Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities have been fixed in ruby-loofah, a Ruby library for manipulating and transforming HTML/XML documents and fragments. CVE-2022-23514
Multiple vulnerabilities have been discovered in nginx, the worst of which could result in denial of service.
Multiple vulnerabilities have been found in Apache HTTPD, the worst of which could result in denial of service.
Multiple vulnerabilities have been found in yt-dlp, the worst of which could result in arbitrary code execution.
Multiple vulnerabilities have been discovered in Docker, the worst of which could result in denial of service.
Multiple vulnerabilities have been discovered in HashiCorp Consul, the worst of which could result in denial of service.
A vulnerability has been found in tmux which could result in application crash.
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fix for remote vulnerabilities against OpenPrinting cups-filters
Fix for remote vulnerabilities against OpenPrinting cups-filters
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python 3.4+ asyncio framework.…
An update that fixes 6 vulnerabilities is now available.
Potential UTF8 size overflow. (CVE-2024-21131) Excessive symbol length can lead to infinite loop. (CVE-2024-21138) Range Check Elimination (RCE) pre-loop limit…
An update that fixes four vulnerabilities is now available.
* bsc#1225099 * bsc#1228349 Cross-References: * CVE-2023-52846
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Upstream kernel version 6.6.52 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration whi…
Update to 129.0.6668.70 * High CVE-2024-9120: Use after free in Dawn * High CVE-2024-9121: Inappropriate implementation in V8 * High CVE-2024-9122: Type Confus…
Multiple vulnerabilities were fixed in trafficserver, a caching proxy server. CVE-2023-38522
* bsc#1230227 Cross-References: * CVE-2024-6232
