Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities have been discovered in ytnef, the worst of which could potentially lead to remote code execution.
A vulnerability has been discovered in U-Boot tools which can lead to execution of arbitary code.
Multiple vulnerabilities have been discovered in rsync, the worst of which can lead to denial of service or information disclosure.
A vulnerability has been discovered in Commons-BeanUtils, which could lead to execution of arbitrary code.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Alicia Boya Garcia reported that the GDBus signal subscriptions in the GLib library are prone to a spoofing vulnerability. A local attacker can take advantage …
An update that fixes one vulnerability is now available.
libde265 could be made to crash if it opened a specially crafted file.
* bsc#1223252 Cross-References: * CVE-2024-30171
* bsc#1221984 * bsc#1222302 * bsc#1222453 Cross-References:
* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453
* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:
Multiple vulnerabilities have been discovered in libjpeg-turbo, the worst of which could lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in Xpdf, the worst of which could possibly lead to arbitrary code execution.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
* bsc#1222849 Cross-References: * CVE-2024-32487
* bsc#1223110 Cross-References: * CVE-2024-32462
* bsc#1223110 Cross-References: * CVE-2024-32462
* bsc#1221665 * bsc#1221667 Cross-References: * CVE-2024-2004
* bsc#1215947 * bsc#1216853 Cross-References: * CVE-2023-38470
* bsc#1170848 * bsc#1208572 * bsc#1214340 * bsc#1214387 * bsc#1216085
