Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 2.12.9 Fixes CVE-2024-40896
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2023-28370
It was discovered that there was a potential Denial of Service (DoS) vulnerability, in Django, a popular Python-based web development framework.
debootstrap has been updated to avoid pulling in usr-is-merged in testing and unstable. This fixes creating testing/unstable chroots after src:usrmerge is remo…
* bsc#1234795 Cross-References: * CVE-2024-56378
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
* bsc#1234795 Cross-References: * CVE-2024-56378
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if ava…
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if ava…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or pot…
An update that contains security fixes can now be installed.
Multiple vulnerabilities were found in opensc, a set of libraries and utilities to access smart cards, which could lead to application crash, information leak,…
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
Multiple CVE fixes
Update to 0^20241216git660795b dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC. dr_mp3 0.6.40: Improve detection …
Update to 2.12.9 Fixes CVE-2024-40896.
Update to 6.8 to get various features and fixes
Update to 1.2.1 to fix https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c security issue.
Multiple CVE fixes.
* bsc#1234795 Cross-References: * CVE-2024-56378
Two security issues have been discovered in FastNetMon, a fast DDoS analyzer: Malformed Netflow/sFlow traffic could result in denial of service.
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74
