Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images, a regression in DLA-4038-1 has been fixed …
* bsc#1229663 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
* bsc#1227052 * bsc#1236507 Cross-References: * CVE-2023-45288
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
Two vulnerabilities were discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow …
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
BlueZ could be made to crash or run programs as your login if it received specially crafted Bluetooth requests.
* bsc#1230998 * bsc#1231993 Cross-References: * CVE-2024-45016
January CPU 2025
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
Security fix for GHSA-f42g-r5jj-qh4j
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
A regression was identified in rexml gem. A corner case of XML namespace default namespace was not handled correctly, and thus rexml failed to parse valid XML …
Several security issues were fixed in OpenSSL.
* bsc#1236705 Cross-References: * CVE-2025-0938
* bsc#1231702 * bsc#1231711 * bsc#1231716 * bsc#1231719
One vulnerability was discovered in BIND, a DNS server implementation, which may result in denial of service. It is possible to construct a zone such that some…
Multiple security vulnerabilities have been discovered in Cacti, a web interface for graphing of monitoring systems, which could result in cross-site scripting…
* jsc#PED-11136 Cross-References: * CVE-2022-47930 * CVE-2024-10846
* bsc#1236136 Cross-References: * CVE-2024-13176
