Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in FontForge.
Wget could be made to connect to a different host than expected.
OpenSSL could be made to consume resources and cause long delays if it processed certain input.
update to 126.0.6478.126 High CVE-2024-6290: Use after free in Dawn High CVE-2024-6291: Use after free in Swiftshader High CVE-2024-6292: Use after free in Daw…
Update to upstream OpenVPN 2.6.11 CVE-2024-5594: control channel: refuse control channel messages with nonprintable characters in them CVE-2024-28882: only cal…
Fix for multiple CVEs
Fix CVE-2024-2698 and CVE-2024-3183
update to 126.0.6478.126 High CVE-2024-6290: Use after free in Dawn High CVE-2024-6291: Use after free in Swiftshader High CVE-2024-6292: Use after free in Daw…
SQLite could be made to crash if it received specially crafted input.
It was discovered that multiple integer overflows in libvpx, a multimedia library for the VP8 and VP9 video codecs, may result in denial of service and potenti…
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Netplan could reveal secrets or execute commands with specially crafted configuration file.
Ruby could be made to crash or expose sensitive information login if it processed certain strings.
Wget could be made to connect to a different host than expected.
plasma-workspace would allow unintended access to the session manager.
Multiple vulnerabilities were found in git, a fast, scalable and distributed revision control system. CVE-2019-1387
libheif could be made to crash if it opened a specially crafted file.
OpenVPN could allow unintended access to network services.
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Update from 0.7.6 to 0.7.8 for more bug-fixes. https://lib.openmpt.org/libopenmpt/2024/06/09/security- update-0.7.8-releases-0.6.17-0.5.31-0.4.43/ https://lib.…
Update to 115.12.1 https://www.thunderbird.net/en-US/thunderbird/115.12.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-28/
Update from 0.7.6 to 0.7.8 for more bug-fixes. https://lib.openmpt.org/libopenmpt/2024/06/09/security- update-0.7.8-releases-0.6.17-0.5.31-0.4.43/ https://lib.…
Google Guest Agent and OS Config Agent could be made to crash if it open a specially crafted JSON.
It was discovered that Emacs is prone to arbitrary shell code evaluation when opening a specially crafted Org file. This update includes updates pending for th…
