The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2024-32487 - less with LESSOPEN mishandles in paths
Update jupyterlab and python-notebook to fix CVE-2024-43805.
Rebase to version 2.6.3
Security fix for CVE-2024-8418
Fix CVE-2024-5535: SSL_select_next_proto buffer overread
Rebase to version 2.6.3
Security fix for CVE-2024-8418
It was discovered that ruby-saml, a SAML library implementing the client side of a SAML authorization, does not properly verify the signature of the SAML Respo…
* bsc#1219975 Cross-References: * CVE-2023-52160
* bsc#1230020 * bsc#1230034 Cross-References: * CVE-2023-7256
* bsc#1229596 * bsc#1229704 * bsc#1230227 Cross-References:
* bsc#1226892 * bsc#1226897 * bsc#1226898 * bsc#1226899 * bsc#1226900
* bsc#1227233 Cross-References: * CVE-2024-5642
* bsc#1227233 Cross-References: * CVE-2024-5642
* bsc#1223683 * bsc#1225099 * bsc#1228349 Cross-References:
update to 129.0.6668.58 * High CVE-2024-8904: Type Confusion in V8 * Medium CVE-2024-8905: Inappropriate implementation in V8 * Medium CVE-2024-8906: Incorrect…
Fix for CVE-2024-44070
libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with …
libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with …
* bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059
* bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521
* bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099
PostgreSQL could execute arbitrary SQL functions as the superuser if it received a specially crafted SQL object.
Several security issues were fixed in Emacs.