Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 6757-1: PHP Security Advisory Updates
Several security issues were fixed in PHP.
Debian LTS: DLA-3801-1: emacs Security Advisory Updates
Multiple problems were discovered in GNU Emacs, the extensible, customisable, self-documenting display editor. CVE-2024-30203 & CVE-2024-30204
Ubuntu 6744-3: Pillow Security Advisory Updates
Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file.
Ubuntu 6734-2: libvirt Security Advisory Updates
Several security issues were fixed in libvirt.
Ubuntu 6756-1: less Security Advisory Updates
less could be made run programs as your login if it opened a specially crafted file.
Ubuntu 6755-1: GNU cpio Security Advisory Updates
GNU cpio could be made to write files outside the target directory.
openSUSE: 2024:0114-1 important: pdns-recursor Advisory Security Update
An update that fixes one vulnerability is now available.
Debian LTS: DLA-3800-1: ruby-rack Security Advisory Updates
Multiple vulnerabilities were fixed in ruby-rack, an interface for developing web applications in Ruby. CVE-2024-25126
Fedora 40: python-idna 2024-098b5d9719 Security Advisory Updates
Update to 3.7 (rhbz#2274439), security fix for CVE-2024-3651
Debian LTS: DLA-3799-1: trafficserver Security Advisory Updates
Potential DoS attacks have been fixed by rate limiting HTTP/2 CONTINUATION frames in Apache Traffic Server, an HTTP/1.1 and HTTP/2 compliant caching proxy serv…
Debian LTS: DLA-3797-1: frr Security Advisory Updates
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to trigger buffer overflows with th…
Fedora 39: python-reportlab 2024-6ec4e78241 Security Advisory Updates
Release 4.2.0
Fedora 38: chromium 2024-2c9be9d949 Security Advisory Updates
update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…
Fedora 40: python-reportlab 2024-dc844d0669 Security Advisory Updates
Release 4.2.0
Debian LTS: DLA-3796-1: mediawiki Security Advisory Updates
Security vulnerabilities were found in mediawiki, a website engine for collaborative work, that could lead to information disclosure, privilege escalation, or …
Fedora 39: chromium 2024-decb7e94a1 Security Advisory Updates
update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…
SUSE: 2024:1450-1 low: java-1_8_0-openjdk Security Advisory Updates
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
SUSE: 2024:1451-1 low: java-1_8_0-openjdk Security Advisory Updates
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
SUSE: 2024:1452-1 low: java-11-openjdk Security Advisory Updates
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
SUSE: 2024:1453-1 important: frr Security Advisory Updates
* bsc#1220548 * bsc#1222518 Cross-References: * CVE-2024-27913
SUSE: 2024:1454-1 important: the Linux Kernel Security Advisory Updates
* bsc#1186060 * bsc#1192145 * bsc#1194516 * bsc#1208995 * bsc#1209635
Debian: DSA-5675-1: chromium Security Advisory Updates
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
SUSE: 2024:1447-1 moderate: openCryptoki Security Advisory Updates
* bsc#1219217 * jsc#PED-3360 * jsc#PED-3361 Cross-References:
SUSE: 2024:1438-1 important: qemu Security Advisory Updates
* bsc#1213269 * bsc#1218889 * bsc#1222843 * bsc#1222845