The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1047178 * bsc#1082216 * bsc#1082233 * bsc#1210999
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Update to uriparser-0.9.8.
Fix for CVE-2024-2397
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Update to uriparser-0.9.8.
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib library are prone to a spoofing vulnerability. A local attacker can take advantage …
An update that fixes one vulnerability is now available.
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1219386 Cross-References: * CVE-2023-5992
* bsc#1021578 * bsc#1111634 * bsc#1111635 Cross-References:
* bsc#1221401 * bsc#1222330 * bsc#1222332 Cross-References:
SQL parse could be made to denial of service if it received a specially crafted input.
* bsc#1094832 * bsc#1200551 Cross-References: * CVE-2018-11490
* bsc#1218862 * bsc#1218865 Cross-References: * CVE-2024-0553
* bsc#1218571 * bsc#1219238 Cross-References: * CVE-2023-7207
An update that fixes four vulnerabilities is now available.
An update that fixes 35 vulnerabilities is now available.
It was discovered that missing input sanitising in the Atril document viewer could result in writing arbitrary files in the users home directory if a malformed…
update to 124.0.6367.201 * High CVE-2024-4671: Use after free in Visuals
update to 124.0.6367.201 * High CVE-2024-4671: Use after free in Visuals