The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werk…
Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…
Permission leak via embed or object elements. (CVE-2024-10458) Use-after-free in layout with accessibility. (CVE-2024-10459) Confusing display of origin for ex…
fix CVE-2024-48241
fix CVE-2024-48241
fix CVE-2024-48241
fix CVE-2024-48241
fix CVE-2024-48241
fix CVE-2024-48241
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…
When using urllib3's proxy support with ProxyManager, the Proxy-Authorization header is only sent to the configured proxy, as expected. However, when sending H…
An update that fixes one vulnerability is now available.
It was discovered that the daemon of the GNU Guix functional package manager was susceptible to privilege escalation. For additional information please refer t…
* bsc#1231702 * bsc#1231711 * bsc#1231716 * bsc#1231719
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1231714 Cross-References: * CVE-2024-41311
An update that fixes two vulnerabilities is now available.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition…