The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
fix CONTINUATION frames DoS (CVE-2024-28182)
This update includes several bug fixes from the upstream glibc release branch, including a fix for CVE-2024-2961.
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
update to 123.0.6312.122 * High CVE-2024-3157: Out of bounds write in Compositing * High CVE-2024-3516: Heap buffer overflow in ANGLE * High CVE-2024-3515: Use…
Update llhttp to 9.2.1, fixing CVE-2024-27982. Backport llhttp 9.2.1 support to python-aiohttp 3.9.3.
* bsc#1220181 Cross-References: * CVE-2024-24476
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
An update that fixes one vulnerability is now available.
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
* bsc#1220181 Cross-References: * CVE-2024-24476
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
* bsc#1219491 Cross-References: * CVE-2023-46045
Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.
* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672
* bsc#1221172 Cross-References: * CVE-2024-2044
sosreport: Fix command injection with crafted report names [CVE-2024-2947]
Fix for CVE-2024-31497
Fix for CVE-2024-31497
New version 4.2.4. Includes a fix for CVE-2024-2955
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432