Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1226916 Cross-References: * CVE-2024-6239
* bsc#1226916 Cross-References: * CVE-2024-6239
* bsc#1220145 * bsc#1223363 * bsc#1223681 * bsc#1223683
Nova would allow unintended access to files over the network.
OpenStack Glance would allow unintended access to files over the network.
Cinder would allow unintended access to files over the network.
* bsc#1222045 Cross-References: * CVE-2024-29025
Update to 2024.07.02
An update that fixes 7 vulnerabilities is now available.
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which could arbitrary code execution.
Multiple vulnerabilities have been discovered in the X.Org X11 library, the worst of which could lead to a denial of service.
A vulnerability has been discovered in KDE Plasma Workspaces, which can lead to privilege escalation.
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Two vulnerabilities were discovered in the GSS message token handling in krb5, the MIT implementation of Kerberos. An attacker can take advantage of these flaw…
A vulnerability has been discovered in Stellarium, which can lead to arbitrary file writes.
In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. (CVE-2024-39844) References: - https://bugs.mageia.org/show_bug.cgi?id=33364
CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code References: - https://bugs.mageia.org/show_bug.cgi?id=33354
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370
* bsc#1212475 * bsc#1227314 Cross-References: * CVE-2024-24791
* bsc#1218424 * bsc#1227314 Cross-References: * CVE-2024-24791
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in Coreutils, which can lead to a heap buffer overflow and possibly aribitrary code execution.
