The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update glib2 to fix CVE-2024-34397.
Update to jinja2-3.1.4, fixes CVE-2024-34064.
Update to werkzeug-3.0.3, fixes CVE-2024-34069.
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1219559 Cross-References: * CVE-2023-52425
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Fix for CVE-2024-2397
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib library are prone to a spoofing vulnerability. A local attacker can take advantage …
An update that fixes one vulnerability is now available.
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1219386 Cross-References: * CVE-2023-5992
* bsc#1094832 * bsc#1200551 Cross-References: * CVE-2018-11490
* bsc#1218862 * bsc#1218865 Cross-References: * CVE-2024-0553
* bsc#1218571 * bsc#1219238 Cross-References: * CVE-2023-7207
An update that fixes four vulnerabilities is now available.
An update that fixes 35 vulnerabilities is now available.
Multiple vulnerabilities have been discovered in PoDoFo, the worst of which could lead to code execution.
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.