Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2024-24576 (Windows command injection)
Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.
Update to 0.29 - Fixes 'clipbrowse command execution with multi-line clipboard text including "| sh"'
PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATT…
* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672
* bsc#1221172 Cross-References: * CVE-2024-2044
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
GNU C Library could be made to crash or run programs if it processed specially crafted data.
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
sosreport: Fix command injection with crafted report names [CVE-2024-2947]
Fix for CVE-2024-31497
Fix for CVE-2024-31497
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2023-46589
Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not clos…
Several security issues were fixed in Apache HTTP Server.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking.
* bsc#1200599 * bsc#1209635 * bsc#1212514 * bsc#1213456 * bsc#1217987
* bsc#1194869 * bsc#1200465 * bsc#1205316 * bsc#1207948 * bsc#1209635
New upstream release (125.0)
The 6.8.6 stable kernel update contains a number of important fixes across the tree.
Update to 0.9.0; fix rhbz#2274045 and rhbz#2266791; Security fix for CVE-2024-25713
New version 4.2.4. Includes a fix for CVE-2024-2955
Update to latest upstream release (closes rhbz#2261550, closes rhbz#2245361)
