Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1221400 * bsc#1224323 Cross-References: * CVE-2023-45288
It was discovered that user validation was incorrectly implemented for filter_var(FILTER_VALIDATE_URL). For the stable distribution (bookworm), this problem ha…
A biased ECDSA nonce generation allowed an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words…
* bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241
* bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241
* bsc#1133222 * bsc#1224158 Cross-References: * CVE-2017-17507
gdb could be made to crash if it opened a specially crafted file.
Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name (GHSA-47f6-5gq3-vx9c / CVE-2024-35241) Security: Fixed multiple comman…
Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name (GHSA-47f6-5gq3-vx9c / CVE-2024-35241) Security: Fixed multiple comman…
It was discovered that there were a number of command-line injection vulnerabilities in Composer, a popular dependency manager for PHP. The 'install', 'status'…
It was discovered that there was a buffer overflow vulnerability in libndp, a library for implementing IPv6's "Neighbor Discovery Protocol" (NDP) and is used b…
Git could be made to run programs as your login if it clones a crafted repository.
Huy Nguy¡»'n Ph¡º¡m Nh¡ºt, and Valentin T. and Lutz Wolf of CrowdStrike, discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, …
* bsc#1226027 Cross-References: * CVE-2024-5688 * CVE-2024-5690
* bsc#1226007 Cross-References: * CVE-2023-52890
* bsc#1223252 Cross-References: * CVE-2024-30171
* bsc#1223852 Cross-References: * CVE-2023-52722
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1226020 Cross-References: * CVE-2024-5171
* bsc#1225551 Cross-References: * CVE-2024-4741
* bsc#1222849 Cross-References: * CVE-2024-32487
Security fix for CVE-2024-33871
PHP, a widely-used open source general purpose scripting language, is affected by a security problem when parsing certain types of URLs. Due to a code logic er…
* bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786
