The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1216109 * bsc#1216123 * bsc#1221400 * bsc#1226136 * bsc#1229858
* bsc#1062303 * bsc#1194400 * bsc#1211630 * bsc#1211631 * bsc#1214406
* bsc#1216109 * bsc#1216123 * bsc#1221400 * bsc#1226136 * bsc#1229858
LibreOffice could accept fraudulent digital signatures.
* bsc#1230400 Cross-References: * CVE-2024-23984 * CVE-2024-24968
* bsc#1229907 Cross-References: * CVE-2024-8250
Fix for CVE-2024-44070
Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) m…
Multiple vulnerabilities were found in expat, an XML parsing C library, which could lead to Denial of Service, memory corruption or arbitrary code execution.
Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) m…
Two issues have been found in tinyproxy, a lightweight, non-caching, optionally anonymizing HTTP proxy. They are related to an use after free in header parsing…
Several security issues were fixed in Apache HTTP Server.
* bsc#1229026 Cross-References: * CVE-2024-7055
* bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
* bsc#1227999 * bsc#1228780 * bsc#1229596 * bsc#1229704 * bsc#1230227
* bsc#1228002 Cross-References: * CVE-2022-48791
* bsc#1230353 Cross-References: * CVE-2023-29483
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
* bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
* bsc#1228780 Cross-References: * CVE-2024-6923
* bsc#1218534 * bsc#1219494 * bsc#1223263 * bsc#1226892 * bsc#1226897
ruby:3.3 security update
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Several security issues were fixed in OpenSSL.