Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that there were a number of command-line injection vulnerabilities in Composer, a popular dependency manager for PHP. The 'install', 'status'…
It was discovered that there was a buffer overflow vulnerability in libndp, a library for implementing IPv6's "Neighbor Discovery Protocol" (NDP) and is used b…
Git could be made to run programs as your login if it clones a crafted repository.
Huy Nguy¡»'n Ph¡º¡m Nh¡ºt, and Valentin T. and Lutz Wolf of CrowdStrike, discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, …
* bsc#1226027 Cross-References: * CVE-2024-5688 * CVE-2024-5690
* bsc#1226007 Cross-References: * CVE-2023-52890
* bsc#1223252 Cross-References: * CVE-2024-30171
* bsc#1223852 Cross-References: * CVE-2023-52722
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1226020 Cross-References: * CVE-2024-5171
* bsc#1225551 Cross-References: * CVE-2024-4741
* bsc#1222849 Cross-References: * CVE-2024-32487
Security fix for CVE-2024-33871
PHP, a widely-used open source general purpose scripting language, is affected by a security problem when parsing certain types of URLs. Due to a code logic er…
* bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786
* bsc#1225551 Cross-References: * CVE-2024-4741
MariaDB 10.5.25 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-5-25-release-notes/
MariaDB 10.5.25 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-5-25-release-notes/
Several security issues were fixed in Ghostscript.
Several security issues were fixed in Ruby.
Several security issues were fixed in Rack.
SSSD did not always correctly apply the GPO policy.
Cross-site scripting (XSS) vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could allow a remote a…
An out-of-bounds read in the 'bson' module allowed deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary app…
