Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039
Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib library are prone to a spoofing vulnerability. A local attacker can take advantage …
An update that fixes one vulnerability is now available.
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1219386 Cross-References: * CVE-2023-5992
* bsc#1094832 * bsc#1200551 Cross-References: * CVE-2018-11490
* bsc#1218862 * bsc#1218865 Cross-References: * CVE-2024-0553
* bsc#1218571 * bsc#1219238 Cross-References: * CVE-2023-7207
An update that fixes four vulnerabilities is now available.
An update that fixes 35 vulnerabilities is now available.
Multiple vulnerabilities have been discovered in PoDoFo, the worst of which could lead to code execution.
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
A vulnerability has been discovered in Kubelet, which can lead to privilege escalation.
A vulnerability has been discovered in Rebar3, which can lead to command injection.
update to 124.0.6367.201 * High CVE-2024-4671: Use after free in Visuals
update to 124.0.6367.201 * High CVE-2024-4671: Use after free in Visuals
Resolve CVE-2024-34397 (GDBus signal subscriptions for well-known names are vulnerable to unicast spoofing), and also update gnome-shell to ensure this fix doe…
update to 124.0.6367.155 High CVE-2024-4558: Use after free in ANGLE High CVE-2024-4559: Heap buffer overflow in WebAudio
update to 124.0.6367.155 High CVE-2024-4558: Use after free in ANGLE High CVE-2024-4559: Heap buffer overflow in WebAudio
Fix for CVE-2024-2397
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1223690 Cross-References: * CVE-2024-29040
Stack-based buffer overflow in netgroup cache: If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent cli…
