Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2024-21501
An integer overflow in the EXIF metadata parsing was discovered in the GStreamer media framework, which may result in denial of service or potentially the exec…
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Several security issues were fixed in GNU C Library.
* bsc#1224806 Cross-References: * CVE-2024-4453
* bsc#1187446 * bsc#1224410 Cross-References: * CVE-2021-33813
* bsc#1224788 Cross-References: * CVE-2024-35195
* bsc#1224806 Cross-References: * CVE-2024-4453
New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854, CVE-2024-4855.
Release 1.6.7 Makefile: Use phpDocumentor v3.4 for the Framework docs (#9313) Fix bug where HTML entities in URLs were not decoded on HTML to plain text conver…
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854, CVE-2024-4855.
Release 1.6.7 Makefile: Use phpDocumentor v3.4 for the Framework docs (#9313) Fix bug where HTML entities in URLs were not decoded on HTML to plain text conver…
FFmpeg could be made to crash or run programs as your login if it opened a specially crafted file.
* bsc#1084332 * bsc#1141539 * bsc#1184509 * bsc#1186060 * bsc#1190317
PostgreSQL could be made to expose sensitive information.
PyMySQL could be vulnerable to SQL injection attacks.
browserify-sign could allow unintended access if it opened a specially crafted file.
* bsc#1189495 * bsc#1191175 * bsc#1218686 Cross-References:
Update to 115.11.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-23/ https://www.thunderbird.net/en-US/thunderbird/115.11.0/releasenotes/ https://…
Update to requests-2.32.0, fixes CVE-2024-35195.
update to 125.0.6422.112 High CVE-2024-5274: Type Confusion in V8
Update to requests-2.32.0, fixes CVE-2024-35195.
