Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
HTTP Request Smuggling has been fixed in the Python WSGI HTTP Server Gunicorn. For Debian 11 bullseye, this problem has been fixed in version 20.1.0-1+deb11u1.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access (PRA…
* bsc#1218644 * bsc#1220927 * bsc#1232224 * bsc#1232436 * bsc#1232860
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1234068 Cross-References: * CVE-2024-11053
* bsc#1233282 Cross-References: * CVE-2024-52533
* bsc#1232528 Cross-References: * CVE-2024-9681
nodejs:22 bug fix and enhancement update
YARA could be made to crash if it received specially crafted input.
Vanilla upstream kernel version 6.6.65 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mage…
Upstream kernel version 6.6.65 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
* bsc#1082555 * bsc#1194869 * bsc#1218644 * bsc#1220382 * bsc#1221309
libvpx could be made to crash or run programs if it received specially crafted input.
PHPUnit could be made to crash or run programs if it received specially crafted network traffic.
Spring Framework could be made to run programs or expose sensitive information if it received specially crafted network traffic.
EditorConfig could be made to crash or run programs as your login if it received specially crafted input.
A buffer overflow was discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execu…
* bsc#1233285 * bsc#1233287 * bsc#1233292 Cross-References:
* bsc#1234317 Cross-References: * CVE-2024-46901
