Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1223363 * bsc#1223683 Cross-References: * CVE-2024-26828
Today, all organizations are exposed to the threat of cyber breaches, irrespective of their scale. Historically, larger companies were frequent targets due to …
* bsc#1220145 * bsc#1223363 * bsc#1223683 * bsc#1225211
Updated to latest upstream (128.0)
Fix CVE-2024-39936.
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or hi…
* bsc#1156395 * bsc#1190336 * bsc#1191958 * bsc#1193883 * bsc#1194826
Phillip Szelat discovered that Exim, a mail transport agent, does not properly parse a multiline RFC 2231 header filename, allowing a remote attacker to bypass…
A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, …
Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '' in FPLoginExt in login in etc/u…
* bsc#1156395 * bsc#1171988 * bsc#1176447 * bsc#1176774 * bsc#1181147
* bsc#1195775 * bsc#1216124 * bsc#1218148 * bsc#1219224 * bsc#1220492
* bsc#1224123 Cross-References: * CVE-2024-3727
* bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059
* bsc#1119113 * bsc#1191958 * bsc#1195065 * bsc#1195254 * bsc#1195775
Multiple vulnerabilities have been discovered in Buildah, the worst of which could lead to privilege escalation.
A vulnerability has been discovered in HarfBuzz, which can lead to a denial of service.
Exim could be made to allow response injection if it received a specially crafted response.
Updated to latest upstream (128.0)
* bsc#1217592 Cross-References: * CVE-2023-49083
* bsc#1215823 * bsc#1215831 Cross-References: * CVE-2021-26345
* bsc#1217653 Cross-References: * CVE-2023-45539
* bsc#1217969 Cross-References: * CVE-2023-39804
* bsc#1198146 Cross-References: * CVE-2022-1210
