Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Hatim Chabik discovered a cross-site scripting (XSS) vulnerability in spip, a content management system, which can lead to privilege escalation or information …
* bsc#1219836 Cross-References: * CVE-2024-1062
It was discovered that composer, a dependency manager for the PHP language, processed files in the local working directory. This could lead to local privilege …
* jsc#PED-2362 * jsc#SLE-5514 Cross-References: * CVE-2023-20593
* jsc#PED-2362 * jsc#SLE-5514 Cross-References: * CVE-2023-20593
* bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465
* bsc#1221134 * bsc#1221151 Cross-References: * CVE-2023-42465
* bsc#1217353 Cross-References: * CVE-2023-5752
Baresip v3.10.1 (2024-03-12) Security Release (possible Denial of Service): A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang…
Baresip v3.10.1 (2024-03-12) Security Release (possible Denial of Service): A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang…
* bsc#1068950 * bsc#1081527 * bsc#1211052 * jsc#PED-6584
* bsc#1068950 * bsc#1081527 * bsc#1211052 * jsc#PED-6584
* bsc#1211515 * bsc#1213456 * bsc#1214064 * bsc#1218195 * bsc#1218216
* bsc#1214691 * bsc#1219666 Cross-References: * CVE-2022-48566
* bsc#1220358 Cross-References: * CVE-2024-27351
Expat could be made to crash if it received specially crafted input.
Several security issues were fixed in TeX Live.
Two vulnerabilities were discovered in Open vSwitch, a software-based Ethernet virtual switch, which could result in a bypass of OpenFlow rules or denial of se…
python-cryptography could be made to expose sensitive information over the network.
Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects https://www.thunderb…
python-multipart 0.0.7 (2024-02-03) Refactor header option parser to use the standard library instead of a custom RegEx #75. Fixes a denial of service vulnerab…
x86: shadow stack vs exceptions from emulation stubs - [XSA-451, CVE-2023-46841] (#2266326)
upstream security release 122.0.6261.128 High CVE-2024-2400: Use after free in Performance Manager
python-multipart 0.0.7 (2024-02-03) Refactor header option parser to use the standard library instead of a custom RegEx #75. Fixes a denial of service vulnerab…
