Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2023-28370
It was discovered that there was a potential Denial of Service (DoS) vulnerability, in Django, a popular Python-based web development framework.
* bsc#1234795 Cross-References: * CVE-2024-56378
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
* bsc#1234795 Cross-References: * CVE-2024-56378
Every week, the digital world faces new challenges and changes. Hackers are always finding new ways to breach systems, while defenders work hard to keep our da…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or pot…
Multiple vulnerabilities were found in opensc, a set of libraries and utilities to access smart cards, which could lead to application crash, information leak,…
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
* bsc#1228919 * bsc#1233821 Cross-References: * CVE-2024-11407
Update to 0^20241216git660795b dr_flac 0.12.43: Fix a possible buffer overflow during decoding. Improve detection of ARM64EC. dr_mp3 0.6.40: Improve detection …
Update to 2.12.9 Fixes CVE-2024-40896.
* bsc#1234795 Cross-References: * CVE-2024-56378
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-54479
Update to 6.2.74, fix for CVE-2024-55919 Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74
* bsc#1234795 Cross-References: * CVE-2024-56378
* bsc#1234795 Cross-References: * CVE-2024-56378
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched high-severity security flaw impacting Acclaim Systems USAHERDS t…
A microcode update has been released for Intel processors, addressing multiple vulnerabilties which potentially could cause local privileged escalation or loca…
* bsc#1232599 Cross-References: * CVE-2024-50602
* bsc#1047218 * bsc#1233297 Cross-References: * CVE-2024-47535
Update to 131.0.6778.204 High CVE-2024-12692: Type Confusion in V8 High CVE-2024-12693: Out of bounds memory access in V8 High CVE-2024-12694: Use after free i…
