Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to v1.29.7 for FC40. Resolves CVE-2024-5321: Incorrect permissions on Windows containers logs. Additional bug and regression fixes from upstream.
Update to version 1.11.2 to fix CVE-2023-49606.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. To mitigate CVE-2024-1737 two new configur…
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
An update that fixes one vulnerability is now available.
Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3
OCS Inventory was vulnerable to an authentication bypass if the selected authentication method was via CAS.
phpCAS was vulnerable to an authentication bypass.
poppler could be made to denial of service if it opened a specially crafted PDF.
update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …
update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …
provd could be made to run programs as an administrator.
A vulnerability has been discovered in Freenet, which can lead to deanonymization due to path folding.
Multiple vulnerabilities have been discovered in ExifTool, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in Dmidecode, which can lead to privilege escalation.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on ev…
python-zipp could be made to crash if certain zip files are used.
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
HAProxy could be made to expose sensitive information.
Squid could be made to crash if it processed specially crafted characters.
Nova would allow unintended access to files over the network.
* bsc#916845 Cross-References: * CVE-2013-4235
