Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
David Benjamin reported a flaw in the X.509 name checks in OpenSSL, a Secure Sockets Layer toolkit, which may cause an application performing certificate name …
* bsc#1229438 Cross-References: * CVE-2024-44070
* bsc#1229129 Cross-References: * CVE-2023-42667 * CVE-2023-49141
It was discovered that there was a series of integer overflow vulnerabilities in LibTomMath, a multiple-precision mathematics library.
A vulnerability was discovered in Nokogiri, an open source XML and HTML library for Ruby. An inefficient regular expression was susceptible to excessive backtr…
Multiple vulnerabilities were discovered in git, a fast, scalable and distributed revision control system. CVE-2019-1387
* bsc#1224044 Cross-References: * CVE-2024-34397
Update to 1.15.10 (CVE-2024-42472)
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to potentially trigger those effect…
An update that fixes one vulnerability is now available.
An update that fixes 10 vulnerabilities is now available.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-4558
Two vulnerabilities have been fixed in the e-book manager Calibre. CVE-2021-44686
* bsc#1229157 Cross-References: * CVE-2024-42472
* bsc#1229068 Cross-References: * CVE-2024-43167
* bsc#1227322 Cross-References: * CVE-2024-4467
* bsc#1228199 Cross-References: * CVE-2024-40724
An update that fixes 10 vulnerabilities is now available.
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in denial-of-service (DoS), information leak, and remot…
error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145] PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]
error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145] PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-4558
An update that fixes four vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
