Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1219078 * bsc#1219296 Cross-References: * CVE-2023-52340
* bsc#1218613 * bsc#1219078 * bsc#1219296 Cross-References:
* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432
* bsc#1219296 Cross-References: * CVE-2023-52340
* bsc#1218613 * bsc#1219078 * bsc#1219296 Cross-References:
* bsc#1219078 * bsc#1219296 Cross-References: * CVE-2023-52340
* bsc#1218613 * bsc#1219078 * bsc#1219296 * bsc#1219432
* bsc#1219078 * bsc#1219296 * bsc#1219432 Cross-References:
* bsc#1028271 Cross-References: * CVE-2016-10243
* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672
* bsc#1221385 * bsc#1221386 Cross-References: * CVE-2024-23672
A buffer overflow in _imagingcms.c was fixed in Pillow, an image processing library for Python. For Debian 10 buster, this problem has been fixed in version
Canonical has launched Ubuntu Pro for Devices , a comprehensive offering emphasizing security and compliance for IoT device deployments. This initiative aims t…
Apache has been updated to version 2.4.59 to fix CVE-2024-27316, CVE-2024-24795 and CVE-2023-38709. CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by memory ex…
Improper input validation enabling arbitrary Gstreamer pipeline injection. (CVE-2023-6185) Link targets allow arbitrary script execution. (CVE-2023-6186) Refer…
x86: shadow stack vs exceptions from emulation stubs. (CVE-2023-46841) x86: Register File Data Sampling. (CVE-2023-28746) GhostRace: Speculative Race Condition…
Expat, an XML parsing C library has been found to have an vulnerability that allows an attacker to perform a denial of service (resource consumption, when many…
CVE-2024-28085 Skyler Ferrante discovered that the wall(1) utility found in util-linux, a collection of system utilities for Linux, does not
Two issues have been found in libcaca, a colour ASCII art library. Both are related to heap buffer overflow, which might lead to memory corruption.
Nodejs 20.12.1 release fixes 2 CVE: * CVE-2024-27983 - Assertion failed in node::http2::Http2Session::~Http2Session() leads to HTTP/2 server crash- (High) * CV…
The chromium-browser-stable package has been updated to the 123.0.6312.105 release. Since the last update 120.0.6099.224, 66 vulnerabilities are fixed, includi…
LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket l…
A directory traversal vulnerability was discovered in py7zr, a library and command-line utility to process 7zip archives. For the oldstable distribution (bulls…
An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a craf…
