Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two security vulnerabilities have been discovered in Wordpress, a popular content management framework, a PHP File Upload bypass via the plugin installer and a…
It was discovered that the uv_getaddrinfo() function in libuv, an asynchronous event notification library, incorrectly truncated certain hostnames, which may r…
backport fix for PEAP client (CVE-2023-52160)
Update to latest version Security fix for CVE-2023-39325
upstream security release 122.0.6261.111 - High CVE-2024-2173: Out of bounds memory access in V8 - High CVE-2024-2174: Inappropriate implementation in V8 - Hig…
* bsc#1218571 * bsc#1219238 Cross-References: * CVE-2023-7207
Several security vulnerabilities have been discovered in Squid, a full featured web proxy cache. Due to programming errors in Squid's HTTP request parsing, rem…
* bsc#1219243 Cross-References: * CVE-2024-0727
* bsc#1219243 Cross-References: * CVE-2024-0727
* bsc#1219243 Cross-References: * CVE-2024-0727
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
* bsc#1219026 * bsc#1220389 Cross-References: * CVE-2023-42465
* bsc#1212475 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001
* bsc#1218424 * bsc#1219988 * bsc#1220999 * bsc#1221000 * bsc#1221001
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functio…
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functio…
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functio…
upstream security release 122.0.6261.111 - High CVE-2024-2173: Out of bounds memory access in V8 - High CVE-2024-2174: Inappropriate implementation in V8 - Hig…
Update to 115.8.1 https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/ read that if you have mails with encrypted email subjects https://www.thunderb…
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functio…
mqtt-client could be made to crash if it received specially crafted input.
ncurses could be made to crash if it received specially crafted input.
Multiple vulnerabilities have been fixed in the font editor FontForge. CVE-2020-5395
Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 …
