The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370
* bsc#1226642 Cross-References: * CVE-2024-6387
* bsc#1222050 * bsc#1222052 * bsc#1222053 * bsc#1226957
* bsc#1219217 * bsc#1220266 Cross-References: * CVE-2024-0914
The system could be made to crash or run programs as an administrator.
USN-6305-2 caused a regression in parsing XML.
Johannes Kuhn discovered that messages and channel names are not properly escaped in the modtcl module in ZNC, a IRC bouncer, which could result in remote code…
* bsc#1212475 * bsc#1227314 Cross-References: * CVE-2024-24791
* bsc#1218424 * bsc#1227314 Cross-References: * CVE-2024-24791
* bsc#1226957 Cross-References: * CVE-2024-39331
* bsc#1224282 Cross-References: * CVE-2024-34459
* bsc#1226944 * bsc#1226945 * bsc#1226946 Cross-References:
* bsc#1225771 Cross-References: * CVE-2024-5564
* bsc#1227052 Cross-References: * CVE-2024-6104
* bsc#1224282 Cross-References: * CVE-2024-34459
Several security issues were fixed in Firefox.
* bsc#1224282 Cross-References: * CVE-2024-34459
* bsc#1226447 * bsc#1226448 Cross-References: * CVE-2024-0397
Backport fix for CVE-2024-6387 (rhbz#2294879) Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
Security fixes for CVE-2024-33870, CVE-2024-29510
Backport fix for CVE-2024-6387 (rhbz#2294879)
* bsc#1226447 * bsc#1226448 Cross-References: * CVE-2024-0397
* bsc#1226642 Cross-References: * CVE-2024-6387
* bsc#1226944 * bsc#1226945 * bsc#1226946 Cross-References: