Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Firefox.
New upstream version (131.0)
Fix CVE-2024-9014.
Integer overflos have been fixed in libgsf, the GNOME Project G Structured File Library. CVE-2024-36474
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Integer overflows flaws were discovered in the Compound Document Binary File format parser of libgsf, the GNOME Project G Structured File Library, which could …
Dom Walden discovered that the AbuseFilter extension in MediaWiki, a website engine for collaborative work, performed incomplete authorisation checks.
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Update to new upstream version (closes rhbz#2237124)
Fix CVE-2024-39844 https://wiki.znc.in/ChangeLog/1.9.0
Fabian Vogt reported that the PAM module in oath-toolkit, a collection of components to build one-time password authentication systems, does not safely perform…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
* bsc#1230939 Cross-References: * CVE-2024-47176
* bsc#1230866 Cross-References: * CVE-2017-15865
* bsc#1230698 Cross-References: * CVE-2024-41996
* bsc#1222040 * bsc#1222041 * bsc#1222042 Cross-References:
PHP version 8.2.24 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Fix CVE-2024-9014.
New upstream builds (131.0)
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially among other effects allowing XSS, Code Execution, i…
* bsc#1217722 * bsc#1230071 * bsc#1230072 * bsc#1230073 * bsc#1230074
* bsc#1230979 Affected Products: * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6
Several security issues were fixed in ImageMagick.
A system authentication measure could be bypassed.
