Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
CVE-2023-40022 rizin: Integer Overflow in C++ demangler logic CVE-2024-31669 rizin: Uncontrolled Resource Consumption via bin_pe_parse_imports CVE-2024-31670 r…
New version 4.4.4
* bsc#1237363 * bsc#1237370 * bsc#1237418 Cross-References:
* bsc#1237363 * bsc#1237370 * bsc#1237418 Cross-References:
* bsc#1237363 * bsc#1237370 * bsc#1237418 Cross-References:
* bsc#1186673 * bsc#1213004 * bsc#1213008 * bsc#1214788 * bsc#1216474
* bsc#1237093 Cross-References: * CVE-2025-1094
* bsc#1237431 Cross-References: * CVE-2025-26597
* bsc#1237431 Cross-References: * CVE-2025-26597
A vulnerability, which was classified as problematic, was found in radare2. Affected is an unknown function in the library /libr/main/rasm2.c of the component …
This is major rework of alternatives usage. We are (finally!) dropping the parallel installs support, and moving back to good, old "java-xyz-openjdk" major alt…
xwayland 24.1.6 CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597, CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or pot…
Multiple vulnerabilties have been found in freelrdp2, a free implementation of the Remote Desktop Protocol (RDP) which potentially allows potential buffer over…
* bsc#1234851 * bsc#1236946 Cross-References: * CVE-2024-27856
Multiple vulnerabilities were discovered in GNU Emacs, the extensible, customisable, self-documenting, real-time display editor. CVE-2023-28617
Libxmltok could be made to crash if it opened a specially crafted file.
Merge branch 'f42' into f41 Merge branch 'rawhide' into f41 Fix merge conflict
A heap-based buffer overflow flaw in the decoding functions of openh264, a codec library which supports H.264 encoding and decoding, may allow a remote attacke…
A buffer overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a denial of service (DoS) on the FT…
Machine-in-the-middle attack vulnerability if verifyhostkeydns is enabled. (CVE-2025-26465) References: - https://bugs.mageia.org/show_bug.cgi?id=34036
* bsc#1229685 * bsc#1229822 * bsc#1230078 * bsc#1235695 * bsc#1236151
* bsc#1229685 * bsc#1229822 * bsc#1230078 * bsc#1235695 * bsc#1236151
Cross-References: * CVE-2020-13936 CVSS scores:
