Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1230979 * bsc#1231413 Cross-References: * CVE-2024-8900
* bsc#1225312 * bsc#1225739 * bsc#1226325 * bsc#1228573 * bsc#1228786
* bsc#1220145 * bsc#1220832 * bsc#1221302 * bsc#1222685 * bsc#1223059
* bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225099 * bsc#1225312
* bsc#1228349 * bsc#1228786 Cross-References: * CVE-2024-40909
* bsc#1228349 * bsc#1228573 * bsc#1228786 Cross-References:
Security fix for CVE-2023-6237 (openssl: Excessive time spent checking invalid RSA public keys)
Fixes for memory vulnerabilities.
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
Update the hyper-rustls crate to version 0.27.3. Update the reqwest crate to version 0.12.8. Update the rustls-native-certs crate to version 0.8.0 and add a co…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-40866
It was discovered that there was a configuration issue in libapache-mod-jk, an Apache web server module used to forward requests from Apache to Tomcat using th…
nginx could be made to crash if it received specially crafted network traffic.
ConfigObj could be made to crash if it received specially crafted input.
* bsc#1214298 * bsc#1226606 * bsc#1227764 * bsc#1228487 * bsc#1228654
PostgreSQL could execute arbitrary SQL functions as the superuser if it received a specially crafted SQL object.
HAProxy could be made to crash or run programs if it received specially crafted network traffic.
An update that fixes two vulnerabilities is now available.
Python could me made to bypass some restrictions if it received specially crafted input.
Thunderbird could be made to crash or run programs if it opened a specially crafted file.
Firefox could be made to run programs as your login if it opened a malicious website.
Fixes for memory vulnerabilities.
