Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
crosswords 0.3.13
crosswords 0.3.13
This is the May 2024 security update for .NET 7. This is the last upstream release of .NET 7. After this update, .NET 7 reaches its End of Life (EOL). Full rel…
Update to 2.12.7 (RHBZ#2280535, CVE-2024-34459)
This update, to the latest upstream release, addresses an excessive memory use issue (CVE-2024-4140), which can cause denial of service when parsing multi-part…
crosswords 0.3.13
An update that fixes one vulnerability is now available.
Multiple cross-site scripting vulnerabilities were found in Redmine, a project management web application. For the stable distribution (bookworm), these proble…
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service. For the oldstable d…
* bsc#1219559 * bsc#1220664 * bsc#1221563 * bsc#1221854 * bsc#1222075
* bsc#1171479 Cross-References: * CVE-2020-12762
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
A security issue was discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. Google is awar…
* bsc#1219386 Cross-References: * CVE-2023-5992
7.6.7.2
update to 125.0.6422.76 * High CVE-2024-5157: Use after free in Scheduling * High CVE-2024-5158: Type Confusion in V8 * High CVE-2024-5159: Heap buffer overflo…
Update to 115.11.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-23/ https://www.thunderbird.net/en-US/thunderbird/115.11.0/releasenotes/
* bsc#1224277 Cross-References: * CVE-2023-45733 * CVE-2023-45745
GNOME Remote Desktop would allow unintended access to sensitive information or remote desktop connections.
* bsc#1222535 * bsc#1224056 Cross-References: * CVE-2024-2609
cJSON could be made to crash if it received specially crafted input.
Several security issues were fixed in klibc.
* bsc#1223603 Cross-References: * CVE-2024-4340
* bsc#1224038 * bsc#1224051 Cross-References: * CVE-2024-4317
