The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Twisted.
* bsc#1176492 Cross-References: * CVE-2014-10401 * CVE-2014-10402
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Update to 2.53.19
This update to the apr package fixes a security issue in the handling of shared memory permissions. SECURITY: CVE-2023-49582: Apache Portable Runtime (APR): Un…
David Benjamin reported a flaw in the X.509 name checks in OpenSSL, a Secure Sockets Layer toolkit, which may cause an application performing certificate name …
Several security issues were fixed in Django.
* bsc#1212475 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001
* bsc#1229438 Cross-References: * CVE-2024-44070
* bsc#1228613 * bsc#1228693 * bsc#1228694 * bsc#1228695 * bsc#1228696
* bsc#1062303 * bsc#1229008 * bsc#1229858 * bsc#1229867 * bsc#1229869
* bsc#1229129 Cross-References: * CVE-2023-42667 * CVE-2023-49141
* bsc#1229858 * bsc#1229867 * bsc#1229869 Cross-References:
It was discovered that there was a series of integer overflow vulnerabilities in LibTomMath, a multiple-precision mathematics library.
A vulnerability was discovered in Nokogiri, an open source XML and HTML library for Ruby. An inefficient regular expression was susceptible to excessive backtr…
Multiple vulnerabilities were discovered in git, a fast, scalable and distributed revision control system. CVE-2019-1387
* bsc#1224044 Cross-References: * CVE-2024-34397
Path traversal that allowed TZInfo::Timezone.get to load arbitrary files has been fixed in ruby-tzinfo, a Ruby library for working with time zone information.
Fix buffer overrun when giving an offset to Session:receive
Update to 1.15.10 (CVE-2024-42472)
Security fix for CVE-2024-8088
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to potentially trigger those effect…
An update that fixes one vulnerability is now available.
An update that fixes 10 vulnerabilities is now available.