Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New version 8.5.5
* bsc#1228256 * bsc#1228257 Cross-References: * CVE-2024-1737
* bsc#1220356 * bsc#1227525 Affected Products: * Basesystem Module 15-SP5
Noah Misch discovered a race condition in the pg_dump tool included in PostgreSQL, which may result in privilege escalation. For the oldstable distribution (bu…
Noah Misch discovered a race condition in the pg_dump tool included in PostgreSQL, which may result in privilege escalation. For the stable distribution (bookw…
* bsc#1228549 * bsc#1228552 Cross-References: * CVE-2024-41671
* bsc#1228630 Cross-References: * CVE-2024-41990
Update to 115.14.0 https://www.thunderbird.net/en-US/thunderbird/115.14.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-38/
New version 9.1.1. Includes fixes for CVE-2024-31950, CVE-2024-31951 and CVE-2024-31949.
The newest upstream commit Security fixes for CVE-2024-41957, CVE-2024-41965
* bsc#1225013 * bsc#1225310 Cross-References: * CVE-2024-27398
* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1222685 * bsc#1223059
* bsc#1210619 * bsc#1220537 * bsc#1223363 * bsc#1223683 * bsc#1225013
* bsc#1223683 * bsc#1225310 Cross-References: * CVE-2024-26923
* bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832
* bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363
Several security issues were fixed in Salt.
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribu…
* bsc#1223683 Cross-References: * CVE-2024-26923
A vulnerability was discovered in odoo, a suite of web based open source business apps. It could result in the execution of arbitrary code.
Multiple cross-site scripting vulnerabilities were discovered in RoundCube webmail. For the stable distribution (bookworm), these problems have been fixed in
Kerberos could be made to crash if it received specially crafted input.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Update to upstream 2.1-43. 20240531 Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c; Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-b…
