Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A vulnerability has been discovered in Commons-BeanUtils, which could lead to execution of arbitrary code.
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib library are prone to a spoofing vulnerability. A local attacker can take advantage …
An update that fixes one vulnerability is now available.
* bsc#1223252 Cross-References: * CVE-2024-30171
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Multiple vulnerabilities have been discovered in libjpeg-turbo, the worst of which could lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in Xpdf, the worst of which could possibly lead to arbitrary code execution.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
* bsc#1222849 Cross-References: * CVE-2024-32487
* bsc#1223110 Cross-References: * CVE-2024-32462
* bsc#1223110 Cross-References: * CVE-2024-32462
* bsc#1221665 * bsc#1221667 Cross-References: * CVE-2024-2004
* bsc#1215947 * bsc#1216853 Cross-References: * CVE-2023-38470
* bsc#1219079 Cross-References: * CVE-2024-0775
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to remote code execution.
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
A vulnerability has been discovered in borgmatic, which can lead to shell injection.
Multiple vulnerabilities have been discovered in Pillow, the worst of which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution.
A vulnerability has been discovered in Setuptools, which can lead to denial of service.
Intel has released microcode updates, addressing serveral vulnerabilties. CVE-2023-22655
