Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 6.2.8, fixing CVE-2022-48257 and CVE-2022-48258 Unbundle cpp-httlib, fixing CVE-2023-26130
Security update for CVE-2024-27306 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Security update for CVE-2024-27306 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.5 https://github.com/aio-libs/aiohttp/releases/tag/v3.9.4
Version 6.7.5 (2024-04-20) Update GitHub actions fix: CSV-2024-22640 (#712)
Gerbv could be made to crash if it opened a specially crafted input file.
Several issues have been found in qtbase-opensource-src, a collection of several Qt modules/libraries. The issues are related to buffer overflows, infinite loo…
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
* bsc#1196025 * bsc#1210638 * bsc#1219666 Cross-References:
* bsc#1222518 Cross-References: * CVE-2024-31948
JSON5 could allow unintended access to network services or have other unspecified impact.
Multiple problems were discovered in Org-mode, a GNU Emacs major mode for keeping notes, authoring documents, and maintaining to-do lists. CVE-2024-30203 & CVE…
Anope could be made to bypass authentication checks for suspended accounts.
* bsc#1190721 * bsc#1190724 * bsc#1190727 * bsc#1190728 * bsc#1190731
* bsc#1223070 * bsc#1223235 * bsc#1223272 Cross-References:
Several security issues were fixed in FreeRDP.
* bsc#1219267 * bsc#1219268 * bsc#1219438 * bsc#1223409
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
Several security issues were fixed in PHP.
Multiple problems were discovered in GNU Emacs, the extensible, customisable, self-documenting display editor. CVE-2024-30203 & CVE-2024-30204
Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file.
Several security issues were fixed in libvirt.
less could be made run programs as your login if it opened a specially crafted file.
GNU cpio could be made to write files outside the target directory.
