Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Yufan You discovered that Libreoffice's handling of documents based on ZIP archives was suspectible to spoofing attacks when the repair mode attempts to addres…
Fabien Potencier discovered that under some conditions the sandbox mechanism of Twig, a template engine for PHP, could by bypassed. For the stable distribution…
Shang-Hung Wan discovered multiple vulnerabilities in the Expat XML parsing C library, which could result in denial of service or potentially the execution of …
Several security issues were fixed in Expat.
Quagga could be made to crash if it received specially crafted network traffic.
FRR could be made to crash if it received specially crafted network traffic.
* bsc#1218534 * bsc#1219494 * bsc#1223263 * bsc#1226892 * bsc#1226897
An update that solves four vulnerabilities and has one errata is now available.
Several security issues were fixed in libxmltok.
Several security issues were fixed in ClamAV.
Several security issues were fixed in DCMTK.
* bsc#1220136 * bsc#1224349 * bsc#1225349 * bsc#1226191 * bsc#1226284
Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) m…
Python 3.13.0rc2
Moderate: kernel security update
Important: kernel security update
pymongo a python interface to the MongoDB document-oriented database was vulnerable. An out-of-bounds read in the 'bson' module allowed deserialization of
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Several security issues were fixed in Python.
nginx could be made to crash if it received specially crafted network traffic.
Several security issues were fixed in Dovecot.
curl could incorrectly check bad certificates when OCSP stapling is in use.
