Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.15.10 (CVE-2024-42472)
Node.js a JavaScript runtime environment that executes JavaScript code outside a web browser (server side) was vulnerable. CVE-2023-30589
update to 128.0.6613.137 * High CVE-2024-8636: Heap buffer overflow in Skia * High CVE-2024-8637: Use after free in Media Router * High CVE-2024-8638: Type Con…
Update to 1.0.7 CVE-2024-20506: Changed the logging module to disable following symlinks on Linux and Unix systems so as to prevent an attacker with existing a…
update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8
Backport patch for CVE-2024-8088
Heap-based buffer overflow vulnerability in Assimp allows a local attacker to execute arbitrary code by inputting a specially crafted file into the program. Re…
An attacker could present an ECDSA X.509 certificate using explicit encoding where the parameters are very large. When parsing, the parameter is checked to be …
* bsc#1228535 Cross-References: * CVE-2024-7264
Update to 2.9.10 (CVE-2024-45506)
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1230161 * bsc#1230162 Cross-References: * CVE-2024-20505
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. (CVE-2024-45490) An issue was discovered in…
* bsc#1230020 * bsc#1230034 Cross-References: * CVE-2023-7256
* bsc#1230093 Cross-References: * CVE-2024-8096
An update that fixes one vulnerability is now available.
* bsc#1228535 * bsc#1230093 Cross-References: * CVE-2024-7264
* bsc#1230093 Cross-References: * CVE-2024-8096
* bsc#1230093 Cross-References: * CVE-2024-8096
New version 4.0.17, fix for CVE-2024-8250
New version 4.2.7, fix for CVE-2024-8250
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially r…
Possible denial of service in X.509 name checks. (CVE-2024-6119) References: - https://bugs.mageia.org/show_bug.cgi?id=33520 - https://openssl-library.org/news…
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/z…
