson 2024-5db248f2a0 Security Advisory Updates
Update to new upstream version (closes rhbz#2237124)
Debian LTS: DLA-3902-1: ruby-rails-html-sanitizer Security Advisory Updates
Multiple vulnerabilities have been fixed in ruby-rails-html-sanitizer, a Ruby library for sanitizing HTML fragments in Rails applications. CVE-2022-23517
Debian LTS: DLA-3901-1: ruby-loofah Security Advisory Updates
Multiple vulnerabilities have been fixed in ruby-loofah, a Ruby library for manipulating and transforming HTML/XML documents and fragments. CVE-2022-23514
Debian LTS: DLA-3900-1: ruby-httparty Security Advisory Updates
multipart/form-data request tampering has been fixed in ruby-httparty, a Ruby library for using Web-based APIs and related services. For Debian 11 bullseye, th…
Gentoo: GLSA-202409-32: nginx: Security Advisory Updates
Multiple vulnerabilities have been discovered in nginx, the worst of which could result in denial of service.
Gentoo: GLSA-202409-31: Apache HTTPD: Security Advisory Updates
Multiple vulnerabilities have been found in Apache HTTPD, the worst of which could result in denial of service.
Gentoo: GLSA-202409-30: yt-dlp: Security Advisory Updates
Multiple vulnerabilities have been found in yt-dlp, the worst of which could result in arbitrary code execution.
Gentoo: GLSA-202409-29: Docker: Security Advisory Updates
Multiple vulnerabilities have been discovered in Docker, the worst of which could result in denial of service.
Gentoo: GLSA-202409-28: HashiCorp Consul: Security Advisory Updates
Multiple vulnerabilities have been discovered in HashiCorp Consul, the worst of which could result in denial of service.
Gentoo: GLSA-202409-27: tmux: Null Pointer DereferenceSecurity Advisory Updates
A vulnerability has been found in tmux which could result in application crash.
Fedora 40: cups-browsed 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 40: libppd 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 40: libcupsfilters 2024-01127974ec Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: cups-browsed 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: libcupsfilters 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fedora 39: libppd 2024-cf6ab63871 Security Advisory Updates
Fix for remote vulnerabilities against OpenPrinting cups-filters
Debian LTS: DLA-3899-1: python-asyncssh Security Advisory Updates
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python 3.4+ asyncio framework.…
openSUSE: 2024:0319-1 moderate: coredns Advisory Security Update
An update that fixes 6 vulnerabilities is now available.
Mageia 2024-0319: java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, & java-latest-openjdk Security Advisory Updates
Potential UTF8 size overflow. (CVE-2024-21131) Excessive symbol length can lead to infinite loop. (CVE-2024-21138) Range Check Elimination (RCE) pre-loop limit…