Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1234597 * bsc#1235573 Cross-References: * CVE-2024-45337
* bsc#1234482 * bsc#1235318 Cross-References: * CVE-2024-45337
An update that fixes three vulnerabilities is now available.
A high-severity security flaw impacting the Craft content management system (CMS) has been added by the U.S. Cybersecurity and Infrastructure Security Agency (…
An update that fixes three vulnerabilities is now available.
The following vulnerabilities have been discovered in the package mosquitto, MQTT message broker.
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.
* bsc#1237091 Cross-References: * CVE-2025-1244
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Palo Alto Networks PAN-OS and SonicWall SonicOS …
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
* bsc#1237040 * bsc#1237041 Cross-References: * CVE-2025-26465
An update that solves 58 vulnerabilities and has 33 fixes is now available.
* bsc#1236353 Cross-References: * CVE-2025-0650
* bsc#1237091 Cross-References: * CVE-2025-1244
A vulnerability was discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow to by…
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enab…
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enab…
* bsc#1237096 Cross-References: * CVE-2024-31068 * CVE-2024-36293
Bing Shi reported a flaw in GnuTLS, a library implementing the TLS and SSL protocols. Inefficient processing of certificates containing numerous names or name …
Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. (CVE-2023-49083) Python-cryptography: bleichenbacher timing oracle attack against …
Improper Finite State Machines (FSMs) in Hardware Logic for some Intel® Processors may allow privileged user to potentially enable denial of service via local …
Nvidia recently disclosed a critical vulnerability in their Linux Container Toolkit and GPU Operator (CVE-2025-23359) that allows malicious actors to execute c…
* bsc#1236353 Cross-References: * CVE-2025-0650
* bsc#1236282 Cross-References: * CVE-2025-0395
