The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1226325 * bsc#1228573 Cross-References: * CVE-2024-36964
update to 8.0.1 fixes (CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE. (CVE-2024-31227) Potential Denial-of-service due to m…
Update to latest upstream
* bsc#1228123 Cross-References: * CVE-2024-41184
* bsc#1228123 Cross-References: * CVE-2024-41184
* bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786
* bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832
* bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225312
* bsc#1223683 * bsc#1225099 * bsc#1225739 * bsc#1228349 * bsc#1228573
Several security issues were fixed in ImageMagick.
* bsc#1230979 * bsc#1231413 Cross-References: * CVE-2024-8900
* bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786
* bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059
* bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225312
* bsc#1228349 * bsc#1228786 Cross-References: * CVE-2024-40909
* bsc#1228349 * bsc#1228573 * bsc#1228786 Cross-References:
Security fix for CVE-2023-6237 (openssl: Excessive time spent checking invalid RSA public keys)
Fixes for memory vulnerabilities.
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-40866
It was discovered that there was a configuration issue in libapache-mod-jk, an Apache web server module used to forward requests from Apache to Tomcat using th…