The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
* bsc#1220181 Cross-References: * CVE-2024-24476
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
* bsc#1219491 Cross-References: * CVE-2023-46045
Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.
* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672
* bsc#1221172 Cross-References: * CVE-2024-2044
sosreport: Fix command injection with crafted report names [CVE-2024-2947]
Fix for CVE-2024-31497
Fix for CVE-2024-31497
New version 4.2.4. Includes a fix for CVE-2024-2955
* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302
* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432
* bsc#1219078 * bsc#1219296 * bsc#1219432 Cross-References:
* bsc#1216992 Cross-References: * CVE-2023-4218
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
* bsc#1222244 * bsc#1222384 Cross-References: * CVE-2024-27982
1.28.1 fixes a significant bug in 1.28.0. Update to 1.28.0. Also fixes CVE-2024-25629.
1.28.1 fixes a significant bug in 1.28.0. Update to 1.28.0. Also fixes CVE-2024-25629.
* bsc#1222126 Cross-References: * CVE-2023-46048
* bsc#1219078 * bsc#1219296 * bsc#1219432 Cross-References:
* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432