The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in libsoup.
Several security issues were fixed in libsoup3.
fix crash in in ogg vorbis (rhbz#2322326) (CVE-2024-50612)
Backport fix for CVE-2024-9287 Update to python-3.11.0.
Update to 2.82.2, fixes CVE-2024-52533.
Update to 5.0.2 fix rhbz#2326888
mpg123 a popular MPEG layer 1/2/3 audio player was afected by a vulnerability. An out-of-bounds write flaw was found in mpg123 when handling crafted
Twisted could allow unintended access to information over the network.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, CLRF injectio…
TinyGLTF could be made to crash or run programs as your login if it received specially crafted input.
Pygments could be made to crash if it received specially crafted input.
* bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326
USN-7117-1 caused some regression in needrestart.
Multiple vulnerabilities have been fixed in pypy3, an alternative implementation of the Python 3.x language. CVE-2020-10735
* bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853
* bsc#1231347 * bsc#1231428 Cross-References: * CVE-2024-28168
Update to 131.0.6778.85 * High CVE-2024-11395: Type Confusion in V8 * High CVE-2024-11110: Inappropriate implementation in Blink * Medium CVE-2024-11111: Inapp…
Update to 3.3.7 - CVE-2024-47533
Update to 131.0.6778.85 * High CVE-2024-11395: Type Confusion in V8 * High CVE-2024-11110: Inappropriate implementation in Blink * Medium CVE-2024-11111: Inapp…
Update to 3.3.7 - CVE-2024-47533
Add patches to fix: CVE-2024-52530 libsoup3: HTTP request smuggling via stripping null bytes from the ends of header names (bug #2325358) CVE-2024-52532 libsou…
* bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326
* bsc#1231879 * bsc#1233355 Cross-References: * CVE-2024-10458
* bsc#1233282 Cross-References: * CVE-2024-52533