The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New upstream version (124.0.1)
New upstream version (124.0.1)
Update to 123.0.6312.58 * High CVE-2024-2625: Object lifecycle issue in V8 * Medium CVE-2024-2626: Out of bounds read in Swiftshader * Medium CVE-2024-2627: Us…
Two vulnerabilities have been fixed in the Python 3 interpreter. CVE-2023-6597
Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix, which might result in denial of service or informatio…
Multiple security vulnerabilities have been discovered in Cacti, a web interface for graphing of monitoring systems, which could result in cross-site scripting…
Patch CVE-2023-4256 and CVE-2023-43279
Updates google.golang.org/protobuf to v1.33.0 to resolve CVE-2024-24786. Kubernetes is now built with go 1.21.8.
Security fix for CVE-2024-22871 Update to upstream release 1.11.2
Rebase gnutls to version 3.8.4 - contains fixes for CVE-2024-28834 and CVE-2024-28835
Patch CVE-2023-4256 and CVE-2023-43279
Security fix for CVE-2024-22871 Update to upstream release 1.11.2
Manfred Paul discovered a flaw in the Mozilla Firefox web browser, allowing an attacker to inject an event handler into a privileged object that would allow ar…
An issue has been found in libnet-cidr-lite-perl, a module for merging IPv4 or IPv6 CIDR address ranges.
Multiple security issues were discovered in Thunderbird, which could result in denial of service, the execution of arbitrary code or leaks of encrypted email s…
Update to version 2.13.1 Fix CVE-2024-28054
update to xen-4.18.1 rebase xen.gcc12.fixes.patch remove patches now included or superceded upstream x86: Register File Data Sampling [XSA-452, CVE-2023-28746]…
Updated to 124.0 Updated to latest upstream (123.0.1)
Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)
Patch for kf6/Qt6 scaling Updated conditionals for kf* subpackages 24.2.1.2, include kf6.
* bsc#1211515 * bsc#1213456 * bsc#1214064 * bsc#1218195 * bsc#1218216
Graphviz could be made to crash if it opened a specially crafted config6a file.
* bsc#1221323 Cross-References: * CVE-2023-22655 * CVE-2023-28746
* bsc#1219357 * bsc#1219554 Cross-References: * CVE-2020-36773