The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1219494 * bsc#1226892 * bsc#1226897 * bsc#1226898 * bsc#1226899
* bsc#1234449 Cross-References: * CVE-2024-47606
* bsc#1234415 * bsc#1234447 * bsc#1234450 * bsc#1234455 * bsc#1234456
* bsc#1234449 Cross-References: * CVE-2024-47606
* bsc#1234415 * bsc#1234450 * bsc#1234453 * bsc#1234455 * bsc#1234456
golang-golang-x-net could be made to crash if it received specially crafted network traffic.
* bsc#1234851 Cross-References: * CVE-2024-40866 * CVE-2024-44185
* bsc#1235029 Cross-References: * CVE-2024-56826
* bsc#1232241 * bsc#1233307 Cross-References: * CVE-2024-11168
* bsc#1235029 Cross-References: * CVE-2024-56826
xfpt could be made to crash or run programs if it opened a specially crafted file.
Updated to latest upstream (134.0)
This update fixes issues with loading TGA and XCF files.
fix CVE-2024-46657 (rhbz#2331626)
Update to openjpeg-2.5.3 Fix 2 heap-buffer-overflow
update to 8.0.2 fixes CVE-2024-46981 - Lua script commands may lead to remote code execution fixes CVE-2024-51741 - Denial-of-service due to malformed ACL sele…
* bsc#1082555 * bsc#1176081 * bsc#1206344 * bsc#1213034 * bsc#1218562
* bsc#1082555 * bsc#1157160 * bsc#1218644 * bsc#1221977 * bsc#1222364
Tinyproxy could be made to crash or run programs if it received specially crafted input.
* bsc#1233435 * bsc#1234663 * bsc#1234664 Cross-References:
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…
Updated to latest upstream (134.0)
fix CVE-2024-46657 (rhbz#2331627)
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…