The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Damian Poddebniak discovered that the Cyrus IMAP server didn't restrict memory allocation for some command arguments which may result in denial of service. Thi…
A buffer overflow was discovered in the MMS module of the VLC media player. For the oldstable distribution (bullseye), this problem has been fixed
mod_jk could allow unintended access to network services.
Several security issues were fixed in MySQL.
* bsc#1223375 Cross-References: * CVE-2024-4141
* bsc#1224262 Cross-References: * CVE-2024-26306
* bsc#1219823 * bsc#1219826 * bsc#1219851 * bsc#1219852 * bsc#1219854
Several security issues were fixed in Node.js.
* bsc#1203171 * bsc#1225997 * jsc#PED-7982 * jsc#PED-8018
* bsc#1203171 * bsc#1225997 * jsc#PED-7982 * jsc#PED-8018
* bsc#1225661 Cross-References: * CVE-2024-33899
* bsc#1215868 * bsc#1215869 * bsc#1215870 * bsc#1218033 * bsc#1222905
* bsc#1222992 * bsc#1223423 * bsc#1223424 * bsc#1223425
* bsc#1220960 * bsc#1222619 * bsc#1224904 * bsc#1225026 * bsc#1225030
c-ares security update
Update bundled edk2 to 20240524 (#2284243)
release 1.12.0
Fix crash in event loop (CVE-2024-4418) Fix leak of GSource object Fix leak of udev object reference
Update bundled edk2 to 20240524 (#2284243)
release 1.12.0
release 1.1.0
Several security issues were fixed in ADOdb.
* bsc#1224788 Cross-References: * CVE-2024-35195
* bsc#1222842 Cross-References: * CVE-2024-3651