Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1219724 Cross-References: * CVE-2024-24806
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
* bsc#1233323 * bsc#1233325 * bsc#1233326 * bsc#1233327
* bsc#1233706 Cross-References: * CVE-2024-53899
* bsc#1224132 * bsc#1229007 * bsc#1229929 * bsc#1230140 * bsc#1230834
* bsc#1233695 Cross-References: * CVE-2024-11691 * CVE-2024-11692
* bsc#1225889 Cross-References: * CVE-2024-1298
* bsc#1209401 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6
1.37 - fix parsing of "use if ..." Fixes errors in PAR::Packer test t/90-rt59710.t - add test for _parse_libs() 1.36
Backport fix for CVE-2024-9287 Update to python-3.11.0.
Update to 2.82.2, fixes CVE-2024-52533.
Update NSS to 3.106.0 Update to Firefox 133.0
Update NSS to 3.106.0 Update to Firefox 133.0
Several issues have been found in netatalk, an Apple Filing Protocol service. Three issues are related to off-by-one errorrs and resultant heap-based buffer ov…
A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. (CVE-2024-27628) Referenc…
Authentication bypass when using Jakarta Authentication API. (CVE-2024-52316) Incorrect JSP tag recycling leads to XSS. (CVE-2024-52318) References:
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attac…
Improper Finite State Machines (FSMs) in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially …
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. CVE-2024-34155 Calling De…
* bsc#1209401 Affected Products: * Basesystem Module 15-SP5 * Desktop Applications Module 15-SP5
* bsc#1233447 Cross-References: * CVE-2024-52304
