Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Amel Bouziane-Leblond discovered that LibreOffice's support for binding scripts to click events on graphics could result in unchecked script execution.
A security issue was discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. Google is awar…
* bsc#1177529 * bsc#1192145 * bsc#1211592 * bsc#1217408 * bsc#1218562
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1219559 Cross-References: * CVE-2023-52425
* bsc#1190576 * bsc#1192145 * bsc#1204614 * bsc#1211592 * bsc#1218562
This release fixes various issues in shim bootloader and updates it to a supported version. Older versions of the shim may eventually be blocked by Secure Boot…
* bsc#1014637 * bsc#1156309 * jsc#MSQA-775 Cross-References:
* bsc#1047178 * bsc#1082216 * bsc#1082233 * bsc#1210999
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Update to uriparser-0.9.8.
Fix for CVE-2024-2397
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Update to uriparser-0.9.8.
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib library are prone to a spoofing vulnerability. A local attacker can take advantage …
An update that fixes one vulnerability is now available.
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1219386 Cross-References: * CVE-2023-5992
* bsc#1021578 * bsc#1111634 * bsc#1111635 Cross-References:
