Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1227052 * bsc#1236507 Cross-References: * CVE-2023-45288
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
Two vulnerabilities were discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow …
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
* bsc#1230998 * bsc#1231993 Cross-References: * CVE-2024-45016
Remote Code Execution in pypa/setuptools. (CVE-2024-6345) References: - https://bugs.mageia.org/show_bug.cgi?id=33536 - https://lists.suse.com/pipermail/sle-up…
Mercurial configuration injectable in repo revision when installing via pip. (CVE-2023-5752) References: - https://bugs.mageia.org/show_bug.cgi?id=33542
Twisted.web has disordered HTTP pipeline response. (CVE-2023-46137) Twisted.web has disordered HTTP pipeline response. (CVE-2024-41671) HTML injection in HTTP …
Waitress has a request processing race condition in HTTP pipelining with an invalid first request. (CVE-2024-49768) Waitress has a denial of service leading to…
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
* bsc#1236705 Cross-References: * CVE-2025-0938
One vulnerability was discovered in BIND, a DNS server implementation, which may result in denial of service. It is possible to construct a zone such that some…
* jsc#PED-11136 Cross-References: * CVE-2022-47930 * CVE-2024-10846
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1228165 * bsc#1236705 Cross-References: * CVE-2025-0938
* bsc#1227056 * bsc#1236483 Cross-References: * CVE-2023-45288
* bsc#1230998 Cross-References: * CVE-2024-45016
A vulnerability has been discovered in rust-openssl, a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::select_next_proto c…
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
* bsc#1236619 * jsc#PED-12018 Cross-References: * CVE-2025-24528
* bsc#1236596 Cross-References: * CVE-2024-11187
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1236539 Cross-References: * CVE-2024-11704 * CVE-2025-1009
