Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A vulnerability has been discovered in Ruby on Rails, which can lead to remote code execution via serialization of data.
Multiple vulnerabilities have been discovered in GnuPG, the worst of which could lead to signature spoofing.
Multiple vulnerabilities have been discovered in Bundler, the worst of which could lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in GPAC, the worst of which could lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in libde265, the worst of which could lead to arbitrary code execution.
* bsc#1228256 * bsc#1228257 Cross-References: * CVE-2024-1737
Multiple vulnerabilities have been discovered in ncurses, the worst of which could lead to a denial of service.
Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service.
A vulnerability has been discovered in Nautilus, which can lead to a denial of service.
* bsc#1228549 * bsc#1228552 Cross-References: * CVE-2024-41671
* bsc#1228630 Cross-References: * CVE-2024-41990
A vulnerability has been discovered in Librsvg, which can lead to arbitrary file reads.
New version 9.1.1. Includes fixes for CVE-2024-31950, CVE-2024-31951 and CVE-2024-31949.
* bsc#1225013 * bsc#1225310 Cross-References: * CVE-2024-27398
* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1222685 * bsc#1223059
* bsc#1210619 * bsc#1220537 * bsc#1223363 * bsc#1223683 * bsc#1225013
* bsc#1223683 * bsc#1225310 Cross-References: * CVE-2024-26923
* bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832
* bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363
* bsc#1223683 Cross-References: * CVE-2024-26923
A vulnerability was discovered in odoo, a suite of web based open source business apps. It could result in the execution of arbitrary code.
Multiple cross-site scripting vulnerabilities were discovered in RoundCube webmail. For the stable distribution (bookworm), these problems have been fixed in
Apply fix for CVE-2024-39936
Apply fix for CVE-2024-39936
