Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.35.1. Includes fix for CVE-2024-9427
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817]
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817] update to xen-4.17.5
Updated to latest upstream (131.0.2)
Update to 2.46.1
* bsc#1231264 * bsc#1231265 Cross-References: * CVE-2024-31228
* bsc#1230939 * bsc#1231294 Cross-References: * CVE-2024-47176
oath-toolkit could be made overwrite files as the administrator.
cups-filters could be made to run programs if it received specially crafted network traffic.
cups-browsed could be made to run programs if it received specially crafted network traffic.
* bsc#1012628 * bsc#1183045 * bsc#1215199 * bsc#1216223 * bsc#1216776
* bsc#1216223 * bsc#1223600 * bsc#1223958 * bsc#1225272 * bsc#1227487
Patch the code to use https instead of http (CVE-2024-45321)
Fixes CVE-2024-45752: A vulnerability that allows users to remap keys arbitrarily. This allows all users on the system to remap a key unexpectedly to a potenti…
Patch the code to use https instead of http (CVE-2024-45321)
Update to 0.3.13.3 and fix gresource generation
Patch the code to use https instead of http (CVE-2024-45321)
WEBrick could allow a HTTP request smuggling attack.
* bsc#1231295 Cross-References: * CVE-2024-47855
* bsc#1222040 * bsc#1222041 * bsc#1222042 Cross-References:
* bsc#1231208 * bsc#1231230 Cross-References: * CVE-2024-9341
* bsc#1231230 Cross-References: * CVE-2024-6104 * CVE-2024-9341
* bsc#1216223 * bsc#1223600 * bsc#1223958 * bsc#1225272 * bsc#1227487
* bsc#1222040 * bsc#1222041 * bsc#1222042 Cross-References: