Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Hubert Kario discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, was vuln…
Roundcube Webmail could allow cross-site scripting (XSS) attacks.
Update to 115.8.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-07/ https://www.thunderbird.net/en-US/thunderbird/115.8.0/releasenotes/
It was discovered that iwd, the iNet Wireless Daemon, does not properly handle messages in the 4-way handshake used when connecting to a protected WiFi network…
An issue has been found in libjwt, a C library to handle JWT (JSON Web Token). Due to using strcmp(), which does not use constant time during execution, a timi…
Update to 122.0.6261.57 High CVE-2024-1669: Out of bounds memory access in Blink High CVE-2024-1670: Use after free in Mojo Medium CVE-2024-1671: Inappropriate…
Backport fix for CVE-2023-5841.
Update to 2.6.0, fixes CVE-2023-52425, CVE-2023-52426.
Update to python3.11.8, backport fix for CVE-2023-27043.
Backport fix for CVE-2023-5841.
Update to 2.6.0, fixes CVE-2023-52425, CVE-2023-52426.
Rebase to version 2.6.0
Update to qt-5.15.12.
Update to qt-5.15.12.
Update to qt-5.15.12.
Update to qt-5.15.12.
Update to qt-5.15.12.
* bsc#1184272 * bsc#1220048 Cross-References: * CVE-2024-1546
* bsc#1220048 Cross-References: * CVE-2024-1546 * CVE-2024-1547
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribu…
* bsc#1218903 * bsc#1218905 * bsc#1218906 * bsc#1218907 * bsc#1218908
* bsc#1218564 Cross-References: * CVE-2023-52323
* bsc#1218215 Cross-References: * CVE-2023-51385
* bsc#1218215 * bsc#1220110 Cross-References: * CVE-2023-51385
