Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fixes CVE-2024-9341, CVE-2024-9407, CVE-2024-9675 and CVE-2024-9676.
Multiple vulnerabilities have been fixed in libarchive, a multi-format archive and compression library. CVE-2021-36976
An out-of-bounds write vulnerability when handling crafted streams was discovered in mpg123, a real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 …
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to privilege escalation, information disclosure, incorrect validation or…
It was discovered that ruby-saml, a library for implementing the client side of a SAML authorization does not properly verify the signature of the SAML Respons…
Linus Torvalds, the revered leader of the open-source movement, has shown that even minute changes can make a significant difference. A relatively small recent…
* bsc#1232579 Cross-References: * CVE-2024-50602
* bsc#1232579 Cross-References: * CVE-2024-50602
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
* bsc#1216423 Cross-References: * CVE-2023-45802
* bsc#1216423 Cross-References: * CVE-2023-45802
* bsc#1231702 * bsc#1231711 * bsc#1231716 * bsc#1231719
* bsc#1228252 * bsc#1232590 Cross-References: * CVE-2024-50602
Rebase to version 2.6.4
Fix for CVE-2024-25768 - Closes rhbz#2266175 rhbz#2266174 Convert to %autorelease and %autochangelog Simplify spec Remove checks on if systemd is present Remov…
Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in denial of service or potentially the execution of arbitar…
An update that solves four vulnerabilities and has one errata is now available.
A heap-based out-of-bounds write vulnerability was discovered in libarchive, a multi-format archive and compression library, which may result in the execution …
Invalid low-level GF(2^m) parameters can lead to an OOB memory access. (CVE-2024-9143) References: - https://bugs.mageia.org/show_bug.cgi?id=33736
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node…
In Libheif, insufficient checks in ImageOverlay::parse() while decoding a HEIF file containing an overlay image with forged offsets can lead to an out-of-bound…
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werk…
Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…
