Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:3470-1 important: python3 Security Advisory Updates
* bsc#1227233 * bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
SUSE: 2024:3478-1 important: quagga Security Advisory Updates
* bsc#1202023 * bsc#1229438 * bsc#1230866 Cross-References:
SUSE: 2024:3483-1 important: the Linux Kernel Security Advisory Updates
* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261
Debian: DSA-5777-1: booth Security Advisory Updates
It was discovered that the Booth cluster ticket manager failed to correctly validate some authentication hashes. For the stable distribution (bookworm), this p…
Debian: DSA-5776-1: tryton-server Security Advisory Updates
Albert Cervera discovered two missing authorisation checks in the Tryton application platform. For the stable distribution (bookworm), this problem has been fi…
Debian LTS: DLA-3898-1: nghttp2 Security Advisory Updates
Unbounded number of HTTP/2 CONTINUATION frames that could cause DoS was fixed in nghttp2, an implementation of HTTP/2. For Debian 11 bullseye, this problem has…
openSUSE: 2024:0314-1 important: chromium Advisory Security Update
An update that fixes four vulnerabilities is now available.
SUSE: 2024:3467-1 important: the Linux Kernel Security Advisory Updates
* bsc#1202346 * bsc#1227985 * bsc#1228002 * bsc#1228938 * bsc#1228959
SUSE: 2024:3468-1 important: the Linux Kernel (Live Patch 1 for SLE 15 SP6) Security Advisory Updates
* bsc#1225099 * bsc#1228349 Cross-References: * CVE-2023-52846
Oracle8: ELSA-2024-6986: nano Low Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Fedora 39: chromium 2024-e60359f212 Security Advisory Updates
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Mageia 2024-0317: python3 Security Advisory Updates
A defect was discovered in the Python ¢''ssl¢'' module where there is a memory race condition with the ssl.SSLContext methods ¢''cert_store_stats()¢'' and ¢''g…
Mageia 2024-0316: kernel, kmod-xtables-addons & kmod-virtualbox Security Advisory Updates
Upstream kernel version 6.6.52 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Mageia 2024-0315: apache-mod_jk Security Advisory Updates
Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration whi…
Mageia 2024-0314: gnome-shell Security Advisory Updates
In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided by an adversary (e.g…
Fedora 40: chromium 2024-aaff7345b8 Security Advisory Updates
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Debian LTS: DLA-3897-1: trafficserver Security Advisory Updates
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2023-38522
Ubuntu 7045-1: libppd Security Advisory Updates
libppd could be made to run programs if it received specially crafted network traffic.
Ubuntu 7044-1: libcupsfilters Security Advisory Updates
libcupsfilters could be made to run programs if it received specially crafted network traffic.
Ubuntu 7043-1: cups-filters Security Advisory Updates
cups-filters could be made to run programs if it received specially crafted network traffic.
Ubuntu 7040-1: ConfigObj Security Advisory Updates
ConfigObj could be made to crash if it received specially crafted input.
Debian LTS: DLA-3896-1: mediawiki Security Advisory Updates
Privileged XSS in the user rights log has been fixed in the MediaWiki wiki engine. For Debian 11 bullseye, this problem has been fixed in version
Ubuntu 7034-2: ca-certificates updateSecurity Advisory Updates
The CA certificates in the ca-certificates package were updated.
Ubuntu 7037-1: OpenJPEG Security Advisory Updates
OpenJPEG could be made to crash if it opened a specially crafted file.