Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
libppd could be made to run programs if it received specially crafted network traffic.
libcupsfilters could be made to run programs if it received specially crafted network traffic.
cups-filters could be made to run programs if it received specially crafted network traffic.
ConfigObj could be made to crash if it received specially crafted input.
In a bold move towards a future without traditional passwords, Google has introduced secure passkey sign-ins across almost all devices, including Windows, macO…
Privileged XSS in the user rights log has been fixed in the MediaWiki wiki engine. For Debian 11 bullseye, this problem has been fixed in version
The CA certificates in the ca-certificates package were updated.
OpenJPEG could be made to crash if it opened a specially crafted file.
The system could be made to expose sensitive information.
* bsc#1230227 Cross-References: * CVE-2024-6232
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6
* bsc#1229122 Affected Products: * Containers Module 15-SP5 * Containers Module 15-SP6
Update to new upstream version (closes rhbz#2303131)
Update to new upstream version (closes rhbz#2303131)
Update to new upstream version (closes rhbz#2303131)
AppArmor restrictions could be bypassed for rules allowing mount operations
The realtime computer music and graphics system puredata does now terminate when dropping setuid privileges failed. For Debian 11 bullseye, this problem has be…
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` functio…
