Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1232265 * bsc#1232267 * bsc#1232269 * bsc#1232270
New upstream build (132.0)
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
Two vulnerabilities have been fixed in puma, a threaded HTTP server for Ruby/Rack applications.
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
* bsc#1212931 Cross-References: * CVE-2023-35947
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1232528 Cross-References: * CVE-2024-9681
Update to 128.4.0 https://www.thunderbird.net/en-US/thunderbird/128.4.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-58/
Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Update to 128.4.0 https://www.thunderbird.net/en-US/thunderbird/128.4.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-58/
Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
It was discovered that there were two issues in libheif, a decoder and encoder for the HEIF and AVIF image formats that could have been exploited by specially-…
Werkzeug could be made to consume resources if it received specially crafted network traffic.
An update that fixes 56 vulnerabilities, contains one feature is now available.
