Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or privilege esc…
* bsc#1082555 * bsc#1176081 * bsc#1206344 * bsc#1213034 * bsc#1218562
* bsc#1082555 * bsc#1157160 * bsc#1218644 * bsc#1221977 * bsc#1222364
Tinyproxy could be made to crash or run programs if it received specially crafted input.
* bsc#1233435 * bsc#1234663 * bsc#1234664 Cross-References:
Several security issues were fixed in HTMLDOC.
Moderate: python-requests security update
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…
Updated to latest upstream (134.0)
fix CVE-2024-46657 (rhbz#2331627)
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…
FFmpeg could be made to crash if it received specially crafted input.
* bsc#1189131 Cross-References: * CVE-2020-36314
An update that fixes one vulnerability is now available.
An update that fixes 5 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
* bsc#1172879 * bsc#1228120 Cross-References: * CVE-2024-6655
* bsc#1234809 Cross-References: * CVE-2024-56326
Ceph could allow unintended access to network services.
Salt could be made to crash or run programs if it received specially crafted network traffic.
* bsc#1234809 Cross-References: * CVE-2024-56326
* bsc#1234718 Cross-References: * CVE-2024-11614
* bsc#1202473 * bsc#1205224 * bsc#1211507 Cross-References:
tinyproxy could be made to expose sensitive information.
