The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Sanitize.
Several security issues were fixed in Firefox.
CVE fix for CVE-2024-31080, CVE-2024-31081, CVE-2024-31083, and a fix for a regression introduced with the fix for CVE-2024-31083
Update to 20240116.2: fixes possible out-of-bounds string access as described in https://github.com/abseil/abseil-cpp/pull/1650.
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1219296 * bsc#1220828 Cross-References: * CVE-2023-52340
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914: Use after free in …
Fix for CVE-2024-31497
Fix for CVE-2024-31497
* bsc#1219386 Cross-References: * CVE-2023-5992
* bsc#1222539 Cross-References: * CVE-2024-3177
Google Guest Agent and OS Config Agent could be made to crash if it open a specially crafted JSON.
* bsc#1213269 * bsc#1218889 * bsc#1220134 * bsc#1222843 * bsc#1222845
* bsc#1190011 * bsc#1198038 * bsc#1207205 * bsc#1212850 * bsc#1213925
* bsc#1223155 Cross-References: * CVE-2024-31744
Squid could be made to crash if it received specially crafted network traffic.
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
* bsc#1220828 Cross-References: * CVE-2024-26622
Charles Fol discovered that the iconv() function in the GNU C library is prone to a buffer overflow vulnerability when converting strings to the ISO-2022-CN-EX…
Update to idna-3.7.
update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914: Use after free in …
Backport fix for CVE-2024-3116.