The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The system could be compromised under certain conditions.
Several security issues were fixed in PHP.
curl a command line tool for transferring data with URL syntax was affected by CVE-2024-8096. When the TLS backend is GnuTLS, curl may incorrectly handle OCSP …
Several security issues were fixed in Go.
* bsc#1231208 * bsc#1231230 * bsc#1231499 * bsc#1231698 * bsc#1232522
Update to 2.46.3
Update to b3561
Backport fix for CVE-2024-50602.
CVE fix for CVE-2024-9632
Update to 2.46.3
zlib could be made to crash or run programs if it received specially crafted input.
* bsc#1204171 * bsc#1205796 * bsc#1206188 * bsc#1206344 * bsc#1209290
* bsc#1065729 * bsc#1194869 * bsc#1217845 * bsc#1218562 * bsc#1219596
* bsc#1054914 * bsc#1065729 * bsc#1194869 * bsc#1204171 * bsc#1205796
* bsc#1065729 * bsc#1194869 * bsc#1217845 * bsc#1218562 * bsc#1219596
Update to 130.0.6723.116
Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch
Update to 130.0.6723.116
Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch
Several security issues were fixed in .NET.
* bsc#1231046 * bsc#1232622 * bsc#1232624 Cross-References:
* bsc#1027519 * bsc#1230366 * bsc#1232542 * bsc#1232622 * bsc#1232624
An update that fixes one vulnerability is now available.
Several security issues were fixed in Ghostscript.