The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in LibTIFF.
less could be made to crash or run arbitrary commands if it receive a crafted input.
* bsc#1218733 Cross-References: * CVE-2023-51780
* bsc#1054799 * bsc#1054802 * bsc#1114511 Cross-References:
* bsc#1183533 Cross-References: * CVE-2021-28153
Cross-References: * CVE-2023-44487 CVSS scores:
* bsc#1185232 * bsc#1185261 * bsc#1185441 * bsc#1185621 * bsc#1187071
* bsc#1166486 * bsc#1185861 * bsc#1185863 * bsc#1186449 * bsc#1191256
* bsc#1177083 * bsc#1181995 * jsc#ECO-3329 * jsc#PM-2475 * jsc#PM-2730
A vulnerability was discovered in libgit2, a portable C implementation of the Git core methods provided as a linkable library. Using crafted inputs to the git_…
* bsc#1188191 * bsc#1195979 * bsc#1197027 * bsc#1198226 * bsc#1200096
Several security issues were fixed in OpenJDK 21.
Several security issues were fixed in OpenJDK 17.
Several security issues were fixed in OpenJDK 11.
Security fix for CVE-2023-38852
Update to latest version Security fix for CVE-2024-22368
Several security issues were fixed in libde265.
* bsc#1218733 Cross-References: * CVE-2023-51780
* bsc#1215300 * bsc#1217116 * bsc#1218733 Cross-References:
* bsc#1215300 * bsc#1218733 Cross-References: * CVE-2023-4921
It was discovered that engrampa, an archive manager for the MATE desktop environment was susceptible to path traversal when handling CPIO archives.
libxml2 could be made to crash or run programs if it opened a specially crafted file.
Several security issues were fixed in Dnsmasq.
PostgreSQL could be made to run arbitrary SQL.