The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1224788 Cross-References: * CVE-2024-35195
* bsc#1211674 Cross-References: * CVE-2023-32681
* bsc#1213269 * bsc#1218889 * bsc#1222843 * bsc#1222845
* bsc#1202031 * bsc#1202033 * bsc#1203643 * bsc#1219823 * bsc#1219826
* bsc#1219386 Cross-References: * CVE-2023-5992
The 6.9.12 stable kernel update contains a number of important fixes across the tree.
double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143] x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
Exim could be made to bypass a MIME filename extension-blocking protection mechanism if it received specially crafted input.
Apache Commons Collections could be made to execute arbitrary code if it received specially crafted input.
phpCAS was vulnerable to an authentication bypass.
* bsc#1222849 Cross-References: * CVE-2024-32487
* bsc#1137930 Cross-References: * CVE-2019-12795
prometheus-alertmanager could be made to expose sensitive information over the network.
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
On July 24, 2024, OpenSSL took an extraordinary step toward improving community engagement and realigning with its core values when it announced the implementa…
Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3
* bsc#1027519 * bsc#1214718 * bsc#1221984 * bsc#1227355
* bsc#1222693 Cross-References: * CVE-2023-29483
* bsc#1219660 Cross-References: * CVE-2024-24577
* bsc#916845 Cross-References: * CVE-2013-4235
* bsc#916845 Cross-References: * CVE-2013-4235
* bsc#1228184 Cross-References: * CVE-2024-40897
* bsc#916845 Cross-References: * CVE-2013-4235
* bsc#1225567 Cross-References: * CVE-2024-36472