Collected every two hours from specialised publications — each link leads to the original article.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting D-Link routers to its Known Exploited Vulnerabi…
new upstream update (126.0)
update to 125.0.6422.60 * High CVE-2024-4947: Type Confusion in V8 * High CVE-2024-4948: Use after free in Dawn * Medium CVE-2024-4949: Use after free in V8 * …
Long Exception message leading to crash. (CVE-2024-21011) HTTP/2 client improper reverse DNS lookup. (CVE-2024-21012) Integer overflow in C1 compiler address g…
An update that fixes 14 vulnerabilities is now available.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1214675 * bsc#1219306 * bsc#1219559 * bsc#1220970 * bsc#1222537
Update glib2 to fix CVE-2024-34397.
Update to jinja2-3.1.4, fixes CVE-2024-34064.
Update to werkzeug-3.0.3, fixes CVE-2024-34069.
Amel Bouziane-Leblond discovered that LibreOffice's support for binding scripts to click events on graphics could result in unchecked script execution.
* bsc#1177529 * bsc#1192145 * bsc#1211592 * bsc#1217408 * bsc#1218562
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1219559 Cross-References: * CVE-2023-52425
* bsc#1190576 * bsc#1192145 * bsc#1204614 * bsc#1211592 * bsc#1218562
This release fixes various issues in shim bootloader and updates it to a supported version. Older versions of the shim may eventually be blocked by Secure Boot…
* bsc#1014637 * bsc#1156309 * jsc#MSQA-775 Cross-References:
* bsc#1047178 * bsc#1082216 * bsc#1082233 * bsc#1210999
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…