Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818] libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]
An update that solves one vulnerability and has 10 fixes is now available.
Multiple vulnerabilities have been fixed in the key¢''value database Redis. CVE-2022-35977
* bsc#1219724 Cross-References: * CVE-2024-24806
* bsc#1233706 Cross-References: * CVE-2024-53899
* bsc#1233695 Cross-References: * CVE-2024-11691 * CVE-2024-11692
* bsc#1225889 Cross-References: * CVE-2024-1298
Backport fix for CVE-2024-9287 Update to python-3.11.0.
Update to 2.82.2, fixes CVE-2024-52533.
Several issues have been found in netatalk, an Apple Filing Protocol service. Three issues are related to off-by-one errorrs and resultant heap-based buffer ov…
A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. (CVE-2024-27628) Referenc…
Authentication bypass when using Jakarta Authentication API. (CVE-2024-52316) Incorrect JSP tag recycling leads to XSS. (CVE-2024-52318) References:
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attac…
Improper Finite State Machines (FSMs) in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially …
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. CVE-2024-34155 Calling De…
* bsc#1233447 Cross-References: * CVE-2024-52304
* bsc#1233282 Cross-References: * CVE-2024-52533
* bsc#1231039 * bsc#1232747 Cross-References: * CVE-2024-44296
* bsc#1233695 Cross-References: * CVE-2024-11691 * CVE-2024-11692
* bsc#1233434 Cross-References: * CVE-2024-52316
fix crash in in ogg vorbis (rhbz#2322326) (CVE-2024-50612)
Backport fix for CVE-2024-9287 Update to python-3.11.0.
Update to 2.82.2, fixes CVE-2024-52533.
mpg123 a popular MPEG layer 1/2/3 audio player was afected by a vulnerability. An out-of-bounds write flaw was found in mpg123 when handling crafted
