Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1218644 * bsc#1220927 * bsc#1232224 * bsc#1232436 * bsc#1232860
* bsc#1234068 Cross-References: * CVE-2024-11053
* bsc#1233282 Cross-References: * CVE-2024-52533
* bsc#1232528 Cross-References: * CVE-2024-9681
Important: ruby:3.1 security update
Important: postgresql:15 security update
nodejs:22 bug fix and enhancement update
Moderate: php:8.2 security update
Important: postgresql:16 security update
Moderate: php:8.1 security update
YARA could be made to crash if it received specially crafted input.
* bsc#1082555 * bsc#1194869 * bsc#1218644 * bsc#1220382 * bsc#1221309
libvpx could be made to crash or run programs if it received specially crafted input.
PHPUnit could be made to crash or run programs if it received specially crafted network traffic.
Spring Framework could be made to run programs or expose sensitive information if it received specially crafted network traffic.
EditorConfig could be made to crash or run programs as your login if it received specially crafted input.
A buffer overflow was discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execu…
* bsc#1233285 * bsc#1233287 * bsc#1233292 Cross-References:
* bsc#1234317 Cross-References: * CVE-2024-46901
* bsc#1082555 * bsc#1157160 * bsc#1218644 * bsc#1221977 * bsc#1222364
* bsc#1233285 * bsc#1233287 * bsc#1233292 Cross-References:
* bsc#1225889 Cross-References: * CVE-2024-1298
* bsc#1218644 * bsc#1220382 * bsc#1221309 * bsc#1222590 * bsc#1229345
* bsc#1218644 * bsc#1220382 * bsc#1221309 * bsc#1222590 * bsc#1229808
