Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 6901-1: stunnel Security Advisory Updates
stunnel could allow unintended access to network services.
Mageia 2024-0270: sendmail Security Advisory Updates
sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages …
Debian: DSA-5728-1: exim4 Security Advisory Updates
Phillip Szelat discovered that Exim, a mail transport agent, does not properly parse a multiline RFC 2231 header filename, allowing a remote attacker to bypass…
Ubuntu 6880-1: Tomcat Security Advisory Updates
Tomcat could allow unintended access to network services.
Ubuntu 6884-1: Nova Security Advisory Updates
Nova would allow unintended access to files over the network.
Ubuntu 6883-1: OpenStack Glance Security Advisory Updates
OpenStack Glance would allow unintended access to files over the network.
Ubuntu 6882-1: Cinder Security Advisory Updates
Cinder would allow unintended access to files over the network.
Gentoo: GLSA-202407-19: Mozilla Thunderbird: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Mageia 2024-0257: znc Security Advisory Updates
In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. (CVE-2024-39844) References: - https://bugs.mageia.org/show_bug.cgi?id=33364
Gentoo: GLSA-202407-14: TigerVNC: Security Advisory Updates
Multiple vulnerabilities have been discovered in TigerVNC, the worst of which could lead to remote code execution.
Gentoo: GLSA-202407-10: Sofia-SIP: Security Advisory Updates
Multiple vulnerabilities have been discovered in Sofia-SIP, the worst of which can lead to remote code execution.
Debian: DSA-5725-1: znc Security Advisory Updates
Johannes Kuhn discovered that messages and channel names are not properly escaped in the modtcl module in ZNC, a IRC bouncer, which could result in remote code…
Mageia 2024-0246: gdb Security Advisory Updates
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of se…
Debian LTS: DLA-3851-1: gunicorn Security Advisory Updates
Gunicorn, an event-based HTTP/WSGI server, fails to properly validate Transfer- Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By c…
Mageia 2024-0241: erofs-utils Security Advisory Updates
Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted e…
Ubuntu 6843-1: Plasma Workspace Security Advisory Updates
plasma-workspace would allow unintended access to the session manager.
Ubuntu 6850-1: OpenVPN Security Advisory Updates
OpenVPN could allow unintended access to network services.
Mageia 2024-0236: python-gunicorn Security Advisory Updates
Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting T…
Mageia 2024-0227: cups Security Advisory Updates
When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of t…
Debian LTS: DLA-3835-1: roundcube Security Advisory Updates
Cross-site scripting (XSS) vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could allow a remote a…
Mageia 2024-0224: atril Security Advisory Updates
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists …
Debian LTS: DLA-3829-1: sendmail Security Advisory Updates
sendmail allowed SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed…
Debian LTS: DLA-3827-1: plasma-workspace Security Advisory Updates
Unauthorized local user access to the session manager has been fixed in the Plasma Workspace component of the KDE Plasma desktop environment. For Debian 10 bus…
Ubuntu 6826-1: mod_jk Security Advisory Updates
mod_jk could allow unintended access to network services.