Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fixes for memory vulnerabilities.
Fixes for memory vulnerabilities.
A vulnerability has been detected in the Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances.
Update to 129.0.6668.100 * CVE-2024-9602: Type Confusion in V8 * CVE-2024-9603: Type Confusion in V
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
Update to 129.0.6668.100 * CVE-2024-9602: Type Confusion in V8 * CVE-2024-9603: Type Confusion in V
Update rust-brotli-decompressor to 4.0.1, rust-brotli to 7.0.0, and rust-async- compression to 0.4.13. Patch dependent packages as needed to avoid compat packa…
* bsc#1230979 * bsc#1231413 Cross-References: * CVE-2024-8900
* bsc#1229910 Cross-References: * CVE-2024-42934
* bsc#1231298 Cross-References: * CVE-2024-47554
Update to 1.35.1. Includes fix for CVE-2024-9427
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817]
x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817] update to xen-4.17.5
* bsc#1231264 * bsc#1231265 Cross-References: * CVE-2024-31228
* bsc#1230939 * bsc#1231294 Cross-References: * CVE-2024-47176
Patch the code to use https instead of http (CVE-2024-45321)
Fixes CVE-2024-45752: A vulnerability that allows users to remap keys arbitrarily. This allows all users on the system to remap a key unexpectedly to a potenti…
Patch the code to use https instead of http (CVE-2024-45321)
Patch the code to use https instead of http (CVE-2024-45321)
* bsc#1231295 Cross-References: * CVE-2024-47855
* bsc#1231208 * bsc#1231230 Cross-References: * CVE-2024-9341
