Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1230683 Cross-References: * CVE-2024-45405
libheif could be made to crash or read sensitive data if it opened a specially crafted file
Several security issues were fixed in Go.
Various security, performance, accuracy, and stability issues have been fixed.
New version 4.2.8 Fix for CVE-2024-9781
It was discovered that there was a potential out-of-bounds read vulnerability in libheif, a decoder and encoder for the HEIF and AVIF image formats.
Multiple vulnerabilities have been fixed in DMitry, a tool to gather as much information as possible about a host. CVE-2017-7938
* bsc#1224132 * bsc#1229007 * bsc#1229929 * bsc#1230140 * bsc#1230834
* bsc#1230778 Cross-References: * CVE-2024-7254
* bsc#1230778 Cross-References: * CVE-2024-7254
* bsc#1230778 Cross-References: * CVE-2024-7254
Several security issues were fixed in WebKitGTK.
C©dric Krier discovered that python-sql, a library to write SQL queries in a pythonic way, performed insufficient sanitising which could result in SQL injectio…
Unbound could be made to stop responding if it received specially crafted DNS traffic.
A heap-based pointer disclosure problem was found in Ghostscript, an interpreter for the PostScript language and for PDF. This could lead to information disclo…
Firefox could be made to crash or run programs as your login
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or bypass of Java sandb…
libgsf could be made to run programs as your login if it opened a specially crafted file.
cups-browsed could be made to run programs if it received specially crafted network traffic.
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or bypass of Java sandb…
Vulnerabilities were found in Perl's CPAN.pm, which could lead CPAN clients to install malicious modules. CVE-2020-16156
AMD processors may allow a privileged local attacker to further escalate their privileged and execute arbitrary code within the processor's firmware layer.
Two issues have been found in asterisk, an Open Source Private Branch Exchange.
