Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities were found in python-urllib3, an HTTP library with thread-safe connection pooling for Python, which could lead to information disclosu…
It was discovered that there was a remotely exploitable vulnerability in php-laravel-framework, a popular web application framework written in PHP.
Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505
* bsc#1223098 Cross-References: * CVE-2024-27306
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
* bsc#1234371 Cross-References: * CVE-2021-3156
* bsc#1233973 Cross-References: * CVE-2024-53008
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access (PRA…
* bsc#1234068 Cross-References: * CVE-2024-11053
* bsc#1233282 Cross-References: * CVE-2024-52533
* bsc#1232528 Cross-References: * CVE-2024-9681
Vanilla upstream kernel version 6.6.65 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mage…
Upstream kernel version 6.6.65 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
A buffer overflow was discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execu…
* bsc#1234317 Cross-References: * CVE-2024-46901
* bsc#1225889 Cross-References: * CVE-2024-1298
* bsc#1225462 Cross-References: * CVE-2024-54661
Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker."Written in Go, CoinLurker employs cutting-edge …
Antonio Morales reported an integer overflow vulnerability in the memory allocator in the Core GStreamer libraries, which may result in denial of service or po…
* bsc#1234413 Cross-References: * CVE-2024-50336
Multiple vulnerabilities have been fixed in the PostgreSQL JDBC Driver. CVE-2022-31197
Fix CVE-2024-45337
