Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several issues have been found in ffmpeg, a package that contains tools for transcoding, streaming and playing of multimedia files Those issues are related to …
Rebase to 20.18.2 Resolves: CVE-2025-22150 CVE-2025-23085 CVE-2025-23083
Update to version 18.20.6 (rhbz#2341760) (rhbz#2340936) (rhbz#2300997) Resolves CVE-2025-23084
New ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. (#990) If merging mutliple ASPA object…
An update that fixes one vulnerability is now available.
Multiple vulnerabilities have been fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images.
* bsc#1228184 Cross-References: * CVE-2024-40897
An update that fixes 7 vulnerabilities is now available.
* bsc#1222806 Cross-References: * CVE-2024-3772
[Security][CVE-2024-52948] CSRF on 2FA registration [Security] Open redirect vulnerability in logout
phpMyAdmin 5.2.2 is released Welcome to the release of phpMyAdmin version 5.2.2, the "I should have released this sooner" release. This is primarily a bugfix r…
Rebase to version 2.6.4
January CPU 2025
[Security][CVE-2024-52948] CSRF on 2FA registration [Security] Open redirect vulnerability in logout
phpMyAdmin 5.2.2 is released Welcome to the release of phpMyAdmin version 5.2.2, the "I should have released this sooner" release. This is primarily a bugfix r…
An update that fixes 6 vulnerabilities is now available.
Two security issues were discovered in Redis, a persistent key-value database, which could result in the execution of arbitrary code or denial of service.
An update that fixes one vulnerability is now available.
* jsc#PED-11136 Cross-References: * CVE-2024-11218 * CVE-2024-36402
* bsc#1236518 Cross-References: * CVE-2023-45288
* bsc#1228770 Cross-References: * CVE-2013-4235
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Tomcat could be made to run programs if it received specially crafted network traffic.
Several security issues were fixed in jinja2.
