Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1226073 Cross-References: * CVE-2024-5458
* bsc#1212233 Cross-References: * CVE-2023-3164
* bsc#1226185 Cross-References: * CVE-2024-5206
H2 could be made to allow arbitrary code execution.
VTE could be made to consume resources and crash if it displayed specially crafted data.
Open-Source Edition could be made to crash if it received specially crafted input.
matio could be made to crash if it opened a specially crafted file.
PHP version 8.2.20 (06 Jun 2024) CGI: Fixed buffer limit on Windows, replacing read call usage by _read. (David Carlier) Fixed bug GHSA-3qgc-jrrr-25jv (Bypass …
This update includes a rebase from 9.0.83 to 9.0.89. #2269611 CVE-2024-24549 tomcat: CVE-2024-24549: Apache Tomcat: HTTP/2 header handling DoS #2269612 CVE-202…
* bsc#1065729 * bsc#1151927 * bsc#1152472 * bsc#1154353 * bsc#1156395
* bsc#1065729 * bsc#1174585 * bsc#1190569 * bsc#1191949 * bsc#1192107
* bsc#1226027 Cross-References: * CVE-2024-5688 * CVE-2024-5690
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, the bypass of s…
libndp could be made to crash or run programs if it received specially crafted network traffic.
* bsc#1223356 Cross-References: * CVE-2024-0090 * CVE-2024-0091
* bsc#1219273 Cross-References: * CVE-2023-27534
* bsc#1065729 * bsc#1141539 * bsc#1174585 * bsc#1181674 * bsc#1187716
* bsc#1225365 Cross-References: * CVE-2024-35235
* bsc#1223179 * bsc#1225365 Cross-References: * CVE-2024-35235
Bulk update of bundled Go dependencies.
Fix for CVE-2024-26256
Update to latest upstream version.
PHP version 8.3.8 (06 Jun 2024) CGI: Fixed buffer limit on Windows, replacing read call usage by _read. (David Carlier) Fixed bug GHSA-3qgc-jrrr-25jv (Bypass o…
An update that fixes one vulnerability is now available.
