Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Martin Kaesberger discovered a vulnerability which affects multiple OpenStack components (Nova, Glance and Cinder): Malformed QCOW2 disk images may result in t…
Martin Kaesberger discovered a vulnerability which affects multiple OpenStack components (Nova, Glance and Cinder): Malformed QCOW2 disk images may result in t…
An integer overflow was discovered in aom, the AV1 Video Codec Library, which could potentially result in the execution of arbitrary code if a malformed media …
Two vulnerabilities have been discovered in the IMAP implementation of the Dovecot mail server: Excessive numbers of address headers or very large headers can …
Several security issues were fixed in Vim.
MySQL 8.0.39 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-38.html https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-39.html
USN-6966-1 caused some minor regressions in Firefox.
curl could be made to crash or expose information if it received specially crafted network traffic.
* bsc#1227138 * bsc#1227227 * bsc#1228291 Cross-References:
* bsc#1227138 Cross-References: * CVE-2024-5535
exfatprogs could be made to crash or run programs if it handled a specially crafted partition.
Several security issues were fixed in Cacti.
* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222986 * bsc#1222987
* bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051
* bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051
* bsc#1212968 * bsc#1215311 * bsc#1227322 Cross-References:
* bsc#1228143 Cross-References: * CVE-2024-1013
* bsc#1225660 * bsc#1227378 * bsc#1227999 * bsc#1228780
* bsc#1228204 Cross-References: * CVE-2024-40724
* bsc#1228204 Cross-References: * CVE-2024-40724
* bsc#1012628 * bsc#1065729 * bsc#1181674 * bsc#1186716 * bsc#1187716
PostgreSQL could execute arbitrary SQL functions as the superuser if it received a specially crafted SQL object.
* bsc#1122683 * bsc#1212476 * bsc#1218170 * bsc#1221340 * bsc#1225911
* bsc#1225911 Cross-References: * CVE-2024-22034
