The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two vulnerabilities were found in Apache ActiveMQ, a Java-based message broker. CVE-2022-41678
* bsc#1220262 Cross-References: * CVE-2023-50782
fix CVE-2024-7006 (rhbz#2302997) fix CVE-2023-52356 (rhbz#2260112) fix CVE-2023-6228 (rhbz#2251863)
* bsc#1231294 Cross-References: * CVE-2024-47850
* bsc#1224038 * bsc#1224051 * bsc#1229013 Cross-References:
* bsc#1231039 Cross-References: * CVE-2024-23213 * CVE-2024-23271
* bsc#1231039 Cross-References: * CVE-2024-23206 * CVE-2024-23213
* bsc#1231698 Cross-References: * CVE-2024-9676
* bsc#1231698 Cross-References: * CVE-2024-9676
* bsc#1212475 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001
Security fix for CVE-2024-47874. Starlette 0.40.0 (October 15, 2024) This release fixes a Denial of service (DoS) via multipart/form-data requests. You can vie…
Security fix for CVE-2024-47874. Starlette 0.40.0 (October 15, 2024) This release fixes a Denial of service (DoS) via multipart/form-data requests. You can vie…
Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378.
Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378.
This is the October 2024 monthly update for .NET 6. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/6.0/6.0.35/6.0.135.md Runtime: …
Update bundled ws (CVE-2024-37890) Update bundled elliptic to fix CVE-2024-48949.
This is the October 2024 monthly update for .NET 6. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release- notes/6.0/6.0.35/6.0.135.md Runtime: …
Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378.
Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378.
Update bundled ws (CVE-2024-37890) Update bundled dependencies to fix CVE-2024-48949.
Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378.
Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378.
* bsc#1231700 Cross-References: * CVE-2018-1000807
* bsc#1228097 Cross-References: * CVE-2024-40725