Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1219911 Cross-References: * CVE-2024-24814
* bsc#1205463 * bsc#1218189 Cross-References: * CVE-2022-45047
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vu…
**Changelog** ``` * Sun Jun 25 2023 Didik Supriadi - 2.5.1-3 - Build with ivy instead of maven ```
It was discovered that missing input sanitising in the implementation of the OIDCStripCookie option in mod_auth_openidc could result in denial of service.
Denial of service with a malicious upload or series of uploads. (CVE-2023-24998) References: - https://bugs.mageia.org/show_bug.cgi?id=31580
An update that fixes one vulnerability is now available.
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vu…
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common V…
An update that fixes one vulnerability is now available.
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common V…
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common V…
An update that fixes 7 vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). --…
An update that fixes 7 vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used…
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage ofsecurity vulnerabilitiesuncovered in the Lo…
Threat actors are actively weaponizing unpatched servers affected by the newly identified "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, …
Threat actors are actively weaponizing unpatched servers affected by the newly identified "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, …
The updated packages fix a security vulnerabilities: While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processi…
In versions prior to 2.4.9, `oidc_validate_redirect_url()` does not parse URLs the same way as most browsers do. As a result, this function can be bypassed and…
