Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1230353 Cross-References: * CVE-2023-29483
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
* bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
* bsc#1228780 Cross-References: * CVE-2024-6923
* bsc#1218534 * bsc#1219494 * bsc#1223263 * bsc#1226892 * bsc#1226897
expat security update
ruby:3.3 security update
openssl security update
libnbd security update
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Several security issues were fixed in OpenSSL.
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Yufan You discovered that Libreoffice's handling of documents based on ZIP archives was suspectible to spoofing attacks when the repair mode attempts to addres…
Fabien Potencier discovered that under some conditions the sandbox mechanism of Twig, a template engine for PHP, could by bypassed. For the stable distribution…
Shang-Hung Wan discovered multiple vulnerabilities in the Expat XML parsing C library, which could result in denial of service or potentially the execution of …
Several security issues were fixed in Expat.
Quagga could be made to crash if it received specially crafted network traffic.
FRR could be made to crash if it received specially crafted network traffic.
* bsc#1218534 * bsc#1219494 * bsc#1223263 * bsc#1226892 * bsc#1226897
An update that solves four vulnerabilities and has one errata is now available.
A new stable version was released for galera-4, a synchronous multimaster replication engine for MySQL and MariaDB. This fixes several issues detailed at:
Several security issues were fixed in libxmltok.
Several security issues were fixed in ClamAV.
Several security issues were fixed in DCMTK.
