The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Heap buffer overflow in rsync due to improper checksum length handling. (CVE-2024-12084) Info leak via uninitialized stack contents. (CVE-2024-12085) Rsync ser…
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.
New version 3.4.1, a couple of fixes for the 3.4.0 release. New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-1208…
* bsc#1235856 Cross-References: * CVE-2024-56374
* bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363
* bsc#1228693 Cross-References: * CVE-2024-40779
* bsc#1232637 * bsc#1233712 Cross-References: * CVE-2022-48956
* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202
Heap buffer overflow in bin/common/color.c. (CVE-2024-56826) Heap buffer overflow in lib/openjp2/j2k.c. (CVE-2024-56827) References: - https://bugs.mageia.org/…
New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747.
An update that fixes one vulnerability is now available.
* bsc#1235600 * bsc#1235601 Cross-References: * CVE-2024-50349
* bsc#1223683 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311
* bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1229553 * bsc#1231353
* bsc#1232637 * bsc#1233712 Cross-References: * CVE-2022-48956
Update to 0.30, fixes CVE-2025-22376
Update to 0.30, fixes CVE-2025-22376
* bsc#1215301 * bsc#1230916 Cross-References: * CVE-2023-41081
* bsc#1234851 Cross-References: * CVE-2024-40866 * CVE-2024-44185
* bsc#1226337 * bsc#1232637 * bsc#1233712 Cross-References:
* bsc#1210619 * bsc#1218487 * bsc#1220145 * bsc#1220537 * bsc#1221302
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool. CVE-2024-12084