The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
OATH Toolkit could be made to overwrite files as the administrator.
* bsc#1228349 * bsc#1228786 Cross-References: * CVE-2024-40909
* bsc#1227651 * bsc#1228573 Cross-References: * CVE-2021-47291
* bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786
* bsc#1228573 * bsc#1228786 Cross-References: * CVE-2024-40954
* bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225312
Prevent command injection by quoting template strings in activation scripts
Update to latest upstream
Prevent command injection by quoting template strings in activation scripts
Update to latest upstream
Two vulnerabilities have been fixed in python-cryptography, a cryptography library for the Python interpreter. CVE-2023-23931
* bsc#1231544 Cross-References: * CVE-2024-48957
* bsc#1225099 * bsc#1225312 * bsc#1225313 * bsc#1225739 * bsc#1226325
* bsc#1225312 * bsc#1226325 * bsc#1227651 * bsc#1228573
* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202
* bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786
* bsc#1223683 * bsc#1225099 * bsc#1225310 * bsc#1225312 * bsc#1225739
* bsc#1228123 Cross-References: * CVE-2024-41184
* bsc#1231358 * bsc#1231360 * bsc#1231382 Cross-References:
* bsc#1226325 * bsc#1228573 Cross-References: * CVE-2024-36964
* bsc#1223683 * bsc#1225310 * bsc#1225312 * bsc#1226325 * bsc#1227651
* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1222685 * bsc#1223059
* bsc#1210619 * bsc#1220537 * bsc#1223363 * bsc#1223683 * bsc#1225013
Threat actors are attempting to abuse the open-source EDRSilencer tool as part of efforts to tamper endpoint detection and response (EDR) solutions and hide ma…