Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
GLib could be made to accept spoofed D-Bus signals.
* bsc#1223100 Cross-References: * CVE-2023-3758
* bsc#1223852 Cross-References: * CVE-2023-52722
* bsc#1216853 Cross-References: * CVE-2023-38472
* bsc#1222492 Cross-References: * CVE-2024-21506
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1218424 * bsc#1224017 * bsc#1224018 Cross-References:
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-42843
Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-3266…
Several security vulnerabilities have been discovered in Wordpress, a popular content management framework, which may lead to exposure of sensitive information…
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Guido Vranken discovered an issue in python3-idna, a library to support the Internationalized Domain Names in Applications (IDNA) protocol. A specially crafted…
* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828
* bsc#1219079 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1189495 * bsc#1211301 * bsc#1219559 * bsc#1219666 * bsc#1221260
* bsc#1189495 * bsc#1191175 * bsc#1218686 Cross-References:
* bsc#1219079 * bsc#1219435 Cross-References: * CVE-2024-0775
Security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in information disclosure or incorrect vali…
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib library are prone to a spoofing vulnerability. A local attacker can take advantage …
An update that fixes one vulnerability is now available.
libde265 could be made to crash if it opened a specially crafted file.
* bsc#1223252 Cross-References: * CVE-2024-30171
* bsc#1221984 * bsc#1222302 * bsc#1222453 Cross-References:
