The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Johannes Kuhn discovered that messages and channel names are not properly escaped in the modtcl module in ZNC, a IRC bouncer, which could result in remote code…
* bsc#1212475 * bsc#1227314 Cross-References: * CVE-2024-24791
* bsc#1218424 * bsc#1227314 Cross-References: * CVE-2024-24791
Before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to…
Buffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via a crafted ISO 9660 image file. (CVE-2024-36600) References:
Multiple vulnerabilities have benn fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images. C…
regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems. (CVE-2024-6387) References: - https://bugs.mageia.org/show_bug.cgi?id=33346
* bsc#1226957 Cross-References: * CVE-2024-39331
* bsc#1224282 Cross-References: * CVE-2024-34459
* bsc#1225771 Cross-References: * CVE-2024-5564
* bsc#1227052 Cross-References: * CVE-2024-6104
* bsc#1224282 Cross-References: * CVE-2024-34459
* bsc#1224282 Cross-References: * CVE-2024-34459
* bsc#1226447 * bsc#1226448 Cross-References: * CVE-2024-0397
Backport fix for CVE-2024-6387 (rhbz#2294879) Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
Backport fix for CVE-2024-6387 (rhbz#2294879)
* bsc#1226447 * bsc#1226448 Cross-References: * CVE-2024-0397
* bsc#1226642 Cross-References: * CVE-2024-6387
* bsc#1223867 * bsc#1223868 Cross-References: * CVE-2024-4215
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224282 Cross-References: * CVE-2024-34459
* bsc#1226448 Cross-References: * CVE-2024-4032