Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: mod_http2 2024-4812897dd1 Security Advisory Updates
Security fix for CVE-2024-27316
Debian: DSA-5668-1: chromium Security Advisory Updates
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
openSUSE: 2024:0112-1 moderate: perl-CryptX Advisory Security Update
An update that fixes one vulnerability is now available.
Fedora 38: python-aiohttp 2024-5dc487ee89 Security Advisory Updates
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Fedora 38: uxplay 2024-5dc487ee89 Security Advisory Updates
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Fedora 38: python-django3 2024-84fbbbb914 Security Advisory Updates
Security fixes for CVE-2024-27351 Potential regular expression DOS in django.utils.text.Truncator.words() CVE-2024-24680 denial-of-service in intcomma template…
Fedora 38: nghttp2 2024-ec22e51ec2 Security Advisory Updates
fix CONTINUATION frames DoS (CVE-2024-28182)
Fedora 39: glibc 2024-9be1b94714 Security Advisory Updates
This update includes several bug fixes from the upstream glibc release branch, including a fix for CVE-2024-2961.
Fedora 39: python-aiohttp 2024-f83b123d63 Security Advisory Updates
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Fedora 40: httpd 2024-937be154d8 Security Advisory Updates
This update includes httpd version 2.4.59, fixing various security issues and bugs. See https://downloads.apache.org/httpd/CHANGES_2.4.59 for complete details …
Fedora 40: firefox 2024-c6a1d4e0ec Security Advisory Updates
New upstream release (125.0) New upstream release (124.0.2)
Fedora 40: chromium 2024-4d2d73ab31 Security Advisory Updates
update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use…
Fedora 40: python-aiohttp 2024-2f15e6e876 Security Advisory Updates
Update llhttp to 9.2.1, fixing CVE-2024-27982. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
Fedora 40: nodejs18 2024-2c52524694 Security Advisory Updates
2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @RafaelGSS This is a security release. Notable Changes CVE-2024-27980 - Command injection via args parameter of c…
Fedora 40: perl-Clipboard 2024-2843f37353 Security Advisory Updates
Update to 0.29 - Fixes 'clipbrowse command execution with multi-line clipboard text including "| sh"'
Debian: DSA-5666-1: flatpak Security Advisory Updates
Gergo Koteles discovered that sandbox restrictions in Flatpak, an application deployment framework for desktop apps, could by bypassed in combination with xdg-…
SUSE: 2024:1354-1 important: wireshark Security Advisory Updates
* bsc#1220181 Cross-References: * CVE-2024-24476
SUSE: 2024:1355-1 important: nodejs14 Security Advisory Updates
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
openSUSE: 2024:0111-1 important: putty Advisory Security Update
An update that fixes one vulnerability is now available.
SUSE: 2024:1346-1 important: nodejs12 Security Advisory Updates
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
SUSE: 2024:1347-1 important: wireshark Security Advisory Updates
* bsc#1220181 Cross-References: * CVE-2024-24476
SUSE: 2024:1350-1 important: MozillaFirefox Security Advisory Updates
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
SUSE: 2024:1351-1 low: graphviz Security Advisory Updates
* bsc#1219491 Cross-References: * CVE-2023-46045
Debian LTS: DLA-3790-1: firefox-esr Security Advisory Updates
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking.