Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
fix freeing stack buffer in utf8asn1str (CVE-2024-6197)
Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM V…
* bsc#1219660 Cross-References: * CVE-2024-24577
* bsc#1228120 Cross-References: * CVE-2024-6655
* bsc#1228120 Cross-References: * CVE-2024-6655
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes 29 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
* bsc#1222693 Cross-References: * CVE-2023-29483
* bsc#1198880 * bsc#1214678 Cross-References: * CVE-2022-28506
Backport upstream patch for CVE-2023-49606.
Update to v1.29.7 for FC40. Resolves CVE-2024-5321: Incorrect permissions on Windows containers logs. Additional bug and regression fixes from upstream.
Update to version 1.11.2 to fix CVE-2023-49606.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. To mitigate CVE-2024-1737 two new configur…
An update that fixes one vulnerability is now available.
OCS Inventory was vulnerable to an authentication bypass if the selected authentication method was via CAS.
phpCAS was vulnerable to an authentication bypass.
update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …
update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …
A vulnerability has been discovered in Freenet, which can lead to deanonymization due to path folding.
Multiple vulnerabilities have been discovered in ExifTool, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in Dmidecode, which can lead to privilege escalation.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on ev…
