The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Backport fix for CVE-2024-50602.
CVE fix for CVE-2024-9632
Update to 2.46.3
giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function. (CVE-2023-48161) Array indexing integer overflow. (CVE-2024-21210) HTTP client imp…
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution …
zlib could be made to crash or run programs if it received specially crafted input.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1204171 * bsc#1205796 * bsc#1206188 * bsc#1206344 * bsc#1209290
* bsc#1065729 * bsc#1194869 * bsc#1217845 * bsc#1218562 * bsc#1219596
* bsc#1054914 * bsc#1065729 * bsc#1194869 * bsc#1204171 * bsc#1205796
* bsc#1065729 * bsc#1194869 * bsc#1217845 * bsc#1218562 * bsc#1219596
Update to 130.0.6723.116
Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch
Update to 130.0.6723.116
Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch
* bsc#1231046 * bsc#1232622 * bsc#1232624 Cross-References:
* bsc#1027519 * bsc#1230366 * bsc#1232542 * bsc#1232622 * bsc#1232624
An update that fixes one vulnerability is now available.
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted pa…
Pydantic could be made to crash if it received specially crafted input.
* bsc#1232542 * bsc#1232622 * bsc#1232624 Cross-References:
* bsc#1186511 * bsc#1217826 * bsc#1222121 * bsc#1222815 * bsc#1230551
Fixes CVE-2024-9341, CVE-2024-9407, CVE-2024-9675 and CVE-2024-9676.