Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1223414 Cross-References: * CVE-2024-3596
* bsc#1220145 * bsc#1223363 * bsc#1223683 * bsc#1225211
* bsc#1210619 * bsc#1218487 * bsc#1220145 * bsc#1220537 * bsc#1222685
* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1223059 * bsc#1223363
* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225211
* bsc#1220145 * bsc#1223363 * bsc#1223683 * bsc#1225211
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading pe…
This update fixes CVE-2024-24791
* bsc#1220145 * bsc#1223363 * bsc#1223683 Cross-References:
* bsc#1227186 * bsc#1227187 Cross-References: * CVE-2024-37370
* bsc#1224788 Cross-References: * CVE-2024-35195
* bsc#1226916 Cross-References: * CVE-2024-6239
* bsc#1226916 Cross-References: * CVE-2024-6239
* bsc#1226916 Cross-References: * CVE-2024-6239
* bsc#1220145 * bsc#1223363 * bsc#1223681 * bsc#1223683
* bsc#1222045 Cross-References: * CVE-2024-29025
An update that fixes 7 vulnerabilities is now available.
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which could arbitrary code execution.
Multiple vulnerabilities have been discovered in the X.Org X11 library, the worst of which could lead to a denial of service.
A vulnerability has been discovered in KDE Plasma Workspaces, which can lead to privilege escalation.
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Two vulnerabilities were discovered in the GSS message token handling in krb5, the MIT implementation of Kerberos. An attacker can take advantage of these flaw…
A vulnerability has been discovered in Stellarium, which can lead to arbitrary file writes.
In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. (CVE-2024-39844) References: - https://bugs.mageia.org/show_bug.cgi?id=33364
