The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225312
* bsc#1228349 * bsc#1228786 Cross-References: * CVE-2024-40909
* bsc#1228349 * bsc#1228573 * bsc#1228786 Cross-References:
Fixes for memory vulnerabilities.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-40866
An update that fixes two vulnerabilities is now available.
Fixes for memory vulnerabilities.
Fixes for memory vulnerabilities.
A vulnerability has been detected in the Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances.
Update to 129.0.6668.100 * CVE-2024-9602: Type Confusion in V8 * CVE-2024-9603: Type Confusion in V
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update to 129.0.6668.100 * CVE-2024-9602: Type Confusion in V8 * CVE-2024-9603: Type Confusion in V
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
* bsc#1230979 * bsc#1231413 Cross-References: * CVE-2024-8900
* bsc#1229910 Cross-References: * CVE-2024-42934
* bsc#1231298 Cross-References: * CVE-2024-47554
Update to 1.35.1. Includes fix for CVE-2024-9427
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817]
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817] update to xen-4.17.5
* bsc#1231264 * bsc#1231265 Cross-References: * CVE-2024-31228
* bsc#1230939 * bsc#1231294 Cross-References: * CVE-2024-47176