Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
Potential disclosure of plaintext in OpenPGP encrypted message. (CVE-2024-11159) References: - https://bugs.mageia.org/show_bug.cgi?id=33763
The frequency and sophistication of modern cyberattacks are surging, making it increasingly challenging for organizations to protect sensitive data and critica…
The Qualys Threat Research Unit discovered several local privilege escalation vulnerabilities in needrestart, a utility to check which daemons need to be resta…
The Qualys Threat Research Unit discovered several local privilege escalation vulnerabilities in needrestart, a utility to check which daemons need to be resta…
* bsc#1233085 Cross-References: * CVE-2024-47072
Update to 2.6.4. Backport fix for CVE-2024-50602.
Update to 2.6.4. Backport fix for CVE-2024-50602.
What do hijacked websites, fake job offers, and sneaky ransomware have in common? They’re proof that cybercriminals are finding smarter, sneakier ways to explo…
Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager (NTLM) and Task Scheduler have come under active exploitation in the wil…
Multiple vulnerabilties were discovered for smarty3, a widely-used PHP templating engine, which potentially allows an attacker to perform an XSS (e.g JavaScrip…
A vulnerability has been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation.
A vulnerability has been discovered in Pillow, which may lead to arbitrary code execution.
CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (fedora#2325238) 2325241 - CVE-2024-46952 CVE-2024-46953 CVE-20…
Update to version 3.0.1, which resolves CVE-2024-49768 and CVE-2024-49769.
CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (fedora#2325237) 2325240 - CVE-2024-46952 CVE-2024-46953 CVE-20…
Update to WebKitGTK 2.46.3: Flatten layers to a plane when preseve-3d style is set. Fix DuckDuckGo links by adding a user agent quirk. Fix several crashes and …
Icinga 2 is a general-purpose monitoring application to fit the needs of any size of network. CVE-2021-32739
* bsc#1233165 Cross-References: * CVE-2023-45802
* bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853
* bsc#1232590 Cross-References: * CVE-2024-50602
* bsc#1233282 Cross-References: * CVE-2024-52533
A vulnerability has been discovered in unbound, a validating, recursive, caching DNS resolver. Malicious upstreams responses with very large RRsets can cause U…
curl a command line tool for transferring data with URL syntax was affected by CVE-2024-8096. When the TLS backend is GnuTLS, curl may incorrectly handle OCSP …
