Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
nginx could be made to crash if it received specially crafted network traffic.
ConfigObj could be made to crash if it received specially crafted input.
* bsc#1214298 * bsc#1226606 * bsc#1227764 * bsc#1228487 * bsc#1228654
PostgreSQL could execute arbitrary SQL functions as the superuser if it received a specially crafted SQL object.
HAProxy could be made to crash or run programs if it received specially crafted network traffic.
An update that fixes two vulnerabilities is now available.
Python could me made to bypass some restrictions if it received specially crafted input.
Thunderbird could be made to crash or run programs if it opened a specially crafted file.
Firefox could be made to run programs as your login if it opened a malicious website.
Fixes for memory vulnerabilities.
Update to 2.46.1
Fixes for memory vulnerabilities.
A vulnerability has been detected in the Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances.
Elyas Damej discovered that a sandbox mechanism in ReportLab, a Python library to create PDF documents, could be bypassed which may result in the execution of …
It was discovered that DOMPurify, a sanitizer for HTML, MathML and SVG was susceptible to nesting-based mXSS. For the stable distribution (bookworm), this prob…
Update to 129.0.6668.100 * CVE-2024-9602: Type Confusion in V8 * CVE-2024-9603: Type Confusion in V
Automatic update for buildah-1.37.4-1.fc41, podman-5.2.4-1.fc41. Changelog for buildah * Mon Oct 07 2024 Packit - 2:1.37.4-1 - Update to 1.37.4 upstream releas…
Automatic update for buildah-1.37.4-1.fc41, podman-5.2.4-1.fc41. Changelog for buildah * Mon Oct 07 2024 Packit - 2:1.37.4-1 - Update to 1.37.4 upstream releas…
Various file formats are based on the zip file format. In cases of corruption of the underlying zip's central directory, LibreOffice offers a "repair mode" whi…
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these p…
Update to 2.0.19
Redis Community Edition 7.2.6 Released Wed 02 Oct 2024 20:17:04 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes CVE-2024-31449 Lua libra…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
