Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1231298 Cross-References: * CVE-2024-47554
New upstream version (131.0.2)
Updated to latest upstream (131.0.2)
* bsc#1199769 * bsc#1216223 * bsc#1220382 * bsc#1221610 * bsc#1221650
* bsc#1054914 * bsc#1065729 * bsc#1194869 * bsc#1199769 * bsc#1216223
* bsc#1054914 * bsc#1065729 * bsc#1207341 * bsc#1225316 * bsc#1226846
Damien Schaeffer discovered a use-after-free in the Mozilla Firefox web browser, which could result in the execution of arbitrary code. For the stable distribu…
libgsf could be made to run programs as your login if it opened a specially crafted file.
Several security issues were fixed in Go.
* bsc#1220826 * bsc#1226145 * bsc#1226666 * bsc#1227487 * bsc#1228466
* bsc#1027519 * bsc#1228574 * bsc#1228575 * bsc#1230366
* bsc#1047218 * bsc#1202273 * bsc#1226975 * bsc#1229589 * jsc#PED-10362
* bsc#1047218 * bsc#1225597 * bsc#1226975 * bsc#1229589 * jsc#PED-10362
Several security issues were fixed in EDK II.
Update to 1.35.1. Includes fix for CVE-2024-9427
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817]
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817] update to xen-4.17.5
Updated to latest upstream (131.0.2)
Update to 2.46.1
* bsc#1231264 * bsc#1231265 Cross-References: * CVE-2024-31228
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1230939 * bsc#1231294 Cross-References: * CVE-2024-47176
oath-toolkit could be made overwrite files as the administrator.
cups-filters could be made to run programs if it received specially crafted network traffic.
