Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 115.13.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-31/ https://www.thunderbird.net/en-US/thunderbird/115.13.0/releasenotes/
Backport upstream patch for CVE-2023-49606.
Update to v1.29.7 for FC40. Resolves CVE-2024-5321: Incorrect permissions on Windows containers logs. Additional bug and regression fixes from upstream.
Update to version 1.11.2 to fix CVE-2023-49606.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. To mitigate CVE-2024-1737 two new configur…
An update that fixes one vulnerability is now available.
Security fix for CVE-2024-5569 (rhbz#2297117)
Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3
Security fix for CVE-2024-5569 (rhbz#2297118)
OCS Inventory was vulnerable to an authentication bypass if the selected authentication method was via CAS.
phpCAS was vulnerable to an authentication bypass.
poppler could be made to denial of service if it opened a specially crafted PDF.
Security fix for CVE-2024-33869 Security fixes for CVE-2024-29509, CVE-2024-29508, CVE-2024-29507, CVE-2024-29506
provd could be made to run programs as an administrator.
python-zipp could be made to crash if certain zip files are used.
Several security issues were fixed in Apache ActiveMQ.
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
HAProxy could be made to expose sensitive information.
Squid could be made to crash if it processed specially crafted characters.
Nova would allow unintended access to files over the network.
Several security issues were fixed in Tomcat.
Several security issues were fixed in Bind.
Security fix for CVE-2024-33869 Security fixes for CVE-2024-29509, CVE-2024-29508, CVE-2024-29507, CVE-2024-29506
* bsc#916845 Cross-References: * CVE-2013-4235
