Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Several security issues were fixed in GNOME Shell.
New upstream builds (131.0)
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in incorrect parsing of multipart/f…
A protocol flaw was fixed in AsyncSSH.
PHP version 8.3.12 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Update to new upstream version (closes rhbz#2237124)
PHP version 8.3.12 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Several security issues were fixed in Devise-Two-Factor.
* bsc#1230698 Cross-References: * CVE-2024-41996
* bsc#1227546 Cross-References: * CVE-2024-28882
* bsc#1229910 Cross-References: * CVE-2024-42934
* bsc#1184272 * bsc#1226316 * bsc#1228648 * bsc#1229821
cups-filters could be made to run programs if it received specially crafted network traffic.
Several security issues were fixed in PHP.
ORC could be made to crash or execute arbitrary code
CUPS could be made to crash or run programs if it received specially crafted network traffic.
Python could be made to bypass some restrictions if it received specially crafted input.
Two vulnerabilities have been fixed in the SQLite database. CVE-2021-36690
Flatpak could be made to read and write files in locations it would not normally have access to.
* bsc#1230698 Cross-References: * CVE-2024-41996
An update that fixes four vulnerabilities is now available.
* bsc#1196018 * bsc#1196823 * bsc#1202346 * bsc#1209636 * bsc#1209799
Multiple vulnerabilities have been fixed in the network traffic analyzer Wireshark. CVE-2021-4181
