Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
update to 125.0.6422.112 High CVE-2024-5274: Type Confusion in V8
Qt 6.7.1 bugfix update.
Qt 6.7.1 bugfix update.
Qt 6.7.1 bugfix update.
Qt 6.7.1 bugfix update.
* bsc#1223019 Cross-References: * CVE-2024-2961
Several security issues were fixed in FRR.
Flask-Security could be made to bypass URL validation and redirect to arbitary URL.
* bsc#1223858 * bsc#1224169 * bsc#1224340 Affected Products:
* bsc#1223110 Cross-References: * CVE-2024-32462
Several security issues were fixed in Git.
Unbound could be made to take part in a denial of service attack.
amavisd-new could be made to bypass security measures.
LibreOffice could be made to run programs when clicking a graphic.
Several security issues were fixed in WebKitGTK.
Netatalk could allow arbitrary code execution if it receives a specially crafted input.
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
Security vulnerabilities were found in less, a pager program similar to more, which could result in arbitrary command execution when processing files with craf…
* bsc#1223858 * bsc#1224169 * bsc#1224340 Affected Products:
* bsc#1221401 * bsc#1222330 * bsc#1222332 Cross-References:
* bsc#1224388 Cross-References: * CVE-2024-4603
python-cryptography could be made to crash if it received specially crafted input.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
