Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Several security issues were fixed in Python.
tgt could be made to generate identical sequence of challenges.
* bsc#1219494 * bsc#1226892 * bsc#1226897 * bsc#1226898 * bsc#1226899
* bsc#1062303 * bsc#1194400 * bsc#1211630 * bsc#1211631 * bsc#1214406
* bsc#1216109 * bsc#1216123 * bsc#1221400 * bsc#1226136 * bsc#1229858
* bsc#1062303 * bsc#1194400 * bsc#1211630 * bsc#1211631 * bsc#1214406
* bsc#1216109 * bsc#1216123 * bsc#1221400 * bsc#1226136 * bsc#1229858
LibreOffice could accept fraudulent digital signatures.
* bsc#1230400 Cross-References: * CVE-2024-23984 * CVE-2024-24968
* bsc#1229907 Cross-References: * CVE-2024-8250
Fix for CVE-2024-44070
Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) m…
Multiple vulnerabilities were found in expat, an XML parsing C library, which could lead to Denial of Service, memory corruption or arbitrary code execution.
Update to upstream 2.1-45. 20240910 Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision 0x35 up to 0x36; Update of 06-97-05/0x07 (ADL-S 6+0 K0) m…
Two issues have been found in tinyproxy, a lightweight, non-caching, optionally anonymizing HTTP proxy. They are related to an use after free in header parsing…
Several security issues were fixed in Apache HTTP Server.
* bsc#1229026 Cross-References: * CVE-2024-7055
* bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
* bsc#1227999 * bsc#1228780 * bsc#1229596 * bsc#1229704 * bsc#1230227
* bsc#1228002 Cross-References: * CVE-2022-48791
* bsc#1230353 Cross-References: * CVE-2023-29483
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
* bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596
