Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
fix CVE-2024-46657 (rhbz#2331627)
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…
FFmpeg could be made to crash if it received specially crafted input.
* bsc#1189131 Cross-References: * CVE-2020-36314
An update that fixes one vulnerability is now available.
An update that fixes 5 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
* bsc#1172879 * bsc#1228120 Cross-References: * CVE-2024-6655
* bsc#1234809 Cross-References: * CVE-2024-56326
Ceph could allow unintended access to network services.
Salt could be made to crash or run programs if it received specially crafted network traffic.
* bsc#1234809 Cross-References: * CVE-2024-56326
* bsc#1234718 Cross-References: * CVE-2024-11614
* bsc#1202473 * bsc#1205224 * bsc#1211507 Cross-References:
tinyproxy could be made to expose sensitive information.
Update to v2.14
Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if ava…
* bsc#1217826 * bsc#1222815 * bsc#1230551 * bsc#1230552 * bsc#1231345
* bsc#1205224 * bsc#1211507 Cross-References: * CVE-2022-39377
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if ava…
* bsc#1226162 * bsc#1226468 * bsc#1234292 Cross-References:
* bsc#1234808 * bsc#1234809 Cross-References: * CVE-2024-56201
As more enterprises embrace hybrid and multi-cloud environments, we security admins face increasing difficulty protecting these landscapes. Moving into 2025, a…
