Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
VLC could be made to crash or run programs if it received specially crafted network traffic.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. For the stable distribution (bookworm), th…
Matthias Gerstner reported that pam-u2f, a PAM module which allows to use U2F (Universal 2nd Factor) devices in the PAM authentication stack, does not properly…
* bsc#1012628 * bsc#1194869 * bsc#1214954 * bsc#1215199 * bsc#1216813
* bsc#1209401 * bsc#1214399 * bsc#1225777 * bsc#1234745 * jsc#PED-11978
* bsc#1234705 Cross-References: * CVE-2024-53580
Several security issues were fixed in PHP.
A security vulnerability has been discovered in simgear, a collection of libraries for constructing simulation and visualization applications such as FlightGea…
* bsc#1235575 Cross-References: * CVE-2025-21613
* bsc#1235147 Cross-References: * CVE-2024-5594
* bsc#1236278 Cross-References: * CVE-2025-21502
fix VW_VERSION in compiled code, patch security issues
Includes security fixes to the crypto/x509 and net/http packages
This is the January 2025 security and bugfix release for .NET 9.0. It updates the SDK to version 9.0.102 and Runtime to version 9.0.1. Release Notes: https://g…
This is the January 2025 security and bugfix release for .NET 8.0. It updates the SDK to version 8.0.112 and Runtime to version 8.0.12. Release Notes: SDK: htt…
Fix for CVE-2024-52531
Update to 20240722.1 Fix potential integer overflow in hash container create/resize
Several security issues were fixed in libmicrodns.
Several security vulnerabilities have been discovered in iperf3, an internet protocol bandwidth measuring tool, which may lead to a denial-of-service. When ipe…
Multiple vulnerabilities have been fixed in libtar, a library for manipulating tar archives. CVE-2021-33643
Toshifumi Sakaguchi discovered that too permissive parsing of some resource record sets in the zone file parsing of PDNS Recursor could result in denial of ser…
* bsc#1226324 * bsc#1227369 * bsc#1227781 * bsc#1227784 * bsc#1229275
* bsc#1225819 * bsc#1227369 * bsc#1227781 * bsc#1227784 * bsc#1228349
Several security issues were fixed in rsync.
