Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1235029 Cross-References: * CVE-2024-56826
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
xfpt could be made to crash or run programs if it opened a specially crafted file.
Thunderbird could be made to bypass security restrictions.
Several security issues were fixed in Firefox.
Updated to latest upstream (134.0)
This update fixes issues with loading TGA and XCF files.
fix CVE-2024-46657 (rhbz#2331626)
Update to openjpeg-2.5.3 Fix 2 heap-buffer-overflow
update to 8.0.2 fixes CVE-2024-46981 - Lua script commands may lead to remote code execution fixes CVE-2024-51741 - Denial-of-service due to malformed ACL sele…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or privilege esc…
* bsc#1082555 * bsc#1176081 * bsc#1206344 * bsc#1213034 * bsc#1218562
* bsc#1082555 * bsc#1157160 * bsc#1218644 * bsc#1221977 * bsc#1222364
Tinyproxy could be made to crash or run programs if it received specially crafted input.
* bsc#1233435 * bsc#1234663 * bsc#1234664 Cross-References:
Several security issues were fixed in HTMLDOC.
Moderate: python-requests security update
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…
Updated to latest upstream (134.0)
fix CVE-2024-46657 (rhbz#2331627)
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…
FFmpeg could be made to crash if it received specially crafted input.
* bsc#1189131 Cross-References: * CVE-2020-36314
An update that fixes one vulnerability is now available.
