The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 0.29 - Fixes 'clipbrowse command execution with multi-line clipboard text including "| sh"'
PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATT…
* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672
The updated packages fix missing requires for puppet and fix commands in systemd units. References: - https://bugs.mageia.org/show_bug.cgi?id=29710
* bsc#1221172 Cross-References: * CVE-2024-2044
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
GNU C Library could be made to crash or run programs if it processed specially crafted data.
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
sosreport: Fix command injection with crafted report names [CVE-2024-2947]
Fix for CVE-2024-31497
Fix for CVE-2024-31497
Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not clos…
* bsc#1200599 * bsc#1209635 * bsc#1212514 * bsc#1213456 * bsc#1217987
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
New upstream release (125.0)
The 6.8.6 stable kernel update contains a number of important fixes across the tree.
New version 4.2.4. Includes a fix for CVE-2024-2955
Update to latest upstream release (closes rhbz#2261550, closes rhbz#2245361)
Update to 2.28.8 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
* bsc#1212514 * bsc#1220237 * bsc#1220320 * bsc#1220340 * bsc#1220366
* bsc#1222050 * bsc#1222052 * bsc#1222053 Cross-References:
* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432