The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Charles Fol discovered that the iconv() function in the GNU C library is prone to a buffer overflow vulnerability when converting strings to the ISO-2022-CN-EX…
Update to idna-3.7.
Upstream kernel version 6.6.28 fix bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mageia.org/sho…
Upstream kernel version 6.6.28 fix bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kerne…
update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914: Use after free in …
Backport fix for CVE-2024-3116.
Update to idna-3.7.
Update to latest upstream version 1.7.17 (closes rhbz#2255953)
* bsc#1216644 * bsc#1219435 Cross-References: * CVE-2023-5717
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file.
* bsc#1222992 Cross-References: * CVE-2024-2961
* bsc#1209282 Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
Several vulnerabilities were discovered in Samba, SMB/CIFS file, print, and login server for Unix CVE-2020-14318
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
* bsc#1198101 * bsc#1205588 * bsc#1205855 * bsc#1210382 * bsc#1213945
* bsc#1219435 Cross-References: * CVE-2024-1086
LXD could be made to bypass integrity checks if it received specially crafted input.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure. For the oldstable di…
* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1219296 * bsc#1220828 Cross-References: * CVE-2023-52340