The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has one errata is now available.
Update to 1.16 fixes rhbz#2259096
Update to 2.11.2
An update that fixes 29 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
* bsc#1222693 Cross-References: * CVE-2023-29483
* bsc#1198880 * bsc#1214678 Cross-References: * CVE-2022-28506
Update to 115.13.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-31/ https://www.thunderbird.net/en-US/thunderbird/115.13.0/releasenotes/
Backport upstream patch for CVE-2023-49606.
Update to v1.29.7 for FC40. Resolves CVE-2024-5321: Incorrect permissions on Windows containers logs. Additional bug and regression fixes from upstream.
Update to version 1.11.2 to fix CVE-2023-49606.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. To mitigate CVE-2024-1737 two new configur…
An update that fixes one vulnerability is now available.
Security fix for CVE-2024-5569 (rhbz#2297117)
Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3
Security fix for CVE-2024-5569 (rhbz#2297118)
OCS Inventory was vulnerable to an authentication bypass if the selected authentication method was via CAS.
phpCAS was vulnerable to an authentication bypass.
poppler could be made to denial of service if it opened a specially crafted PDF.
Security fix for CVE-2024-33869 Security fixes for CVE-2024-29509, CVE-2024-29508, CVE-2024-29507, CVE-2024-29506
provd could be made to run programs as an administrator.
python-zipp could be made to crash if certain zip files are used.
Several security issues were fixed in Apache ActiveMQ.