The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1222849 Cross-References: * CVE-2024-32487
* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828
* bsc#1218424 * bsc#1224017 * bsc#1224018 Cross-References:
* bsc#1212475 * bsc#1224017 Cross-References: * CVE-2024-24787
* bsc#1223852 Cross-References: * CVE-2023-52722
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1223256 Cross-References: * CVE-2023-50010
* bsc#1223256 Cross-References: * CVE-2023-50010
The 6.8.9 stable kernel update contains a number of important fixes across the tree.
Security fix for CVE-2023-5752 (in the bundled pip).
Security fix for CVE-2023-5752 (in the bundled pip).
A possible SQL injection vulnerability was found in libpgjava, the PostgreSQL JDBC Driver. It allows an attacker to inject SQL if using PreferQueryMode=SIMPLE …
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Fossil regression
Several security issues were fixed in libspreadsheet-parsexlsx-perl.
* bsc#1223100 Cross-References: * CVE-2023-3758
* bsc#1223100 Cross-References: * CVE-2023-3758
* bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References:
Nick Galloway discovered an integer overflow in dav1d, a fast and small AV1 video stream decoder which could result in memory corruption. For the oldstable dis…
GLib could be made to accept spoofed D-Bus signals.
* bsc#1223100 Cross-References: * CVE-2023-3758
* bsc#1223852 Cross-References: * CVE-2023-52722
* bsc#1216853 Cross-References: * CVE-2023-38472
* bsc#1222492 Cross-References: * CVE-2024-21506