Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities were fixed in ruby-rack, an interface for developing web applications in Ruby. CVE-2024-25126
Update to 3.7 (rhbz#2274439), security fix for CVE-2024-3651
Potential DoS attacks have been fixed by rate limiting HTTP/2 CONTINUATION frames in Apache Traffic Server, an HTTP/1.1 and HTTP/2 compliant caching proxy serv…
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to trigger buffer overflows with th…
Release 4.2.0
update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…
Release 4.2.0
Security vulnerabilities were found in mediawiki, a website engine for collaborative work, that could lead to information disclosure, privilege escalation, or …
update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986
* bsc#1220548 * bsc#1222518 Cross-References: * CVE-2024-27913
* bsc#1186060 * bsc#1192145 * bsc#1194516 * bsc#1208995 * bsc#1209635
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
* bsc#1219217 * jsc#PED-3360 * jsc#PED-3361 Cross-References:
* bsc#1213269 * bsc#1218889 * bsc#1222843 * bsc#1222845
* bsc#1222842 Cross-References: * CVE-2024-3651
* bsc#1222950 Cross-References: * CVE-2024-1135
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756
* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756
Several security vulnerabilities have been discovered in knot-resolver, a caching, DNSSEC-validating DNS resolver which may allow remote attackers to bypass DN…
