Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 5 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
* bsc#1172879 * bsc#1228120 Cross-References: * CVE-2024-6655
* bsc#1234809 Cross-References: * CVE-2024-56326
Ceph could allow unintended access to network services.
Salt could be made to crash or run programs if it received specially crafted network traffic.
* bsc#1234809 Cross-References: * CVE-2024-56326
* bsc#1234718 Cross-References: * CVE-2024-11614
* bsc#1202473 * bsc#1205224 * bsc#1211507 Cross-References:
tinyproxy could be made to expose sensitive information.
Update to v2.14
Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if ava…
* bsc#1217826 * bsc#1222815 * bsc#1230551 * bsc#1230552 * bsc#1231345
* bsc#1205224 * bsc#1211507 Cross-References: * CVE-2022-39377
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if ava…
* bsc#1226162 * bsc#1226468 * bsc#1234292 Cross-References:
* bsc#1234808 * bsc#1234809 Cross-References: * CVE-2024-56201
Update to 2.12.9 Fixes CVE-2024-40896
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2023-28370
It was discovered that there was a potential Denial of Service (DoS) vulnerability, in Django, a popular Python-based web development framework.
* bsc#1234795 Cross-References: * CVE-2024-56378
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
* bsc#1234795 Cross-References: * CVE-2024-56378
