Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves three vulnerabilities and has one errata is now available.
LibTIFF could be made to crash if it received specially crafted input.
PHP could be made to accept invalid URLs.
* bsc#1207666 * bsc#1211708 * bsc#1211709 * bsc#1213318 * bsc#1215959
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1229013 Cross-References: * CVE-2024-7348
It was discovered that there was a potential denial of service (DoS) attack in python-jwcrypto, an implementation of JSON Web Encryption and similar object sig…
update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8
Update to 128.2.0 https://www.thunderbird.net/en-US/thunderbird/128.2.0esr/releasenotes/
update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8
Integer overflows have been fixed in aom, an AV1 Codec Library. For Debian 11 bullseye, this problem has been fixed in version 1.0.0.errata1-3+deb11u2.
Multiple vulnerabilities have been fixed in the Amanda backup system. CVE-2022-37703
Multiple vulnerabilities have been fixed in bluez library, tools and daemons for using Bluetooth devices. CVE-2021-3658
* bsc#1221243 * bsc#1221677 * bsc#1224117 Cross-References:
* bsc#1229821 Cross-References: * CVE-2024-8381 * CVE-2024-8382
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1229869 Cross-References: * CVE-2023-45288
* bsc#1217353 Cross-References: * CVE-2023-5752
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
Fix buffer overrun when giving an offset to Session:receive
An update that fixes two vulnerabilities is now available.
