Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: sympa 2024-14c006b8bb Security Advisory Updates
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74
Fedora 41: dotnet9.0 2024-aab6aded81 Security Advisory Updates
This is the .NET 9.0 GA release. It contains security fixes for CVE-2024-43498 and CVE-2024-43499 Announcement: https://devblogs.microsoft.com/dotnet/announcin…
Fedora 40: dotnet9.0 2024-70cf80279f Security Advisory Updates
This is the .NET 9.0 GA release. It contains security fixes for CVE-2024-43498 and CVE-2024-43499 Announcement: https://devblogs.microsoft.com/dotnet/announcin…
Debian LTS: DLA-3863-1: nbconvert Security Advisory Updates
Alvaro Mu'±oz from the GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert, a tool and library used to con…
Fedora 40: dotnet8.0 2024-f4eb809b49 Security Advisory Updates
This is the August 2024 monthly update for .NET 8. This includes a fix for CVE-2024-38167 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release-…
Fedora 39: dotnet8.0 2024-8eff1bffb1 Security Advisory Updates
This is the August 2024 monthly update for .NET 8. This includes a fix for CVE-2024-38167 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release-…
Mageia 2024-0271: libfm & libfm-qt Security Advisory Updates
Fixed a vulnerability about trusted locations References: - https://bugs.mageia.org/show_bug.cgi?id=33410 - https://github.com/lxqt/libfm-qt/pull/992
Mageia 2024-0230: chromium-browser-stable Security Advisory Updates
The chromium-browser-stable package has been updated to the 126.0.6478.61 release. It includes 21 security fixes. Some of them are: * High CVE-2024-5830: Type …
Fedora 39: cacti-spine 2024-27a594f71d Security Advisory Updates
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
Fedora 39: cacti 2024-27a594f71d Security Advisory Updates
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
Fedora 40: python-aiohttp 2024-000a25f3fc Security Advisory Updates
Security update for CVE-2024-27306 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4
Fedora 40: python-openapi-core 2024-000a25f3fc Security Advisory Updates
Security update for CVE-2024-27306 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4
Fedora 39: apache-commons-configuration 2024-fa7b758114
This update contains security fixes for CVE-2024-29131 and CVE-2024-29133. See https://github.com/apache/commons-configuration/blob/master/RELEASE- NOTES.txt f…
Fedora 40: apache-commons-configuration 2024-c673517dce
This update contains security fixes for CVE-2024-29131 and CVE-2024-29133. See https://github.com/apache/commons-configuration/blob/master/RELEASE- NOTES.txt f…
Fedora 38: syncthing 2024-b93312a597
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…
Fedora 39: syncthing 2024-c46536abe6
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…
Fedora 39: caddy 2024-22b915e51a
Update to the latest upstream version, which includes a fix for CVE-2023-45142. https://github.com/caddyserver/caddy/releases/tag/v2.7.6
Fedora 38: python-aiohttp 2024-0ddda4c691
Security update for CVE-2024-23334 and CVE-2024-23829 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.2 https://github.com/aio-libs/aiohttp/releases/tag/…
Fedora 39: python-aiohttp 2024-f249b74f03
Security update for CVE-2024-23334 and CVE-2024-23829 https://github.com/aio- libs/aiohttp/releases/tag/v3.9.2 https://github.com/aio- libs/aiohttp/releases/ta…
Fedora 39: borgbackup 2023-467632ecbe
fix for CVE-2023-36811: spoofed archive leads to data loss Please note that starting with borgbackup 1.2.5 all borg repos must use TAM authentication: https://…
Fedora 38: borgbackup 2023-555f9fac30
fix for CVE-2023-36811: spoofed archive leads to data loss Please note that starting with borgbackup 1.2.5 all borg repos must use TAM authentication: https://…
Fedora 37: borgbackup 2023-34411d8f77
fix for CVE-2023-36811: spoofed archive leads to data loss Please note that starting with borgbackup 1.2.5 all borg repos must use TAM authentication: https://…
Fedora 37: OpenImageIO 2023-99870af9f0
Changes since 2.4.12: https://github.com/OpenImageIO/oiio/releases/tag/v2.4.13.0 https://github.com/OpenImageIO/oiio/releases/tag/v2.4.14.0 Security fix for CV…
Fedora 38: OpenImageIO 2023-ad5fee9a64
Changes since 2.4.12: https://github.com/OpenImageIO/oiio/releases/tag/v2.4.13.0 https://github.com/OpenImageIO/oiio/releases/tag/v2.4.14.0 Security fix for CV…