Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DSA-5688-1: atril Security Advisory Updates
It was discovered that missing input sanitising in the Atril document viewer could result in writing arbitrary files in the users home directory if a malformed…
Gentoo: GLSA-202405-33: PoDoFo: Security Advisory Updates
Multiple vulnerabilities have been discovered in PoDoFo, the worst of which could lead to code execution.
Gentoo: GLSA-202405-32: Mozilla Thunderbird: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Gentoo: GLSA-202405-31: Kubelet: Privilege EscalationSecurity Advisory Updates
A vulnerability has been discovered in Kubelet, which can lead to privilege escalation.
Gentoo: GLSA-202405-30: Rebar3: Command InjectionSecurity Advisory Updates
A vulnerability has been discovered in Rebar3, which can lead to command injection.
Fedora 39: chromium 2024-1bc17d6ec7 Security Advisory Updates
update to 124.0.6367.201 * High CVE-2024-4671: Use after free in Visuals
Fedora 40: chromium 2024-5f84678c08 Security Advisory Updates
update to 124.0.6367.201 * High CVE-2024-4671: Use after free in Visuals
Fedora 40: gnome-shell 2024-635a54eb7e Security Advisory Updates
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
Fedora 39: chromium 2024-55e7e839f1 Security Advisory Updates
update to 124.0.6367.155 High CVE-2024-4558: Use after free in ANGLE High CVE-2024-4559: Heap buffer overflow in WebAudio
Fedora 40: chromium 2024-92780a83f9 Security Advisory Updates
update to 124.0.6367.155 High CVE-2024-4558: Use after free in ANGLE High CVE-2024-4559: Heap buffer overflow in WebAudio
Fedora 40: php-wikimedia-cdb 2024-2c564b942d Security Advisory Updates
https://www.mediawiki.org/wiki/Release_notes/1.41
Fedora 40: tcpdump 2024-e375e28b45 Security Advisory Updates
Fix for CVE-2024-2397
SUSE: 2024:1607-1 important: python-Pillow Security Advisory Updates
* bsc#1185784 * bsc#1185785 * bsc#1185786 * bsc#1185803 * bsc#1185804
SUSE: 2024:1608-1 important: python-Werkzeug Security Advisory Updates
* bsc#1223979 Cross-References: * CVE-2024-34069
SUSE: 2024:1609-1 important: freerdp Security Advisory Updates
* bsc#1223293 * bsc#1223294 * bsc#1223295 * bsc#1223296 * bsc#1223297
SUSE: 2024:1610-1 important: freerdp Security Advisory Updates
* bsc#1223293 * bsc#1223294 * bsc#1223295 * bsc#1223296 * bsc#1223297
SUSE: 2024:1605-1 moderate: tpm2-0-tss Security Advisory Updates
* bsc#1223690 Cross-References: * CVE-2024-29040
Mageia 2024-0173: glibc Security Advisory Updates
Stack-based buffer overflow in netgroup cache: If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent cli…
openSUSE: 2024:0119-1 important: tinyproxy Advisory Security Update
An update that fixes 5 vulnerabilities is now available.
SUSE: 2024:1598-1 important: less Security Advisory Updates
* bsc#1222849 Cross-References: * CVE-2024-32487
SUSE: 2024:1596-1 important: the Linux Kernel (Live Patch 12 for SLE 15 SP4) Security Advisory Updates
* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828
SUSE: 2024:1587-1 moderate: go1.22 Security Advisory Updates
* bsc#1218424 * bsc#1224017 * bsc#1224018 Cross-References:
SUSE: 2024:1588-1 moderate: go1.21 Security Advisory Updates
* bsc#1212475 * bsc#1224017 Cross-References: * CVE-2024-24787
SUSE: 2024:1590-1 moderate: ghostscript Security Advisory Updates
* bsc#1223852 Cross-References: * CVE-2023-52722