Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
SSSD did not always correctly apply the GPO policy.
Cross-site scripting (XSS) vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could allow a remote a…
An out-of-bounds read in the 'bson' module allowed deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary app…
A symlink attack with emergency file saving has been fixed in the text editor nano. For Debian 10 buster, this problem has been fixed in version
* bsc#1219823 * bsc#1219826 * bsc#1219851 * bsc#1219852 * bsc#1219854
* bsc#1225551 Cross-References: * CVE-2024-4741
* bsc#1225551 Cross-References: * CVE-2024-4741
* bsc#1222857 * bsc#1222858 * bsc#1226073 Cross-References:
* bsc#1226073 Cross-References: * CVE-2024-5458
* bsc#1226073 Cross-References: * CVE-2024-5458
Integer overflows have been fixed in libvpx, a library for decoding and encoding VP8 and VP9 videos. For Debian 10 buster, this problem has been fixed in versi…
A buffer overflow was discovered in libndp, a library implementing the IPv6 Neighbor Discovery Protocol (NDP), which could result in denial of service or poten…
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists …
A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file i…
Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attac…
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
sendmail allowed SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed…
A vulnerability was discovered in Atril, a simple document viewer designed for the MATE desktop environment. CVE-2023-52076
Unauthorized local user access to the session manager has been fixed in the Plasma Workspace component of the KDE Plasma desktop environment. For Debian 10 bus…
There exists integer overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result…
* bsc#1225983 Cross-References: * CVE-2024-21096
* bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786
* bsc#1226020 Cross-References: * CVE-2024-5171
update to 126.0.6478.55 High CVE-2024-5830: Type Confusion in V8 High CVE-2024-5831: Use after free in Dawn High CVE-2024-5832: Use after free in Dawn High CVE…
