Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to idna-3.7.
Update to latest upstream version 1.7.17 (closes rhbz#2255953)
* bsc#1216644 * bsc#1219435 Cross-References: * CVE-2023-5717
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
Pillow could be made to crash or run programs as an administrator if it opened a specially crafted file.
* bsc#1222992 Cross-References: * CVE-2024-2961
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
Several vulnerabilities were discovered in Samba, SMB/CIFS file, print, and login server for Unix CVE-2020-14318
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
* bsc#1198101 * bsc#1205588 * bsc#1205855 * bsc#1210382 * bsc#1213945
* bsc#1219435 Cross-References: * CVE-2024-1086
LXD could be made to bypass integrity checks if it received specially crafted input.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure. For the oldstable di…
* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828
* bsc#1216644 * bsc#1219435 * bsc#1220828 Cross-References:
* bsc#1219296 * bsc#1220828 Cross-References: * CVE-2023-52340
* bsc#1219435 * bsc#1220828 Cross-References: * CVE-2024-1086
update to 124.0.6367.60 High CVE-2024-3832: Object corruption in V8 High CVE-2024-3833: Object corruption in WebAssembly High CVE-2024-3914: Use after free in …
New upstream release (125.0)
Security fix for CVE-2023-5752
Update to 1.15.8 Fixes CVE-2024-32462
Security fix for CVE-2024-27316
Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
