Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Backport fix for CVE-2024-50602.
CVE fix for CVE-2024-9632
giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function. (CVE-2023-48161) Array indexing integer overflow. (CVE-2024-21210) HTTP client imp…
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution …
Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch
Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch
An update that fixes one vulnerability is now available.
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted pa…
Fixes CVE-2024-9341, CVE-2024-9407, CVE-2024-9675 and CVE-2024-9676.
Fixes CVE-2024-9341, CVE-2024-9407, CVE-2024-9675 and CVE-2024-9676.
Multiple vulnerabilities have been fixed in libarchive, a multi-format archive and compression library. CVE-2021-36976
An out-of-bounds write vulnerability when handling crafted streams was discovered in mpg123, a real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 …
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to privilege escalation, information disclosure, incorrect validation or…
Linus Torvalds, the revered leader of the open-source movement, has shown that even minute changes can make a significant difference. A relatively small recent…
* bsc#1232579 Cross-References: * CVE-2024-50602
* bsc#1232579 Cross-References: * CVE-2024-50602
* bsc#1216423 Cross-References: * CVE-2023-45802
* bsc#1216423 Cross-References: * CVE-2023-45802
* bsc#1228252 * bsc#1232590 Cross-References: * CVE-2024-50602
Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 Convert to %autorelease and %autochangelog Simplify spec Remove checks on if systemd is present Remov…
Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in denial of service or potentially the execution of arbitar…
An update that solves four vulnerabilities and has one errata is now available.
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution …
Invalid low-level GF(2^m) parameters can lead to an OOB memory access. (CVE-2024-9143) References: - https://bugs.mageia.org/show_bug.cgi?id=33736
