The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1236278 Cross-References: * CVE-2025-21502
fix VW_VERSION in compiled code, patch security issues
Includes security fixes to the crypto/x509 and net/http packages
This is the January 2025 security and bugfix release for .NET 9.0. It updates the SDK to version 9.0.102 and Runtime to version 9.0.1. Release Notes: https://g…
This is the January 2025 security and bugfix release for .NET 8.0. It updates the SDK to version 8.0.112 and Runtime to version 8.0.12. Release Notes: SDK: htt…
Fix for CVE-2024-52531
Update to 20240722.1 Fix potential integer overflow in hash container create/resize
Several security issues were fixed in libmicrodns.
Several security vulnerabilities have been discovered in iperf3, an internet protocol bandwidth measuring tool, which may lead to a denial-of-service. When ipe…
Multiple vulnerabilities have been fixed in libtar, a library for manipulating tar archives. CVE-2021-33643
Toshifumi Sakaguchi discovered that too permissive parsing of some resource record sets in the zone file parsing of PDNS Recursor could result in denial of ser…
* bsc#1226324 * bsc#1227369 * bsc#1227781 * bsc#1227784 * bsc#1229275
* bsc#1225819 * bsc#1227369 * bsc#1227781 * bsc#1227784 * bsc#1228349
Several security issues were fixed in rsync.
Tcpreplay could be made to crash if it received specially crafted input.
* bsc#1214612 * bsc#1215807 * bsc#1215926 * bsc#1217828 * bsc#1221677
Multiple vulnerabilities were discovered in git, a fast, scalable and distributed revision control system. CVE-2024-50349
FRR could be made to crash or exhibit degraded performance if it received specially crafted network traffic.
Quagga could be made to crash if it received specially crafted network traffic.
* bsc#1225819 * bsc#1227369 * bsc#1227781 * bsc#1227784 * bsc#1228349
* bsc#1219296 * bsc#1220145 * bsc#1220211 * bsc#1220828 * bsc#1220832
Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, which could result in denial of service or the execution of arbitr…
ClamAV could be made to crash if it opened a specially crafted file.
Several security issues were fixed in LibreOffice.