The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Firefox.
* bsc#1224282 Cross-References: * CVE-2024-34459
* bsc#1226447 * bsc#1226448 Cross-References: * CVE-2024-0397
Backport fix for CVE-2024-6387 (rhbz#2294879) Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
Security fixes for CVE-2024-33870, CVE-2024-29510
Backport fix for CVE-2024-6387 (rhbz#2294879)
* bsc#1226447 * bsc#1226448 Cross-References: * CVE-2024-0397
* bsc#1226642 Cross-References: * CVE-2024-6387
* bsc#1226944 * bsc#1226945 * bsc#1226946 Cross-References:
* bsc#1224168 * bsc#1224170 * bsc#1224171 * bsc#1224172 * bsc#1224173
* bsc#1223867 * bsc#1223868 Cross-References: * CVE-2024-4215
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224259 * bsc#1224274 * bsc#1224276 Cross-References:
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224282 Cross-References: * CVE-2024-34459
USN-6851-1 caused systemctl enable to fail
USN-6844-1 caused the cupsd daemon to never start
* bsc#1226448 Cross-References: * CVE-2024-4032
* bsc#1224279 * bsc#1224309 Cross-References: * CVE-2024-3044
* bsc#1224279 * bsc#1224309 Cross-References: * CVE-2024-3044
Update to version 29.4, fixing CVE-2024-39331. Update to Emacs 29.4, fixing CVE-2024-39331.
The package openssh before version 9.8p1-1 is vulnerable to authentication bypass.
OpenSSH could be made to bypass authentication and remotely access systems without proper credentials.