Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes two vulnerabilities is now available.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-44244
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1230930 Cross-References: * CVE-2024-47220
* bsc#1225972 * bsc#1231624 Cross-References: * CVE-2024-20697
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can mov…
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
Two vulnerabilities have been fixed in puma, a threaded HTTP server for Ruby/Rack applications.
Multiple vulnerabilities have been discovered in libgit2, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in EditorConfig Core C library, which may lead to arbitrary code execution.
A vulnerability has been discovered in Ubiquiti UniFi, which can lead to local privilege escalation.
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
* bsc#1231282 * bsc#1231283 Cross-References: * CVE-2024-36474
* bsc#1212931 Cross-References: * CVE-2023-35947
* bsc#1230906 * bsc#1232241 Cross-References: * CVE-2024-9287
* bsc#1232528 Cross-References: * CVE-2024-9681
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
