Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
sosreport: Fix command injection with crafted report names [CVE-2024-2947]
Fix for CVE-2024-31497
Fix for CVE-2024-31497
Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not clos…
* bsc#1200599 * bsc#1209635 * bsc#1212514 * bsc#1213456 * bsc#1217987
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
New upstream release (125.0)
The 6.8.6 stable kernel update contains a number of important fixes across the tree.
New version 4.2.4. Includes a fix for CVE-2024-2955
Update to latest upstream release (closes rhbz#2261550, closes rhbz#2245361)
Update to 2.28.8 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
* bsc#1212514 * bsc#1220237 * bsc#1220320 * bsc#1220340 * bsc#1220366
* bsc#1222050 * bsc#1222052 * bsc#1222053 Cross-References:
* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432
* bsc#1219078 * bsc#1219296 * bsc#1219432 Cross-References:
* bsc#1216992 Cross-References: * CVE-2023-4218
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
* bsc#1220053 * bsc#1222244 * bsc#1222384 * bsc#1222530 * bsc#1222603
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
* bsc#1220053 * bsc#1222244 * bsc#1222384 * bsc#1222530 * bsc#1222603
1.28.1 fixes a significant bug in 1.28.0. Update to 1.28.0. Also fixes CVE-2024-25629.