Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1229013 Cross-References: * CVE-2024-7348
* bsc#1230161 * bsc#1230162 Cross-References: * CVE-2024-20505
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. (CVE-2024-45490) An issue was discovered in…
* bsc#1230020 * bsc#1230034 Cross-References: * CVE-2023-7256
* bsc#1230093 Cross-References: * CVE-2024-8096
An update that fixes one vulnerability is now available.
* bsc#1228535 * bsc#1230093 Cross-References: * CVE-2024-7264
* bsc#1230093 Cross-References: * CVE-2024-8096
* bsc#1230093 Cross-References: * CVE-2024-8096
New version 4.0.17, fix for CVE-2024-8250
New version 4.2.7, fix for CVE-2024-8250
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially r…
Possible denial of service in X.509 name checks. (CVE-2024-6119) References: - https://bugs.mageia.org/show_bug.cgi?id=33520 - https://openssl-library.org/news…
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/z…
Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file w…
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certai…
It was discovered that there were a number of issues in Redis, a popular key-value database: * CVE-2023-45145: On startup, Redis began listening on a Unix
* bsc#1229823 Cross-References: * CVE-2024-45230
* bsc#1229013 Cross-References: * CVE-2024-7348
NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. (CVE-2023-52890) References: - https://bugs.mageia.org/show_bug.cgi?i…
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmd…
Cacti, a web interface for graphing of monitoring systems, was vulnerable. CVE-2022-41444
* bsc#1229013 Cross-References: * CVE-2024-7348
An update that solves three vulnerabilities and has one errata is now available.
