Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3881-1: aom Security Advisory Updates
Integer overflows have been fixed in aom, an AV1 Codec Library. For Debian 11 bullseye, this problem has been fixed in version 1.0.0.errata1-3+deb11u2.
Debian LTS: DLA-3880-1: amanda Security Advisory Updates
Multiple vulnerabilities have been fixed in the Amanda backup system. CVE-2022-37703
Debian LTS: DLA-3879-1: bluez Security Advisory Updates
Multiple vulnerabilities have been fixed in bluez library, tools and daemons for using Bluetooth devices. CVE-2021-3658
SUSE: 2024:3151-1 important: buildah Security Advisory Updates
* bsc#1221243 * bsc#1221677 * bsc#1224117 Cross-References:
SUSE: 2024:3152-1 important: MozillaFirefox Security Advisory Updates
* bsc#1229821 Cross-References: * CVE-2024-8381 * CVE-2024-8382
SUSE: 2024:3153-1 important: postgresql16 Security Advisory Updates
* bsc#1229013 Cross-References: * CVE-2024-7348
SUSE: 2024:3154-1 important: postgresql16 Security Advisory Updates
* bsc#1229013 Cross-References: * CVE-2024-7348
SUSE: 2024:3155-1 important: kubernetes1.26 Security Advisory Updates
* bsc#1229869 Cross-References: * CVE-2023-45288
SUSE: 2024:3156-1 low: python312-pip Security Advisory Updates
* bsc#1217353 Cross-References: * CVE-2023-5752
Oracle8: ELSA-2024-6422: bubblewrap and flatpak Important Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Fedora 40: python-django 2024-4a08381122 Security Advisory Updates
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Fedora 40: python-django4.2 2024-865828665c Security Advisory Updates
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Fedora 40: lua-mpack 2024-430678b035 Security Advisory Updates
Fix buffer overrun when giving an offset to Session:receive
openSUSE: 2024:0282-1 important: python-Django Advisory Security Update
An update that fixes two vulnerabilities is now available.
Fedora 40: mingw-python3 2024-3d656dafe1 Security Advisory Updates
Add patch for CVE-2024-8088. Update to python-3.11.9. Backport fix for CVE-2024-6923.
Fedora 39: python-django 2024-e2bde0853b Security Advisory Updates
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Ubuntu 6991-1: AIOHTTP Security Advisory Updates
python-aiohttp would allow unintended access to files over the network.
SUSE: 2024:3149-1 moderate: systemd Security Advisory Updates
* bsc#1218297 * bsc#1221479 * bsc#1226414 * bsc#1228091
openSUSE: 2024:0278-1 important: chromium Advisory Security Update
An update that fixes two vulnerabilities is now available.
Debian LTS: DLA-3878-1: libxml2 Security Advisory Updates
Two vulnerabilities have been fixed in the XML library libxml2. CVE-2016-3709
Debian LTS: DLA-3877-1: ruby-sinatra Security Advisory Updates
Sinatra is an open source web framework for Ruby programming language. CVE-2022-29970
Oracle9: ELSA-2024-6356: bubblewrap and flatpak Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle8: ELSA-2024-6309: fence-agents Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:3144-1 important: hdf5, netcdf, trilinos Security Advisory Updates
* bsc#1011205 * bsc#1093641 * bsc#1125882 * bsc#1133222 * bsc#1167400