Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Brief introduction CVE-2022-0934
An issue has been found in xfpt, a tool to generate XML from plain tex. The issue is about bad handling of input data, which may result in a stack-based buffer…
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '' characters at the end of header names are ignored, i.e., a "Transfer…
ProFTPD a popular FTP server was affected by multiple vulnerabilities. CVE-2023-48795
* bsc#1233447 Cross-References: * CVE-2024-52304
Update the rustls crate to version 0.23.17. Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 (stack overfl…
Update the rustls crate to version 0.23.17. Update the zlib-rs crate to version 0.4.0. The update to zlib-rs v0.4.0 also addresses CVE-2024-11249 (stack overfl…
Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818] libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]
An update that solves one vulnerability and has 10 fixes is now available.
Multiple vulnerabilities have been fixed in the key¢''value database Redis. CVE-2022-35977
* bsc#1219724 Cross-References: * CVE-2024-24806
* bsc#1233706 Cross-References: * CVE-2024-53899
* bsc#1233695 Cross-References: * CVE-2024-11691 * CVE-2024-11692
* bsc#1225889 Cross-References: * CVE-2024-1298
Backport fix for CVE-2024-9287 Update to python-3.11.0.
Update to 2.82.2, fixes CVE-2024-52533.
Several issues have been found in netatalk, an Apple Filing Protocol service. Three issues are related to off-by-one errorrs and resultant heap-based buffer ov…
A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. (CVE-2024-27628) Referenc…
Authentication bypass when using Jakarta Authentication API. (CVE-2024-52316) Incorrect JSP tag recycling leads to XSS. (CVE-2024-52318) References:
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attac…
Improper Finite State Machines (FSMs) in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially …
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. CVE-2024-34155 Calling De…
* bsc#1233447 Cross-References: * CVE-2024-52304
* bsc#1233282 Cross-References: * CVE-2024-52533
