Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 38: kernel 2024-f35f9525d6 Security Advisory Updates
The 6.8.8 stable kernel update contains a number of important fixes across the tree.
Ubuntu 6757-2: PHP Security Advisory Updates
Several security issues were fixed in PHP.
Ubuntu 6762-1: GNU C Library Security Advisory Updates
Several security issues were fixed in GNU C Library.
Debian: DSA-5676-1: chromium Security Advisory Updates
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Ubuntu 6747-2: Firefox Security Advisory Updatess
USN-6747-1 caused some minor regressions in Firefox.
Fedora 40: tpm2-tss 2024-0c9d3b51d4 Security Advisory Updates
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Fedora 40: et 2024-b745c97f4b Security Advisory Updates
Update to 6.2.8, fixing CVE-2022-48257 and CVE-2022-48258 Unbundle cpp-httlib, fixing CVE-2023-26130
Fedora 40: python-aiohttp 2024-000a25f3fc Security Advisory Updates
Security update for CVE-2024-27306 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4
Fedora 40: tpm2-tools 2024-0c9d3b51d4 Security Advisory Updates
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Fedora 40: python-openapi-core 2024-000a25f3fc Security Advisory Updates
Security update for CVE-2024-27306 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4
Fedora 40: php-tcpdf 2024-27eafd0e65 Security Advisory Updates
Version 6.7.5 (2024-04-20) Update GitHub actions fix: CSV-2024-22640 (#712)
Ubuntu 6760-1: Gerbv Security Advisory Updates
Gerbv could be made to crash if it opened a specially crafted input file.
Debian LTS: DLA-3805-1: qtbase-opensource-src Security Advisory Updates
Several issues have been found in qtbase-opensource-src, a collection of several Qt modules/libraries. The issues are related to buffer overflows, infinite loo…
SUSE: 2024:1480-1 important: the Linux Kernel Security Advisory Updates
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
SUSE: 2024:0782-2 important: python311 Security Advisory Updates
* bsc#1196025 * bsc#1210638 * bsc#1219666 Cross-References:
SUSE: 2024:1475-1 important: frr Security Advisory Updates
* bsc#1222518 Cross-References: * CVE-2024-31948
Ubuntu 6758-1: JSON5 Security Advisory Updates
JSON5 could allow unintended access to network services or have other unspecified impact.
Debian LTS: DLA-3802-1: org-mode Security Advisory Updates
Multiple problems were discovered in Org-mode, a GNU Emacs major mode for keeping notes, authoring documents, and maintaining to-do lists. CVE-2024-30203 & CVE…
Ubuntu 6761-1: Anope Security Advisory Updates
Anope could be made to bypass authentication checks for suspended accounts.
SUSE: 2024:1468-1 important: ffmpeg Security Advisory Updates
* bsc#1190721 * bsc#1190724 * bsc#1190727 * bsc#1190728 * bsc#1190731
SUSE: 2024:1470-1 important: ffmpeg-4 Security Advisory Updates
* bsc#1223070 * bsc#1223235 * bsc#1223272 Cross-References:
Ubuntu 6759-1: FreeRDP Security Advisory Updates
Several security issues were fixed in FreeRDP.
SUSE: 2024:1469-1 important: docker Security Advisory Updates
* bsc#1219267 * bsc#1219268 * bsc#1219438 * bsc#1223409
SUSE: 2024:1466-1 important: the Linux Kernel Security Advisory Updates
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635