Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python 3.4+ asyncio framework.…
An update that fixes 6 vulnerabilities is now available.
Potential UTF8 size overflow. (CVE-2024-21131) Excessive symbol length can lead to infinite loop. (CVE-2024-21138) Range Check Elimination (RCE) pre-loop limit…
An update that fixes four vulnerabilities is now available.
* bsc#1225099 * bsc#1228349 Cross-References: * CVE-2023-52846
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Upstream kernel version 6.6.52 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration whi…
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2023-38522
* bsc#1230227 Cross-References: * CVE-2024-6232
Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` functio…
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working dire…
* bsc#1230366 Cross-References: * CVE-2024-45817
Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager (vTM) to it…
* bsc#1229783 Cross-References: * CVE-2023-49582
* bsc#1229783 Cross-References: * CVE-2023-49582
* bsc#1230227 Cross-References: * CVE-2024-6232
* bsc#1223521 * bsc#1225099 * bsc#1225313 Cross-References:
* bsc#1230366 Cross-References: * CVE-2024-45817
* bsc#1230366 Cross-References: * CVE-2024-45817
* bsc#1230366 Cross-References: * CVE-2024-45817
An update that fixes 6 vulnerabilities is now available.
