The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1224168 * bsc#1224170 * bsc#1224171 * bsc#1224172 * bsc#1224173
* bsc#1223867 * bsc#1223868 Cross-References: * CVE-2024-4215
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224259 * bsc#1224274 * bsc#1224276 Cross-References:
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224282 Cross-References: * CVE-2024-34459
USN-6851-1 caused systemctl enable to fail
USN-6844-1 caused the cupsd daemon to never start
* bsc#1226448 Cross-References: * CVE-2024-4032
* bsc#1224279 * bsc#1224309 Cross-References: * CVE-2024-3044
* bsc#1224279 * bsc#1224309 Cross-References: * CVE-2024-3044
Update to version 29.4, fixing CVE-2024-39331. Update to Emacs 29.4, fixing CVE-2024-39331.
OpenSSH could be made to bypass authentication and remotely access systems without proper credentials.
Several security issues were fixed in eSpeak NG.
libcdio could be made to crash or run programs as your login if it opened a specially crafted file.
Update to 4.15 for CVE-2024-3652
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
Gunicorn, an event-based HTTP/WSGI server, fails to properly validate Transfer- Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By c…