Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1219357 * bsc#1219554 Cross-References: * CVE-2020-36773
* bsc#1219465 Cross-References: * CVE-2023-3966
* bsc#1050549 * bsc#1186484 * bsc#1200599 * bsc#1212514 * bsc#1213456
Multiple vulnerabilities were discovered in the Python Imaging Library (PIL), an image processing library for Python. CVE-2021-23437
Update to 123.0.6312.58 * High CVE-2024-2625: Object lifecycle issue in V8 * Medium CVE-2024-2626: Out of bounds read in Swiftshader * Medium CVE-2024-2627: Us…
Upgrade to 2.44.0: Make the DOM accessibility tree reachable from UI process with GTK4. Removed the X11 and WPE renderers in favor of DMA-BUF. Improved vblank …
Update to upstream 1.3.0, and security fixes for CVE-2024-28176 and CVE-2024-28180
Multiple security issues were discovered in Thunderbird, which could result in denial of service, the execution of arbitrary code or leaks of encrypted email s…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or information d…
Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD
A security flaw was found on rubygem-yard that documents generated by yard may be vulnerable to XSS attack. This issue is now assigned as CVE-2024-27285 . This…
Security fix for CVE-2024-1048
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
Update to 4.14 for CVE-2024-2357, v6 SAN name and TFC padding fix for AEAD
One of the upstream changes in the update released as DSA 5626 contained a regression in the zoneToCache function. Updated pdns-recursor packages are available…
Three security issues were discovered in php-svg-lib, a PHP library to read, parse and export to PDF SVG files, which could result in denial of service, restri…
The system could be made to crash under certain conditions.
Several security issues were fixed in Firefox.
Updated to 124.0
Updated to 124.0
It was discovered that fontforge, a font editor, is prone to shell command injection vulnerabilities when processing specially crafted files. For the oldstable…
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.
