The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The 6.9.12 stable kernel update contains a number of important fixes across the tree.
double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143] x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
Important: freeradius security update
Moderate: kernel security update
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Exim could be made to bypass a MIME filename extension-blocking protection mechanism if it received specially crafted input.
Apache Commons Collections could be made to execute arbitrary code if it received specially crafted input.
phpCAS was vulnerable to an authentication bypass.
* bsc#1222849 Cross-References: * CVE-2024-32487
* bsc#1137930 Cross-References: * CVE-2019-12795
prometheus-alertmanager could be made to expose sensitive information over the network.
Several security issues were fixed in MySQL.
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
Several security issues were fixed in OpenJDK 21.
Several security issues were fixed in OpenJDK 17.
Several security issues were fixed in OpenJDK 11.
Several security issues were fixed in OpenJDK 8.
Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3
Several security issues were fixed in Python.
* bsc#1027519 * bsc#1214718 * bsc#1221984 * bsc#1227355
* bsc#1222693 Cross-References: * CVE-2023-29483
* bsc#1219660 Cross-References: * CVE-2024-24577
* bsc#916845 Cross-References: * CVE-2013-4235
* bsc#916845 Cross-References: * CVE-2013-4235