The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Go.
* bsc#1220826 * bsc#1226145 * bsc#1226666 * bsc#1227487 * bsc#1228466
* bsc#1027519 * bsc#1228574 * bsc#1228575 * bsc#1230366
* bsc#1047218 * bsc#1202273 * bsc#1226975 * bsc#1229589 * jsc#PED-10362
* bsc#1047218 * bsc#1225597 * bsc#1226975 * bsc#1229589 * jsc#PED-10362
Several security issues were fixed in EDK II.
firefox security update
Update to 1.35.1. Includes fix for CVE-2024-9427
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817]
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817] update to xen-4.17.5
Updated to latest upstream (131.0.2)
Update to 2.46.1
* bsc#1231264 * bsc#1231265 Cross-References: * CVE-2024-31228
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1230939 * bsc#1231294 Cross-References: * CVE-2024-47176
oath-toolkit could be made overwrite files as the administrator.
cups-filters could be made to run programs if it received specially crafted network traffic.
cups-browsed could be made to run programs if it received specially crafted network traffic.
An update that contains security fixes can now be installed.
An update that fixes three vulnerabilities is now available.
* bsc#1012628 * bsc#1183045 * bsc#1215199 * bsc#1216223 * bsc#1216776
* bsc#1216223 * bsc#1223600 * bsc#1223958 * bsc#1225272 * bsc#1227487
.NET 8.0 security update
.NET 6.0 security update