Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 3.3.7 - CVE-2024-47533
Add patches to fix: CVE-2024-52530 libsoup3: HTTP request smuggling via stripping null bytes from the ends of header names (bug #2325358) CVE-2024-52532 libsou…
* bsc#1231879 * bsc#1233355 Cross-References: * CVE-2024-10458
* bsc#1233282 Cross-References: * CVE-2024-52533
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities have been fixed in the PostScript/PDF interpreter Ghostscript. CVE-2024-46951
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
A microcode update has been released for Intel processors, addressing multiple vulnerabilties which potentially could cause information disclosue or local DoS.
A buffer overflow with long SOCKS4a proxy hostname and username has been fixed in the GNOME Input/Output library (GIO). For Debian 11 bullseye, this problem ha…
An update that fixes 8 vulnerabilities is now available.
An update that fixes 8 vulnerabilities is now available.
* jsc#PED-11136 Cross-References: * CVE-2024-10389 * CVE-2024-10975
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-40866
Fix null pointer dereference in opendmarc_policy.c. (CVE-2024-25768) References: - https://bugs.mageia.org/show_bug.cgi?id=33756
Upstream kernel version 6.6.61 fixes bugs and vulnerabilities. The bluez, kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this …
Vanilla upstream kernel version 6.6.61 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mage…
An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function. (CVE-2024-48241) References: - https:…
fix crash in in ogg vorbis (#2322326) (CVE-2024-50612)
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
