The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672
* bsc#1221172 Cross-References: * CVE-2024-2044
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
GNU C Library could be made to crash or run programs if it processed specially crafted data.
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
sosreport: Fix command injection with crafted report names [CVE-2024-2947]
Fix for CVE-2024-31497
Fix for CVE-2024-31497
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2023-46589
Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not clos…
Several security issues were fixed in Apache HTTP Server.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking.
* bsc#1200599 * bsc#1209635 * bsc#1212514 * bsc#1213456 * bsc#1217987
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
New upstream release (125.0)
The 6.8.6 stable kernel update contains a number of important fixes across the tree.
Update to 0.9.0; fix rhbz#2274045 and rhbz#2266791; Security fix for CVE-2024-25713
New version 4.2.4. Includes a fix for CVE-2024-2955
Update to latest upstream release (closes rhbz#2261550, closes rhbz#2245361)
Update to 2.28.8 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
* bsc#1212514 * bsc#1220237 * bsc#1220320 * bsc#1220340 * bsc#1220366
* bsc#1222050 * bsc#1222052 * bsc#1222053 Cross-References: