Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that there was a remotely exploitable vulnerability in php-laravel-framework, a popular web application framework written in PHP.
Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505
Update to v2.14
* bsc#1223098 Cross-References: * CVE-2024-27306
* bsc#1232432 * bsc#1233479 * bsc#1233557 Cross-References:
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
Update to 4.3.3 (rhbz#2331357)
Update to 4.3.3 (rhbz#2331357)
* bsc#1234371 Cross-References: * CVE-2021-3156
* bsc#1233973 Cross-References: * CVE-2024-53008
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1218644 * bsc#1220927 * bsc#1232224 * bsc#1232436 * bsc#1232860
* bsc#1234068 Cross-References: * CVE-2024-11053
* bsc#1233282 Cross-References: * CVE-2024-52533
* bsc#1232528 Cross-References: * CVE-2024-9681
Important: ruby:3.1 security update
Important: postgresql:15 security update
nodejs:22 bug fix and enhancement update
Moderate: php:8.2 security update
Important: postgresql:16 security update
Moderate: php:8.1 security update
YARA could be made to crash if it received specially crafted input.
* bsc#1082555 * bsc#1194869 * bsc#1218644 * bsc#1220382 * bsc#1221309
libvpx could be made to crash or run programs if it received specially crafted input.
