The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 0.30, fixes CVE-2025-22376
* bsc#1215301 * bsc#1230916 Cross-References: * CVE-2023-41081
* bsc#1234851 Cross-References: * CVE-2024-40866 * CVE-2024-44185
* bsc#1226337 * bsc#1232637 * bsc#1233712 Cross-References:
* bsc#1210619 * bsc#1218487 * bsc#1220145 * bsc#1220537 * bsc#1221302
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool. CVE-2024-12084
* bsc#1234851 Cross-References: * CVE-2024-40866 * CVE-2024-44185
* bsc#1233712 Cross-References: * CVE-2024-50264
* bsc#1225819 * bsc#1228349 * bsc#1228786 * bsc#1229273 * bsc#1229553
* bsc#1225819 * bsc#1233712 Cross-References: * CVE-2023-52752
* bsc#1228573 * bsc#1229273 * bsc#1229553 * bsc#1232637 * bsc#1233712
* bsc#1229553 * bsc#1232637 * bsc#1233712 Cross-References:
* bsc#1210619 * bsc#1220537 * bsc#1223363 * bsc#1223683 * bsc#1225011
Fix for CVE-2024-52522 & CVE-2024-45338
Fix for CVE-2024-52522 & CVE-2024-45338
Fix for CVE-2024-52522 & CVE-2024-45338
Fix for CVE-2024-52522 & CVE-2024-45338
An issue has been found in gnuchess, a tool to play a game of chess, either against the user or against itself. The issue is related to arbitrary code executio…
Out of Bounds Memory Read/Write in libjxl. (CVE-2024-11403) Resource exhaustion via Stack overflow in libjxl. (CVE-2024-11498) References: - https://bugs.magei…
Avahi wide-area dns uses constant source port. (CVE-2024-52615) Avahi wide-area dns predictable transaction ids. (CVE-2024-52616) References: - https://bugs.ma…
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function. (CVE-2024-29645) References:
work around debugedit bug to fix aarch64 builds xen-hypervisor %post doesn't load all needed grub2 modules update to xen-4.19.1 which includes Deadlock in x86 …
mocha a javascript test framework was affected by two vulnerabilities in nanoid component.
Several vulnerabilities were discovered in OpenAFS, an implementation of the AFS distributed filesystem, which may result in theft of credentials in Unix clien…