Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-40866
It was discovered that there was a configuration issue in libapache-mod-jk, an Apache web server module used to forward requests from Apache to Tomcat using th…
nginx could be made to crash if it received specially crafted network traffic.
ConfigObj could be made to crash if it received specially crafted input.
* bsc#1214298 * bsc#1226606 * bsc#1227764 * bsc#1228487 * bsc#1228654
PostgreSQL could execute arbitrary SQL functions as the superuser if it received a specially crafted SQL object.
HAProxy could be made to crash or run programs if it received specially crafted network traffic.
An update that fixes two vulnerabilities is now available.
Python could me made to bypass some restrictions if it received specially crafted input.
Developers recognize the critical nature of protecting software systems as cyberattacks grow more sophisticated, thus necessitating robust security measures in…
Thunderbird could be made to crash or run programs if it opened a specially crafted file.
Firefox could be made to run programs as your login if it opened a malicious website.
podman security update
OpenIPMI security update
Fixes for memory vulnerabilities.
Update to 2.46.1
Fixes for memory vulnerabilities.
A vulnerability has been detected in the Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances.
Elyas Damej discovered that a sandbox mechanism in ReportLab, a Python library to create PDF documents, could be bypassed which may result in the execution of …
It was discovered that DOMPurify, a sanitizer for HTML, MathML and SVG was susceptible to nesting-based mXSS. For the stable distribution (bookworm), this prob…
Update to 129.0.6668.100 * CVE-2024-9602: Type Confusion in V8 * CVE-2024-9603: Type Confusion in V
Automatic update for buildah-1.37.4-1.fc41, podman-5.2.4-1.fc41. Changelog for buildah * Mon Oct 07 2024 Packit - 2:1.37.4-1 - Update to 1.37.4 upstream releas…
Automatic update for buildah-1.37.4-1.fc41, podman-5.2.4-1.fc41. Changelog for buildah * Mon Oct 07 2024 Packit - 2:1.37.4-1 - Update to 1.37.4 upstream releas…
Various file formats are based on the zip file format. In cases of corruption of the underlying zip's central directory, LibreOffice offers a "repair mode" whi…
