Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: nss 2024-7f0a88301b Security Advisory Updates
Update NSS to 3.103.0 Update to Firefox 129.0
Fedora 40: firefox 2024-7f0a88301b Security Advisory Updates
Update NSS to 3.103.0 Update to Firefox 129.0
Gentoo: GLSA-202408-28: rsyslog: Heap Buffer OverflowSecurity Advisory Updates
A vulnerability has been discovered in rsyslog, which could possibly lead to remote code execution.
Gentoo: GLSA-202408-27: AFLplusplus: Arbitrary Code ExecutionSecurity Advisory Updates
A vulnerability has been discovered in AFLplusplus, which can lead to arbitrary code execution via an untrusted CWD.
Gentoo: GLSA-202408-26: matio: Security Advisory Updates
Multiple vulnerabilities have been discovered in matio, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202408-25: runc: Security Advisory Updates
Multiple vulnerabilities have been discovered in runc, the worst of which could lead to privilege escalation.
Gentoo: GLSA-202408-24: Ruby on Rails: Remote Code ExecutionSecurity Advisory Updates
A vulnerability has been discovered in Ruby on Rails, which can lead to remote code execution via serialization of data.
Fedora 39: frr 2024-0c063be1cc Security Advisory Updates
New version 8.5.5
Gentoo: GLSA-202408-23: GnuPG: Security Advisory Updates
Multiple vulnerabilities have been discovered in GnuPG, the worst of which could lead to signature spoofing.
Gentoo: GLSA-202408-22: Bundler: Security Advisory Updates
Multiple vulnerabilities have been discovered in Bundler, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202408-21: GPAC: Security Advisory Updates
Multiple vulnerabilities have been discovered in GPAC, the worst of which could lead to arbitrary code execution.
Gentoo: GLSA-202408-20: libde265: Security Advisory Updates
Multiple vulnerabilities have been discovered in libde265, the worst of which could lead to arbitrary code execution.
SUSE: 2024:2868-1 important: bind Security Advisory Updates
* bsc#1228256 * bsc#1228257 Cross-References: * CVE-2024-1737
SUSE: 2024:2869-1 important: ca-certificates-mozilla Security Advisory Updates
* bsc#1220356 * bsc#1227525 Affected Products: * Basesystem Module 15-SP5
Gentoo: GLSA-202408-19: ncurses: Security Advisory Updates
Multiple vulnerabilities have been discovered in ncurses, the worst of which could lead to a denial of service.
Gentoo: GLSA-202408-18: QEMU: Security Advisory Updates
Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service.
Gentoo: GLSA-202408-17: Nautilus: Denial of ServiceSecurity Advisory Updates
A vulnerability has been discovered in Nautilus, which can lead to a denial of service.
Debian: DSA-5746-1: postgresql-13 Security Advisory Updates
Noah Misch discovered a race condition in the pg_dump tool included in PostgreSQL, which may result in privilege escalation. For the oldstable distribution (bu…
Debian: DSA-5745-1: postgresql-15 Security Advisory Updates
Noah Misch discovered a race condition in the pg_dump tool included in PostgreSQL, which may result in privilege escalation. For the stable distribution (bookw…
SUSE: 2024:2860-1 important: python3-Twisted Security Advisory Updates
* bsc#1228549 * bsc#1228552 Cross-References: * CVE-2024-41671
SUSE: 2024:2861-1 important: python-Django Security Advisory Updates
* bsc#1228630 Cross-References: * CVE-2024-41990
Gentoo: GLSA-202408-14: Librsvg: Arbitrary File ReadSecurity Advisory Updates
A vulnerability has been discovered in Librsvg, which can lead to arbitrary file reads.
Fedora 40: frr 2024-e60ca8feb0 Security Advisory Updates
New version 9.1.1. Includes fixes for CVE-2024-31950, CVE-2024-31951 and CVE-2024-31949.
SUSE: 2024:2818-1 important: the Linux Kernel (Live Patch 52 for SLE 12 SP5) Security Advisory Updates
* bsc#1225013 * bsc#1225310 Cross-References: * CVE-2024-27398