Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1218259 * bsc#1220537 * bsc#1223059 Cross-References:
* bsc#1012628 * bsc#1065729 * bsc#1181674 * bsc#1187716 * bsc#1193599
* bsc#1127514 * bsc#1127855 * bsc#1131544 Cross-References:
* bsc#1220210 Cross-References: * CVE-2024-26130
* bsc#1203171 * bsc#1225997 * jsc#PED-7982 * jsc#PED-8018
* bsc#1220537 * bsc#1223059 Cross-References: * CVE-2021-46955
* bsc#1218259 * bsc#1220537 * bsc#1223059 Cross-References:
* bsc#1221400 * bsc#1224323 Cross-References: * CVE-2023-45288
It was discovered that user validation was incorrectly implemented for filter_var(FILTER_VALIDATE_URL). For the stable distribution (bookworm), this problem ha…
A biased ECDSA nonce generation allowed an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words…
* bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241
* bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241
* bsc#1133222 * bsc#1224158 Cross-References: * CVE-2017-17507
gdb could be made to crash if it opened a specially crafted file.
Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name (GHSA-47f6-5gq3-vx9c / CVE-2024-35241) Security: Fixed multiple comman…
Fixing CVE-2023-51765 (smtp smuggling) requires to reject email that include NUL bytes, in some configuration. Previous security version of sendmail, by defaul…
ghostscript security update
Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name (GHSA-47f6-5gq3-vx9c / CVE-2024-35241) Security: Fixed multiple comman…
It was discovered that there were a number of command-line injection vulnerabilities in Composer, a popular dependency manager for PHP. The 'install', 'status'…
It was discovered that there was a buffer overflow vulnerability in libndp, a library for implementing IPv6's "Neighbor Discovery Protocol" (NDP) and is used b…
Git could be made to run programs as your login if it clones a crafted repository.
Huy Nguy¡»'n Ph¡º¡m Nh¡ºt, and Valentin T. and Lutz Wolf of CrowdStrike, discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, …
* bsc#1226027 Cross-References: * CVE-2024-5688 * CVE-2024-5690
* bsc#1226007 Cross-References: * CVE-2023-52890
