Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1218802 Cross-References: * CVE-2023-51257
* bsc#1218802 Cross-References: * CVE-2023-51257
* bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742
Update to 115.7.0 * https://www.mozilla.org/en- US/security/advisories/mfsa2024-04/ * https://www.thunderbird.net/en- US/thunderbird/115.7.0/releasenotes/
update to 121.0.6167.85 * High CVE-2024-0807: Use after free in WebAudio * High CVE-2024-0812: Inappropriate implementation in Accessibility * High CVE-2024-08…
- Updated to new upstream (122.0)
This is the January 2024 update for .NET 8. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.1/8.0.1.md
Upstream security release for CVE-2023-5455. Release notes: https://www.freeipa.org/release-notes/4-10-3.html
update to 121.0.6167.85 * High CVE-2024-0807: Use after free in WebAudio * High CVE-2024-0812: Inappropriate implementation in Accessibility * High CVE-2024-08…
The system could be made to crash or run programs as an administrator.
Several vulnerabilities were discovered in the Xorg X server, which may result in privilege escalation if the X server is running privileged or denial of servi…
* bsc#1218845 * bsc#1218846 Cross-References: * CVE-2024-0408
Several security issues were fixed in MariaDB.
Several security issues were fixed in jinja2.
A protocol flaw was fixed in Paramiko.
Puma could be made to consume resources if it received specially crafted network traffic.
* bsc#1205463 * bsc#1218189 Cross-References: * CVE-2022-45047
* bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742
* bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742
It was discovered that phpseclib, a PHP library for arbitrary-precision integer arithmetic, was vulnerable to the so-called Terrapin Attack. The SSH transport …
It was discovered that php-phpseclib, a PHP library for arbitrary-precision integer arithmetic, was vulnerable to the so-called Terrapin Attack.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
This is the January 2024 update for .NET 7. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.15/7.0.15.md
- Updated to new upstream (122.0)
