Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages …
Memory corruption in WebGL API. (CVE-2024-6600) Race condition in permission assignment. (CVE-2024-6601) Memory corruption in NSS. (CVE-2024-6602) Memory corru…
* bsc#1227358 * bsc#1227359 Cross-References: * CVE-2023-52168
* bsc#1226040 Cross-References: * CVE-2024-6126
* bsc#1226040 Cross-References: * CVE-2024-6126
* bsc#1226040 Cross-References: * CVE-2024-6126
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
TLS certificates are not properly verified when utilizing LibreOfficeKit. (CVE-2024-5261) References: - https://bugs.mageia.org/show_bug.cgi?id=33370
Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not…
* bsc#1227399 Cross-References: * CVE-2024-34750
* bsc#1220145 * bsc#1223363 * bsc#1223683 Cross-References:
* bsc#1220145 * bsc#1223363 * bsc#1223681 * bsc#1223683
* bsc#1221530 Cross-References: * CVE-2024-21503
* bsc#1223363 * bsc#1223683 Cross-References: * CVE-2024-26828
* bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786
Vanilla upstream kernel version 6.6.37 fix bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mageia…
Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service…
This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authen…
Upstream kernel version 6.6.37 fix bugs and vulnerabilities. The dwarves, kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this …
This update fixes multiple CVEs and rebases to the latest upstream version: * Tue Jul 09 2024 Julien Rische - 1.21.3-1 - New upstream version (1.21.3) - CVE-20…
Backport fix for CVE-2024-4067.
* bsc#1216377 Cross-References: * CVE-2023-45803
* bsc#1216591 Cross-References: * CVE-2023-46316
* bsc#1219465 Cross-References: * CVE-2023-3966
