Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This is the January 2024 update for .NET 7. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.15/7.0.15.md
An update that fixes three vulnerabilities is now available.
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially allowing an attacker to perform a stored XSS, Serve…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, phishing, click…
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribu…
An update that fixes 6 vulnerabilities is now available.
* bsc#1218903 * bsc#1218905 * bsc#1218906 * bsc#1218907 * bsc#1218909
* bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229
* bsc#1219048 Cross-References: * CVE-2023-50447
* bsc#1217649 Cross-References: * CVE-2023-46589
* bsc#1217649 Cross-References: * CVE-2023-46589
Apache::Session::LDAP could be made to expose sensitive information through spoofing if it received invalid X.509 certificate.
Backport fix for CVE-2023-51257.
Mitigate CVE-2024-0690
Backport fix for CVE-2023-51257.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in side channel attacks, leaking sensitive data to log files, denial…
* bsc#1219048 Cross-References: * CVE-2023-50447
* bsc#1218728 Cross-References: * CVE-2024-23301
* bsc#1047218 * bsc#1172110 * bsc#1188571 * bsc#1189520 * bsc#1191454
* bsc#1212119 * bsc#1216376 Cross-References: * CVE-2023-45145
It was discovered that there was a HTTP header injection vulnerability in ruby-httparty, a web service library used in various Ruby applications.
It was discovered that there was an injection attack in jinja2, a popular templating engine used in various Python applications. It was possible to inject arbi…
* bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229
* bsc#1218300 * bsc#1218301 Cross-References: * CVE-2023-50229
