Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)
Added upstream patch to fix out-of-bounds access due to multiple backspaces to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)
Vulnerabilities have been found in Node.js, which could lead to denial of service or information disclosure. CVE-2023-30590
Security fix for CVE-2024-1753 Automatic update for podman-5.0.0-1.fc40. Changelog for podman * Tue Mar 19 2024 Packit - 5:5.0.0-1 - [packit] 5.0.0 upstream re…
Security fix for CVE-2024-1753 Automatic update for podman-5.0.0-1.fc40. Changelog for podman * Tue Mar 19 2024 Packit - 5:5.0.0-1 - [packit] 5.0.0 upstream re…
Security fix for CVE-2024-1753 Automatic update for podman-5.0.0-1.fc40. Changelog for podman * Tue Mar 19 2024 Packit - 5:5.0.0-1 - [packit] 5.0.0 upstream re…
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
* bsc#1220770 * bsc#1220771 * bsc#1220772 Cross-References:
* bsc#1220770 * bsc#1220771 Cross-References: * CVE-2024-26458
* bsc#1221850 Cross-References: * CVE-2024-29944
* bsc#1218487 * bsc#1218610 * bsc#1219157 Cross-References:
* bsc#1215887 * bsc#1216898 * bsc#1218487 * bsc#1218610
Several security issues were fixed in Thunderbird.
PAM could be made to stop responding if it opened a specially crafted file.
* bsc#1215887 * bsc#1216898 * bsc#1218487 * bsc#1218610
* bsc#1218487 * bsc#1218610 * bsc#1219157 Cross-References:
Update to 2.44.0 CVE-2024-23263, CVE-2024-23280, CVE-2024-23284
* bsc#1220059 Cross-References: * CVE-2020-36774
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or information d…
CRM shell could be made to execute arbitrary code if it received a specially crafted input.
QPDF could be made to crash or run programs if it opened a specially crafted file.
Net::CIDR::Lite could allow unintended access to network services.
It was discovered that there was a command-line injection issue in the FreeIPA identity, authentication and audit framework. A specially crafted HTTP request c…
Several security issues were fixed in Firefox.
