The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1219296 * bsc#1220828 Cross-References: * CVE-2023-52340
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914: Use after free in …
Fix for CVE-2024-31497
Fix for CVE-2024-31497
* bsc#1219386 Cross-References: * CVE-2023-5992
* bsc#1222539 Cross-References: * CVE-2024-3177
Google Guest Agent and OS Config Agent could be made to crash if it open a specially crafted JSON.
* bsc#1213269 * bsc#1218889 * bsc#1220134 * bsc#1222843 * bsc#1222845
* bsc#1190011 * bsc#1198038 * bsc#1207205 * bsc#1212850 * bsc#1213925
* bsc#1223155 Cross-References: * CVE-2024-31744
Squid could be made to crash if it received specially crafted network traffic.
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
* bsc#1220828 Cross-References: * CVE-2024-26622
Charles Fol discovered that the iconv() function in the GNU C library is prone to a buffer overflow vulnerability when converting strings to the ISO-2022-CN-EX…
Update to idna-3.7.
update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914: Use after free in …
Backport fix for CVE-2024-3116.
Update to idna-3.7.
Update to latest upstream version 1.7.17 (closes rhbz#2255953)
* bsc#1216644 * bsc#1219435 Cross-References: * CVE-2023-5717
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References: