The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1215947 * bsc#1216853 Cross-References: * CVE-2023-38470
* bsc#1219079 Cross-References: * CVE-2024-0775
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to remote code execution.
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
A vulnerability has been discovered in borgmatic, which can lead to shell injection.
Multiple vulnerabilities have been discovered in Pillow, the worst of which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution.
A vulnerability has been discovered in Setuptools, which can lead to denial of service.
Intel has released microcode updates, addressing serveral vulnerabilties. CVE-2023-22655
Multiple vulnerabilities have been found in MediaInfo and MediaInfoLib, the worst of which could allow user-assisted remote code execution.
Multiple vulnerabilities have been discovered in strongSwan, the worst of which could possibly lead to remote code execution.
Multiple vulnerabilities have been discovered in HTMLDOC, the worst of which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in mujs, the worst of which could lead to remote code execution.
Multiple vulnerabilities have been discovered in MPlayer, the worst of which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in systemd, the worst of which can lead to a denial of service.
A vulnerability has been discovered in Dalli, which can lead to code injection.
update to 124.0.6367.118 * High CVE-2024-4331: Use after free in Picture In Picture * High CVE-2024-4368: Use after free in Dawn
Several vulnerabilities were discovered in less, a file pager, which may result in the execution of arbitrary commands if a file with a specially crafted file …
Several vulnerabilities were discovered in nscd, the Name Service Cache Daemon in the GNU C library which may lead to denial of service or the execution of arb…
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in information disclosure, denial of service or the exe…
update to 124.0.6367.118 * High CVE-2024-4331: Use after free in Picture In Picture * High CVE-2024-4368: Use after free in Dawn update to 124.0.6367.91 update…
Patch to fix CVE-2024-31031
Update matrix-synapse to v1.105.1 (CVE-2024-31208) Update to v1.105.0