Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1233668 Cross-References: * CVE-2024-52804
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, is prone to an XXE vulnerability when loading an (untrusted) XML document.
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, is prone to a XXE vulnerability when loading an (untrusted) XML document.
Several security issues were fixed in PostgreSQL.
* bsc#1204171 * bsc#1205796 * bsc#1206188 * bsc#1206344 * bsc#1209290
* bsc#1225429 * bsc#1225733 * bsc#1229273 * bsc#1229553
* bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832
* bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059
* bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521
* bsc#1223363 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013
An update that fixes two vulnerabilities is now available.
Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer 1.24.9. Fix the…
New version 4.4.2
Update to 5.0.2 fix rhbz#2326888
New version 4.2.9
Multiple vulnerabilities were discovered in Lemonldap::NG, an OpenID-Connect, CAS and SAML compatible Web-SSO system, which could lead to injection of arbitrar…
Two issues have been found in editorconfig-core, a coding style indenter for all editors. Both issues are related to buffer overflows in different locations.
Brief introduction CVE-2022-0934
An issue has been found in xfpt, a tool to generate XML from plain tex. The issue is about bad handling of input data, which may result in a stack-based buffer…
Identity-based attacks like login attempts from unusual geographic locations or at unexpected times, as well as enforcing MFA and maintaining detailed logs of …
ProFTPD a popular FTP server was affected by multiple vulnerabilities. CVE-2023-48795
* bsc#1232542 * bsc#1232622 * bsc#1232624 Cross-References:
* bsc#1232747 * bsc#1233631 * bsc#1233632 Cross-References:
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
