Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2024-0160: ruby Security Advisory Updates
Buffer overread vulnerability in StringIO. (CVE-2024-27280) RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Arbitrary memory address read vulner…
Fedora 39: freerdp 2024-1b11432d52 Security Advisory Updates
Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-3266…
Debian LTS: DLA-3811-1: python-idna Security Advisory Updates
Guido Vranken discovered an issue in python3-idna, a library to support the Internationalized Domain Names in Applications (IDNA) protocol. A specially crafted…
SUSE: 2024:1558-1 important: the Linux Kernel (Live Patch 36 for SLE 15 SP3) Security Advisory Updates
* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828
SUSE: 2024:1562-1 important: the Linux Kernel (Live Patch 40 for SLE 15 SP3) Security Advisory Updates
* bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References:
Oracle9: ELSA-2024-2571: sssd Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2024-2569: grafana-pcp Important Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:1556-1 important: python311 Security Advisory Updates
* bsc#1189495 * bsc#1211301 * bsc#1219559 * bsc#1219666 * bsc#1221260
SUSE: 2024:1557-1 moderate: rpm Security Advisory Updates
* bsc#1189495 * bsc#1191175 * bsc#1218686 Cross-References:
Gentoo: GLSA-202405-28: NVIDIA Drivers: Security Advisory Updates
Multiple vulnerabilities have been discovered in NVIDIA Drivers, the worst of which could result in root privilege escalation.
Gentoo: GLSA-202405-27: Epiphany: Buffer OverflowSecurity Advisory Updates
A vulnerability has been discovered in Epiphany, which can lead to a buffer overflow.
Gentoo: GLSA-202405-26: qtsvg: Security Advisory Updates
Multiple vulnerabilities have been discovered in qtsvg, the worst of which could lead to a denial of service.
Gentoo: GLSA-202405-25: MariaDB: Security Advisory Updates
Multiple vulnerabilities have been discovered in MariaDB, the worst fo which can lead to arbitrary execution of code.
SUSE: 2024:1554-1 important: the Linux Kernel (Live Patch 43 for SLE 15 SP2) Security Advisory Updates
* bsc#1219079 * bsc#1219435 Cross-References: * CVE-2024-0775
Gentoo: GLSA-202405-24: ytnef: Security Advisory Updates
Multiple vulnerabilities have been discovered in ytnef, the worst of which could potentially lead to remote code execution.
Gentoo: GLSA-202405-23: U-Boot tools: double free vulnerabilitySecurity Advisory Updates
A vulnerability has been discovered in U-Boot tools which can lead to execution of arbitary code.
Gentoo: GLSA-202405-22: rsync: Security Advisory Updates
Multiple vulnerabilities have been discovered in rsync, the worst of which can lead to denial of service or information disclosure.
Gentoo: GLSA-202405-21: Commons-BeanUtils: Improper Access RestrictionSecurity Advisory Updates
A vulnerability has been discovered in Commons-BeanUtils, which could lead to execution of arbitrary code.
Oracle7: ELSA-2024-12354: kernel Important Security Advisory Updates
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle6: ELSA-2024-12354: Extended Lifecycle Support (ELS) Unbreakable Enterprise kernel Important Security Advisory Updates
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:1551-1 important: the Linux Kernel (Live Patch 40 for SLE 15 SP2) Security Advisory Updates
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Debian: DSA-5682-1: glib2.0 Security Advisory Updates
Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib library are prone to a spoofing vulnerability. A local attacker can take advantage …
openSUSE: 2024:0118-1 important: python-python-jose Advisory Security Update
An update that fixes one vulnerability is now available.
Ubuntu 6764-1: libde265 Security Advisory Updates
libde265 could be made to crash if it opened a specially crafted file.