Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378.
* bsc#1231700 Cross-References: * CVE-2018-1000807
* bsc#1228097 Cross-References: * CVE-2024-40725
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
* bsc#1230683 Cross-References: * CVE-2024-45405
libheif could be made to crash or read sensitive data if it opened a specially crafted file
New version 4.2.8 Fix for CVE-2024-9781
It was discovered that there was a potential out-of-bounds read vulnerability in libheif, a decoder and encoder for the HEIF and AVIF image formats.
Multiple vulnerabilities have been fixed in DMitry, a tool to gather as much information as possible about a host. CVE-2017-7938
* bsc#1224132 * bsc#1229007 * bsc#1229929 * bsc#1230140 * bsc#1230834
* bsc#1230778 Cross-References: * CVE-2024-7254
* bsc#1230778 Cross-References: * CVE-2024-7254
* bsc#1230778 Cross-References: * CVE-2024-7254
Cisco Talos' recent discovery of a Rust variant of the Akira ransomware targeting ESXi servers demonstrates how quickly modern cyber threats evolve. Akira rans…
C©dric Krier discovered that python-sql, a library to write SQL queries in a pythonic way, performed insufficient sanitising which could result in SQL injectio…
Unbound could be made to stop responding if it received specially crafted DNS traffic.
A heap-based pointer disclosure problem was found in Ghostscript, an interpreter for the PostScript language and for PDF. This could lead to information disclo…
Firefox could be made to crash or run programs as your login
Multiple vulnerabilities were discovered in libsepol, a set of userspace utilities and libraries for manipulating SELinux policies. CVE-2021-36084, CVE-2021-36…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vul…
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
