The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.35.1. Includes fix for CVE-2024-9427
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817]
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817] update to xen-4.17.5
Updated to latest upstream (131.0.2)
Update to 2.46.1
* bsc#1231264 * bsc#1231265 Cross-References: * CVE-2024-31228
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1230939 * bsc#1231294 Cross-References: * CVE-2024-47176
oath-toolkit could be made overwrite files as the administrator.
cups-filters could be made to run programs if it received specially crafted network traffic.
cups-browsed could be made to run programs if it received specially crafted network traffic.
An update that contains security fixes can now be installed.
An update that fixes three vulnerabilities is now available.
* bsc#1012628 * bsc#1183045 * bsc#1215199 * bsc#1216223 * bsc#1216776
* bsc#1216223 * bsc#1223600 * bsc#1223958 * bsc#1225272 * bsc#1227487
.NET 8.0 security update
Patch the code to use https instead of http (CVE-2024-45321)
Fixes CVE-2024-45752: A vulnerability that allows users to remap keys arbitrarily. This allows all users on the system to remap a key unexpectedly to a potenti…
Patch the code to use https instead of http (CVE-2024-45321)
Update to 0.3.13.3 and fix gresource generation
Patch the code to use https instead of http (CVE-2024-45321)
Several security issues were fixed in dotnet6, dotnet8.
WEBrick could allow a HTTP request smuggling attack.
* bsc#1231295 Cross-References: * CVE-2024-47855