Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Add patch for CVE-2024-8088. Update to python-3.11.9. Backport fix for CVE-2024-6923.
urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.
python-aiohttp would allow unintended access to files over the network.
* bsc#1218297 * bsc#1221479 * bsc#1226414 * bsc#1228091
An update that fixes two vulnerabilities is now available.
Two vulnerabilities have been fixed in the XML library libxml2. CVE-2016-3709
Sinatra is an open source web framework for Ruby programming language. CVE-2022-29970
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1011205 * bsc#1093641 * bsc#1125882 * bsc#1133222 * bsc#1167400
The 6.10.7 stable kernel update contains a number of important fixes across the tree.
Vulnerabilities have been found in GnuTLS, which could lead to information disclosure or Denial of Service. CVE-2024-28834
Brief introduction CVE-2022-40897
Martin Kaesberger discovered a vulnerability which affects multiple OpenStack components (Nova, Glance and Cinder): Malformed QCOW2 disk images may result in t…
Martin Kaesberger discovered a vulnerability which affects multiple OpenStack components (Nova, Glance and Cinder): Malformed QCOW2 disk images may result in t…
Martin Kaesberger discovered a vulnerability which affects multiple OpenStack components (Nova, Glance and Cinder): Malformed QCOW2 disk images may result in t…
znc could be made to execute arbitrary code on a user's system if they were persuaded to join a malicious server.
OpenStack could be made to expose sensitive information.
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
* bsc#1229823 * bsc#1229824 Cross-References: * CVE-2024-45230
* bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051
Google Chrome, one of the world's most widely used web browsers, has recently been scrutinized due to the discovery of multiple Chromium vulnerabilities that t…
