Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Patch the code to use https instead of http (CVE-2024-45321)
Fixes CVE-2024-45752: A vulnerability that allows users to remap keys arbitrarily. This allows all users on the system to remap a key unexpectedly to a potenti…
Patch the code to use https instead of http (CVE-2024-45321)
Update to 0.3.13.3 and fix gresource generation
Patch the code to use https instead of http (CVE-2024-45321)
The fixes for CVE-2024-38474 and CVE-2024-39884 introduced two regressions in mod_rewrite and mod_proxy. For the stable distribution (bookworm), these problems…
Several security issues were fixed in dotnet6, dotnet8.
WEBrick could allow a HTTP request smuggling attack.
* bsc#1231295 Cross-References: * CVE-2024-47855
* bsc#1222040 * bsc#1222041 * bsc#1222042 Cross-References:
* bsc#1231208 * bsc#1231230 Cross-References: * CVE-2024-9341
* bsc#1231230 Cross-References: * CVE-2024-6104 * CVE-2024-9341
* bsc#1216223 * bsc#1223600 * bsc#1223958 * bsc#1225272 * bsc#1227487
* bsc#1222040 * bsc#1222041 * bsc#1222042 Cross-References:
* bsc#1023072 * bsc#1023190 * bsc#1027776 * bsc#1027779 * bsc#1027785
Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent file descript…
Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent file descript…
cups-filters could be made to run programs if it received specially crafted network traffic.
CUPS could be made to crash or run programs if it received specially crafted network traffic.
Several security issues were fixed in Firefox.
New upstream version (131.0)
Fix CVE-2024-9014.
Integer overflos have been fixed in libgsf, the GNOME Project G Structured File Library. CVE-2024-36474
The package oath-toolkit before version 2.6.12-1 is vulnerable to privilege escalation.
