The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575
Update to 1.7.2 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575
Rebase to version 2.6.0
Update to 2.28.7 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.7 Security Advisories: https://mbed-tls.readthedocs.io/en/latest/securit…
Update to 2.11.5
Security fix for CVE-2023-49083
It was discovered that Engrampa, an archive manager for the MATE desktop environment was susceptible to path traversal when handling CPIO archives.
* bsc#1219679 Cross-References: * CVE-2024-0985
* bsc#1218429 Cross-References: * CVE-2023-6879
* bsc#1218690 * bsc#1218810 * bsc#1219243 Cross-References:
* bsc#1219113 * bsc#1219604 Cross-References: * CVE-2014-1745
* bsc#1219679 Cross-References: * CVE-2024-0985
shadow could be made to expose sensitive information.
* bsc#1217214 * bsc#1218903 * bsc#1218905 * bsc#1218906 * bsc#1218907
* bsc#1065729 * bsc#1108281 * bsc#1123986 * bsc#1141539 * bsc#1181674
* bsc#1170848 * bsc#1210911 * bsc#1211254 * bsc#1211560 * bsc#1211912
* bsc#1192154 * bsc#1192696 * bsc#1193492 * bsc#1193686 * bsc#1200480
* bsc#1192154 * bsc#1192696 * bsc#1193492 * bsc#1193686 * bsc#1200480
* bsc#1193948 * bsc#1211649 * bsc#1215963 * bsc#1216284 * bsc#1219430
* bsc#1108281 * bsc#1193285 * bsc#1215275 * bsc#1216702 * bsc#1217987
Several security issues were fixed in UltraJSON.
Several security issues were fixed in EDK II.
update to 1.26.2
arm32: The cache may not be properly cleaned/invalidated (take two) [XSA-447, CVE-2023-46837] pci: phantom functions assigned to incorrect contexts [XSA-449, C…