Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Patch the code to use https instead of http (CVE-2024-45321)
Fixes CVE-2024-45752: A vulnerability that allows users to remap keys arbitrarily. This allows all users on the system to remap a key unexpectedly to a potenti…
Patch the code to use https instead of http (CVE-2024-45321)
Patch the code to use https instead of http (CVE-2024-45321)
* bsc#1231295 Cross-References: * CVE-2024-47855
* bsc#1231208 * bsc#1231230 Cross-References: * CVE-2024-9341
* bsc#1231230 Cross-References: * CVE-2024-6104 * CVE-2024-9341
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Fix CVE-2024-9014.
Integer overflos have been fixed in libgsf, the GNOME Project G Structured File Library. CVE-2024-36474
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Amongst other general bug fixes, this release addresses: CVE-2024-46951 CVE-2024-46952 CVE-2024-46953 CVE-2024-46954
Integer overflows flaws were discovered in the Compound Document Binary File format parser of libgsf, the GNOME Project G Structured File Library, which could …
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Fix CVE-2024-39844 https://wiki.znc.in/ChangeLog/1.9.0
* bsc#1230939 Cross-References: * CVE-2024-47176
* bsc#1230866 Cross-References: * CVE-2017-15865
* bsc#1230698 Cross-References: * CVE-2024-41996
An out-of-bounds read/write vulnerability has been fixed in the e2fsck tool of the ext2/ext3/ext4 file system utilities e2fsprogs. For Debian 11 bullseye, this…
cJSON was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c. (CVE-2024…
Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal. (CVE-2023-39327) Referenc…
Use after free in Downloads. (CVE-2024-6988) Use after free in Loader. (CVE-2024-6989) Use after free in Dawn. (CVE-2024-6991) Heap buffer overflow in Layout. …
PHP version 8.2.24 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Fix CVE-2024-9014.
