Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in WebKitGTK.
Several issues were fixed in AsyncSSH.
This is the .NET 9.0 GA release. It contains security fixes for CVE-2024-43498 and CVE-2024-43499 Announcement: https://devblogs.microsoft.com/dotnet/announcin…
Several security issues were fixed in Tomcat.
Multiple vulnerabilties were discovered for smarty3, a widely-used PHP templating engine, which potentially allows an attacker to perform an XSS (e.g JavaScrip…
Update to upstream 2.1-47. 20241112 Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; Updat…
bartlett/php-compatinfo-db 6.12.0 - 2024-10-29 Added db:show command is now able to display deprecations on all components PHP 8.2.25 support PHP 8.3.13 support
Update to version 3.0.1, which resolves CVE-2024-49768 and CVE-2024-49769.
bartlett/php-compatinfo-db 6.12.0 - 2024-10-29 Added db:show command is now able to display deprecations on all components PHP 8.2.25 support PHP 8.3.13 support
Update to WebKitGTK 2.46.3: Flatten layers to a plane when preseve-3d style is set. Fix DuckDuckGo links by adding a user agent quirk. Fix several crashes and …
Icinga 2 is a general-purpose monitoring application to fit the needs of any size of network. CVE-2021-32739
A security issue was discovered in Thunderbird, which could result in the disclosure of OpenPGP encrypted messages. For the stable distribution (bookworm), thi…
Moritz Rauch discovered that the Symfony PHP framework implemented persisted remember-me cookies incorrectly, which could result in authentication bypass.
Multiple security issues were discovered in PostgreSQL, which may result in the execution of arbitrary code, privilege escalation or log manipulation. For the …
* bsc#1233165 Cross-References: * CVE-2023-45802
* bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853
* bsc#1232590 Cross-References: * CVE-2024-50602
* bsc#1233282 Cross-References: * CVE-2024-52533
Security: CVE-2024-3596: Fix for BlastRADIUS vulnerability in libkrad (support for Message-Authenticator attribute) Marvin attack: Removal of the "RSA" method …
Security: CVE-2024-3596: Fix for BlastRADIUS vulnerability in libkrad (support for Message-Authenticator attribute) Marvin attack: Removal of the "RSA" method …
GD Graphics Library could be made to crash if it opened a specially crafted file.
Update to upstream 2.1-46. 20241029 Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up to 0x12b.
A vulnerability has been discovered in unbound, a validating, recursive, caching DNS resolver. Malicious upstreams responses with very large RRsets can cause U…
Several security issues were fixed in Go.
