The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fix CVE-2024-5535: SSL_select_next_proto buffer overread
* bsc#1219975 Cross-References: * CVE-2023-52160
* bsc#1230020 * bsc#1230034 Cross-References: * CVE-2023-7256
* bsc#1227233 Cross-References: * CVE-2024-5642
* bsc#1227233 Cross-References: * CVE-2024-5642
* bsc#1223683 * bsc#1225099 * bsc#1228349 Cross-References:
Fix for CVE-2024-44070
* bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059
* bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521
* bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099
Vanilla upstream kernel version 6.6.50 fix bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mageia…
Upstream kernel version 6.6.50 fix bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kerne…
* bsc#1230400 Cross-References: * CVE-2024-23984 * CVE-2024-24968
* bsc#1229907 Cross-References: * CVE-2024-8250
Fix for CVE-2024-44070
Multiple vulnerabilities were found in expat, an XML parsing C library, which could lead to Denial of Service, memory corruption or arbitrary code execution.
* bsc#1229026 Cross-References: * CVE-2024-7055
* bsc#1228002 Cross-References: * CVE-2022-48791
* bsc#1230353 Cross-References: * CVE-2023-29483
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
* bsc#1228780 Cross-References: * CVE-2024-6923
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Shang-Hung Wan discovered multiple vulnerabilities in the Expat XML parsing C library, which could result in denial of service or potentially the execution of …