Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1229013 Cross-References: * CVE-2024-7348
It was discovered that there was a potential denial of service (DoS) attack in python-jwcrypto, an implementation of JSON Web Encryption and similar object sig…
Several security issues were fixed in Thunderbird.
update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8
Update to 128.2.0 https://www.thunderbird.net/en-US/thunderbird/128.2.0esr/releasenotes/
update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these p…
Multiple vulnerabilities have been fixed in the Amanda backup system. CVE-2022-37703
Multiple vulnerabilities have been fixed in bluez library, tools and daemons for using Bluetooth devices. CVE-2021-3658
* bsc#1221243 * bsc#1221677 * bsc#1224117 Cross-References:
* bsc#1229821 Cross-References: * CVE-2024-8381 * CVE-2024-8382
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1229869 Cross-References: * CVE-2023-45288
* bsc#1217353 Cross-References: * CVE-2023-5752
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Fix buffer overrun when giving an offset to Session:receive
An update that fixes two vulnerabilities is now available.
Add patch for CVE-2024-8088. Update to python-3.11.9. Backport fix for CVE-2024-6923.
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
python-aiohttp would allow unintended access to files over the network.
* bsc#1218297 * bsc#1221479 * bsc#1226414 * bsc#1228091
