Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
Several security issues were fixed in htmldoc.
Several security issues were fixed in Cyrus IMAP Server.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1219437 * bsc#1234089 Cross-References: * CVE-2024-2365
It was discovered that there was potential Denial of Service (DoS) vulnerability in Django, the Python-based web development framework. The lack of upper-bound…
Cacti could be made to crash or run programs if it received specially crafted network traffic.
An update that fixes one vulnerability is now available.
OpenJPEG could be made to crash or run programs if it opened a specially crafted file.
Django could be made to cause a denial of service if it received a specially crafted IPv6 string.
In FRR, the internet routing protocol suite software, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's…
Update to 2.46.5
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Update to 2.46.5
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
BlueZ could be made to run programs as an administrator if it connected to a malicious Bluetooth device.
CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command
An update that fixes one vulnerability is now available.
Update to 3.1.5 Security fix for CVE-2024-56201
It was discovered that the JSON RPC interface of the server componenent of Snapcast, a multi-room client-server audio player, allowed the execution of arbitrar…
Vim could be made to crash or run programs if it received specially crafted input.
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
* bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1190358 * bsc#1190428
* bsc#1215304 * bsc#1220927 * bsc#1220937 * bsc#1230697 * bsc#1232436
