The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Firefox.
Several security issues were fixed in dotnet6, dotnet8.
Exim could be made to allow response injection if it received a specially crafted response.
Updated to latest upstream (128.0)
* bsc#1217592 Cross-References: * CVE-2023-49083
* bsc#1215823 * bsc#1215831 Cross-References: * CVE-2021-26345
* bsc#1217653 Cross-References: * CVE-2023-45539
* bsc#1217969 Cross-References: * CVE-2023-39804
* bsc#1198146 Cross-References: * CVE-2022-1210
* bsc#1218251 Cross-References: * CVE-2022-4603
Several security issues were fixed in Django.
OpenSSH could be made to expose timing information over the network.
* bsc#1223414 Cross-References: * CVE-2024-3596
* bsc#1119113 * bsc#1171988 * bsc#1191958 * bsc#1195065 * bsc#1195254
* bsc#1223414 Cross-References: * CVE-2024-3596
* bsc#1156395 * bsc#1171988 * bsc#1176447 * bsc#1176774 * bsc#1181147
Several security issues were fixed in Go.
* bsc#1220145 * bsc#1223363 * bsc#1223683 * bsc#1225211
* bsc#1210619 * bsc#1218487 * bsc#1220145 * bsc#1220537 * bsc#1222685
* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1223059 * bsc#1223363
* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225211
* bsc#1220145 * bsc#1223363 * bsc#1223683 * bsc#1225211
Tomcat could allow unintended access to network services.
This update fixes CVE-2024-24791