Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1224259 * bsc#1224274 * bsc#1224276 Cross-References:
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
* bsc#1224282 Cross-References: * CVE-2024-34459
USN-6851-1 caused systemctl enable to fail
USN-6844-1 caused the cupsd daemon to never start
* bsc#1226448 Cross-References: * CVE-2024-4032
* bsc#1224279 * bsc#1224309 Cross-References: * CVE-2024-3044
* bsc#1224279 * bsc#1224309 Cross-References: * CVE-2024-3044
Update to version 29.4, fixing CVE-2024-39331. Update to Emacs 29.4, fixing CVE-2024-39331.
A vulnerability has been discovered in OpenSSH, which can lead to remote code execution with root privileges.
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the set_encoder_id function in /fftools/ffmp…
SSL_select_next_proto buffer overread. (CVE-2024-5535) References: - https://bugs.mageia.org/show_bug.cgi?id=33337 - https://openssl.org/news/secadv/20240627.t…
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of se…
mingw-python-idna: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() References: - https://bugs.mageia.org/show…
OpenSSH could be made to bypass authentication and remotely access systems without proper credentials.
At the heart of every application are secrets. Credentials that allow human-to-machine and machine-to-machine communication. Machine identities outnumber human…
Multiple vulnerabilities have been discovered in GNU Emacs and Org Mode, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in cpio, which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in cryptography, the worst of which could lead to a denial of service.
A vulnerability has been discovered in SSSD, which can lead to arbitrary code execution.
A vulnerability has been discovered in SDL_ttf, which can lead to arbitrary memory writes.
libcdio could be made to crash or run programs as your login if it opened a specially crafted file.
Update to 4.15 for CVE-2024-3652
Update to gstreamer-1.22.9. Backport fix for CVE-2024-0444.
