Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854, CVE-2024-4855.
Release 1.6.7 Makefile: Use phpDocumentor v3.4 for the Framework docs (#9313) Fix bug where HTML entities in URLs were not decoded on HTML to plain text conver…
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854, CVE-2024-4855.
Release 1.6.7 Makefile: Use phpDocumentor v3.4 for the Framework docs (#9313) Fix bug where HTML entities in URLs were not decoded on HTML to plain text conver…
FFmpeg could be made to crash or run programs as your login if it opened a specially crafted file.
* bsc#1084332 * bsc#1141539 * bsc#1184509 * bsc#1186060 * bsc#1190317
PostgreSQL could be made to expose sensitive information.
PyMySQL could be vulnerable to SQL injection attacks.
browserify-sign could allow unintended access if it opened a specially crafted file.
* bsc#1189495 * bsc#1191175 * bsc#1218686 Cross-References:
Update to 115.11.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-23/ https://www.thunderbird.net/en-US/thunderbird/115.11.0/releasenotes/ https://…
Update to requests-2.32.0, fixes CVE-2024-35195.
update to 125.0.6422.112 High CVE-2024-5274: Type Confusion in V8
Update to requests-2.32.0, fixes CVE-2024-35195.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
* bsc#1219276 Cross-References: * CVE-2022-48622
* bsc#1221854 Cross-References: * CVE-2024-0450
* bsc#1221854 Cross-References: * CVE-2024-0450
* bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986 * bsc#1222987
* bsc#1171479 Cross-References: * CVE-2020-12762
* bsc#1214691 * bsc#1219559 * bsc#1219666 * bsc#1220664 * bsc#1221563
