Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1230698 Cross-References: * CVE-2024-41996
* bsc#1222040 * bsc#1222041 * bsc#1222042 Cross-References:
PHP version 8.2.24 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Fix CVE-2024-9014.
New upstream builds (131.0)
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially among other effects allowing XSS, Code Execution, i…
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
* bsc#1230979 Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6
Several security issues were fixed in ImageMagick.
A system authentication measure could be bypassed.
unzip could be made to crash or run programs as your login if it opened a specially crafted file.
* bsc#1229930 * bsc#1229931 * bsc#1229932 Cross-References:
* bsc#1230020 * bsc#1230034 Cross-References: * CVE-2023-7256
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Several security issues were fixed in GNOME Shell.
New upstream builds (131.0)
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in incorrect parsing of multipart/f…
A protocol flaw was fixed in AsyncSSH.
PHP version 8.3.12 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Update to new upstream version (closes rhbz#2237124)
PHP version 8.3.12 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Several security issues were fixed in Devise-Two-Factor.
* bsc#1230698 Cross-References: * CVE-2024-41996
* bsc#1227546 Cross-References: * CVE-2024-28882
