The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20241030T212825 2024-10-30T21:28:25Z ( jsc#PED-11136 )
This update for openssl-1_1 fixes the following issues: Security fixes:
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 128.4.0 ESR (bsc#1231879):
* bsc#1223363 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, cross-site scri…
* bsc#1227471 * bsc#1228349 * bsc#1228573 * bsc#1228786
* bsc#1223363 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013
* bsc#1225011 * bsc#1225012 * bsc#1225309 * bsc#1225311 * bsc#1225819
Two vulnerabilities were found in Apache ActiveMQ, a Java-based message broker. CVE-2022-41678
* bsc#1220262 Cross-References: * CVE-2023-50782
fix CVE-2024-7006 (rhbz#2302997) fix CVE-2023-52356 (rhbz#2260112) fix CVE-2023-6228 (rhbz#2251863)
* bsc#1231294 Cross-References: * CVE-2024-47850
* bsc#1224038 * bsc#1224051 * bsc#1229013 Cross-References:
* bsc#1231039 Cross-References: * CVE-2024-23213 * CVE-2024-23271
* bsc#1231039 Cross-References: * CVE-2024-23206 * CVE-2024-23213
* bsc#1231698 Cross-References: * CVE-2024-9676
* bsc#1231698 Cross-References: * CVE-2024-9676
* bsc#1212475 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001
Security fix for CVE-2024-47874. Starlette 0.40.0 (October 15, 2024) This release fixes a Denial of service (DoS) via multipart/form-data requests. You can vie…
Security fix for CVE-2024-47874. Starlette 0.40.0 (October 15, 2024) This release fixes a Denial of service (DoS) via multipart/form-data requests. You can vie…