Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1224279 * bsc#1224309 Cross-References: * CVE-2024-3044
* bsc#1224279 * bsc#1224309 Cross-References: * CVE-2024-3044
Update to version 29.4, fixing CVE-2024-39331. Update to Emacs 29.4, fixing CVE-2024-39331.
A vulnerability has been discovered in OpenSSH, which can lead to remote code execution with root privileges.
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the set_encoder_id function in /fftools/ffmp…
SSL_select_next_proto buffer overread. (CVE-2024-5535) References: - https://bugs.mageia.org/show_bug.cgi?id=33337 - https://openssl.org/news/secadv/20240627.t…
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of se…
Multiple vulnerabilities have been discovered in GNU Emacs and Org Mode, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in cpio, which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in cryptography, the worst of which could lead to a denial of service.
A vulnerability has been discovered in SSSD, which can lead to arbitrary code execution.
A vulnerability has been discovered in SDL_ttf, which can lead to arbitrary memory writes.
Update to 4.15 for CVE-2024-3652
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
C'©dric Krier has found that trytond, the Tryton application server, accepts compressed content from unauthenticated requests which makes it vulnerable to zip …
Multiple vulnerabilities have been fixed in the Name Service Cache Daemon that is built by the GNU C library and shipped in the nscd binary package. CVE-2024-3…
Backport fix for CVE-2024-6239.
Update to 1.26.19, fixes CVE-2024-0444.
Update to 1.26.19, fixes CVE-2024-0444.
A vulnerability was discovered in GNU Emacs, the extensible, customisable, self-documenting display editor. The org-link-expand-abbrev function expanded a %(..…
