The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1215420 * bsc#1220833 * bsc#1221656 * bsc#1221659 * bsc#1222005
* bsc#1226040 Cross-References: * CVE-2024-6126
* bsc#1195775 * bsc#1216124 * bsc#1218148 * bsc#1219224 * bsc#1220492
* bsc#1222665 * bsc#1227554 * bsc#1227560 Cross-References:
Re-reviewed Jose ver. 1.11.10
Update to 2024.7.4.
sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages …
Memory corruption in WebGL API. (CVE-2024-6600) Race condition in permission assignment. (CVE-2024-6601) Memory corruption in NSS. (CVE-2024-6602) Memory corru…
Update to 2024.07.09 Update to 2024.07.07 Update to 2024.07.02
Re-reviewed Jose ver. 1.11.10
* bsc#1227358 * bsc#1227359 Cross-References: * CVE-2023-52168
* bsc#1226040 Cross-References: * CVE-2024-6126
* bsc#1226040 Cross-References: * CVE-2024-6126
* bsc#1226040 Cross-References: * CVE-2024-6126
* bsc#1219559 * bsc#1220664 * bsc#1221563 * bsc#1221854 * bsc#1222075
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
TLS certificates are not properly verified when utilizing LibreOfficeKit. (CVE-2024-5261) References: - https://bugs.mageia.org/show_bug.cgi?id=33370
Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not…
* bsc#1227399 Cross-References: * CVE-2024-34750
* bsc#1220145 * bsc#1223363 * bsc#1223683 Cross-References:
* bsc#1220145 * bsc#1223363 * bsc#1223681 * bsc#1223683
* bsc#1221530 Cross-References: * CVE-2024-21503
* bsc#1223363 * bsc#1223683 Cross-References: * CVE-2024-26828
* bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786