Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A vulnerability has been discovered in Pillow, which may lead to arbitrary code execution.
CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (fedora#2325238) 2325241 - CVE-2024-46952 CVE-2024-46953 CVE-20…
DoS due to resource exhaustion has been fixed in waitress, a Python Web Server Gateway Interface. For Debian 11 bullseye, this problem has been fixed in version
Update to upstream 2.1-47. 20241112 Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603; Updat…
bartlett/php-compatinfo-db 6.12.0 - 2024-10-29 Added db:show command is now able to display deprecations on all components PHP 8.2.25 support PHP 8.3.13 support
Update to version 3.0.1, which resolves CVE-2024-49768 and CVE-2024-49769.
CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (fedora#2325237) 2325240 - CVE-2024-46952 CVE-2024-46953 CVE-20…
bartlett/php-compatinfo-db 6.12.0 - 2024-10-29 Added db:show command is now able to display deprecations on all components PHP 8.2.25 support PHP 8.3.13 support
Update to WebKitGTK 2.46.3: Flatten layers to a plane when preseve-3d style is set. Fix DuckDuckGo links by adding a user agent quirk. Fix several crashes and …
Icinga 2 is a general-purpose monitoring application to fit the needs of any size of network. CVE-2021-32739
Moritz Rauch discovered that the Symfony PHP framework implemented persisted remember-me cookies incorrectly, which could result in authentication bypass.
Data privacy might sound like a technical issue best left to the IT department, but let me put it into perspective: One day, all your personal messages, sensit…
* bsc#1233165 Cross-References: * CVE-2023-45802
* bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853
* bsc#1232590 Cross-References: * CVE-2024-50602
* bsc#1233282 Cross-References: * CVE-2024-52533
GD Graphics Library could be made to crash if it opened a specially crafted file.
Update to upstream 2.1-46. 20241029 Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up to 0x12b.
A vulnerability has been discovered in unbound, a validating, recursive, caching DNS resolver. Malicious upstreams responses with very large RRsets can cause U…
The system could be compromised under certain conditions.
curl a command line tool for transferring data with URL syntax was affected by CVE-2024-8096. When the TLS backend is GnuTLS, curl may incorrectly handle OCSP …
* bsc#1231208 * bsc#1231230 * bsc#1231499 * bsc#1231698 * bsc#1232522
Update to 2.46.3
Update to b3561
