Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Python.
nginx could be made to crash if it received specially crafted network traffic.
Several security issues were fixed in Dovecot.
curl could incorrectly check bad certificates when OCSP stapling is in use.
Several security issues were fixed in ClamAV.
An update that fixes four vulnerabilities is now available.
OpenSSH could be made to crash or run programs as your login if it received a specially crafted input.
Python 3.13.0rc2 Security fix for CVE-2024-8088 and CVE-2024-6232
Python 3.13.0rc2 Security fix for CVE-2024-8088 and CVE-2024-6232
flatpak 1.15.10 and bubblewrap 0.10.0 updates, which together fix CVE-2024-42472 in Flatpak.
flatpak 1.15.10 and bubblewrap 0.10.0 updates, which together fix CVE-2024-42472 in Flatpak.
Update to 1.15.10 (CVE-2024-42472)
Node.js a JavaScript runtime environment that executes JavaScript code outside a web browser (server side) was vulnerable. CVE-2023-30589
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Update to expat-2.6.3.
Update to 115.15.0 https://www.thunderbird.net/en-US/thunderbird/115.15.0esr/releasenotes/
Update to expat-2.6.3.
Update to 3.6.1 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.1 Update to 3.6.0
update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8
Security fix for CVE-2024-45306 patchlevel 703 Security fixes for CVE-2024-43374, CVE-2024-43802
Backport patch for CVE-2024-8088
Update to 128.2.0 https://www.thunderbird.net/en-US/thunderbird/128.2.0esr/releasenotes/
Update to expat-2.6.3.
* bsc#1228535 Cross-References: * CVE-2024-7264
